last executing test programs: 2m6.862077951s ago: executing program 0 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000456f007800660000401190780a010102ac1414124e204e20006490780200000004000000040000007580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02e0d6370ae4bef1c38d2d97385a7d432a5afb05b0120ec4dd832c0cf27c7c4c03b8e4daaa6228da2e49b8081579ab3712"], 0x86) (async) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000001c0)={r5, 0x400, 0x7, 0x9b}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x15, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', r7, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) sendmmsg$inet(r6, &(0x7f0000005d40), 0x400000000000047, 0x0) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x6, 0x7f, 0x10, 0x27, {0x4e23, 0x4e20, [0x9, 0x6, 0x7fff], [0x7fff, 0x4, 0x20000, 0x5f], 0x0, [0x200]}, 0x93e8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "e8b7394f36ecfff5b63567604eaa05cca1a41ced202f370792f648c2cd98eb2cb62c735227e6281448615a58af4553c5"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "6aec8d7b"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004094}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x4, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x48900, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40005) 2m6.497208365s ago: executing program 0 (id=1296): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0xb290}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x24040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x48) 2m6.287703303s ago: executing program 0 (id=1300): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) connect$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 2m5.315922082s ago: executing program 0 (id=1319): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @tail_call, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000003c0)={0x0, r1, 0x10001, 0x4, 0x88c, 0x7}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) syz_init_net_socket$x25(0xb, 0x5, 0x27) clock_gettime(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x2550, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x64, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x3e, 0xb, "1ccb02b09a1a0048ae2c4ecba7c5f9da6064e447b32cb738669b331e1cd5f21ae8536abec1c76e89385481ef5d6a3b3232068d886e24c57ec7fa"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x23c4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1284, 0xd, 0x0, 0x1, [{0x25, 0x0, "d4b85f5e5bf152946988d0ca1fffb9cf73ae62da394a00899ea11120b1241b90bf"}, {0x6a, 0x0, "bec27c78325602a2c1dd4821f838a5373c17c6a5500c95d1deab362490b8e992e4deb46951d3fd24d037f655f995b7b86991aa863629cd6e2de61ba9f2c17ff745bce6945a8dcc02eeaa4fb16da49cf1eb1c42447de73df8707fa6352672e44a15b9deb72e9e"}, {0x63, 0x0, "2e7194fe83ed44d0ddbc237c3fa1cadf39e63320710b40c8ddb54c2f98261352263623f3700ebc4cd2a1484e87f8b51166ef5cb5715e8042d351a5dc43b98288c00c7e1d7038afc5244cf4b05104a9f30096f20b83c0c0bb1fed0052acaac5"}, {0x1004, 0x0, "3b840c80b6229df796b55d5755002e49a8ba123dd91c2134ad940caf1b86f74e3e702fc8d3a5ed961f4ce0ed50f96d5510749ee543a67506dae5d0948d23b703eb7690fac4a40792d0ce996724ab2fc674e2ef5bb23cddfd93854002da3dc1a4d10e5af56e0cb880e8a50a5cb954fa3fac29237748065ccc4c4c6ea6eb20463510fe31351d2a2dd10571536bfc132fd530b1a1b61f616570594bcaef9e42aedcc3952f5bcf0bbd360de150a52f32f906419efa3bff62095de49dcc7a4afef145c8df570a503ef6babadbb61e8900d2ab7236e7ebd2ad8ff13645ddaa0daf3acc141ceac4a6678cc1a7466a1da3c0542c4abf04578a1e275415364c5d1fb8ce59a7b7dfdc901108e8a6166886e791b25cd6bc7469ebf155cffd243ecc7c1a7ef5438df106fd346092b6bab140ae8428c73470e2583ef5a11fc619a5a3e42ff8ae0fc3ea1f8c8ceb0982c608ea7c46f23985ccc978398923462066b3af3343b6a598e4c8ed133a6a74e8b55af9613999b2f66577e2c6392cb73ab718b8be938e453f35c7c58968b780e7dc0c02698509adf4d37ba967742dcf92e3b9756435b86712477747062cf7374e0582ef80562b40c0a24a99ada209e20645d8a69fc5e9b16fd2498171282f788bcab8766c0b7de88b85c5ec64de0bf9a9642b688b2d9cc4978f782b69baeb8761b5ec13d1809484e1cdfba2f245c36c97a0a6988e37bfd7198e90e213ae9b66f6e016864353d83f65e77fbc91dc41a10fba688ebd0a84226a9209470a3340dcc7b335a5bbd8d0f053c3d0c557a211a44b3942714c2ca299ffe43507a532a6f324700ca53ad73b7c6fd07e090d8ddf98b447e52b13a0c72dbe924d809ad680b9fc7ebd09b0618d5f60ab21a109356e1808f565757f5987d723252e4b87b4d04b041ba569b12ce99eb9de1b0a6bff6f9165b8719a262088f42384cd3f4e6f07fd9e2c4bde2093fb2d4902a32a83e3298abc8e075c2c41fafd4f1a97b8a56523f18711a292fa990596db934a9187cdf57cc4fa70a496b3418ee6bcbae31691af106afcd0287bbb03cc763845988dcf2a45d32ba48a557f5c581a1129caaeaf7bd14ee846d6cb883e007614c98f451d0c7f04c25a61843498a11ebcf2d0fb8897fc7dc6d8f28e8fb6f759517edcf59a247622a55d4355f6a5e50d3e87762ce364b8ebb656e631a159ed58033bc025cd86bc2a70cd2c5e0831e2334fac0e1b157585ae1cceccbcc6fc9eea32fb3872efa67dde3a4a39242f57d0ed52b11fd66ac725d3ba3513faa821bc47057e6c4129d39664a9bf8a98aadbf961a4fda7975709f1586ea3ede0185a0ec1edfc06c872b5276352db7f22d738941111efb664ee58124017876995c6f3f163c7fd5df1d21d5ea9a0ca602688de45cca258d4f93e4edc59d0fcd92aa060356162662257446141f32471345d34221514ee7f4cc48406794b561a24e080c01cfa64aad76db7928216278ee59cb539add3bf953bb874959749bd38c66d021c2326e4a956af06814061a82e641f2b544d86d17ce897e022862b0eb82ec3e97b87b309e07abcf050fb59914ee51df078727ce8e64f6fc1337c9c41f6117f364896cab30b3eeb5db7854017ab8bd741e86630f47a056bb2cc6d3014e00512f51fab94bd1708c2e70f135f152b82409d4120a17d0c249ee71df807714ff961d3264ac9dfae0b3476f0bd393e9ab78ea84518a00e6e97dd492bb1a5215c8ce1af37993f33b3f9ecd3076107a68c07c31d9d161791128511c21d217a4e097c8d0f269823e8adc4d469d0b394ca6a22fab39584ba2ea2b4915e41006e3f0392c759616c17b7180330ee0fc30853b34766db7e1036921d503c91a91993b8b9887fa14b14411d511d08adf15a92ba61cf7aae9003dfe1c8bfe85e17eb3d31d0aa2022f8ca85cc6a0ab7c226f6b1d0990eae1f429599dcd48e2937c19fe39f671a6d5bf0ef8746782b6d7b41383ff7a27b4518d76753bc8407c7825a344c18093a1b8d3941b8aed06fa09028ee128e5735fbb8da2de91c3443ec26a0fac9b6fc5d23998a9924dd3e32f125a44868d49dad0293b55a9a76eec921aafc9eda080a577d8a46304b9c46e08683c70aecef5a81bb388024ebf0528a63b3f9da1b3cba86afe4dae41c96fe53aee55882cb39d8a2266809883c218f441bdd5b282238b84b3b54c25672b7356b264786a5534abe256900ed727e076e7df2880050da90bc490d5acde1d734ef0f225af052ba5d19df105ee618b799f24b5b57894a2a8e948c6fdae4f2664604200449a00b10af662ddf43380cb805182f8ebd3b714cccf47a8f6f3b3dfa44b44245bcb9d8c6718503cfa709c3af1d8130a002128af577be0f7d623bfe4cfc12330d48c3bbdd7b7d29656fdbc01335966850c21754fdcbbd1a1f763f8d36ca96f0343d22f98b189b194d9c0c07820a2cadf425a240895fe51de34a2a800ea6b5d927d8303cb68593e29865f17624c6a2b29253f1f81eccf56d76dbe414e102f9157273c658f046bffa24f1057b6229ba9d3bccdd5ff31b323a764db3d368ea2cc4bb0c9a9466bcef46f3806d6264e04e13b452f92cc6afd69fd4a0992da632005a50f9e907f666978066ab71e572e9b901d1407c6ba1c4daa6ef37f70a00645dc6b42c0a1e1495b18e3f045f9e2108fa967e464a0e4a13412d8640af4fc4d008491d9d8044c4ff145a550d7f72cf1795f0d4eed54d9080f904a51bbc4ae1003a8add915ca545574638be0e661bdf14bcfb91243400edae259e4b5d3a608d7e3f4e2a76b9c82496d96b3a610cd96a0a58c027f5dc0599f33209743e8c944dfb369928355de1372cda2b35bbb27d3c92ad7c5c810d7c55bfbfaf70d2a7a925f5354243bb4103867502f1255008ce311646e63b126d8f0feca3e394ae8b2a58a15cabc2df15463491c835ce2ca84d4957b44d6fb8ab749c71136cd139b1b9feabc1d5967b5ce61c213091d855c5851ef8bc640e49d30444b0ed4765418f8d7b713d68e629c247a47a66010ff8c0342c90a979a30f542d56cce0ece3015ad256567321dd05eb9d580838ab2e74b32e57334dfad11eed5bd4814821b523ee56a6be26b74bc44190aaaa5f0a638c3373e3d34b96e167db8733dae3b613a201cc62e434c044322f44b053dc04e1846af266a6aecd0b66e80695191068db769e061d1e4c9d7ce1cda3771ef601b17e023bb1cf2bd69c3bc05259f63c588d71b9fe7a4fc5bac51f3debf7d3e9251f4b93bbdebc5e86055a0f3fcf4390216765de3e98c8067a235d0cf8a7aa05f180a0b60d35854e50d0641f9ea519afac7ff8acb6f3ff31dc26a0f461fa3054acd2c2afd67fa15e542887747bb3118ea66cbc69a788170d2ed7d4a2c34b03ab12396abcf2b7350e7834c489b662d7b5dc4ec2cb281f595564853da4bbea4513d36d5064bfb3a4692874d731b24c2fa80d4cc8a15960578e9ef4bb25e4c16c02afcc2608614060bff8f8c730e25484514f425a9734d8419900c2ec86f01de56823ba734122d55c7ab3078f417a57f281634591d42ec36eefcc6b8caaad05a97466755ae96e1eb20f208c522e5e2371239c1c6dc8e43bec5a0967f9e005a9a02efa67f38d9912364a57dff9202a991d71358259ac203a1d0a88fcbe2334d6a8afca83743e4949f0882e700063a6ebd9b47a2f0c3503086b1f77852d4657cb8044e5673176e848a07b8d5e341d4a21b9e0c47f796cd5ccb5e3a10f6a8bfaf1b502b4f7758b9bbdcefe49414464b1b0eee73fc1c494159313e1d0574a0abd482b0c8308f60f1580d3a7c41c30b2402dfeb1e40d1f0a636a747900a4d1bd4ed47dc08062114dc0521cbc9ce8c8bf6994afb467f05cb383d27dc8a622bb0fd55dbb866047038ec3c581ba3d0f171addbcfdd24c2514459778497e58b9f32c9982909dafd7f9bf2b621169c0ea58e77f2e4ecb298a64b1902d456a5be5cee2d909837b862850e1acb787833c70438014df8d56429c68c0ef7d47f78f890f3ed17e752253b9ed4c12c6e8eb15eee5c4b94de7108b40227a5c68958e050f3da3dac4e2db65f83247e7d33441bcb345809f4d07d9d256202ff0380d5b40ad9c1f141d0adfff1012354a912a3be8fc1faa5a3e81d66a1ad6b32363c34921a74e3d0c5cb5df67e077d2ca9be263b13577e9b0d7f8d78c7bb5ad0314b1b0cd651191ac7182aa84a7bcf58904c8c8a288184c705f63242d3dccb8d5d7604b93708a8b0a6d40c1edd2ad4f6ab9e0f5fd6aab7172ac1298d422132cad1d1ae5407bb3d30423d0d13f9d89d3f83ce271f22feaa579c82b9ee97779532082f0af5e7b0f3ca9eb30fe984f92c5f2f0ed3d632215b1375e5bd2bee0c085b9ed51874529f7339efa48b010b5de8a954cf7fafe1eca8996c3ffd868e48d1b0f81b5b456a29992ca62c14e86e52990990f78b61b583e9cc74be77ff7d3c11683d32d3da9b5934b2a3f7c0140c6e4ba422783643b3acec7b8328f3f6259bc336f689bb338a720538003ee4c59df591ffd13ecf2b9220af429e611300f73167bda35ba59e9df7bcfb4311cdd3fbef19ef5a48f3e0e01825bb36651462afe1392c13ee86ad80c13133d2562171ba3c86776a4d6a98cd8d53c3cf9548082b267c3e27e9bb14d477569ba9db995a0cb3228ac81c4df02702df40002d5b4de5ea7ed3e6db6e316c3ec397af689ab00fbc539a53c3f8c98263b79d159a098eef50316986fb8935f1e32ea0ef2e4bb1ac16f834a3ba88e975d43d4ef9bcc94d525fa7603deca50b3f24b640c2660aeb061a4b87e21ea769faf8918c0192eead8ea97b9bdde7ad39be93a18a64bc76da848b46ece0a566aaeec36a82bb795be9ea986d437891e13ee4b789f452e55e2f84fa5cefa5853b1a11d6cd9a06714798d7b5ab58892a2f102f7c6e4b90cc1762942bafd4e0f77760c2f601b1dbb0aee3460eee2d60300d0ecaa219779bd4550573d335e23ec79d167f7b76e51bffccd32f256ebca3aeef751db16e199f2d9bb61fa84315ec5e14ce7c4302641b27546115678353c5d3292441302da6582ad595b9b5430f20635586b2e105c98dd1bb7e8ccb49b110688d3fd23b146e7111b8e6a9c446ed07965b5fe0b90a497208ab9de2ded1ca16420e8094a3047f8bf6d0b315ff9f3b2e550bd7f9e98c42d37c54a262ab4c43b6ed148f2afec3304f117c6396aaf89aaaa1bddf6b19a7276011e864e68cd6e5c20919c93a61fd4a27468a6737d331c202f841d31b9d50f624406bdc7856bb550b00daa533baf373c61b59a5fb60cf3c50048bd4940948d30a08bb949eb593ed07c4c202ba07a8a5b99bd4bb5191a30095a683b0abb72d9c909fda7a91370a3c6be9fb179874a37713f0b56ac8b1154ffb62ca81a5bcf40c7aa22e92e77755f66191eca2c6393e4575d90b50503f46ed9cc9c4094c66fb641b6c9d7576f2d166eda710d657f414e82fbf5375ab1342a3fe7b015abd25fee403c929d40d15f27ec6b2ab2fc74754a4251b62b8411569a9e65442359373f314acd744c6ad94d376068c866816bd712bbb6e3c546eb635a017afa696e2e28bd8ca48906bb3d8147f9623e7bfb289ba8645bbd3947bdec17a904ae28f9d67a0f706e093dcb6ef336faeb7f37107d1de136c3f3b71f6b3ee9d63a26ac59dd5470506a4c8d84f670c9d13fd3e4a784583ad9f70e3301fe59274827e6fb0d6248a642f0585cf43bed51ba286d5786835ab7071fecf5f64fe26afc196f41cee561eb9e85b898d2064199e6a1a82e9fe040894c88204b2be974c36e"}, {0x90, 0x0, "7eb0a0624cc415f3e5cb72d99c88ebb55ee973860720158acd5102e8acd8051cee920d7ec92729b19cff652edf01f0c2b3f9e019f7f398c403beeccdb812762c9ab6fdb897c781fd4792f7d0f789365c12a5b4f726d0e8be093f3e96c1349491c870efd66ecb92fa867560894df88c207510cfa732f4a2ffab51c05f173c878bcc32c9ef149c6735da8d7cca"}, {0x22, 0x0, "72cfdd7a3b9dc461a61c4ba9fed6a8414a19fb0d19e1d4307957a883195b"}, {0x6b, 0x0, "3186f834801a74ed1cc99541f6cf3cf77d5d9cce6cb647dac479a12c36eb1aaa96ccd927580e813e469f105c92bdfc0edcb37b6105321b09c3c37c7e1c9d4d5420174fdefa069a2f5ff26f346e7029d8416a378427453fbbfebbcb7416d94a5eae01de2f24ee25"}, {0x61, 0x0, "8e28f2702eb134852e9310a199256050535fd219d475b23b059cb691d6f95cc0027aa30202266a0d236ad70a98e4750a11f2148e6d9dca756c215f93118c50a612535b7ecf7d3f16d4781aafa427b3d6df4a6ce50dc87dc725c65c119e"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "022797bceb11"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1114, 0xd, 0x0, 0x1, [{0xf6, 0x0, "c0ed46f0b35b6840442ae414eafbc20fe5b12a6aaebafd01fcc05305442e31f45211f24884039cfdec6decc3797c7a7db26917f131ea5b2af931c51b88e616baf603be4f1c3ca65923e8623acd5e53fa0076561c2e3dc880efc5fc1fb94bdc6d42b51da0d0ef6d0899e2a50ec0a8cb456d140676c76f4768380c436890ac706c26b60b1d141b58caa2baa23dcb80df1792319c2a9e159647de66250117f02aad80e2680ac13bf2e58bb1a67cf3d4eb3e5ebf76da9d494e03c44e2e10ded0914866369270f4bab15560538290b041defafb1cfd41ae8f85d9639ee5080d67d660c688a943a169ecc8350c36791ac68af43c12"}, {0x1004, 0x0, "cf4454dd37c9c0136574fd88414bb4d4c71c479c97f550c74aea4924a302581060661412a31d2a3958d01a46bb321eaad36fc8534e8cba8fbb414a9e13bd94d34430e00fec6ecb3dd995eff0a3be63b34a3e9698fbf51562e0a8af76e86e8f0b84d45f85269c737b9ea3ff4cfe5d7956c38e09a6d05033a284f15b1162b02951d4391fdad98fdb1cb96137a9486d97ab3fe695a811d546f44a319f583854ff3603616e93ca95d9021d5d3142f8bc5c11a42492e187064a0b3371435fe7275e884606a3018476f96e1b9d512eaa480e7327442e85b33823104c4722010787ce050f036131b1b59f66b910a2605bd0d681f60814d36a37a17778faece8fa97013b069cabbf717eb67d1bca366f4fbdf989f1d26abfea5a33971efe597392523ec86234b912120316af5a5c7699cab555b48e30e45428789645e9fcf7cd1c9a7c8a8fe138451a745217a05a3a158b2273e13589a3a71114068829eba99fee79cde83365d84455cb6f0823ceef9f2a44d6cf4faeb87370225f82604fcd69fbb85b7a5284e20febff8127f495e4a495664d263d4126e254560958ce227928da32c9c1a570abb030f8eb01eb4defef7474fa595aebc3a96028e8d40294b34e703685dc016a20b19bd2e2b74de98ee42fd694662229abb1c22c423fdc2fa4c8f6199076ab3388971660a890360352401623e099a7caa59efc3294b6f9ebaccdfe71661e605d2d16ea5b614ef75a63f6a9358ae7c6b74327b3466af4dbdb40100c980cfc4d40007b9dbbec7cfd5491ca684d049329b6b74ac253e211aa7659b748593b2f172d15ec61904ff60c71a63b6f858745c09c18b15fe1fe4753b3e9f693711142258967da70d1276cfc2773ebeba24e95047b016f39a592b9f26df292a28254373564c15c919b5cb7527a95889c19632eea1bd7319ba58e3d683f34f7612a3991571e5113512093e3eebe131ce73ee614003b08a7a6465bccaa9ac4d75d03807e2db971ea46d3a4867702e0b1ace98c486b0b10f102ce7466a9a9faf194592769a0410385419d49fba013d9ec358dc4cf5c41db996d5d54f2c1d55c8b941559e3fa165d7033d634b2132a2da5895a820b42f23eb41c346795bf3bba4a1e07bed1ed69b9c89eadb586922d0aeb581a0b33417cc5b4b3c1cb39c320569951365214978ae768ff61ba9c214dd6b5871edb31372c0080230207c7f1f85aa0d371c18de26b5b8a30155e1a12892238b38cfb021490485134a469456a569a063e2a6bb1c9bd8d14734f54ec156907bd47f736e2671ab8e9d427e145b44a48b12319a4f3102260f2a5eebd2f97a354c01ad50c6e1bfac5632757a8bdce985d0196b5261a79d87f5e72154e7e9b993aee1b34d3d02de62ce10ca65604d6446cdc6a0764dfcd4e1afcf083f569fc8d4d9057e28065abc72458db4af6181e1a3cb31ffe4f6a4008f20c92585f3f40b1c5d0008e6fb3cebec0be981caa3746c6799ddb0f37837563a4da87feecb57e4d1fe920b36ee1fa991b7bf5e1ec92b537f50104e891b766c913dc155b52013c16606cbc32cffade3d29e49b9417b387ce1ad526ee3c3b8e6542ebdc8551ff2254ef03d65e59874525930ed09b0a3af553992fd0c0894942150be60c2020669afc20025442bd946780074f675660ff636f214f1682274d0f7d071a7a231dedb75a86b837ab5e648f28d4bfd3a33610e28099e8322b1731f882d435354fc3a5e4428349a4e54a2a957b48b90304cf41ec8d2bdc70706b0934ee42bd7d685da97f6ccd08f5ce364ffba47fb6a27fc15ea83185afbb9173d783fcda75786f2de4d6313623f2061250a549b09853ed2509da048922d4800d9c6c40a906923da32139277825866857a28f8654a6a8fb65965e793fb343481c0f22fe1e5c193edc8da58f242a8fc9b8eef84263803a694e14d799a1f4811516ca103cad5dbbcf462adeb474a430a9f97f2dcd1a5e20431a103adc9e0d0b942f47f1ffed31bb86219d67003ef24adcf3cac508c9bfa7d75ae387f0957239a757551f4fe906b021f2824c3a24a86df1b45f7a10fd2a1d82eb0fe612fb592af83940cfebb205d531bd489a05b94d752d2e2bc141d309da9e952efb7f48c1730f9614e82290bb0858f1e5aaf34a73d4a752d323edd816e45eae12f3c81ef1219ac146725b9624a45faf5801fcf1a084c7008fd1496002cd202cfb7c3433cdd919208c2825a722aea16cc0a214f3a457a8503b829922b5ace8417a66a603e32ceb4824f0a982452a9e656224ac099696c3adc7d64656f9a70f56fba7e2434329de33f8f7ea4ff5d99aa98fc59c6aa183f1c9e589d0fb467965078cf157524fb3672d6ee2d2a7a15d0df8995e59c6bec07a762ae00d7be313a818d7d45c0143dadb935a94d9e5de1bfad996f9e75c51a409a136924833849bc8d57950670f4b97aa2c43c4bcfcd9b06e810d63d515d1b783807e6662f983a0e06cb39c3334890dfe767140cd28e02afa052f2a1b819d0431a3fe95ef71f71269575454cb4261f6fcf562502a07533a024c666d7980559c80fe506f461b6ac8da7092d99be523cb9cf8f911a67e965190c6103eff7dd8b22344b60871deaa267de3584ecef16415c2b1852ac5579f1e0a91c1e634aef9b1623a43c9705f25c4ecfc0d93aa5cc4280a9a30c4b1bcce69d5f42d2dde05354a3c2ed841a783a2e3ffa384944ebf3f21918d362532d78d831d8741b46a7cd8b80b0abcf43779509dc3a357129d0d0906dc899828fe6a9421ef35be66f887900d92c98b9df75a20486a0eb1309adcde67bad3b2723fa6ee54e1f2b32ec50b40f490295a11de1b1c1ccb7fbce901e32166e7ca727e5494b50ac27dd3b4db267e6500c93c7a0a8cd0b884de8c20bf8ebb455b86c24d7ef6221904eba38f7974b052ab5b6f734d5524d52511327868d3aa4ed6c1ce3c214cf19c86230a9792e95a51fac7ba3be4b05935e7bfc18f87c1f1e749372cd8982de60218638e4b9842c50b6796d47202dc3bfecd1d85890425d09373a8ac9f609404857345fe0a854ae18b28996c7924b389ef96d1706160acdf4f6ac957fee8c931444fbf469987f316e772cc10cf47e88476c497eee7b74ea8c4002ffb65777ca3ee0225c8041c34a4ccb4a460df7ef811a478eadda0aa3bb16f408bc176eced34baf2f9d34e9a3c5fcf309f5c836e8520545c6ee40a8014bea721ff0c2db97f79291564de16b0c0a49bdc11aa80f937a75e229a5130b61f005af85b5e155fe9a8ca911bd7747c1132c4e692180b810391eaee7e3c0a9fc50b5a7fee1f2c6f270592573375078e3a8b2ece55283136a5ecd1083ac03ecc1cf659c86b088863c5db533a16e9dd1124c6238b48cd1b4a903f505a6cb75a8dfa38c200cae6fe7956163e4a338aff0a5ac25192c417f3baca5cdff5061e9aefa9167d8421aa12f8bb051ab5a60f70df395f029321d1c9dc93f0af28a70e158aeb08d998f7f6d526e7068f08867e2296b0ff0afe44f96bc49d408feb0fb97261e05cae67e468119c4d61e698a518bca6e086ed9e19cc68f98fd0335e778e220dd95ef05d66c58f5bfb083ddc9d224f8659cdc9b2ddf443a6091c3dcd6d777c24b9c780257539a9ea8d599793e00049b7462c932484f8556f803212d8434b72505b78ed98990457b1705872dda1ad0116dfb99c84d900fe488b44d012131d77eaafa072f941d37cc6ebafaf4edcee9b644b82f72204e51215337d5f31c736a96bcd6921a94e954c126da9443cfdfb31cf3d4ce31d703d33549d2b3c507dabf3d2b5a998126000393fab67e202009db18349fa10453e5c8fc351f0ecd977369632d120a83ac0f96af6c2960812b6f2a75750f7706f6d69f9b162e5d3ac8d108348664373b3aae35900c822b4d4e91a3ebc426c8547d45e8cc5253df7b709077968852ff0b7f517b5312bd31ff3a410151524c0d0bd6d360c77e072cdd5cb84d99d2f1dcdf9ae426bbf49f81f63957293b0c8867b258555b8a1fc31d1827180ab8569b66c1fe5fae543a33a250bac91e6aeb02aa98df51d72ddd1c5b4e1c1ac2d16d587db9b9007b97ec1b55935f02acd378e4b7d84a3c1ccb46e4ad249a00ca4ba65a57b52801945fcbdfe0f7b093bb3bb9e9150b4c25a174fa35798c378089bf6db98ccd23d9cad5a59308270c585392e5de477ed3b9236df2c7d6f1cc33e6ace79a2c27b4dc7c0549ea52a03c35548bbf8f4acf007dc44fa3613f075ca117fa18f12f73b566ce34fc8a13007378d1add0bb8d637cb9e9d245da718bbf38309e8d2c0f0a7f1e75747cb3ff39ec779e7b2c787c31188bef34922dbfbc701ba9a011efe59c8b4435cf37d6f7a5353ee1a8a9d3a1c12f219070900d9e32e1c07d3740d77ee608d97f10603e3ca779a2d278b0b575486ec4df47414d7989c99ce9ebf0da188105284786ee50fa15203103387e39e39b88fd4adc29bff83c7ad6c4e86fe0f70f2bd4dac5a0d05ddb24ae9c4ebe7f9c9ff4bd689c62ecfd752c77b8c0e348b2aeab91a0b87a816353a707a1e7ab0771ca6d23be4399f2a43968d3c6fe9ced0ddb9c1b858228edbcc4c0b5fa3b55070c5c66160dcf4d1fed7f23a6dc015241a9efa8653eeb1a47a4fee71fce0bdee732f68788ac0817b05f1aeb32b5fd086a3cb363805dd498b3faa1858a50653e2e3052f0380aaa938b8196bd55dacb8d370c2830bf3b5b6df2aeeb2b9a811ebf98e6ec632adf5bfd9511c0863d63681ce10edc7f54c1ad02bb5aecd485bc416e192bec2bf1a5c1644fb9bd37e1395acbafc0e499da17f204733ca3dacafe4c380dd5ef5465ffb58e1b2e46dd6ddae62a4b198e7fbfb93f7bbba62183a401d170d7a34f64776eea88cdf884f33f56f2da15318affa301a2d0053db83e3ad2a3c39dd191f072cf7dd4c5df7f7e69d91f3018b13adad8bb9a6eff86033c05a74fe344c54807a8d6cc66c60246c59af1a095bcbc346e0a75c99f2e179e02dee285fa775ce60549ea391093c3dc7f60cf2bc56ba456c0426e51ab2fd75b733ed59bdb4fe9106c96ee409c6fb5c6e57c37380f6a55f52f7c4d5484f62bcdcc01d18a4ac7f61ca5f4fedebc9d09fb8c3394aa0fdf1c9c43215fdbd600a5954957eb44139a448b965927177784370a250524397d6d139b0a916622856389a624d65c55d347d0e970891eba2fb43faccf747b102c2d9a61239a35379c85c06375bf1684b9cc0c38b01030494d09ee97e200db52b8efbdac28d387df28b5656237c5a807a85f5d904fdefa42e0498f07551826d37ddc1ee6ba3809addedeeaffa071a2475923b44a3815a4e54a572c00da00fe1730ea43e12ce26e879cc4a136e551e9b010224cb0e1c6a6d8b69c933415cb9fd5cebd160877b60254ca73e77ae421586a333736018a8e95f8444f59302f4a3d6288e91b753be219173e5934868cdfa78c3f1bc6cc1b2d3b8a7462654f64981333dbe4a7ae71d4d01916619be11b5a4f738142d59424ff39778c352b80c7ff54e3ae504db80be42dcfcb7235bc94757a6267adb013d3153c09ae06fa36fbff91e98cdf601198abe47cbcce9f5b4750832aa9031a0d8c02e632dcbe5646a0e9173365b8987b9d81bd4304a7f6b31dae52496be4dbe99dcea4fc2ed262ad53612073a77933f77a67c0fec62cfd69c243546ed153bb735cb9fd97c90d25c86d8b67cc9272b23409e15510a0f078bfa4ebe26eeed439b8689bccf745955994763c54c3c541bd3c63f36976ede444d16ef87f6363a04f168b3723e72a99e355e4cd409882e47200da461"}, {0x4}, {0xf, 0x0, "74e21232e02ae8fdd309ff"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xc0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xa8, 0xe, 0x0, 0x1, [{0xa1, 0x0, "ccda2ef801069c0ffc9c4c648cd89eca182ec0606977aa119b6ca2b9edbfa92f9b5af5d2eebdecc3372439fae8c2d3acdba343ec4b49924d73ba21bc841e7dfa68f7fd67b03e12a6fa8789773bfc6f3bb8852a4708921e0a2f5d9ccde3d63808c6bc4ef1d91e18a2d8960ab7784001188aebb72443a2a922a8f886ab0803e9b5eac80528bf06af5acaaf7816a1e43fd1312e20d0b5e3649c07ceb99e99"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7870499cc372"}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}]}]}, 0x2550}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m5.217617201s ago: executing program 0 (id=1321): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c06f612b82cf84d37000000"], 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) (async) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb815df212bbecf41}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x440, 0x3f3, 0x4, 0x70bd2d, 0x25dfdbfc, {0x4, 0x1, 0x2c, [0x1, 0x1ff, 0x4, 0x708e, 0xfffffffb, 0x40, 0xde4, 0x7a90, 0x5, 0xd3, 0x2, 0x5, 0x3d, 0x80000000, 0xb6d, 0xffffff80, 0x915, 0x10001, 0x100, 0x7, 0x0, 0x0, 0xc22c, 0x3, 0x8, 0x3, 0x4, 0x3, 0xa, 0x9, 0x5, 0x2, 0x0, 0x1, 0x9, 0x9, 0x10, 0x6, 0x4, 0x5, 0xf501, 0x0, 0x5b2f, 0x26b, 0xe87, 0xe4d, 0x1, 0x5fe, 0x6, 0x40, 0x1000, 0x4, 0xf0, 0xd, 0x9, 0x410, 0x4, 0x8, 0x4, 0x2e, 0x7, 0x1000, 0x7, 0x8], [0x0, 0xa396, 0x5, 0x80000000, 0xffffff7f, 0xfff, 0x40, 0x1, 0x7f, 0xf, 0x7fffffff, 0x3, 0x424, 0x9, 0x1000, 0x1, 0x8, 0x9, 0x401, 0x8, 0x2, 0x9, 0x5, 0x9, 0xff, 0x5, 0xc, 0x5, 0xc, 0x6, 0x5, 0x1, 0x3ff, 0x2, 0x7, 0xe, 0x5c20, 0x0, 0x0, 0x400, 0x9, 0x9a9, 0x8, 0x7, 0xf, 0xdc, 0x5, 0xfffffff5, 0x3, 0x1, 0x18df6df1, 0x918, 0x6a, 0x926, 0x51, 0x5, 0x0, 0xf, 0xa77, 0x9, 0x1, 0x8c4, 0xffffff69, 0x101], [0x5, 0xd382, 0xae, 0x4, 0x5, 0x5, 0x9, 0x2f2, 0x12cd1a5f, 0x6, 0x80000001, 0x4, 0x0, 0x1, 0x9, 0xcff, 0x5, 0x401, 0x2, 0x1, 0x6, 0x1, 0x8, 0x2, 0x4, 0x3, 0x4, 0x6, 0x8, 0x0, 0x6, 0x7fffffff, 0x5, 0x0, 0x9, 0x401, 0x8, 0xfffffff2, 0xc182, 0x9, 0x5, 0x5, 0x7, 0xe9e, 0x3, 0x3e, 0x6, 0x4, 0x5, 0xe1, 0xfffffc01, 0x2b, 0x4f5, 0xfffffffd, 0x4, 0x8, 0x0, 0x4, 0x3, 0x3, 0x1ac9c2e8, 0x9, 0x7, 0x4], [0x24f, 0x1, 0x0, 0x7, 0x5f, 0x8, 0x0, 0x6, 0x8c, 0x7, 0x6790, 0x5, 0x1000, 0x93, 0x7, 0x10001, 0x738, 0x6, 0x1, 0x1, 0x7fffffff, 0x2ab, 0x100, 0xf, 0xfffffffd, 0x80, 0xffffff81, 0x100, 0x3, 0x63e, 0x9, 0x3bba, 0x200, 0x9, 0xffffff3d, 0x69dd, 0x7, 0xfffffffb, 0x85e6, 0x5f, 0x7, 0x5, 0x8, 0x1e, 0x9, 0x0, 0xc3, 0x46, 0x4, 0x31, 0x2, 0x81, 0x2, 0x7, 0x9, 0x1d, 0x1, 0x0, 0x69e, 0x4, 0x7, 0x10, 0x1, 0xe], 0x1e, ['\xe6@({..+]\x98^*\x00', ',\x1d,#\xb9\x00', ').#,\x9c(%$$\x00', '@\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x80b0}, 0x4010) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 2m5.043824933s ago: executing program 0 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m55.480254844s ago: executing program 2 (id=1501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24040800) 1m55.412124295s ago: executing program 2 (id=1503): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r1}, 0x38) r3 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) 1m54.066981733s ago: executing program 2 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x1c, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) 1m54.050183929s ago: executing program 2 (id=1519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000000)) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x20, 0x13, 0x1, 0x1, 0x8000000, {0x7, 0x0, 0x0, r5, 0x12482, 0x3211}}, 0x20}}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x10, 0x1c, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711002000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) (rerun: 32) 1m53.812505291s ago: executing program 2 (id=1521): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x46}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1m53.677515508s ago: executing program 2 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x3, 0x7ff, 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pim6reg0\x00'}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000dd000414000827bd7000070000000800010002080001000100000000e044600000"], 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x24008800) 1m49.936842514s ago: executing program 32 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m39.258717818s ago: executing program 3 (id=1727): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900000004000000ff0f00000700000048000000", @ANYRES32, @ANYBLOB="000d000000000000000000009e155bb40000000050179813d327971e7af7193754b5a17f6af1b7d22764", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x14000c08) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe80000000faffffffffffffff0000bb218100000000000000000000000000aa0000010100000008"], 0x0) 1m39.096065221s ago: executing program 3 (id=1729): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001000000000000000000000016000009010001010000"], 0x1c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10300508}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) write$tun(r9, &(0x7f0000000540)={@val={0x0, 0xf8}, @void, @llc={@llc={0xf8, 0xaa, 'f', "bfeca89f493eb4d36e4609df0c5ef9bf61ee2b4ffbe39fb500e5d9fe4fc57bd8b7c33b36eae251f15c8191a1c580a99e15cee4b5214f70f42fbf6a806f7e3f9a9d87929bfe3cb6b0140017aa32875839739203f82e56a3eea9b2aa438790e686ef4dbc194c25174b90279c5c42186839726403e566aacd9014d29b7cb0c30c6b9c5502bb20373e5016197dc0dd47ce41c2e679a5439e37c62cee4020b65bb65a5027f294666cff1f9cd39c4e526cb24184e5aee07f226c449bc59ac9b139554d50c2528142265fa3db29af23532104aee3"}}}, 0xd8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0x4}, @IPSET_ATTR_MARK={0x0, 0xa, 0x1, 0x0, 0x429}, @IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x4c}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_getroute={0x2c, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x20, 0x0, 0x89, 0xeba1c1c88caf632e, 0x1, 0xfe, 0x3, 0x200}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x2c}}, 0x0) 1m38.997324256s ago: executing program 3 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x4, 0xfe, 0x4, 0xfd, 0x5}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000100}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x9, 0x10000}, 0xc) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000140)=0x7fffffff, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000180)={0x4, {0x1, 0x3, 0x6, 0x4}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000001c0)='ip6gretap0\x00') ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000200)={0x0, 0x7}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000002c0)=@dstopts={0x1, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xb1}]}, 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000300)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) setsockopt(r0, 0x8, 0x3, &(0x7f00000003c0)="4e9dd5fd878532f8bcad0bc08bb6196c8d2ebde3db3d79df97110e064bb9139fae13b616995a23bd453a946668511cdc3f2109bb9a5e9baf3bfcefb70af83e127393fcbd40aa368574bce4ef367983c7e165eda4c4ab029d619cf3e783f36e9392a434e3182e1c5bc77ae8c4a1b1f37b2e51eabfe6cab477d6b300db112d9ce0bceddf9386c51ff84fc3c4e52c269dfde4e04cb684a58d4c3e8c92c13be38071a64463327b3c48efba5495e48fe8f4c32578cb7dbd4101104a2b5a88daef3c41d57e935d3669613f2a580a122e94d444fdad4847f4972b038d5cdbffb9640077326f97c44d8a1bb5ffe3fc2d2a8962", 0xef) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0xffff, 0x4, {{0x16, 0x4, 0x0, 0x3, 0x58, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x13, 0xf3, [@rand_addr=0x64010101, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x2, [{@private=0xa010100, 0x7f}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback}]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x82, 0x6, "e05fafc7"}]}}}}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ea}, [@jmp={0x5, 0x1, 0x5, 0x5, 0x3, 0xfffffffffffffffe, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0x9, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000540)='GPL\x00', 0x3, 0xa5, &(0x7f0000000580)=""/165, 0x41100, 0x10, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x1, 0x4, 0xdc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r3, r4], &(0x7f00000007c0)=[{0x0, 0x3, 0xa, 0xd}, {0x3, 0x4, 0x2}], 0x10, 0x7fc00000}, 0x94) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004005) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f00000009c0)={{0x4, 0x8}, 0x100, './file0\x00'}) r9 = socket$inet(0x2, 0x4, 0xcac) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000b00)={{r10}, 0x6, 0x8, 0x36b0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000b40)) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000b80)="7f57fd82cf0eed7811ecdb29f9d81bf48536303e124a0cd22c792ee82ecba2ffa9340658268a9d4271e210ca7bd32cd74110d08060413e9158ec6269ccb92522da5eabf397a836d024f749dfd08b0eb3a02b901a7d3c4cfed4afb067132dc5d6d973963a0438c0f8edd3812ba6ae191901a4012218f51c19da421a5816d2cf349978188062c84801b7b14230ec1eb4e560cf269915a715e09997d72fded2cbc61c6d1f316529125ef31b4cbeacf8858c8af1852cae36bf73fbcbc940bf84596501dfe04d1d4989a482502fa0ff257f38358a86facd6e0d6525", 0xd9) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000c80)={{r12}, 0xbc65, 0x3, 0x7}) 1m38.88785463s ago: executing program 3 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff5}}}, 0x24}}, 0x40004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2c, 0x1, 0x7, 0x7, 0xfffffe00, 0x5a, 0x0, 0x3, 0x200}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r12}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r16, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x2}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000291c4a1aef9a950252d21cf0d0f9da4693e866ddfaf7be9da8f23fb7070b4e92daba16188ce2f96b1730367943740c39ac72eab95dd945a31ee0a33ed0048eb5231933d448b153d78e247b1326821ddded227e42701547df146c6d9409c5156bc1f8b85b0e7c38689bb69a8e1f1bc225f22164f1f3c56fb55d", @ANYRES16=r16, @ANYBLOB="000227bd7000fbdbdf25050000002c00078008000200050000000c000400030000000000000008000200000000000c0004000100000000000000"], 0x40}}, 0x20040085) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r14}, &(0x7f0000000140)=0x20) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0x1, 0x8000000, 0x0, {}, [{0x0, 0x1, [@m_simple={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, 'skbprio\x00'}]}, {0x0, 0x6, "c9fb673681f3e8d8554a4dd7421d6d11932f503b4dfa3c66bfc86149f1381311e3904aa25af2e1642d097474f101674561b0034e07eff28ed34b1f7bf749c545f4"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x6, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 1m38.644721051s ago: executing program 33 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x3, 0x7ff, 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pim6reg0\x00'}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000dd000414000827bd7000070000000800010002080001000100000000e044600000"], 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x24008800) 1m37.901377806s ago: executing program 3 (id=1747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r6, 0x2000004}, 0x8) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c004) 1m37.534059159s ago: executing program 3 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r6, 0xd0, 0x20, 0x3, 0x6}, &(0x7f0000000140)=0x18) sendmsg$can_bcm(r2, 0x0, 0x4008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 28.196352812s ago: executing program 34 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r6, 0xd0, 0x20, 0x3, 0x6}, &(0x7f0000000140)=0x18) sendmsg$can_bcm(r2, 0x0, 0x4008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 20.43386617s ago: executing program 4 (id=1871): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = epoll_create(0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x14}, 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x4d, &(0x7f0000000000)=[{&(0x7f0000000800)={0x2b8, 0x1d, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x2a7, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x4, 0xda, 0x0, 0x0, @pid}]}, @nested={0xfc, 0x7f, 0x0, 0x1, [@typed={0xc, 0x12d, 0x0, 0x0, @u64=0x4}, @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x2b8}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x8010, r5, 0x0) (async) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) write(r0, &(0x7f0000000300)="98a613fd", 0x4) 20.370668777s ago: executing program 4 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f02938e9bb0f654c0fa6ffb31c5e2a12482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6cef816334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x130, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xfa, 0x19, "9492a8a44d0b27ac69c9557a3ef2a881a365fc1e77f0f1703d0b7a9f13b94be8e71403897896b57580bee6b18e24f37cd0ebed06d60928a4a26e90f0856d5a8e73c86278bf47991c7fa5583c99b9f400f3dd043e9212479e8dcc1a76fb664f67ffa52c34191fb6de46c016d667929bd588841cd175cc27348c74beef1d5811321a0207c40983d03d18674699f57506259bbb768d7c462b755faea7453f4e9cae8060a049ae5c04f43ae8ad6a1d4e43f7aff020756992544d651944745605a3d701a432423361549676a5656784cfc3e6e5e46ccf868ef4c3b481a86c0200f9ff350f6b50d5c9ebbcb91dc0b444eac73477c51cc8fe1d"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20.195387409s ago: executing program 4 (id=1875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) close(r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000800c0d408e1b84aad9b963f00", @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25180000000c009900010000004f0000000a001a0008021100000000000a001a00ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0xfa, 0x0, 0x6f, 0x16, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x8000, 0x7, 0x777}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000800000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000226b2a90000000000100001700000033f0000000"], 0x48) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="04fc4c113bf914b38e7a1b00d72b0fd29453b8951fe6bb2fe59e312109002bf8382fcd7fb1f45991ebbf68b01584728dbad00c24ab363094e88cd3c2021509eb2b0b685a9f69d298"], 0x4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xf8, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x4044884) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)={0x0, r11, 0x8, 0x9815, 0x0, 0x3}) 19.245792862s ago: executing program 5 (id=1883): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x760, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='module_request\x00', r4}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x1040) 19.231981785s ago: executing program 4 (id=1884): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x0, 'pim6reg1\x00', {0x3}, 0xe0aa}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000008bb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'team0\x00', {0x2}, 0x7}) 18.935483405s ago: executing program 4 (id=1888): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000084040008"], 0x53) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe1e}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 18.864006582s ago: executing program 5 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x9, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) 18.583046542s ago: executing program 5 (id=1893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1, &(0x7f0000000340)=""/200, 0xc8}, 0x12040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18}], 0x18, 0x48814}, 0x14000012) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) listen(r0, 0x20000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff01ae8684f2e753aad40000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00020800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x54}, 0x24040001) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00', {}, 0x7}) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) recvfrom$l2tp(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x12163, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000680)}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/224, 0xe0}], 0x6, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000080)=0x2, 0x4) 18.477527398s ago: executing program 5 (id=1895): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async, rerun: 32) sendfile(r2, r1, 0x0, 0xf03a0005) (rerun: 32) 18.23994708s ago: executing program 5 (id=1899): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x56}, &(0x7f00000003c0)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002a000000180001801400020067656e65766530"], 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0x5, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x38, r5, 0x505, 0x800, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c8d0}, 0x4024044) 18.130691152s ago: executing program 5 (id=1901): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x4048800) write$nci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="610508b74741d795d726f657ac3fae7f3f670303048205060b0893cc26a2f70f6dba0ffd08074a4669857db13bf6388d684df00bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b8"], 0x62) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) pipe(&(0x7f0000000080)) (async) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x4048800) (async) write$nci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="610508b74741d795d726f657ac3fae7f3f670303048205060b0893cc26a2f70f6dba0ffd08074a4669857db13bf6388d684df00bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b8"], 0x62) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r2, 0x0, 0xfe33) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) 17.9160627s ago: executing program 4 (id=1905): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x2000001, 0x41071, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r3) sendmmsg$inet(r2, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.518797058s ago: executing program 1 (id=1910): socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r1 = gettid() (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x14, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000004001000820000000034bc50b573f20e0a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4620, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "5ca1652c"}}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r6 = socket(0x11, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd700700000000000000080001007063690011000200303030303a30303a31302e30000000000800ab00fcffffff08000b00a86000000600110020000000f04e"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x7c, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24018000}, 0x4000000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) (async) close(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) 17.45325222s ago: executing program 1 (id=1911): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x19, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x180, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r5, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3f}, 0x5f) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 17.236773201s ago: executing program 1 (id=1914): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x80646}, [@IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x28}]}, 0xfffffffffffffe4a}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r8, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0xe) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}}, 0x0) 17.003573917s ago: executing program 1 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x7, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000080)=@raw=[@generic={0x3, 0x9, 0x0, 0x6, 0x2e1}, @generic={0x80, 0x1, 0x5, 0x2, 0x200}, @jmp={0x5, 0x1, 0x1, 0x3, 0x8, 0x8, 0x10}, @ldst={0x2, 0x3, 0x1, 0x7, 0x9, 0xffffffffffffffe0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0xbc, &(0x7f0000000400)=""/188, 0x41000, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0x5, 0x6, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x1, 0x2, 0x9, 0x1}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='rxrpc_rtt_tx\x00', r5, 0x0, 0x5}, 0x18) 16.790362293s ago: executing program 7 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000000c0)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xc, [@enum64={0x2, 0x6, 0x0, 0x13, 0x0, 0x5, [{0xb, 0x1, 0xa}, {0x7, 0xc, 0x37}, {0xd, 0x2}, {0x1, 0x3, 0x661e}, {0x8, 0x7ff, 0x5}, {0xf, 0x7}]}, @var={0x7, 0x0, 0x0, 0xe, 0x2}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x5, 0x7, 0x2}, {0x5, 0x422, 0xff}]}, @float={0x7, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x30, 0x5f, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x2e, 0x61]}}, &(0x7f0000000380)=""/181, 0xb8, 0xb5, 0x1, 0xfffffff9, 0x36c91b705698d0c5}, 0x28) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={0x0, @initdev, @broadcast}, &(0x7f0000000480)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x0, 0x8, 0x10002, 0x40280, 0x1, 0x2, '\x00', r5, r2, 0x0, 0x0, 0x200000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r6}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x48881) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) 16.656186139s ago: executing program 1 (id=1922): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x621, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0x20008004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x401, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x40080) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4040001) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000005c0)={r1, 0x9, 0x0, 0x3}) (rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getpeername$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x70, r7}) (async, rerun: 32) getsockname$inet(r5, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f0000000740)=0x10) (async, rerun: 32) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000780)="fecf8cba22e4ed1f793595d50b5f3f504333192eb79512a2e6f4082af2e543d810e76bb50363077883759545dd21d3eba420dbbfb7568e64f6e027f33816e60f4930744b4780160db4933d61bbb16d9f8c2da8fd8ad87b240dc2ac6fbc189cad6e279740fe1e88d12af0cee77f279acdb83a2fb90d75449a66ae8a7cb63654923a7f61e7833a7783b1198785106c389690b90ff60aa66ae57cafb1169f27149d5eba8ff8a9961f90a7090d9b4c351bea3cb2e916", 0xb4}], 0x1) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0xfffffffffffffffe, &(0x7f0000000880)) (async, rerun: 64) ioctl(r1, 0x8, &(0x7f00000008c0)="bac573aa045df7e8ab01ae658181fe6c6d") (rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000a40)={0x3, &(0x7f0000000a00)=[{0x7, 0xff, 0x8}, {0x7, 0x5, 0x7, 0x8}, {0x2, 0x1, 0x8}]}) (async) sendmsg$inet(r5, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="f663c03e8d23edf88c754710d11c294ae4d6c73df48c094862fd18ca68d6444c1b9142591bebb7e3cb120b9f475ec9436dd7e878c8ce8ea6", 0x38}, {&(0x7f0000000b00)="5fd9845f2bf523456d8b235f860999792695fc3b8f497bd91a9bd89ab34bbfd54a05e15c467e2800e24d0d4bc9375df0bc9235683d6ee6a7540284d8e32c5647973ce14e3b6a93a1860ad0c8aa82aed611e6c52101588a7b3b549242cbf32bb98b64f9e2c36eea6bd195518577b1a286a6d7f611c373180ea6d0c50c5a294832a5281ab801d7edc73e7e15e9c7da64021bb999e5f905dd5f203b38e24ba303f96c80bdc7f1a8fc933dd855cbfed572840ce211e3bf8a2b3eeffaf07440ce7313a7943c814554e4e23bff73385d238caeb9325e12adf131927a4b0268885e3bffc3c70771bc846437afc02e038dfa7c849edbd50edb", 0xf5}, {&(0x7f0000000c00)="3964c1569d5f7bc4223e6f7366a22767e1215fee1e4d222091ab0fa04968a70d5ca9342a9d77446b3312c7f54cab746b595ce61110a7e3d7657e95496f3a559ebbdc5d3946647827027658a91341ccdd8fff04323e64ad54b40539fbfbe3bc0dd37d724b73974b0ffcbbf09a78c5a6cb2fbd8db2b879aa6431fffd6baada3c1e37ae74c299efbe57141ebe3dc25745592781833da1f902fb04e3752be631d70743", 0xa1}], 0x3, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001c80)={0xfffffffffffffffd, 0x0, &(0x7f0000001c40)={&(0x7f0000000dc0)={0xe4c, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffff800, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x991c, 0x8, 0x4, 0x3, 0x3, 0x4, 0x8, 0xed7f]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x400, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x8, 0x8, 0x6]}]}, @NL80211_ATTR_CSA_IES={0xdc0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x7ff, 0x1, 0x7, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x0, 0x9252]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x77, 0x7f, [@random_vendor={0xdd, 0x71, "6769f7419938e631b0957ad25d111384ce435982b0bb954b1d319691fb71086196b94e5f9b357fef519bcc3c9103515aa63fda764c1512f018b4dfc2a91535f50c5c109cefd263d5bfd975691addaa0716a58bcd1520bfaf39c5ab9173f1adb07d538e534204646c9b0f396fb2cc612faf"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x2, 0x5, 0x401, 0x982, 0x5, 0x6, 0x401, 0xfffe]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfd, 0x3, "963d5922738ee9f329f0935f89144a9ebf3aa2b5137bfd319f801c9257ded3a63e3e520b66064cadf76e70ebb83dd8aece972c85d3cc217a70997744856cee422b595ff81c4d1969e8e14fb573ff5cca7d3f7296fbc97e40a2721ee2f042f39a3d78868f9960de98cb174cf69f72e12c945287a5db845ff7658e697f6cac30c3e3d761c0b8feba191064b3909b32ea9a2cd8eb733f7813f495fd318a6ad450b270fa38ea2a997397065e0ca1d2478ebcf0b17cadd6016bb2c344619d3f3c98bc4e85c80791bc73d323635fd84f93924f6bcfa86f88fcef689ec9927590da38be6e617c1fa7f2db6e2b99235f5aa5250fbf857328f676fcf0d4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x78, 0x3, "e96b8c7db472644e73796175b927c6abfed50c32668624ddccc7ce93787384e7560f8d805ae794fd043435d303992e330357db66109b135fd7ac1645c7f343856f5bf77ec8056af9d78c2eeeb495c17ec7659e0bbfde827c8d77a8908ef136e1c2cbfaee2b3d8f098398138b8d4330df098667bd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "4bbd7c209cb87db40476000e78622c14b78298c8c8103fb89160581da3f676d36d08f758b839b60dea75771cd4f1d0fc5a6f9594958400dd8f47f8448803f82437c30f8ec05bcfae0b46f51d328a59c953df803910f2522d2283ff94573ee52d1ca760acc1e2a22f421416a88881f3ed9e310a92559dfe387ec889f5c23064ff8429a051d3fd8da27ca28b9f9352823a94fdff6f6223e1a102cda47a1d9461bb3844bfffc8b6d301212180186f6a3e468ebf4cc0038d554d7e4b73bb26204bdc18ecb48d41651cdbee5aee4e7b0e7dbe37"}, @NL80211_FTM_RESP_ATTR_LCI={0x8e, 0x2, "84c99eb10af957bb1505bfc07f4dc876a57d0a0719a33bd5a0fc6eb002a73ac0a904b5a5e26b16d61d47d97223333ad501995811dcb708b1a66978424fedbd32ee4e7cbb857b66a5576d177bb515e17a279ae015cb1cffc1f312df9ff222377959800958685fc78c0d74e1ff2ff4741cccf4db3e97b66a2f8c76be68eb131f52343d74c561c9634d3da1"}]}, @NL80211_ATTR_PROBE_RESP={0x226, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x590, 0x91, "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"}, @NL80211_ATTR_IE={0x100, 0x2a, [@fast_bss_trans={0x37, 0xe0, {0x1, 0x7, "ecf1bdbac191b7b9a9a534c25d6f519f", "d93881279e249e93320e54be2e832ec62ef4796326d7996631c001081ff32335", "198f570296e7878ddfd39888b911f6be766c5797926c3c3db1ba7868bafb594e", [{0x3, 0xe, "ca5f32f8d7e983e1ae7f1fbca777"}, {0x2, 0xb, "fb7c069531970d474c068b"}, {0x3, 0xe, "0e2a62b6b0c754d344902cf47219"}, {0x4, 0x17, "5f0f99443868e034b6a27d381b40e1ea14959d94769a5b"}, {0x1, 0x18, "2a5f6be7eb11f694a73e9e81e0ed394e9d4bee2360711c64"}, {0x3, 0x9, "3b2ab184185934ef7e"}, {0x1, 0x21, "039152c9be0bfe4a6975e21f1051e15337509124fad16c75c399cee291d6fe6410"}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb5, 0xa9}}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x60, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x10}}, @rann={0x7e, 0x15, {{0x1, 0x6b}, 0xe2, 0x4, @device_a, 0x7, 0xdd6, 0x45}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xd, 0x9}}, @challenge={0x10, 0x1, 0xd2}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x9, 0x6, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0xa}}]}], @beacon_params=[@NL80211_ATTR_IE={0xf6, 0x2a, [@ssid={0x0, 0x4, @random="30ec67ba"}, @fast_bss_trans={0x37, 0xce, {0x2, 0x7, "747c2022fac221f58a93cae98ca2ea0d", "60380f2693597312722b4a6e74643a6277ad2dadaac5a09140ee639f04f1cd0c", "2fb1c03d2c06cdf840ff869361bcb0b5c0860f400d3687d5795dad4b608a97ae", [{0x3, 0x28, "a9d946b5d4b71faedaef554bfa265ed805e940e814b4132247801160a0507ab0331a28b3381da92c"}, {0x1, 0x3, "60e3ee"}, {0x4, 0x16, "70a8457ceb7d5f926379213429ce2cc35e1a7c110317"}, {0x4, 0xa, "a65fcff361520aacb7ae"}, {0x1, 0x16, "6d7afccd244c3c9c55a2cbcd3fefa41d8509215cae76"}, {0x2, 0xc, "7cea898bf1ea77c7daaef147"}, {0x1, 0x1, ','}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0x80, @val=0xfff6, @void, @val="8b139c430cbb71d578b4a06513fcc687"}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x895767d7f0a0a51c}}, @ibss={0x6, 0x2, 0x7}, @supported_rates={0x1, 0x2, [{0x6}, {0x3, 0x1}]}, @erp={0x2a, 0x1, {0x0, 0x1}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]]}, 0xe4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040041) (async, rerun: 32) r9 = socket(0xf, 0x800, 0x4) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000001cc0)={0xffffffffffffffff, 0x2, 0x4, 0x9}) bind$packet(r10, &(0x7f0000001d00)={0x11, 0xf7, r7, 0x1, 0x77, 0x6, @remote}, 0x14) (async) r11 = openat$cgroup_ro(r5, &(0x7f0000001d40)='memory.current\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r11, 0x8906, &(0x7f0000001d80)) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 16.352934349s ago: executing program 1 (id=1924): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r2, 0x0, 0x0) (async) write$nci(r2, 0x0, 0xfffffeeb) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000180)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}}, 0x0) 16.3503279s ago: executing program 7 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r6, 0x5, 0x1000000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf25140000000c009900050000007d0000000c008100050002000900000005001301020000000500190001000000060036000200000006001a0104000000060010009d010000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 16.207782854s ago: executing program 7 (id=1926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x0, 0x40a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x7ff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x20044801) 16.045281219s ago: executing program 7 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8005) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'ip6gretap0\x00', {0xbe8}, 0x7f}) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfe, {0x0, 0x0, 0x0, r3, {0xd}, {0xffff}, {0x7, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x3, 0x1, {0xa, 0x4e20, 0x5, @remote, 0x9}}}, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x450c4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000840)={'ip_vti0\x00', r3, 0x10, 0x10, 0x7, 0x6, {{0x1d, 0x4, 0x3, 0x17, 0x74, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0xb, [{@empty, 0x105}]}, @timestamp={0x44, 0x28, 0x5b, 0x0, 0x4, [0x9, 0x8, 0x1, 0x2, 0xb2, 0x80000000, 0x8, 0x8, 0x100]}, @cipso={0x86, 0x24, 0x1, [{0x7, 0x6, "29e3f565"}, {0x1, 0x10, "a8ecff8b1dd649971869af5521e9"}, {0x7, 0x8, "421b69a2ef03"}]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf250f00000008000300c6c13b179eaa563c15374afd63c1809a7166f8df549b8d6a96cbaeb21709713f4da1b70c9217f8f3a9d080a02610c1af34f1905f0419eb6fe847f91d5f34c70520a1d4df673a5eaa06d3320597519b35892cb70100000001000000262c42ec7fa0d28aa5367fb55a1af4178a63f809c4acbf9e724f204f1d2c1b7be207530bba8466481184a84d25362301ab193697a2c079905f1a1af2a236d607173b44fbbcf5a9c0fabd3c31390e0366a41e72208a127836b37fe9611effa46e", @ANYRES32=r11, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r12, @ANYBLOB="0c000600020000000200000005000f000900000008000300", @ANYRES32=r13, @ANYBLOB="05000f000100000005000f00920000000c0006000300000003000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304000000001200000000007400", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070000000000"], 0x3c}}, 0x0) 15.747231208s ago: executing program 7 (id=1931): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$l2tp(r0, &(0x7f0000000040), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xffffffffffffff3b, r5, 0x6ee6c460b4b37c45, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 15.682858983s ago: executing program 6 (id=1932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='\x00', 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x6, 0x8, 0x2, 0x5, 0x1, 0x2, 0x2, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x80000001}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000109b0305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100736974000c0002800800140000000000"], 0x38}}, 0x0) sendto$rxrpc(r1, &(0x7f0000000380)="987e94b92a8c91ccf55410d626a9607843d840dd352585e93a31aca52b070fae301bc3c200584596709e8657b3dd74d49cf8405a40c748beaf011fbebf00ec68a9d638ac67e644f18a104fc477e633124ed9174b1625a24f4deda389562a9d5a78c127a374e6", 0x66, 0x20000000, &(0x7f0000000400)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7000006ada09d9f0000008002001a00000000001e0000000000000000082357790cc95907331bab0af4770104e1"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x20, '\x00', 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='\x00', 0x1) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x6, 0x8, 0x2, 0x5, 0x1, 0x2, 0x2}, &(0x7f0000000240)=0x20) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x80000001}, 0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000109b0305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100736974000c0002800800140000000000"], 0x38}}, 0x0) (async) sendto$rxrpc(r1, &(0x7f0000000380)="987e94b92a8c91ccf55410d626a9607843d840dd352585e93a31aca52b070fae301bc3c200584596709e8657b3dd74d49cf8405a40c748beaf011fbebf00ec68a9d638ac67e644f18a104fc477e633124ed9174b1625a24f4deda389562a9d5a78c127a374e6", 0x66, 0x20000000, &(0x7f0000000400)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7000006ada09d9f0000008002001a00000000001e0000000000000000082357790cc95907331bab0af4770104e1"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x20, '\x00', 0x0, 0x0, r0}, 0x94) (async) 15.511630189s ago: executing program 6 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x1, 0x20, 0xf, 0xc3, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0xaf, 0x29, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x0, [{@remote, 0x80}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x4b, 0x3, 0x7, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xf87}, {@private=0xa010101, 0x8}, {@broadcast, 0x8}, {@broadcast, 0x4fc5d4c2}, {@remote, 0x7}, {@multicast2}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1084}, 0x801) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x2, r4, 0x1, 0x6, 0x6, @multicast}, 0x14) 15.505223379s ago: executing program 7 (id=1934): pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @multicast2}, &(0x7f0000000340)=0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050008000000fcdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="18fdc7d4646fdb712f1e14a46a6b0000be39f84363cd7cbbf9c9d955d8fabf472a6ec015b696fe4bab3a70c52bb99ffc1f4282d08c64a43b2b915a5eaa89e2482d7bcc579185bebc392a86dbd6a4d39e458f753900173e983570ffc237000000000000000000001000"/125], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r7, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="40029b5a8d56c34df31940f05d040102cd4215b19ec4ab4025b007f1ee6a430e0063f177bcde460bc717f40fbe4bff53b770f477256b349667096148e3e93bad8adf08cf7a3fe87e6a9246cf9970d91754524b2b632e48a039eca3c9bff5cb51d507730df0d7e8c3b5f5fa45cf"], 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r12}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r1, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000001b0089d718a5ec0000000000fc000000000000000000009783365d8324daf20000000000ffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffb46b6e00"/120], 0xc0}}, 0x0) 15.444476002s ago: executing program 6 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x2, 0x5, 0xf55}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) 15.323507393s ago: executing program 6 (id=1936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb50362fb75b2806010018000000000000000c0000000c000000020000000000000000000004ebffffff000083eedf23055a5a349911811a28e7127a5cfd59cd8d81b4b5d88b35b69002b42db962650dc11417aa9f4314baf6e43a9dc4681c3cdea91418c43f2ec0bf99108f3f2c7d08e12c4dc5b06ee80054a8e8812caff1dc85eda4c26660124476b882de9f85a72d54425d92e2443acdbf50fbca30f057a47228b39dc8a623ea92fd8e57d79291c33c2e3b3a397dc998a7b8ec9a81d63005611177c44feaf67f64f52fb135113d91a803037826e6ff3f98933c46ae958e5947bce72577f9260900000000d09dce48feef143f129ba74de179b96b27dbf7fe61896a32ab181d372c81939ca09e699c382760097d4a82c23f"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10, 0x4) (async) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @loopback}}) (async) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 15.274352675s ago: executing program 6 (id=1937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x3, 0x4, 0x8001, 0x48082, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 15.20809715s ago: executing program 6 (id=1938): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 2.171479628s ago: executing program 35 (id=1901): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x4048800) write$nci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="610508b74741d795d726f657ac3fae7f3f670303048205060b0893cc26a2f70f6dba0ffd08074a4669857db13bf6388d684df00bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b8"], 0x62) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) pipe(&(0x7f0000000080)) (async) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x4048800) (async) write$nci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="610508b74741d795d726f657ac3fae7f3f670303048205060b0893cc26a2f70f6dba0ffd08074a4669857db13bf6388d684df00bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b8"], 0x62) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r2, 0x0, 0xfe33) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) 2.090112087s ago: executing program 36 (id=1905): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x2000001, 0x41071, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r3) sendmmsg$inet(r2, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.057171298s ago: executing program 37 (id=1924): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r2, 0x0, 0x0) (async) write$nci(r2, 0x0, 0xfffffeeb) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000180)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}}, 0x0) 33.271705ms ago: executing program 38 (id=1938): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 0s ago: executing program 39 (id=1934): pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @multicast2}, &(0x7f0000000340)=0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050008000000fcdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="18fdc7d4646fdb712f1e14a46a6b0000be39f84363cd7cbbf9c9d955d8fabf472a6ec015b696fe4bab3a70c52bb99ffc1f4282d08c64a43b2b915a5eaa89e2482d7bcc579185bebc392a86dbd6a4d39e458f753900173e983570ffc237000000000000000000001000"/125], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r7, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="40029b5a8d56c34df31940f05d040102cd4215b19ec4ab4025b007f1ee6a430e0063f177bcde460bc717f40fbe4bff53b770f477256b349667096148e3e93bad8adf08cf7a3fe87e6a9246cf9970d91754524b2b632e48a039eca3c9bff5cb51d507730df0d7e8c3b5f5fa45cf"], 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r12}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r1, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000001b0089d718a5ec0000000000fc000000000000000000009783365d8324daf20000000000ffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffb46b6e00"/120], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 103.731337][ T6344] syzkaller1: entered promiscuous mode [ 103.736868][ T6344] syzkaller1: entered allmulticast mode [ 103.792989][ T6344] syzkaller1: left promiscuous mode [ 103.821748][ T6344] syzkaller1: left allmulticast mode [ 104.085420][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.092906][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.154362][ T6377] netlink: 'syz.0.124': attribute type 21 has an invalid length. [ 104.417475][ T6388] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 104.451571][ T6390] netlink: 'syz.1.128': attribute type 7 has an invalid length. [ 104.801149][ T6395] macvlan2: entered promiscuous mode [ 104.832839][ T6395] macvlan2: entered allmulticast mode [ 104.995591][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.004057][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.068174][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.075485][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.083708][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.090973][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.152260][ T6416] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.533627][ T6442] __nla_validate_parse: 24 callbacks suppressed [ 105.533646][ T6442] netlink: 64 bytes leftover after parsing attributes in process `syz.3.141'. [ 105.814340][ T6460] net_ratelimit: 46 callbacks suppressed [ 105.814358][ T6460] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 105.882788][ T6463] netlink: 7 bytes leftover after parsing attributes in process `syz.4.146'. [ 105.923073][ T6461] netlink: 7 bytes leftover after parsing attributes in process `syz.4.146'. [ 105.995439][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 106.040801][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 106.072729][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.148'. [ 106.087849][ T6473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.148'. [ 106.382617][ T6487] bridge1: entered promiscuous mode [ 106.429842][ T6487] bridge1: entered allmulticast mode [ 106.510861][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.830254][ T6505] macsec1: entered promiscuous mode [ 106.835680][ T6505] macsec1: entered allmulticast mode [ 106.841916][ T6505] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 106.925066][ T6519] mpoa:mpoad_close: () going down [ 107.084953][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.336238][ T6535] validate_nla: 3 callbacks suppressed [ 107.336255][ T6535] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 107.373538][ T6536] syzkaller0: entered promiscuous mode [ 107.379082][ T6536] syzkaller0: entered allmulticast mode [ 107.379997][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 107.449649][ T6542] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 107.522241][ T6542] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 107.592720][ T6542] x_tables: unsorted underflow at hook 2 [ 107.683275][ T6552] netlink: 'syz.2.167': attribute type 12 has an invalid length. [ 107.715479][ T6552] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 107.787632][ T6552] vlan2: entered promiscuous mode [ 107.797745][ T6552] bridge0: entered promiscuous mode [ 107.804727][ T6558] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 107.841136][ T6558] team0: Device veth1_macvtap failed to register rx_handler [ 107.910970][ T6561] openvswitch: netlink: Message has 592 unknown bytes. [ 107.938169][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.110182][ T6567] netlink: 'syz.1.173': attribute type 24 has an invalid length. [ 108.153555][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.161559][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.272124][ T6563] bridge_slave_0: left allmulticast mode [ 108.277996][ T6563] bridge_slave_0: left promiscuous mode [ 108.287151][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.322978][ T6563] bridge_slave_1: left allmulticast mode [ 108.334356][ T6563] bridge_slave_1: left promiscuous mode [ 108.341249][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.369197][ T6563] bond0: (slave bond_slave_0): Releasing backup interface [ 108.405058][ T6563] bond0: (slave bond_slave_1): Releasing backup interface [ 108.432192][ T6563] team0: Port device team_slave_0 removed [ 108.475049][ T6563] team0: Port device team_slave_1 removed [ 108.487301][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.499217][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.515283][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.527557][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.556469][ T6563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.575080][ T6576] batadv_slave_0: entered promiscuous mode [ 108.812306][ T6566] batadv_slave_0: left promiscuous mode [ 109.059613][ T6618] gretap0: entered promiscuous mode [ 109.073293][ T6618] gretap0: left promiscuous mode [ 109.165931][ T6629] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 109.259441][ T6629] bond1: entered promiscuous mode [ 109.275321][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.337434][ T6638] bond1: (slave bridge2): making interface the new active one [ 109.374787][ T6638] bridge2: entered promiscuous mode [ 109.381768][ T6638] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 109.731991][ T6654] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 109.738800][ T6654] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 110.045697][ T6675] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.059623][ T6675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.067262][ T6675] IPv6: NLM_F_CREATE should be set when creating new route [ 110.074550][ T6675] IPv6: NLM_F_CREATE should be set when creating new route [ 110.306975][ T6684] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 110.330022][ T6684] netlink: 'syz.3.205': attribute type 3 has an invalid length. [ 110.350757][ T6684] NCSI netlink: No device for ifindex 813332851 [ 110.648252][ T6700] __nla_validate_parse: 10 callbacks suppressed [ 110.648281][ T6700] netlink: 256 bytes leftover after parsing attributes in process `syz.3.214'. [ 110.674703][ T6700] unsupported nlmsg_type 40 [ 110.986315][ T6719] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 111.059475][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 111.082748][ T6723] netlink: 6 bytes leftover after parsing attributes in process `syz.0.222'. [ 111.153058][ T6729] xt_connbytes: Forcing CT accounting to be enabled [ 111.213020][ T6728] ip6gre1: entered allmulticast mode [ 111.441793][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.227'. [ 111.488801][ T6745] tipc: Started in network mode [ 111.497579][ T6745] tipc: Node identity a622cc9d799b, cluster identity 4711 [ 111.517850][ T6745] tipc: Enabled bearer , priority 0 [ 111.543181][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 111.569917][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 111.593225][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 111.625343][ T6748] syzkaller0: entered promiscuous mode [ 111.643430][ T6748] syzkaller0: entered allmulticast mode [ 111.784070][ T6748] tipc: Resetting bearer [ 111.840095][ T5843] Bluetooth: hci4: command tx timeout [ 111.882508][ T6744] tipc: Resetting bearer [ 111.915875][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 111.932207][ T6744] tipc: Disabling bearer [ 112.158022][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 112.176237][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 112.413054][ T6792] openvswitch: netlink: Key type 66 is out of range max 32 [ 112.423483][ T6792] openvswitch: netlink: Missing valid actions attribute. [ 112.431542][ T6792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.544266][ T6799] x_tables: duplicate underflow at hook 3 [ 112.560374][ T6797] x_tables: duplicate underflow at hook 3 [ 112.771716][ T6812] 8021q: VLANs not supported on gre0 [ 112.885365][ T6819] Bluetooth: MGMT ver 1.23 [ 113.006427][ T6828] validate_nla: 3 callbacks suppressed [ 113.006444][ T6828] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 113.213890][ T6838] netlink: 'syz.0.260': attribute type 12 has an invalid length. [ 113.880684][ T6874] bond1 (unregistering): Released all slaves [ 113.949087][ T6884] netlink: 'syz.0.273': attribute type 12 has an invalid length. [ 114.377271][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.402429][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.452415][ T6896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.606200][ T150] nci: nci_rsp_packet: unsupported rsp opcode 0xf01 [ 114.613999][ T6914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.675723][ T6918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.974660][ T6943] veth0: entered promiscuous mode [ 115.234145][ T6938] veth0: left promiscuous mode [ 115.557937][ T6959] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 115.601125][ T6959] team0: Device veth1_macvtap failed to register rx_handler [ 115.716341][ T6961] __nla_validate_parse: 8 callbacks suppressed [ 115.716361][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 115.781046][ T6978] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 115.797242][ T6979] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 115.829051][ T6978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.842986][ T6979] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.969500][ T6983] netlink: 'syz.4.298': attribute type 39 has an invalid length. [ 116.310600][ T6997] Bluetooth: MGMT ver 1.23 [ 116.315783][ T6997] netlink: 232 bytes leftover after parsing attributes in process `syz.4.303'. [ 116.380448][ T7001] netlink: 56 bytes leftover after parsing attributes in process `syz.0.305'. [ 116.420126][ T7005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.307'. [ 116.429555][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 116.440137][ T7004] netlink: 224 bytes leftover after parsing attributes in process `syz.4.307'. [ 116.449139][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 116.517912][ T7010] xt_bpf: check failed: parse error [ 116.525748][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 116.557675][ T7012] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 116.592329][ T7012] netlink: 152 bytes leftover after parsing attributes in process `syz.4.308'. [ 116.612064][ T7012] `: renamed from bond0 (while UP) [ 116.713255][ T7012] netlink: 104 bytes leftover after parsing attributes in process `syz.4.308'. [ 116.742004][ T7016] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 116.758582][ T7019] netlink: 'syz.2.311': attribute type 6 has an invalid length. [ 116.976694][ T7026] syz_tun: entered allmulticast mode [ 116.982533][ T7033] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 117.031519][ T7026] pimreg: entered allmulticast mode [ 117.062894][ T7025] veth1_macvtap: left promiscuous mode [ 117.085944][ T7025] macsec0: entered promiscuous mode [ 117.093320][ T7025] macsec0: entered allmulticast mode [ 117.105741][ T7024] pimreg: left allmulticast mode [ 117.140554][ T7025] veth1_macvtap: entered promiscuous mode [ 117.152125][ T7025] veth1_macvtap: entered allmulticast mode [ 117.161426][ T7025] macsec0: left promiscuous mode [ 117.168428][ T7025] macsec0: left allmulticast mode [ 117.183788][ T7025] veth1_macvtap: left allmulticast mode [ 117.717082][ T7069] team0: Device veth1_macvtap failed to register rx_handler [ 118.103807][ T7096] delete_channel: no stack [ 118.522957][ T7109] macsec1: entered promiscuous mode [ 118.566858][ T7113] validate_nla: 2 callbacks suppressed [ 118.566878][ T7113] netlink: 'syz.0.341': attribute type 2 has an invalid length. [ 118.607666][ T7113] x_tables: duplicate underflow at hook 2 [ 118.831566][ T7125] ip6gretap0: mtu less than device minimum [ 119.402047][ T7165] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 119.852153][ T7190] ip6t_rpfilter: unknown options [ 119.965123][ T7203] openvswitch: netlink: Duplicate or invalid key (type 0). [ 119.972827][ T7203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.036279][ T7207] openvswitch: netlink: Duplicate or invalid key (type 0). [ 120.054053][ T7207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.645452][ T7243] Cannot find add_set index 2 as target [ 120.848286][ T7250] __nla_validate_parse: 14 callbacks suppressed [ 120.848307][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 121.104688][ T7262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.243307][ T7277] batman_adv: batadv0: Adding interface: veth3 [ 121.261047][ T7277] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.313001][ T7277] batman_adv: batadv0: Interface activated: veth3 [ 121.326283][ T7283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.392'. [ 121.336509][ T7283] netlink: 'syz.1.392': attribute type 2 has an invalid length. [ 121.517790][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 121.548115][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 121.937635][ T7317] netlink: 'syz.4.399': attribute type 3 has an invalid length. [ 122.082679][ T10] IPVS: starting estimator thread 0... [ 122.091802][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 122.091839][ T7321] IPVS: set_ctl: invalid protocol: 28777 110.108.48.0:0 [ 122.170370][ T7322] netlink: 2 bytes leftover after parsing attributes in process `syz.4.401'. [ 122.185703][ T7324] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.219096][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 122.485275][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 122.516571][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.407'. [ 122.794786][ T7339] hsr_slave_1 (unregistering): left promiscuous mode [ 122.847135][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 122.946346][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.022488][ T7353] bridge_slave_1 (unregistering): left allmulticast mode [ 123.076679][ T7353] bridge_slave_1 (unregistering): left promiscuous mode [ 123.120489][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.369310][ T7386] block nbd0: not configured, cannot reconfigure [ 123.393729][ T7390] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 123.481576][ T7390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.492096][ T7385] syzkaller1: entered promiscuous mode [ 123.497609][ T7385] syzkaller1: entered allmulticast mode [ 123.542923][ T7392] bond2: (slave geneve2): making interface the new active one [ 123.563272][ T7392] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.197864][ T7418] netlink: 'syz.1.431': attribute type 83 has an invalid length. [ 124.322525][ T7423] netlink: 'syz.2.432': attribute type 5 has an invalid length. [ 124.578905][ T7437] raw_sendmsg: syz.0.437 forgot to set AF_INET. Fix it! [ 125.168220][ T7466] bond2: entered promiscuous mode [ 125.173601][ T7466] bond2: entered allmulticast mode [ 125.184529][ T7466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.359338][ T7484] pim6reg527: entered allmulticast mode [ 125.372635][ T7490] veth1_to_bond: entered allmulticast mode [ 125.515878][ T7498] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 125.534098][ T7488] bond3: option min_links: invalid value (18446744073709551614) [ 125.551563][ T7498] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 125.571967][ T7488] bond3: option min_links: allowed values 0 - 2147483647 [ 125.589256][ T7488] bond3 (unregistering): Released all slaves [ 125.630299][ T7491] veth1_to_bond (unregistering): left allmulticast mode [ 125.740457][ T7491] bond0: (slave bond_slave_1): Releasing backup interface [ 125.922829][ T7520] __nla_validate_parse: 14 callbacks suppressed [ 125.922845][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.954662][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 126.197831][ T7536] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 126.415353][ T7553] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 126.551709][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 126.585588][ T7563] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 126.599996][ T7563] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 126.613454][ T7563] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.468'. [ 126.627330][ T7559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.467'. [ 126.637546][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 126.661467][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 126.662919][ T7553] bond1: (slave geneve2): making interface the new active one [ 126.671823][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 126.684422][ T7553] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.690226][ T7567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.467'. [ 126.712120][ T2120] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.726047][ T2120] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.745715][ T2120] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.857323][ T2120] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.209184][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 127.799913][ T7639] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.880915][ T7644] openvswitch: netlink: Message has 7 unknown bytes. [ 128.539537][ T7673] bridge1: entered promiscuous mode [ 128.609570][ T7673] bridge1: entered allmulticast mode [ 128.768515][ T7676] bridge1: entered promiscuous mode [ 128.789569][ T7676] bridge1: entered allmulticast mode [ 128.838291][ T7691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.887073][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 128.932473][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 128.952910][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 129.114406][ T7704] syzkaller0: entered promiscuous mode [ 129.141421][ T7704] syzkaller0: entered allmulticast mode [ 129.205586][ T7697] infiniband syz2: set active [ 129.210597][ T7697] infiniband syz2: added dummy0 [ 129.258223][ T5838] dummy0 speed is unknown, defaulting to 1000 [ 129.267251][ T7697] RDS/IB: syz2: added [ 129.275256][ T7704] tipc: Enabled bearer , priority 0 [ 129.288780][ T7697] smc: adding ib device syz2 with port count 1 [ 129.308052][ T7704] tipc: Resetting bearer [ 129.330126][ T7697] smc: ib device syz2 port 1 has no pnetid [ 129.383422][ T7702] tipc: Resetting bearer [ 129.419352][ T7702] tipc: Disabling bearer [ 129.445020][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 129.463448][ T5838] dummy0 speed is unknown, defaulting to 1000 [ 129.981271][ T7746] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.020180][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 130.583989][ T7765] v: renamed from vlan0 [ 130.613594][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 131.179146][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 131.514143][ T7801] sctp: [Deprecated]: syz.2.527 (pid 7801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.514143][ T7801] Use struct sctp_sack_info instead [ 131.636076][ T7808] __nla_validate_parse: 12 callbacks suppressed [ 131.636094][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 131.842361][ T7815] syzkaller0: entered promiscuous mode [ 131.847987][ T7815] syzkaller0: entered allmulticast mode [ 131.878135][ T7697] dummy0 speed is unknown, defaulting to 1000 [ 131.897669][ T7815] tipc: Started in network mode [ 131.924363][ T7815] tipc: Node identity 22d37f5c5618, cluster identity 4711 [ 131.961217][ T7815] tipc: Enabled bearer , priority 0 [ 132.116967][ T7814] tipc: Resetting bearer [ 132.222232][ T7814] tipc: Disabling bearer [ 132.398787][ T7837] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 132.634312][ T7846] bond1: (slave gretap1): making interface the new active one [ 132.666289][ T7846] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.684666][ T7840] syzkaller1: entered promiscuous mode [ 132.721670][ T7840] syzkaller1: entered allmulticast mode [ 132.746465][ T7863] netlink: 830 bytes leftover after parsing attributes in process `syz.0.538'. [ 133.076739][ T7878] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 133.104171][ T7881] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 133.123003][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 133.273972][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.545'. [ 133.293396][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.545'. [ 133.517381][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.557865][ T7911] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 133.601555][ T7911] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.551'. [ 133.787760][ T5495] veth1_vlan: left promiscuous mode [ 133.916162][ T5951] IPVS: starting estimator thread 0... [ 134.015701][ T7925] xt_CT: No such helper "snmp_trap" [ 134.037769][ T7930] IPVS: using max 29 ests per chain, 69600 per kthread [ 134.173671][ T7944] pim6reg: entered allmulticast mode [ 134.285455][ T7949] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.354227][ T7952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.258834][ T8001] netlink: 76 bytes leftover after parsing attributes in process `syz.3.575'. [ 135.511826][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 135.552236][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 135.563891][ T8018] openvswitch: netlink: Duplicate or invalid key (type 0). [ 135.580961][ T8018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.592494][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 135.804530][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.849839][ T8022] bond0: (slave rose0): Enslaving as an active interface with an up link [ 135.931918][ T8041] syzkaller0: entered promiscuous mode [ 135.937630][ T8041] syzkaller0: entered allmulticast mode [ 135.960462][ T8022] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 136.013459][ T8022] netlink: 'syz.4.582': attribute type 2 has an invalid length. [ 136.038675][ T8050] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 136.554537][ T8085] SET target dimension over the limit! [ 136.735781][ T8064] dummy0 speed is unknown, defaulting to 1000 [ 136.746040][ T8089] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 136.871230][ T8097] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20001 [ 137.266318][ T8111] __nla_validate_parse: 1 callbacks suppressed [ 137.266337][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 137.423438][ T8111] netlink: 'syz.0.597': attribute type 3 has an invalid length. [ 137.435530][ T8118] netlink: 68 bytes leftover after parsing attributes in process `syz.4.598'. [ 137.526545][ T5838] IPVS: starting estimator thread 0... [ 137.542184][ T8129] netlink: 44 bytes leftover after parsing attributes in process `syz.2.600'. [ 137.639813][ T8131] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.857911][ T8141] netlink: zone id is out of range [ 137.878215][ T8141] netlink: zone id is out of range [ 137.894151][ T8141] netlink: zone id is out of range [ 137.899376][ T8141] netlink: get zone limit has 4 unknown bytes [ 138.170213][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.176662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.359020][ T8158] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.386972][ T8158] bond3: (slave lo): Enslaving as a backup interface with an up link [ 138.399000][ T8158] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 138.438924][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 138.471879][ T8158] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 138.481390][ T8158] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 138.621583][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 138.653686][ T8173] veth1_macvtap: left promiscuous mode [ 138.690141][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 138.821811][ T8186] netlink: 'syz.0.618': attribute type 7 has an invalid length. [ 138.852919][ T8191] netlink: 14 bytes leftover after parsing attributes in process `syz.3.620'. [ 138.860129][ T8186] netlink: 140 bytes leftover after parsing attributes in process `syz.0.618'. [ 138.978846][ T8199] netlink: 'syz.2.623': attribute type 12 has an invalid length. [ 138.986817][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 139.015811][ T2975] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.026827][ T8199] netlink: 'syz.2.623': attribute type 12 has an invalid length. [ 139.044874][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 139.049506][ T2975] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.087291][ T2975] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.118249][ T2975] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.171246][ T8206] syz.1.624: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 139.202396][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.1.624 Not tainted syzkaller #0 PREEMPT(full) [ 139.202428][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.202450][ T8206] Call Trace: [ 139.202458][ T8206] [ 139.202467][ T8206] dump_stack_lvl+0x189/0x250 [ 139.202509][ T8206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.202534][ T8206] ? __pfx__printk+0x10/0x10 [ 139.202565][ T8206] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.202588][ T8206] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.202612][ T8206] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 139.202638][ T8206] warn_alloc+0x214/0x310 [ 139.202660][ T8206] ? stack_trace_save+0x9c/0xe0 [ 139.202694][ T8206] ? __pfx_warn_alloc+0x10/0x10 [ 139.202723][ T8206] ? kasan_save_track+0x4f/0x80 [ 139.202750][ T8206] ? kasan_save_track+0x3e/0x80 [ 139.202768][ T8206] ? __kasan_kmalloc+0x93/0xb0 [ 139.202788][ T8206] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 139.202807][ T8206] ? xskq_create+0x56/0x170 [ 139.202836][ T8206] ? xsk_setsockopt+0x4dc/0x8d0 [ 139.202861][ T8206] ? do_sock_setsockopt+0x17c/0x1b0 [ 139.202883][ T8206] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 139.202904][ T8206] ? do_syscall_64+0xfa/0xf80 [ 139.202928][ T8206] __vmalloc_node_range_noprof+0x134/0x16a0 [ 139.202983][ T8206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.203011][ T8206] ? __kasan_kmalloc+0x93/0xb0 [ 139.203039][ T8206] vmalloc_user_noprof+0xad/0xf0 [ 139.203059][ T8206] ? xskq_create+0xbf/0x170 [ 139.203090][ T8206] xskq_create+0xbf/0x170 [ 139.203123][ T8206] xsk_init_queue+0xb0/0x110 [ 139.203155][ T8206] xsk_setsockopt+0x4dc/0x8d0 [ 139.203186][ T8206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.203218][ T8206] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.203245][ T8206] ? aa_sock_opt_perm+0xff/0x1a0 [ 139.203286][ T8206] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 139.203302][ T8206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.203329][ T8206] do_sock_setsockopt+0x17c/0x1b0 [ 139.203359][ T8206] __x64_sys_setsockopt+0x13f/0x1b0 [ 139.203386][ T8206] do_syscall_64+0xfa/0xf80 [ 139.203406][ T8206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.203425][ T8206] ? clear_bhb_loop+0x60/0xb0 [ 139.203450][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.203467][ T8206] RIP: 0033:0x7f74c098f749 [ 139.203490][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.203506][ T8206] RSP: 002b:00007f74c1844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.203526][ T8206] RAX: ffffffffffffffda RBX: 00007f74c0be5fa0 RCX: 00007f74c098f749 [ 139.203540][ T8206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 139.203551][ T8206] RBP: 00007f74c0a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 139.203562][ T8206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.203574][ T8206] R13: 00007f74c0be6038 R14: 00007f74c0be5fa0 R15: 00007fff77bd75c8 [ 139.203606][ T8206] [ 139.204788][ T8206] Mem-Info: [ 139.564360][ T8206] active_anon:4820 inactive_anon:0 isolated_anon:0 [ 139.564360][ T8206] active_file:2632 inactive_file:39897 isolated_file:0 [ 139.564360][ T8206] unevictable:768 dirty:79 writeback:0 [ 139.564360][ T8206] slab_reclaimable:10971 slab_unreclaimable:98958 [ 139.564360][ T8206] mapped:30121 shmem:1365 pagetables:1029 [ 139.564360][ T8206] sec_pagetables:0 bounce:0 [ 139.564360][ T8206] kernel_misc_reclaimable:0 [ 139.564360][ T8206] free:1329512 free_pcp:15028 free_cma:0 [ 139.643914][ T8206] Node 0 active_anon:19180kB inactive_anon:0kB active_file:10528kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120484kB dirty:316kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12312kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 139.728512][ T8206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 139.792389][ T8206] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.825614][ T8206] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 139.852544][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 139.878851][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 139.921081][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 139.928760][ T8206] Node 0 DMA32 free:1412880kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19380kB inactive_anon:0kB active_file:10528kB inactive_file:159380kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:40080kB local_pcp:19444kB free_cma:0kB [ 139.995867][ T8224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.041923][ T8224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 140.054876][ T8206] lowmem_reserve[]: 0 0 1 1 1 [ 140.080724][ T8206] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.146848][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 140.169471][ T8206] lowmem_reserve[]: 0 0 0 0 0 [ 140.182321][ T8206] Node 1 Normal free:3890296kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19488kB local_pcp:5696kB free_cma:0kB [ 140.194430][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 140.228370][ T8206] lowmem_reserve[]: 0 0 0 0 0 [ 140.236321][ T8206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.255172][ T8206] Node 0 DMA32: 896*4kB (UM) 414*8kB (UME) 182*16kB (UME) 252*32kB (UME) 64*64kB (UM) 39*128kB (UM) 49*256kB (UME) 35*512kB (UME) 20*1024kB (UME) 10*2048kB (UME) 321*4096kB (UM) = 1413200kB [ 140.276156][ T8206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.277793][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 140.293647][ T8238] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 140.305113][ T8206] Node 1 Normal: 198*4kB (UE) 56*8kB (UME) 40*16kB (UME) 65*32kB (UME) 20*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890296kB [ 140.322024][ T8243] syzkaller0: entered promiscuous mode [ 140.329606][ T8243] syzkaller0: entered allmulticast mode [ 140.335044][ T8206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.335189][ T8206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.335208][ T8206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.335225][ T8206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.335242][ T8206] 43893 total pagecache pages [ 140.335262][ T8206] 0 pages in swap cache [ 140.335271][ T8206] Free swap = 124996kB [ 140.335280][ T8206] Total swap = 124996kB [ 140.335290][ T8206] 2097051 pages RAM [ 140.335316][ T8206] 0 pages HighMem/MovableOnly [ 140.335325][ T8206] 425122 pages reserved [ 140.335334][ T8206] 0 pages cma reserved [ 140.435643][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 140.464886][ T8224] wlan0 speed is unknown, defaulting to 1000 [ 140.608843][ T8257] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 140.690795][ T8257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.770286][ T8265] bond4: (slave geneve2): making interface the new active one [ 140.780265][ T8265] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 140.914950][ T8277] sctp: [Deprecated]: syz.0.648 (pid 8277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.914950][ T8277] Use struct sctp_sack_info instead [ 140.983820][ T8274] tipc: New replicast peer: 255.255.255.255 [ 140.990862][ T8274] tipc: Enabled bearer , priority 10 [ 141.650877][ T8320] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 141.979581][ T8344] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 142.058741][ T8344] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.071616][ T8344] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 142.083262][ T8344] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 142.129393][ T5969] tipc: Node number set to 1959493468 [ 142.161715][ T8360] dummy0 speed is unknown, defaulting to 1000 [ 142.304384][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.404300][ T8372] bond0 (unregistering): Released all slaves [ 142.604308][ T8360] wlan0 speed is unknown, defaulting to 1000 [ 142.624803][ T8359] dummy0 speed is unknown, defaulting to 1000 [ 143.031307][ T8413] __nla_validate_parse: 11 callbacks suppressed [ 143.031325][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 143.070058][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 143.197569][ T8359] wlan0 speed is unknown, defaulting to 1000 [ 143.266433][ T8419] netlink: 6 bytes leftover after parsing attributes in process `syz.0.688'. [ 143.658603][ T8440] netlink: 88 bytes leftover after parsing attributes in process `syz.0.692'. [ 143.713733][ T8439] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 143.732928][ T8439] netlink: 212 bytes leftover after parsing attributes in process `syz.3.693'. [ 143.883985][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 143.986394][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 144.006786][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 144.237908][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 144.550143][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 144.588776][ T8475] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 144.610562][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.619058][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.649736][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.657146][ T8475] bridge0: port 2(bridge_slave_1) entered listening state [ 144.664670][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.671919][ T8475] bridge0: port 1(bridge_slave_0) entered listening state [ 144.694233][ T8475] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.707395][ T8480] bridge0: port 3(syz_tun) entered blocking state [ 144.729996][ T8480] bridge0: port 3(syz_tun) entered disabled state [ 144.740122][ T8480] syz_tun: entered allmulticast mode [ 144.762831][ T8480] syz_tun: entered promiscuous mode [ 144.776479][ T8480] bridge0: port 3(syz_tun) entered blocking state [ 144.783337][ T8480] bridge0: port 3(syz_tun) entered listening state [ 144.994199][ T8495] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.009321][ T8498] pim6reg: entered allmulticast mode [ 145.089382][ T8494] syzkaller0: entered promiscuous mode [ 145.095077][ T8494] syzkaller0: entered allmulticast mode [ 145.472418][ T8526] syzkaller1: entered promiscuous mode [ 145.478026][ T8526] syzkaller1: entered allmulticast mode [ 145.485688][ T8526] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 146.063875][ T8563] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.211021][ T8573] netlink: 'syz.1.731': attribute type 39 has an invalid length. [ 146.211021][ T8574] netlink: 'syz.1.731': attribute type 39 has an invalid length. [ 146.441555][ T8588] syzkaller0: entered promiscuous mode [ 146.447095][ T8588] syzkaller0: entered allmulticast mode [ 146.829494][ T8612] x_tables: duplicate underflow at hook 2 [ 146.862087][ T8618] netlink: 'syz.3.741': attribute type 30 has an invalid length. [ 147.005749][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.015992][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.131165][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.213240][ T8633] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 147.250259][ T8633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.504975][ T8643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.592253][ T3547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.738163][ T8662] vlan0: entered promiscuous mode [ 147.744367][ T8662] bridge0: entered promiscuous mode [ 147.761445][ T3547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.844273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.128019][ T8683] __nla_validate_parse: 14 callbacks suppressed [ 148.128092][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 148.244333][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.410190][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.462149][ T8692] x_tables: duplicate entry at hook 2 [ 148.543973][ T8694] netlink: 144 bytes leftover after parsing attributes in process `syz.2.760'. [ 148.801751][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.216316][ T8717] C: renamed from lo [ 149.234079][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 149.244834][ T8722] netlink: 'syz.2.769': attribute type 3 has an invalid length. [ 149.301982][ T8721] bond3: option miimon: invalid value (18446744073709551585) [ 149.309585][ T8721] bond3: option miimon: allowed values 0 - 2147483647 [ 149.318930][ T8721] bond3 (unregistering): Released all slaves [ 149.357710][ T8728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.656506][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 149.690548][ T8745] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.775'. [ 149.882310][ T8755] netlink: 'syz.0.780': attribute type 18 has an invalid length. [ 150.024273][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 150.071336][ T8769] netlink: 'syz.2.786': attribute type 11 has an invalid length. [ 150.079279][ T8769] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.786'. [ 150.157409][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 150.309248][ T8769] team0 (unregistering): Port device team_slave_0 removed [ 150.334497][ T8769] team0 (unregistering): Port device team_slave_1 removed [ 150.530692][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 150.658364][ T8795] netlink: 'syz.0.791': attribute type 12 has an invalid length. [ 150.676438][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.791'. [ 150.932737][ T8822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.992908][ T8822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.029633][ T8827] tunl0: entered promiscuous mode [ 151.057292][ T8827] netlink: 'syz.0.802': attribute type 3 has an invalid length. [ 151.268818][ T8840] ip6gre1: entered allmulticast mode [ 151.402180][ T8844] siw: device registration error -23 [ 151.409629][ T8849] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 151.478964][ T8849] bond0: entered promiscuous mode [ 151.494675][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.590054][ T8854] vxlan0: entered promiscuous mode [ 151.599013][ T8854] vxlan0: entered allmulticast mode [ 151.625577][ T1112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.695392][ T1112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.910925][ T1112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.995565][ T1112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.028388][ T5951] net_ratelimit: 8 callbacks suppressed [ 152.028407][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.170944][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.813957][ T8938] netlink: 'syz.4.829': attribute type 11 has an invalid length. [ 152.841974][ T8940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.882318][ T2120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.931787][ T8947] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 152.940001][ T8947] netlink: 'syz.1.834': attribute type 2 has an invalid length. [ 153.049998][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.182946][ T8957] __nla_validate_parse: 10 callbacks suppressed [ 153.182966][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 153.212569][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 153.319948][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.324007][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058293800: rx timeout, send abort [ 153.338089][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880288c7400: rx timeout, send abort [ 153.346752][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058293800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.357587][ T8968] dummy0 speed is unknown, defaulting to 1000 [ 153.362109][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880288c7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.699439][ T8991] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 153.735062][ T8990] netlink: 'syz.2.847': attribute type 3 has an invalid length. [ 153.799904][ T8990] netlink: 404 bytes leftover after parsing attributes in process `syz.2.847'. [ 153.878558][ T8999] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.850'. [ 153.988871][ T8968] wlan0 speed is unknown, defaulting to 1000 [ 154.003814][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.021059][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 154.038501][ T9003] syzkaller1: entered promiscuous mode [ 154.054872][ T9003] syzkaller1: entered allmulticast mode [ 154.080935][ T9009] netlink: 'syz.3.853': attribute type 4 has an invalid length. [ 154.092362][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.142242][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 154.170022][ T839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.207714][ T9012] netlink: zone id is out of range [ 154.265433][ T9014] netlink: 'syz.3.855': attribute type 4 has an invalid length. [ 154.354722][ T9018] netlink: 404 bytes leftover after parsing attributes in process `syz.2.856'. [ 154.374822][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 154.387039][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 154.404474][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.856'. [ 155.103200][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.110781][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.151525][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.159196][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.169934][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.177458][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.324247][ T9064] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 155.332186][ T9064] netlink: 'syz.0.871': attribute type 7 has an invalid length. [ 155.343573][ T9064] netlink: 'syz.0.871': attribute type 8 has an invalid length. [ 155.352627][ T9064] NCSI netlink: No device for ifindex 65584 [ 155.496475][ T9068] xt_CONNSECMARK: invalid mode: 0 [ 155.573852][ T9070] xt_addrtype: ipv6 does not support BROADCAST matching [ 155.695265][ T9078] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 155.703478][ T9076] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 155.824481][ T9087] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 155.934294][ T9087] delete_channel: no stack [ 156.002455][ T9100] xt_cgroup: path and classid specified [ 156.041249][ T9102] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 156.148797][ T9107] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:188 [ 156.183759][ T9107] IPVS: set_ctl: invalid protocol: 65535 5.0.0.0:3584 [ 156.235350][ T9109] bond5: option resend_igmp: invalid value (32767) [ 156.268478][ T9109] bond5: option resend_igmp: allowed values 0 - 255 [ 156.281035][ T9109] bond5 (unregistering): Released all slaves [ 157.005295][ T9135] bridge0: port 3(syz_tun) entered disabled state [ 157.072143][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.079506][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.375884][ T9131] delete_channel: no stack [ 157.480178][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.507433][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.003398][ T9135] team1: left promiscuous mode [ 158.009476][ T9135] bridge1: left promiscuous mode [ 158.023694][ T9135] bond1: left promiscuous mode [ 158.028644][ T9135] bridge2: left promiscuous mode [ 158.070428][ T9135] vxlan0: left promiscuous mode [ 158.116939][ T9175] wlan0 speed is unknown, defaulting to 1000 [ 158.116961][ T8893] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.116992][ T8893] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.125018][ T9175] syz0: Port: 1 Link DOWN [ 158.189310][ T8893] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.229188][ T8893] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.238824][ T8893] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.275649][ T8893] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.299186][ T8893] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.326560][ T8893] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.522670][ T9197] __nla_validate_parse: 8 callbacks suppressed [ 158.522691][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 158.553918][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 158.733882][ T9213] net_ratelimit: 14 callbacks suppressed [ 158.733901][ T9213] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 158.834133][ T9198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.904'. [ 158.865043][ T9217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.911'. [ 159.094363][ T9236] netlink: 'syz.4.914': attribute type 27 has an invalid length. [ 159.115228][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 159.126847][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 159.131682][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 159.526337][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 159.724107][ T9274] openvswitch: netlink: Tunnel attr 133 out of range max 16 [ 159.826605][ T9284] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.931'. [ 159.946238][ T9288] netlink: 'syz.3.932': attribute type 6 has an invalid length. [ 159.972285][ T9288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.932'. [ 160.069326][ T9293] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.934'. [ 160.242392][ T9310] openvswitch: netlink: IPv4 tunnel dst address is zero [ 160.476884][ T9327] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 160.673763][ T9344] tipc: Enabled bearer , priority 2 [ 160.714430][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.724380][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.738760][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.748667][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.762080][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.772115][ T9348] nftables ruleset with unbound set [ 160.777900][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.798420][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.818497][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.840824][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.861687][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.893812][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.913241][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.926011][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.934747][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.944211][ T9344] tipc: Enabling of bearer rejected, already enabled [ 160.953054][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.028401][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.049397][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.068393][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.078940][ T9358] team0: Mode changed to "broadcast" [ 161.086042][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.105586][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.130850][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.157326][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.179423][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.195727][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.223541][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.233124][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.241789][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.250696][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.260197][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.311271][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.325073][ T9344] tipc: Enabling of bearer rejected, already enabled [ 161.526575][ T9384] siw: device registration error -23 [ 161.861920][ T9383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.886891][ T9383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.913889][ T5919] tipc: Node number set to 3753495709 [ 162.016191][ T9383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.044103][ T9383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.175051][ T9383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.212904][ T9383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.252597][ T9435] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 162.254104][ T9434] netlink: 'syz.2.978': attribute type 4 has an invalid length. [ 162.336598][ T9383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.366869][ T9383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.397607][ T9439] netlink: 'syz.1.979': attribute type 83 has an invalid length. [ 162.634257][ T7155] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.658251][ T7155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.683081][ T7155] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.710136][ T7155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.750805][ T7155] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.771104][ T7155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.800523][ T9091] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.821639][ T9091] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.243024][ T9494] tipc: Invalid UDP bearer configuration [ 163.243083][ T9494] tipc: Enabling of bearer rejected, failed to enable media [ 163.323955][ T9499] block nbd0: not configured, cannot reconfigure [ 163.699344][ T9521] netlink: 'syz.0.1004': attribute type 21 has an invalid length. [ 163.733449][ T9521] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.895349][ T9530] __nla_validate_parse: 10 callbacks suppressed [ 163.895441][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 164.021963][ T9530] hsr_slave_0 (unregistering): left promiscuous mode [ 164.166274][ T9546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.393536][ T9556] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1015'. [ 164.522719][ T9566] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 164.533521][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 164.579440][ T9571] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1021'. [ 164.894553][ T9593] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1027'. [ 164.909547][ T9596] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1029'. [ 164.991396][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 165.025272][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 165.050918][ T9602] netlink: 'syz.3.1030': attribute type 3 has an invalid length. [ 165.060457][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.067804][ T9598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.076554][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.083789][ T9598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.164017][ T9606] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1032'. [ 165.411382][ T9618] x_tables: unsorted underflow at hook 1 [ 165.869384][ T9635] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 165.910278][ T9633] dummy0 speed is unknown, defaulting to 1000 [ 166.071972][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 166.100635][ T9648] : entered promiscuous mode [ 166.646783][ T9633] wlan0 speed is unknown, defaulting to 1000 [ 166.818419][ T9686] lo: entered promiscuous mode [ 166.841635][ T9686] lo: entered allmulticast mode [ 167.024960][ T9695] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 167.181704][ T9702] bond0: (slave macvlan2): Opening slave failed [ 167.212691][ T9705] : renamed from hsr0 (while UP) [ 167.438241][ T9720] netlink: 'syz.0.1064': attribute type 5 has an invalid length. [ 168.858611][ T9740] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 168.870442][ T9740] bond5: (slave vcan1): Error -95 calling set_mac_address [ 168.936619][ T9741] __nla_validate_parse: 8 callbacks suppressed [ 168.936635][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 169.104969][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 169.151497][ T9759] tipc: Failed to remove unknown binding: 66,1,1/0:3956116852/3956116854 [ 169.160520][ T9759] tipc: Failed to remove unknown binding: 66,1,1/0:3956116852/3956116854 [ 169.471033][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 169.484388][ T9780] syzkaller0: entered promiscuous mode [ 169.499863][ T9780] syzkaller0: entered allmulticast mode [ 169.508191][ T9778] syzkaller1: entered promiscuous mode [ 169.533423][ T9778] syzkaller1: entered allmulticast mode [ 169.605528][ T9780] tipc: Enabled bearer , priority 0 [ 169.617538][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 169.637168][ T9791] vlan1: entered allmulticast mode [ 169.646069][ T9791] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 169.668439][ T9777] tipc: Resetting bearer [ 169.730987][ T9777] tipc: Disabling bearer [ 169.837927][ T9795] pim6reg1: entered promiscuous mode [ 169.843539][ T9795] pim6reg1: entered allmulticast mode [ 170.048816][ T9811] netlink: 824 bytes leftover after parsing attributes in process `syz.1.1093'. [ 170.333602][ T9816] geneve3: entered promiscuous mode [ 170.463525][ T9831] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 170.489261][ T9831] netlink: 'syz.3.1098': attribute type 6 has an invalid length. [ 170.972171][ T9863] openvswitch: netlink: Message has -2 unknown bytes. [ 171.028563][ T9864] netlink: 'syz.3.1104': attribute type 29 has an invalid length. [ 171.036870][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 171.115883][ T9869] netlink: 'syz.1.1107': attribute type 58 has an invalid length. [ 171.150370][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 171.252193][ T9875] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1109'. [ 171.270232][ T9879] netlink: 'syz.2.1111': attribute type 10 has an invalid length. [ 171.278313][ T9879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1111'. [ 171.285040][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'. [ 171.297362][ T9874] tipc: Invalid UDP bearer configuration [ 171.297420][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 171.313104][ T9879] dummy0: entered promiscuous mode [ 171.321330][ T9879] bridge0: port 3(dummy0) entered blocking state [ 171.328313][ T9879] bridge0: port 3(dummy0) entered disabled state [ 171.335244][ T9879] dummy0: entered allmulticast mode [ 171.344526][ T9879] bridge0: port 3(dummy0) entered blocking state [ 171.351214][ T9879] bridge0: port 3(dummy0) entered forwarding state [ 171.365665][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.695946][ T9906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.715650][ T9904] gretap1: entered promiscuous mode [ 171.732320][ T9904] gretap1: entered allmulticast mode [ 171.791667][ T9909] netlink: 'syz.4.1121': attribute type 33 has an invalid length. [ 171.939804][ T9913] tunl0: left promiscuous mode [ 173.296994][ T9913] vlan0: left promiscuous mode [ 173.310295][ T9913] bridge0: left promiscuous mode [ 173.317113][ T9913] gretap1: left promiscuous mode [ 173.323034][ T9913] gretap1: left allmulticast mode [ 173.403104][ T9943] veth3: entered promiscuous mode [ 173.420221][ T9943] veth3: entered allmulticast mode [ 173.433389][ T8893] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.459534][ T8893] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.477958][ T9952] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 173.496515][ T8893] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.533413][ T8893] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.553952][ T9953] tipc: Enabling of bearer rejected, media not registered [ 173.571024][ T8893] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.580660][ T8893] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.610201][ T9091] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.647496][ T9091] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 173.964314][ T9975] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 174.004791][ T9975] Bluetooth: MGMT ver 1.23 [ 174.030604][ T9975] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 174.159258][ T9915] infiniband syû: set down [ 174.168718][ T9915] infiniband syû: added bond_slave_0 [ 174.227524][ T9915] RDS/IB: syû: added [ 174.237599][ T9915] smc: adding ib device syû with port count 1 [ 174.252957][ T9915] smc: ib device syû port 1 has no pnetid [ 174.535065][T10006] tipc: Enabled bearer , priority 2 [ 174.567873][T10006] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20002 [ 174.875919][T10030] __nla_validate_parse: 4 callbacks suppressed [ 174.875939][T10030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1157'. [ 174.925388][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 174.981339][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 175.005127][T10033] syzkaller0: entered promiscuous mode [ 175.013502][T10033] syzkaller0: entered allmulticast mode [ 175.048245][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 175.257898][T10047] netlink: 'syz.1.1161': attribute type 11 has an invalid length. [ 175.267134][T10047] netlink: 145912 bytes leftover after parsing attributes in process `syz.1.1161'. [ 175.421274][T10054] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 175.476191][T10054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.519786][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 175.530398][ T5905] tipc: Node number set to 2928056555 [ 175.551447][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 176.080442][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 176.089286][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 176.120811][T10098] netlink: 'syz.1.1175': attribute type 29 has an invalid length. [ 176.128988][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 176.232478][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 176.978500][T10142] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.168133][T10150] dummy0 speed is unknown, defaulting to 1000 [ 177.251677][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 177.564880][T10150] wlan0 speed is unknown, defaulting to 1000 [ 177.573802][T10178] sctp: [Deprecated]: syz.0.1195 (pid 10178) Use of int in max_burst socket option. [ 177.573802][T10178] Use struct sctp_assoc_value instead [ 178.359177][T10221] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 178.383299][T10222] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 178.498995][T10220] hsr_slave_1 (unregistering): left promiscuous mode [ 178.806101][T10235] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 179.558525][T10247] ip6gre1: left allmulticast mode [ 179.645294][T10247] batman_adv: batadv0: Interface deactivated: veth3 [ 179.670570][T10247] bond0: left promiscuous mode [ 179.697420][T10247] vlan1: left allmulticast mode [ 179.711106][T10247] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 179.795022][ T9946] dummy0 speed is unknown, defaulting to 1000 [ 179.795041][ T8893] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.829706][ T8893] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.841320][ T9946] syz2: Port: 1 Link DOWN [ 179.851126][ T9946] dummy0 speed is unknown, defaulting to 1000 [ 179.897558][ T8893] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.933149][ T8893] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.949930][ T8893] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.974478][ T8893] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.003855][ T8893] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.025750][T10269] __nla_validate_parse: 9 callbacks suppressed [ 180.025771][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 180.049815][ T8893] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.097698][T10271] bridge0: Device is already in use. [ 180.130482][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 180.237752][T10280] tipc: Enabling of bearer rejected, failed to enable media [ 180.262175][T10280] netlink: 'syz.2.1226': attribute type 2 has an invalid length. [ 180.387946][T10287] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:19999 [ 180.750948][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 181.346727][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 181.404365][T10352] IPVS: Unknown mcast interface: vcan0 [ 181.569472][T10363] syzkaller0: entered promiscuous mode [ 181.575517][T10363] syzkaller0: entered allmulticast mode [ 181.586190][T10364] netlink: 'syz.2.1252': attribute type 5 has an invalid length. [ 181.961256][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 181.995211][T10389] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1260'. [ 182.127217][T10395] syzkaller0: entered promiscuous mode [ 182.133067][T10395] syzkaller0: entered allmulticast mode [ 182.209524][T10400] netlink: 'syz.0.1263': attribute type 5 has an invalid length. [ 182.221915][T10400] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1263'. [ 182.264326][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 182.308213][T10400] veth0: entered promiscuous mode [ 182.314428][T10398] veth0: left promiscuous mode [ 182.342064][T10407] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 182.457335][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.464767][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.563794][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.582098][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.616051][T10426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 182.639272][T10401] tipc: Resetting bearer [ 182.678531][T10401] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 182.692410][T10401] ip6gre1: left allmulticast mode [ 182.703521][T10401] veth3: left promiscuous mode [ 182.708339][T10401] veth3: left allmulticast mode [ 182.724098][ T9091] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.754806][ T9091] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.780204][ T9091] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.789152][ T9091] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.837459][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 182.912002][T10437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.009485][T10444] IPVS: set_ctl: invalid protocol: 4 172.30.0.2:20002 [ 183.108179][T10450] netlink: 'syz.2.1271': attribute type 21 has an invalid length. [ 183.123593][T10450] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1271'. [ 183.193328][T10454] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 183.601259][T10473] lo: entered promiscuous mode [ 183.613357][T10473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.671313][T10473] openvswitch: netlink: Missing valid actions attribute. [ 183.678432][T10473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.866938][T10487] syzkaller1: entered promiscuous mode [ 183.882205][T10487] syzkaller1: entered allmulticast mode [ 184.504226][T10531] x_tables: duplicate entry at hook 3 [ 184.647067][T10541] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 184.869038][T10550] xt_TCPMSS: Only works on TCP SYN packets [ 185.079112][ T5832] Bluetooth: hci4: link tx timeout [ 185.086742][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.181358][T10567] netlink: 'syz.4.1315': attribute type 11 has an invalid length. [ 185.320223][T10575] __nla_validate_parse: 6 callbacks suppressed [ 185.320241][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 185.350903][T10575] syz_tun: left promiscuous mode [ 185.366212][T10575] bridge0: port 3(syz_tun) entered disabled state [ 185.396998][T10575] bridge_slave_1: left allmulticast mode [ 185.405165][T10575] bridge_slave_1: left promiscuous mode [ 185.411323][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.424656][T10575] bridge_slave_0: left allmulticast mode [ 185.432892][T10575] bridge_slave_0: left promiscuous mode [ 185.439560][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.546275][T10575] bond0: (slave bridge0): Releasing backup interface [ 185.744510][T10598] netlink: 'syz.0.1324': attribute type 12 has an invalid length. [ 185.894418][T10607] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1326'. [ 186.352171][T10637] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 186.369121][T10637] netlink: 'syz.2.1335': attribute type 4 has an invalid length. [ 186.377948][T10637] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1335'. [ 186.390710][T10637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 186.400564][T10637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1335'. [ 186.521916][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 186.538954][T10643] bridge0: port 4(batadv1) entered blocking state [ 186.546631][T10643] bridge0: port 4(batadv1) entered disabled state [ 186.553367][T10643] batadv1: entered allmulticast mode [ 186.563764][T10643] batadv1: entered promiscuous mode [ 186.574297][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1336'. [ 186.585087][T10643] netlink: 'syz.2.1338': attribute type 16 has an invalid length. [ 186.593138][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 186.597430][T10639] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1336'. [ 186.613425][T10639] netlink: 'syz.4.1336': attribute type 6 has an invalid length. [ 186.621862][T10639] netlink: 'syz.4.1336': attribute type 5 has an invalid length. [ 186.631211][T10639] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1336'. [ 186.770172][T10656] netlink: 'syz.2.1342': attribute type 21 has an invalid length. [ 186.931559][T10663] syzkaller0: entered promiscuous mode [ 186.941770][T10663] syzkaller0: entered allmulticast mode [ 187.003463][T10670] netlink: 'syz.2.1347': attribute type 11 has an invalid length. [ 187.039914][ T2120] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 187.049483][ T2120] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 187.122128][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 187.147107][T10683] syzkaller0: entered promiscuous mode [ 187.153174][T10683] syzkaller0: entered allmulticast mode [ 187.214362][T10683] tipc: Enabled bearer , priority 0 [ 187.242528][T10679] tipc: Resetting bearer [ 187.291560][T10679] tipc: Disabling bearer [ 187.575746][T10713] netlink: 'syz.4.1357': attribute type 7 has an invalid length. [ 188.248106][T10745] tls_set_device_offload: netdev not found [ 188.285271][T10746] vlan2: left promiscuous mode [ 188.296447][T10746] bridge0: left promiscuous mode [ 188.305439][T10746] bond2: left promiscuous mode [ 188.406706][T10756] atomic_op ffff888057bb1198 conn xmit_atomic 0000000000000000 [ 188.580142][T10770] Unsupported ieee802154 address type: 0 [ 189.369049][T10806] netlink: 'syz.3.1386': attribute type 21 has an invalid length. [ 189.392266][T10806] netlink: 'syz.3.1386': attribute type 21 has an invalid length. [ 189.539106][T10815] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.695784][T10824] netlink: 'syz.4.1394': attribute type 10 has an invalid length. [ 189.708165][T10824] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.099053][T10852] tipc: Started in network mode [ 190.109847][T10852] tipc: Node identity 6a65849e2341, cluster identity 4711 [ 190.117322][T10852] tipc: Enabled bearer , priority 0 [ 190.132563][T10852] syzkaller0: entered promiscuous mode [ 190.148842][T10852] syzkaller0: entered allmulticast mode [ 190.177846][T10852] tipc: Resetting bearer [ 190.202703][T10851] tipc: Resetting bearer [ 190.231351][T10851] tipc: Disabling bearer [ 190.393342][T10863] __nla_validate_parse: 28 callbacks suppressed [ 190.393362][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 190.431775][T10863] : entered promiscuous mode [ 190.440048][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 190.477567][T10867] openvswitch: : Dropping previously announced user features [ 190.500798][T10850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1402'. [ 190.657206][T10879] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1411'. [ 190.687219][T10878] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1411'. [ 190.806361][T10889] dvmrp0: entered allmulticast mode [ 190.821836][T10889] dvmrp0: left allmulticast mode [ 190.863973][T10891] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1415'. [ 191.135998][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 191.148512][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 191.223498][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 191.255733][T10923] xfrm1: entered promiscuous mode [ 191.261371][T10923] xfrm1: entered allmulticast mode [ 191.270211][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 191.444868][T10937] block nbd4: not configured, cannot reconfigure [ 191.972519][T10987] netlink: 'syz.3.1444': attribute type 24 has an invalid length. [ 191.986999][T10985] netlink: 'syz.3.1444': attribute type 24 has an invalid length. [ 192.056809][T10991] vlan2: entered promiscuous mode [ 192.062568][T10991] bridge0: entered promiscuous mode [ 192.163916][T10980] vlan2: entered promiscuous mode [ 192.197839][T10996] netlink: 'syz.3.1446': attribute type 21 has an invalid length. [ 192.395342][T11006] IPv6: sit2: Disabled Multicast RS [ 192.403479][T11006] sit2: entered allmulticast mode [ 192.963987][T11039] dummy0 speed is unknown, defaulting to 1000 [ 193.111964][T11039] wlan0 speed is unknown, defaulting to 1000 [ 193.293570][T11051] bridge5: port 1(veth0_to_bond) entered blocking state [ 193.301314][T11051] bridge5: port 1(veth0_to_bond) entered disabled state [ 193.308494][T11051] veth0_to_bond: entered allmulticast mode [ 193.316521][T11051] veth0_to_bond: entered promiscuous mode [ 193.795854][T11079] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 194.035292][T11079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.048326][T11079] bond1: (slave bond2): making interface the new active one [ 194.080848][T11079] bond1: (slave bond2): Enslaving as an active interface with an up link [ 194.250960][T11106] netlink: 'syz.3.1483': attribute type 11 has an invalid length. [ 194.259014][T11106] netlink: 'syz.3.1483': attribute type 11 has an invalid length. [ 194.311853][T11110] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 194.847260][T11129] x_tables: duplicate underflow at hook 3 [ 194.998866][T11141] netlink: 'syz.3.1494': attribute type 2 has an invalid length. [ 195.187589][T11159] ip6t_REJECT: ECHOREPLY is not supported [ 195.646190][T11187] netlink: 'syz.4.1508': attribute type 2 has an invalid length. [ 195.678050][T11187] : entered promiscuous mode [ 195.838694][T11201] __nla_validate_parse: 18 callbacks suppressed [ 195.838714][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 195.904888][T11201] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 195.926471][T11208] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 195.936756][T11201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1513'. [ 195.956764][T11208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1513'. [ 196.650500][T11215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1518'. [ 196.996670][T11240] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1523'. [ 197.025437][T11240] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1523'. [ 197.035768][T11242] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1525'. [ 197.247229][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 197.261498][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 197.458420][T11271] x_tables: duplicate underflow at hook 1 [ 197.507652][T11279] Unsupported ieee802154 address type: 0 [ 197.630316][T11288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1541'. [ 197.765424][T11297] pimreg12: entered allmulticast mode [ 197.782769][ T2975] nci: nci_rx_work: unknown MT 0x7 [ 197.913733][T11307] netlink: 'syz.3.1546': attribute type 2 has an invalid length. [ 198.193824][T11325] netlink: 'syz.3.1550': attribute type 3 has an invalid length. [ 198.207060][T11326] : renamed from bond_slave_0 [ 198.216466][T11327] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 198.536329][T11337] netlink: 'syz.3.1552': attribute type 12 has an invalid length. [ 198.634818][T11339] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 198.866197][T11356] sctp: [Deprecated]: syz.4.1561 (pid 11356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.866197][T11356] Use struct sctp_sack_info instead [ 198.925703][T11357] vlan2: entered allmulticast mode [ 198.951336][T11357] hsr0: entered allmulticast mode [ 198.956434][T11357] hsr_slave_0: entered allmulticast mode [ 198.968631][T11357] hsr_slave_1: entered allmulticast mode [ 199.167858][T11373] veth7: entered promiscuous mode [ 199.177625][T11373] veth7: entered allmulticast mode [ 199.353988][T11383] syzkaller1: entered promiscuous mode [ 199.359507][T11383] syzkaller1: entered allmulticast mode [ 199.604648][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.611173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.821664][T11405] bond3: option xmit_hash_policy: invalid value (64) [ 199.832295][T11405] bond3 (unregistering): Released all slaves [ 199.942944][T11422] netlink: 'syz.3.1578': attribute type 32 has an invalid length. [ 200.048982][T11422] bond6: option coupled_control: invalid value (52) [ 200.081944][T11422] bond6 (unregistering): Released all slaves [ 200.405759][T11437] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 200.515732][T11447] netlink: 'syz.3.1584': attribute type 11 has an invalid length. [ 200.855655][T11463] __nla_validate_parse: 12 callbacks suppressed [ 200.855674][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 200.920557][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 200.944755][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.955546][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.966163][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.975151][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.983692][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.034876][T11465] dummy0 speed is unknown, defaulting to 1000 [ 201.098841][T11470] pim6reg1: entered promiscuous mode [ 201.104487][T11470] pim6reg1: entered allmulticast mode [ 201.170767][T11473] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1591'. [ 201.292376][T11465] wlan0 speed is unknown, defaulting to 1000 [ 201.386088][T11479] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.502783][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 201.652314][T11497] netlink: 'syz.3.1600': attribute type 16 has an invalid length. [ 201.669744][T11497] netlink: 'syz.3.1600': attribute type 17 has an invalid length. [ 201.678101][T11497] lo: left promiscuous mode [ 201.686056][T11497] lo: left allmulticast mode [ 201.746509][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.756654][T11497] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.767243][T11497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.811026][T11497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.822593][T11497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.837617][T11497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.846993][T11509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1603'. [ 201.851059][T11497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.870294][T11497] veth1_vlan: left promiscuous mode [ 201.882595][T11497] veth0_vlan: left promiscuous mode [ 201.889396][T11497] veth0_vlan: entered promiscuous mode [ 201.902169][T11497] veth1_vlan: entered promiscuous mode [ 201.912446][T11497] tipc: Resetting bearer [ 201.918427][T11497] tipc: Resetting bearer [ 201.938881][T11497] veth1_macvtap: left promiscuous mode [ 201.950697][T11497] veth0_macvtap: left promiscuous mode [ 201.957683][T11497] veth0_macvtap: entered promiscuous mode [ 201.964928][T11497] veth1_macvtap: entered promiscuous mode [ 201.993197][T11497] team1: left allmulticast mode [ 201.999196][T11497] 8021q: adding VLAN 0 to HW filter on device team1 [ 202.047762][T11497] bridge1: left allmulticast mode [ 202.054180][T11497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.065807][T11497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.079145][T11497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.092129][T11497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.101340][T11497] vxlan0: left allmulticast mode [ 202.108813][T11497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.181999][ T3512] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.201039][ T3512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.217920][ T9169] wlan0 speed is unknown, defaulting to 1000 [ 202.224637][ T9169] syz0: Port: 1 Link ACTIVE [ 202.234134][ T3512] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.243450][ T3512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.281562][ T3512] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.291882][ T3512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.331124][ T3512] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.347990][ T3512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.365918][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1608'. [ 202.751322][T11465] chnl_net:caif_netlink_parms(): no params data found [ 202.802153][T11549] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 202.834019][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 202.946592][T11465] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.954202][T11465] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.961760][T11465] bridge_slave_0: entered allmulticast mode [ 202.970745][T11465] bridge_slave_0: entered promiscuous mode [ 202.981983][T11465] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.989411][T11465] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.997534][T11465] bridge_slave_1: entered allmulticast mode [ 203.007561][T11465] bridge_slave_1: entered promiscuous mode [ 203.045186][ T5832] Bluetooth: hci5: command tx timeout [ 203.077579][T11465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.090339][T11465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.156657][T11465] team0: Port device team_slave_0 added [ 203.169525][T11465] team0: Port device team_slave_1 added [ 203.206967][T11465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.214298][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.244022][T11465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.259296][T11465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.266959][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.295376][T11465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.372020][T11465] hsr_slave_0: entered promiscuous mode [ 203.379296][T11465] hsr_slave_1: entered promiscuous mode [ 203.575211][T11465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.598052][T11465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.613372][T11465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.643039][T11465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.813843][T11465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.862794][T11465] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.879270][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.886604][ T7155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.919661][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.926930][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.986744][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 204.008490][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1620'. [ 204.020552][T11589] veth0: entered allmulticast mode [ 204.032509][T11589] syz.4.1621: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.047708][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.4.1621 Not tainted syzkaller #0 PREEMPT(full) [ 204.047735][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.047748][T11589] Call Trace: [ 204.047756][T11589] [ 204.047774][T11589] dump_stack_lvl+0x189/0x250 [ 204.047803][T11589] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 204.047825][T11589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.047850][T11589] ? __pfx__printk+0x10/0x10 [ 204.047879][T11589] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.047899][T11589] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.047927][T11589] warn_alloc+0x214/0x310 [ 204.047949][T11589] ? stack_trace_save+0x9c/0xe0 [ 204.047980][T11589] ? __pfx_warn_alloc+0x10/0x10 [ 204.048008][T11589] ? kasan_save_track+0x4f/0x80 [ 204.048026][T11589] ? kasan_save_track+0x3e/0x80 [ 204.048043][T11589] ? __kasan_kmalloc+0x93/0xb0 [ 204.048062][T11589] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 204.048080][T11589] ? xskq_create+0x56/0x170 [ 204.048107][T11589] ? xsk_setsockopt+0x4dc/0x8d0 [ 204.048131][T11589] ? do_sock_setsockopt+0x17c/0x1b0 [ 204.048151][T11589] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 204.048171][T11589] ? do_syscall_64+0xfa/0xf80 [ 204.048195][T11589] __vmalloc_node_range_noprof+0x134/0x16a0 [ 204.048248][T11589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.048275][T11589] ? __kasan_kmalloc+0x93/0xb0 [ 204.048303][T11589] vmalloc_user_noprof+0xad/0xf0 [ 204.048322][T11589] ? xskq_create+0xbf/0x170 [ 204.048351][T11589] xskq_create+0xbf/0x170 [ 204.048383][T11589] xsk_init_queue+0xb0/0x110 [ 204.048413][T11589] xsk_setsockopt+0x4dc/0x8d0 [ 204.048443][T11589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.048474][T11589] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.048500][T11589] ? aa_sock_opt_perm+0xff/0x1a0 [ 204.048528][T11589] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 204.048548][T11589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.048576][T11589] do_sock_setsockopt+0x17c/0x1b0 [ 204.048603][T11589] __x64_sys_setsockopt+0x13f/0x1b0 [ 204.048631][T11589] do_syscall_64+0xfa/0xf80 [ 204.048651][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.048671][T11589] ? clear_bhb_loop+0x60/0xb0 [ 204.048694][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.048713][T11589] RIP: 0033:0x7fa83298f749 [ 204.048731][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.048748][T11589] RSP: 002b:00007fa833812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.048777][T11589] RAX: ffffffffffffffda RBX: 00007fa832be5fa0 RCX: 00007fa83298f749 [ 204.048791][T11589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 204.048804][T11589] RBP: 00007fa832a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 204.048816][T11589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.048828][T11589] R13: 00007fa832be6038 R14: 00007fa832be5fa0 R15: 00007fffc90aab58 [ 204.048861][T11589] [ 204.048869][T11589] Mem-Info: [ 204.353937][T11589] active_anon:5313 inactive_anon:0 isolated_anon:0 [ 204.353937][T11589] active_file:2632 inactive_file:39924 isolated_file:0 [ 204.353937][T11589] unevictable:779 dirty:57 writeback:0 [ 204.353937][T11589] slab_reclaimable:12381 slab_unreclaimable:111848 [ 204.353937][T11589] mapped:34196 shmem:1688 pagetables:991 [ 204.353937][T11589] sec_pagetables:0 bounce:0 [ 204.353937][T11589] kernel_misc_reclaimable:0 [ 204.353937][T11589] free:1300818 free_pcp:13395 free_cma:0 [ 204.358485][T11588] geneve2: entered promiscuous mode [ 204.400015][T11589] Node 0 active_anon:21252kB inactive_anon:0kB active_file:10528kB inactive_file:159488kB unevictable:1580kB isolated(anon):0kB isolated(file):0kB mapped:136784kB dirty:228kB writeback:0kB shmem:5216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13624kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.400079][T11589] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.400132][T11589] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.400196][T11589] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 204.400246][T11589] Node 0 DMA32 free:1297552kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21252kB inactive_anon:0kB active_file:10528kB inactive_file:159488kB unevictable:1580kB writepending:228kB zspages:0kB present:3129332kB managed:2559356kB mlocked:44kB bounce:0kB free_pcp:34080kB local_pcp:21896kB free_cma:0kB [ 204.400311][T11589] lowmem_reserve[]: 0 0 1 1 1 [ 204.400357][T11589] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.400416][T11589] lowmem_reserve[]: 0 0 0 0 0 [ 204.400464][T11589] Node 1 Normal free:3890360kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19500kB local_pcp:13848kB free_cma:0kB [ 204.400527][T11589] lowmem_reserve[]: 0 0 0 0 0 [ 204.400571][T11589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.400724][T11589] Node 0 DMA32: 1718*4kB (UM) 1263*8kB (UM) 218*16kB (UM) 115*32kB (UM) 61*64kB (UM) 12*128kB (ME) 11*256kB (UM) 7*512kB (M) 6*1024kB (UM) 11*2048kB (UME) 301*4096kB (M) = 1297552kB [ 204.400919][T11589] Node 0 Normal: 0*4kB [ 204.646334][T11588] geneve2: entered allmulticast mode [ 204.658446][T11589] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.668289][T11589] Node 1 Normal: 70*4kB (UE) 56*8kB (UME) 40*16kB (UME) 79*32kB (UME) 22*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890360kB [ 204.686489][T11589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.698173][T11589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.699275][ T8893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.732063][T11589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.742750][T11589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.752903][ T8893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.766874][ T8893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.778016][T11589] 43941 total pagecache pages [ 204.784921][T11589] 0 pages in swap cache [ 204.790655][T11589] Free swap = 124996kB [ 204.794931][T11589] Total swap = 124996kB [ 204.799193][T11589] 2097051 pages RAM [ 204.807496][ T8893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.826929][T11589] 0 pages HighMem/MovableOnly [ 204.856042][T11589] 425122 pages reserved [ 204.867537][T11589] 0 pages cma reserved [ 204.946748][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 205.120346][ T5832] Bluetooth: hci5: command tx timeout [ 205.319344][T11465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.856337][T11465] veth0_vlan: entered promiscuous mode [ 205.886643][T11465] veth1_vlan: entered promiscuous mode [ 205.973489][T11465] veth0_macvtap: entered promiscuous mode [ 205.984772][T11465] veth1_macvtap: entered promiscuous mode [ 206.015594][T11465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.055974][T11465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.082249][ T73] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.101982][ T73] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.112744][ T73] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.127967][ T73] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.257765][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.282314][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.326956][ T2120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.335772][ T2120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.452450][T11669] __nla_validate_parse: 3 callbacks suppressed [ 206.452468][T11669] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1588'. [ 206.588836][T11677] : entered promiscuous mode [ 206.984620][T11691] openvswitch: netlink: Multiple metadata blocks provided [ 207.059436][T11693] x_tables: unsorted entry at hook 3 [ 207.138045][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1652'. [ 207.146236][T11696] netlink: 'syz.3.1651': attribute type 4 has an invalid length. [ 207.210417][ T5832] Bluetooth: hci5: command tx timeout [ 207.290893][T11699] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1654'. [ 207.374450][T11706] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1655'. [ 207.547133][T11712] netlink: 'syz.5.1658': attribute type 1 has an invalid length. [ 207.555938][T11712] netlink: 'syz.5.1658': attribute type 3 has an invalid length. [ 207.564631][T11712] netlink: 'syz.5.1658': attribute type 7 has an invalid length. [ 207.573625][T11712] netlink: 'syz.5.1658': attribute type 8 has an invalid length. [ 207.582272][T11712] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1658'. [ 207.592229][T11712] NCSI netlink: No device for ifindex 131092 [ 207.602828][T11712] openvswitch: netlink: EtherType 50a is less than min 600 [ 207.615416][T11712] netlink: 'syz.5.1658': attribute type 21 has an invalid length. [ 207.624558][T11712] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1658'. [ 207.995583][T11735] netlink: 'syz.5.1668': attribute type 2 has an invalid length. [ 208.007260][T11738] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 208.154821][T11742] bond5: (slave ip6gretap2): making interface the new active one [ 208.167845][T11742] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 208.179394][T11742] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 208.187335][T11742] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 208.213034][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'. [ 208.314340][T11761] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1671'. [ 208.377847][T11768] sctp: [Deprecated]: syz.4.1671 (pid 11768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.377847][T11768] Use struct sctp_sack_info instead [ 208.551418][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1675'. [ 208.784043][T11772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.796312][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 208.812135][T11772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.827372][T11772] bond0 (unregistering): Released all slaves [ 209.097863][T11805] : entered promiscuous mode [ 209.245073][T11813] ksmbd: Unknown IPC event: 3, ignore. [ 209.259123][T11813] ksmbd: Unknown IPC event: 3, ignore. [ 209.280955][ T5832] Bluetooth: hci5: command tx timeout [ 209.542006][T11828] bond0 (unregistering): Released all slaves [ 209.922419][T11846] netlink: 'syz.1.1699': attribute type 29 has an invalid length. [ 210.280945][T11861] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 210.422903][T11865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.473102][T11869] siw: device registration error -23 [ 210.694628][T11878] pim6reg1: entered promiscuous mode [ 210.700898][T11878] pim6reg1: entered allmulticast mode [ 211.328754][T11911] syzkaller1: entered promiscuous mode [ 211.338377][T11911] syzkaller1: entered allmulticast mode [ 211.620819][T11927] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 211.811415][T11937] __nla_validate_parse: 10 callbacks suppressed [ 211.811434][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1733'. [ 211.827381][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 211.925079][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 211.925159][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 211.940228][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 211.946913][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.958017][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 211.982139][T11943] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1734'. [ 212.167660][T11954] netlink: 211896 bytes leftover after parsing attributes in process `syz.1.1738'. [ 212.204486][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 212.333842][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.344543][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.352884][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.362045][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.370819][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.465334][T11961] dummy0 speed is unknown, defaulting to 1000 [ 212.511335][T11972] validate_nla: 3 callbacks suppressed [ 212.511354][T11972] netlink: 'syz.1.1742': attribute type 12 has an invalid length. [ 212.530928][T11972] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1742'. [ 212.856181][T11980] x_tables: unsorted entry at hook 1 [ 212.865230][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 212.874208][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 212.965034][T11986] syzkaller0: entered promiscuous mode [ 212.992799][T11986] syzkaller0: entered allmulticast mode [ 213.019465][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 213.048714][T11961] wlan0 speed is unknown, defaulting to 1000 [ 213.412411][T12011] netlink: 'syz.1.1755': attribute type 3 has an invalid length. [ 213.607062][T12021] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 213.626890][T12021] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 213.894412][T11961] chnl_net:caif_netlink_parms(): no params data found [ 213.978849][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.986871][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.994194][T11961] bridge_slave_0: entered allmulticast mode [ 214.002035][T11961] bridge_slave_0: entered promiscuous mode [ 214.010941][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.018134][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.025460][T11961] bridge_slave_1: entered allmulticast mode [ 214.034006][T11961] bridge_slave_1: entered promiscuous mode [ 214.068668][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.081301][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.117032][T11961] team0: Port device team_slave_0 added [ 214.125046][T11961] team0: Port device team_slave_1 added [ 214.155086][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.162919][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.188926][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.202555][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.209514][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.236170][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.282642][T11961] hsr_slave_0: entered promiscuous mode [ 214.289108][T11961] hsr_slave_1: entered promiscuous mode [ 214.295586][T11961] debugfs: 'hsr0' already exists in 'hsr' [ 214.302107][T11961] Cannot create hsr debugfs directory [ 214.400036][ T5832] Bluetooth: hci6: command tx timeout [ 214.455728][T11961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.466408][T11961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.477238][T11961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.488703][T11961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.564167][T11961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.587166][T11961] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.604306][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.611494][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.626401][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.633527][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.813217][T11961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.025317][T11961] veth0_vlan: entered promiscuous mode [ 215.037122][T11961] veth1_vlan: entered promiscuous mode [ 215.065965][T11961] veth0_macvtap: entered promiscuous mode [ 215.076507][T11961] veth1_macvtap: entered promiscuous mode [ 215.097065][T11961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.111792][T11961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.127135][ T9091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.137117][ T9091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.147246][ T9091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.157261][ T9091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.225154][ T9091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.233370][ T9091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.268032][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.276175][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.480297][ T5832] Bluetooth: hci6: command tx timeout [ 218.559942][ T5832] Bluetooth: hci6: command tx timeout [ 220.640438][ T5832] Bluetooth: hci6: command tx timeout [ 261.042706][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.049100][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.712261][T12064] netlink: 'syz.6.1766': attribute type 10 has an invalid length. [ 282.798492][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.817249][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.825233][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.835909][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.844202][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.899230][T12067] dummy0 speed is unknown, defaulting to 1000 [ 283.101702][T12081] __nla_validate_parse: 4 callbacks suppressed [ 283.101722][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 283.130496][T12084] netlink: 'syz.4.1771': attribute type 11 has an invalid length. [ 283.132407][T12085] ipt_ECN: cannot use operation on non-tcp rule [ 283.162709][T12081] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 283.268380][T12067] wlan0 speed is unknown, defaulting to 1000 [ 283.432554][T12099] tipc: Can't bind to reserved service type 2 [ 283.484925][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 283.494453][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 283.515290][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 283.532873][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 283.591803][T12102] syzkaller1: entered promiscuous mode [ 283.600585][T12102] syzkaller1: entered allmulticast mode [ 283.783563][T12112] set match dimension is over the limit! [ 283.970860][T12119] IPVS: Unknown mcast interface: vcan0 [ 284.042531][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1785'. [ 284.118050][T12130] netlink: 'syz.4.1786': attribute type 7 has an invalid length. [ 284.132312][T12125] netlink: 'syz.5.1785': attribute type 10 has an invalid length. [ 284.162854][T12130] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1786'. [ 284.226387][T12138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.358074][T12146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.434209][T12146] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1791'. [ 284.468734][T12067] chnl_net:caif_netlink_parms(): no params data found [ 284.625678][T12156] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1795'. [ 284.671834][T12156] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1795'. [ 284.782296][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.797835][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.811608][T12067] bridge_slave_0: entered allmulticast mode [ 284.820810][T12067] bridge_slave_0: entered promiscuous mode [ 284.833190][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.840738][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.847996][T12067] bridge_slave_1: entered allmulticast mode [ 284.855945][T12067] bridge_slave_1: entered promiscuous mode [ 284.879757][ T5832] Bluetooth: hci7: command tx timeout [ 285.066811][T12180] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 285.101824][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.113440][T12183] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 285.148803][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.347708][T12067] team0: Port device team_slave_0 added [ 285.362618][T12192] netlink: 'syz.5.1804': attribute type 9 has an invalid length. [ 285.382822][T12067] team0: Port device team_slave_1 added [ 285.406747][T12192] netlink: 'syz.5.1804': attribute type 11 has an invalid length. [ 285.417043][T12192] netlink: 'syz.5.1804': attribute type 12 has an invalid length. [ 285.622444][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.633012][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.660164][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.706307][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.731382][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.780728][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.807011][T12216] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 285.827050][T12216] team0: Port device batadv2 added [ 285.855995][T12214] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 285.867963][T12214] team0: Port device batadv3 added [ 285.874816][T12217] bond_slave_0: Caught tx_queue_len zero misconfig [ 286.033625][T12067] hsr_slave_0: entered promiscuous mode [ 286.050761][T12067] hsr_slave_1: entered promiscuous mode [ 286.058702][T12067] debugfs: 'hsr0' already exists in 'hsr' [ 286.065372][T12067] Cannot create hsr debugfs directory [ 286.089948][T12226] syzkaller0: entered promiscuous mode [ 286.102047][T12226] syzkaller0: entered allmulticast mode [ 286.218855][T12238] netlink: 'syz.1.1815': attribute type 3 has an invalid length. [ 286.829817][T12270] openvswitch: netlink: Flow key attr not present in new flow. [ 286.861819][T12067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.874961][T12067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.964331][T12067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.972526][ T5832] Bluetooth: hci7: command tx timeout [ 287.011210][T12067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.225639][T12067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.293770][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.323503][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.330784][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.383447][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.390779][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.480922][T12308] netlink: 'syz.6.1835': attribute type 1 has an invalid length. [ 287.877918][T12327] ipt_REJECT: TCP_RESET invalid for non-tcp [ 288.211188][T12067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.454083][T12351] geneve3: entered promiscuous mode [ 288.642564][T12360] __nla_validate_parse: 17 callbacks suppressed [ 288.642584][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 288.716350][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 288.809269][T12370] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 288.835235][T12370] bond6: (slave vcan0): Error -95 calling set_mac_address [ 288.885093][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1849'. [ 289.040072][ T5832] Bluetooth: hci7: command tx timeout [ 289.080820][T12067] veth0_vlan: entered promiscuous mode [ 289.174167][T12067] veth1_vlan: entered promiscuous mode [ 289.320387][T12067] veth0_macvtap: entered promiscuous mode [ 289.350595][T12067] veth1_macvtap: entered promiscuous mode [ 289.445500][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.485224][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.554840][ T9093] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.576277][ T9093] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.612095][ T9093] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.623134][ T9093] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.760502][T12408] netlink: 'syz.5.1862': attribute type 1 has an invalid length. [ 289.781025][T12408] netlink: 'syz.5.1862': attribute type 2 has an invalid length. [ 289.811633][ T9093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.857798][ T9093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.902762][T12413] bridge51: entered promiscuous mode [ 289.908264][T12413] bridge51: entered allmulticast mode [ 289.950452][ T8893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.959516][ T8893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.378958][T12434] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1869'. [ 290.418307][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1872'. [ 290.529472][T12453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1874'. [ 291.120241][ T5836] Bluetooth: hci7: command tx timeout [ 291.619157][T12500] netlink: 'syz.1.1885': attribute type 2 has an invalid length. [ 291.632912][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1883'. [ 291.643016][T12500] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 291.653724][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 291.731919][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1887'. [ 291.864474][T12509] syzkaller1: entered promiscuous mode [ 291.890298][T12509] syzkaller1: entered allmulticast mode [ 292.108835][T12521] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1891'. [ 292.138530][T12526] openvswitch: netlink: IP tunnel dst address not specified [ 292.159006][T12525] netlink: 'syz.6.1892': attribute type 3 has an invalid length. [ 292.328396][T12534] Driver unsupported XDP return value 0 on prog (id 534) dev N/A, expect packet loss! [ 292.361335][T12538] netlink: 'syz.1.1897': attribute type 21 has an invalid length. [ 292.486116][T12538] bond7: entered promiscuous mode [ 292.492638][T12538] bond7: entered allmulticast mode [ 292.504668][T12538] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.828935][ T1112] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd7 [ 292.876872][T12557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.335243][T12589] bond8: option min_links: invalid value (18446744073709551614) [ 293.343241][T12589] bond8: option min_links: allowed values 0 - 2147483647 [ 293.351911][T12589] bond8 (unregistering): Released all slaves [ 293.668507][T12567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.695594][T12567] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 293.738081][T12567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.760724][T12609] __nla_validate_parse: 7 callbacks suppressed [ 293.760742][T12609] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1917'. [ 293.776602][T12567] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 293.790427][T12609] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1917'. [ 293.802767][T12567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.808718][T12567] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 293.906568][T12567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.921670][T12567] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 293.949472][T12567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.965230][T12567] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 294.212118][ T9946] wlan0 speed is unknown, defaulting to 1000 [ 294.218187][ T9946] syz0: Port: 1 Link DOWN [ 294.262263][T12567] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 294.268229][T12567] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 294.462589][T12567] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 294.488711][T12567] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 294.591480][T12567] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 294.617831][T12567] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 294.705799][T12654] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1929'. [ 294.742489][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1929'. [ 294.772206][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1928'. [ 294.782568][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1928'. [ 294.925362][T12664] block nbd6: not configured, cannot reconfigure [ 294.936957][T12664] nbd: illegal input index 2958377 [ 295.061888][T12669] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1932'. [ 295.072071][T12669] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 295.087747][T12671] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1932'. [ 295.098571][T12672] netlink: 'syz.7.1931': attribute type 12 has an invalid length. [ 295.108196][T12671] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 295.287533][T12679] xfrm1: entered allmulticast mode [ 295.367251][T12684] netlink: 'syz.6.1936': attribute type 10 has an invalid length. [ 295.377132][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1936'. [ 295.395276][T12684] team0: Port device geneve0 added [ 322.487917][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.495362][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.083467][ T31] INFO: task syz.2.1526:11247 blocked for more than 143 seconds. [ 348.092747][ T31] Not tainted syzkaller #0 [ 348.097706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.106407][ T31] task:syz.2.1526 state:D stack:26152 pid:11247 tgid:11246 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 348.118542][ T31] Call Trace: [ 348.121992][ T31] [ 348.124955][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.129504][ T31] ? __pfx___schedule+0x10/0x10 [ 348.134454][ T31] ? schedule+0x91/0x360 [ 348.139212][ T31] schedule+0x165/0x360 [ 348.143541][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.149035][ T31] __mutex_lock+0x7e6/0x1350 [ 348.153782][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.158581][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 348.164926][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.170042][ T31] ? stack_trace_save+0x9c/0xe0 [ 348.174937][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 348.180130][ T31] ? __kmalloc_node_track_caller_noprof+0x575/0x820 [ 348.186766][ T31] ? kmalloc_reserve+0x136/0x290 [ 348.193272][ T31] ? __alloc_skb+0x27e/0x430 [ 348.197906][ T31] ? netlink_dump+0x1b7/0xe90 [ 348.207082][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 348.239748][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 348.245718][ T31] ? netlink_rcv_skb+0x208/0x470 [ 348.275987][ T31] ? genl_rcv+0x28/0x40 [ 348.289734][ T31] ? netlink_unicast+0x82f/0x9e0 [ 348.294766][ T31] ? netlink_sendmsg+0x805/0xb30 [ 348.306588][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 348.319642][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 348.326231][ T31] ? __alloc_skb+0x27e/0x430 [ 348.339764][ T31] ? rcu_is_watching+0x15/0xb0 [ 348.344615][ T31] ? trace_kmalloc+0x1f/0xb0 [ 348.349232][ T31] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 348.369764][ T31] ? __build_skb_around+0x22d/0x3c0 [ 348.375080][ T31] ? __alloc_skb+0x2f1/0x430 [ 348.381777][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 348.386773][ T31] genl_dumpit+0x10b/0x1b0 [ 348.391534][ T31] netlink_dump+0x6e4/0xe90 [ 348.396089][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 348.401699][ T31] ? genl_start+0x499/0x6c0 [ 348.406241][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 348.412590][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 348.418333][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 348.425034][ T31] ? genl_get_cmd+0x496/0x910 [ 348.429887][ T31] ? __pfx_genl_start+0x10/0x10 [ 348.434755][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 348.439855][ T31] ? __pfx_genl_done+0x10/0x10 [ 348.444650][ T31] genl_rcv_msg+0x5da/0x790 [ 348.449158][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.454766][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 348.461375][ T31] netlink_rcv_skb+0x208/0x470 [ 348.466234][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.471317][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.476623][ T31] ? down_read+0x274/0x2e0 [ 348.481433][ T31] ? genl_rcv+0xd/0x40 [ 348.485511][ T31] genl_rcv+0x28/0x40 [ 348.489491][ T31] netlink_unicast+0x82f/0x9e0 [ 348.494374][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 348.499734][ T31] ? netlink_sendmsg+0x642/0xb30 [ 348.504709][ T31] ? skb_put+0x11b/0x210 [ 348.508995][ T31] netlink_sendmsg+0x805/0xb30 [ 348.514054][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.519352][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.524664][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.530028][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.535341][ T31] __sock_sendmsg+0x21c/0x270 [ 348.540356][ T31] ____sys_sendmsg+0x505/0x820 [ 348.545158][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.550484][ T31] ? import_iovec+0x74/0xa0 [ 348.554994][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 348.559809][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.565046][ T31] ? futex_wait+0x285/0x360 [ 348.569913][ T31] ? __fget_files+0x2a/0x420 [ 348.574547][ T31] ? __fget_files+0x3a0/0x420 [ 348.579234][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 348.584226][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.589765][ T31] ? do_syscall_64+0xbe/0xf80 [ 348.594545][ T31] do_syscall_64+0xfa/0xf80 [ 348.599053][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.605379][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.610104][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.616018][ T31] RIP: 0033:0x7fdfb8b8f749 [ 348.620719][ T31] RSP: 002b:00007fdfb9a14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.629168][ T31] RAX: ffffffffffffffda RBX: 00007fdfb8de5fa0 RCX: 00007fdfb8b8f749 [ 348.637728][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 348.646288][ T31] RBP: 00007fdfb8c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.654628][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.662720][ T31] R13: 00007fdfb8de6038 R14: 00007fdfb8de5fa0 R15: 00007ffc2b18d078 [ 348.671031][ T31] [ 348.674175][ T31] [ 348.674175][ T31] Showing all locks held in the system: [ 348.682620][ T31] 1 lock held by khungtaskd/31: [ 348.687488][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 348.697450][ T31] 2 locks held by getty/5584: [ 348.702289][ T31] #0: ffff88814d4b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 348.712243][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 348.722903][ T31] 5 locks held by kworker/u8:16/7155: [ 348.728317][ T31] 3 locks held by kworker/0:11/9170: [ 348.733810][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 348.744878][ T31] #1: ffffc9001c43fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 348.758651][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 348.770197][ T31] 2 locks held by syz.0.1324/10598: [ 348.775407][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 348.784740][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 348.795039][ T31] 3 locks held by syz.2.1526/11247: [ 348.800499][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 348.808689][ T31] #1: ffff8880202e26f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 348.819205][ T31] #2: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 348.829776][ T31] 1 lock held by syz-executor/11465: [ 348.835065][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 348.845195][ T31] 3 locks held by syz.3.1752/12009: [ 348.850597][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 348.858820][ T31] #1: ffff88807fb856f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 348.869395][ T31] #2: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 348.883298][ T31] 2 locks held by syz.5.1901/12557: [ 348.888499][ T31] #0: ffff88807c801100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 348.898402][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 348.908641][ T31] 2 locks held by syz.4.1905/12567: [ 348.913928][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 348.924162][ T31] #1: ffff88807c801100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 348.933188][ T31] 3 locks held by syz.1.1924/12642: [ 348.938378][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 348.946876][ T31] #1: ffff888032fba100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 348.956497][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 348.966564][ T31] 1 lock held by syz.7.1934/12677: [ 348.971788][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 348.980355][ T31] 1 lock held by syz.6.1938/12690: [ 348.985491][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 348.994046][ T31] 1 lock held by syz-executor/12697: [ 348.999351][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 349.007871][ T31] 1 lock held by syz-executor/12698: [ 349.013202][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 349.021714][ T31] 1 lock held by syz-executor/12701: [ 349.027010][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 349.035532][ T31] 1 lock held by syz-executor/12704: [ 349.045364][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 349.053991][ T31] 1 lock held by syz-executor/12705: [ 349.059289][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 349.067946][ T31] [ 349.075705][ T31] ============================================= [ 349.075705][ T31] [ 349.084225][ T31] NMI backtrace for cpu 1 [ 349.084240][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 349.084255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.084263][ T31] Call Trace: [ 349.084268][ T31] [ 349.084274][ T31] dump_stack_lvl+0x189/0x250 [ 349.084297][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.084314][ T31] ? __pfx__printk+0x10/0x10 [ 349.084342][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 349.084364][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 349.084384][ T31] ? __pfx__printk+0x10/0x10 [ 349.084407][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.084430][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 349.084450][ T31] sys_info+0x135/0x170 [ 349.084465][ T31] watchdog+0xf95/0xfe0 [ 349.084488][ T31] ? watchdog+0x20a/0xfe0 [ 349.084528][ T31] kthread+0x711/0x8a0 [ 349.084553][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.084570][ T31] ? __pfx_kthread+0x10/0x10 [ 349.084589][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.084609][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 349.084622][ T31] ? __pfx_kthread+0x10/0x10 [ 349.084640][ T31] ret_from_fork+0x599/0xb30 [ 349.084655][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 349.084675][ T31] ? __switch_to_asm+0x39/0x70 [ 349.084692][ T31] ? __switch_to_asm+0x33/0x70 [ 349.084708][ T31] ? __pfx_kthread+0x10/0x10 [ 349.084726][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.084755][ T31] [ 349.084761][ T31] Sending NMI from CPU 1 to CPUs 0: [ 349.234575][ C0] NMI backtrace for cpu 0 [ 349.234593][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 349.234612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.234623][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 349.234646][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 349.234662][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 349.234678][ C0] RAX: fdcff1b8e91e3800 RBX: ffffffff81978fda RCX: fdcff1b8e91e3800 [ 349.234692][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 349.234704][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 349.234717][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 349.234730][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 349.234742][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 349.234756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.234768][ C0] CR2: 000055703b7f9000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 349.234788][ C0] Call Trace: [ 349.234795][ C0] [ 349.234801][ C0] default_idle+0x13/0x20 [ 349.234821][ C0] default_idle_call+0x73/0xb0 [ 349.234843][ C0] do_idle+0x1ea/0x520 [ 349.234861][ C0] ? irqentry_exit+0x5ba/0x660 [ 349.234881][ C0] ? __pfx_do_idle+0x10/0x10 [ 349.234910][ C0] cpu_startup_entry+0x44/0x60 [ 349.234929][ C0] rest_init+0x2de/0x300 [ 349.234952][ C0] start_kernel+0x3a7/0x400 [ 349.234974][ C0] x86_64_start_reservations+0x24/0x30 [ 349.234997][ C0] x86_64_start_kernel+0x143/0x1c0 [ 349.235018][ C0] common_startup_64+0x13e/0x147 [ 349.235051][ C0] [ 349.415731][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 349.422616][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 349.431718][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.441809][ T31] Call Trace: [ 349.445114][ T31] [ 349.448063][ T31] dump_stack_lvl+0x99/0x250 [ 349.452661][ T31] ? __asan_memcpy+0x40/0x70 [ 349.457246][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.462443][ T31] ? __pfx__printk+0x10/0x10 [ 349.467045][ T31] vpanic+0x237/0x6d0 [ 349.471027][ T31] ? __pfx_vpanic+0x10/0x10 [ 349.475537][ T31] ? preempt_schedule_common+0x83/0xd0 [ 349.481003][ T31] panic+0xb9/0xc0 [ 349.484722][ T31] ? __pfx_panic+0x10/0x10 [ 349.489160][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 349.494537][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 349.500726][ T31] watchdog+0xfdf/0xfe0 [ 349.504899][ T31] ? watchdog+0x20a/0xfe0 [ 349.509235][ T31] kthread+0x711/0x8a0 [ 349.513305][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.517987][ T31] ? __pfx_kthread+0x10/0x10 [ 349.522578][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.527785][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 349.533009][ T31] ? __pfx_kthread+0x10/0x10 [ 349.537602][ T31] ret_from_fork+0x599/0xb30 [ 349.542197][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 349.547327][ T31] ? __switch_to_asm+0x39/0x70 [ 349.552091][ T31] ? __switch_to_asm+0x33/0x70 [ 349.556853][ T31] ? __pfx_kthread+0x10/0x10 [ 349.561446][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.566236][ T31] [ 349.569884][ T31] Kernel Offset: disabled [ 349.574210][ T31] Rebooting in 86400 seconds..