last executing test programs: 2m2.939734379s ago: executing program 1 (id=2884): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x300}, 0x8) 2m2.754039896s ago: executing program 1 (id=2886): socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x7d, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xbc9d}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x7, 0xad9}, &(0x7f0000000280)=0xc) socket$alg(0x26, 0x5, 0x0) close(0x4) 2m1.591796774s ago: executing program 1 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r3, 0xffffe000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m1.357690534s ago: executing program 1 (id=2891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffd}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003c00)=@newchain={0x24, 0x64, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xe, 0x6}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x4c8d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x1, 0x12) accept4(r5, 0x0, 0x0, 0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x13}, 0x2c) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x2, 0x20000000) 1m51.591694872s ago: executing program 3 (id=2942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000540)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffdff, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m51.200341674s ago: executing program 0 (id=2944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r4, 0x25, 0x4, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x11ba, &(0x7f0000001680)=ANY=[], 0x0) (async) syz_emit_ethernet(0x11ba, &(0x7f0000001680)=ANY=[], 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x40000022) (async) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x40000022) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) 1m50.987991143s ago: executing program 0 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0xc, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 1m50.913897959s ago: executing program 0 (id=2946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000005180100002020642500000000002020207b1af8ff000000bfa100000000003a16178900f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000001a1210830000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028000000000000000000000000000000006401010000d45a0000000000000000002c003000"], 0x38}}, 0x40408c0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000500)) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000240)="59806e8f6920cb8dec62488be6eb23044a1c", 0x12) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x6f3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x520, r11, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x1, 0x9, 0x8, 0x3}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x6}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x350}], @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x3d4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd5, 0x3, "28aba16f5f099bcc4421eb7e24ef5733ff57178caeff44df5f5bb0fd13295c0d9cb3e3e2e104b80681e406e553dc66536cea6203dc4dd920ce428e68eb266d4f1f5e1ff3760732f16696c1db8bde71c4a67a47ebe7019c99ef2a1a78ca409532ceffd446265bdcb2b82005eb43fab664c4b071fbc3b70d4757ef374c8601270b55218b53383db26964d6d90b210e71094ac3ca4385e6a54b68870f467b78d47194f89b6a8b1347a2ef98d7f8fa6e740b2fa985f0c4fde219133d128dfcc00baf0eb7301ae866abb586f33265cc22d476a5"}, @NL80211_FTM_RESP_ATTR_LCI={0xc7, 0x2, "82d175abded71d02cdffe94c654ae631491e673c63c14a9d0527b06c7fe0384e8e679e3a008f24e418c7aaa1101a74523640d555a7f0e1470f3e6a849e14c05efefb3383bada44f302c3b9e79e1a7f33bd95c1e6780c5ab4516d37bb84e73323ca69fbd377bf7fc79405e37821ef3ba02d2feb61d50d83d45555beb21bd771643bc92565fd7457ae2b8a1373c52a126794df340e38e9a32f8acdde2a1ba8a35cd4ce2a51e69ad2c64e2ccf3ea168ecfc2c1f7357f36b467262c55511ac37acbc74c1d6"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "a47d8d8aeeb6b42fc3924ebe5bba30df784814ff491b801163e32f6f96ea8926b42e18dc548ce5c6a62fb0b27983318c660de1b3770eb26d40489ea09cff1128177d96bf7016af0e6451807341976f63625ce1e48c26b4935983780e364c3f2e1300cd1ead5b4ffb78fbb4338dbc327fa433dc9b08a880603cf465b909f8485748f62a16672b4f25f8e34582"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "477826e963e20b8c5517dbf499bb221cf74a15d36f5f6f770513da63d9fdedae367e54d1370b33367832138554fd00f72d1224733da95cb5a389eccc8aad82a19f"}, @NL80211_FTM_RESP_ATTR_LCI={0xf1, 0x2, "8f32226146b0cb3eb0c10c2061a9deb9d40fa5c3002632398ed31aef420dcb6faedb431ad89691c0e54887b36a9d230a82b21e26f1354f06ec68758c8a50a459dd0b19fef0edffdf4d8e3a5b26ce393268cf72694d4f4dd6262adc9461d43db5de7b37b3a08e87aef26019f02a7817431953bfaf0d085bece2c01ca5166117967497fceb1509045cfec66df8d4c8a42b317c727cab576ed799f0921c8f7563388a88b0f4996b4037d44dc501b35e07546e5932dbdd6eed81de4668f72aad209aa4c21d9f5ccdce1c4ea7925f574948f0176178f9c16b8f9cd7826361d6fdaa789538be7ba0a88fbe51f3a60877"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "949268859642d2827138dcdf6f7ecee0cf4e676940baa1f82b8687d6073e7d16981d02f935a93f442b13d98c4cce258a952b15b2afc35590703cb6d083e8c6ef2eec4f730020f918a5674870802675d41dc0637ab19287f31f2f"}]}, @NL80211_ATTR_BEACON_TAIL={0xb8, 0xf, [@challenge={0x10, 0x1, 0x7a}, @perr={0x84, 0x95, {0x4, 0x9, [{{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x24}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x27}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x2c}, {{}, @device_b, 0xe, @void, 0x9}, {{}, @broadcast, 0x8, @void, 0x2a}, {{}, @device_a, 0xb5, @void, 0x41}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0xff}, {{}, @device_a, 0xf, @void, 0xf}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @erp={0x2a, 0x1}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}]}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x520}}, 0x7c94bd3909ab1a85) 1m49.915212792s ago: executing program 0 (id=2950): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1m49.474056096s ago: executing program 0 (id=2953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, 0x0, 0x0, 0x48000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 1m49.173226029s ago: executing program 0 (id=2956): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256-generic)\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000031b00030000000000000004001c007400111f561fe7839e31b4c194e6adcae7717e990258bcccdd3c32752833c1c9230772ddf7f60783a5829d2c94bbe8092ec0c22fc77ab9a7537b32274e761fb9e4da8b1544e740c92953caa025a8f3dbc6ed445fb365c8ffd8deebb8dac9d6f22fab82ed6d9751c9b3afb522f154b419ee9a45c86ceba454f92c8c3eafd4a156a4f8c35c99a503bc36d29aecad210f75fc663139d49135f7c8071230c478d7e00a13ac78bfb9ef700972ed6084d046de4a859ef3324c5b07f4836851b6aaddf25d0524bb20398877ce7c9e77048b370080ec347f2c7fbb1f1ea5f495776d041b323227156790", @ANYRES16=r2, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40000080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) epoll_create1(0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$alg(0x26, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m49.095354981s ago: executing program 1 (id=2904): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000540)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffdff, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="dc0100028289ff8c24672305e230b9b1c317", @ANYRES16=r4, @ANYBLOB="20002cbd7000ffdbdf250600000008000300", @ANYRES32, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000010) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0xc4, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x6, 0x3, 0x0, 0x3fa, 0x0, 0x1, 0x1, 0x1}, 0x409, 0x0, 0x52}}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x2c, 0x4c, [0xfac01, 0xc, 0xfac0e, 0xfac06, 0xb, 0xfac0c, 0xfac12, 0xfac02, 0xfac0b, 0xfac12]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x1, 0x56c7, 0x7f, 0xfffc}}}, @NL80211_ATTR_IE={0x31, 0x2a, [@cf={0x4, 0x6, {0x65, 0x91, 0x1, 0x7}}, @dsss={0x3, 0x1, 0x78}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x5}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val=0x1, @val=0x15, @val="d1363df19529b3d59a6c164437157ff8"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0xc4}}, 0x40010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) 1m49.05787001s ago: executing program 2 (id=2957): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback, 0x0, 0x4}, 0x20) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 1m48.221234802s ago: executing program 1 (id=2958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x942}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x40f00, 0x12, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x8e6b, 0x1188}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x54}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r1) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x128, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2a}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x24, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40408c1}, 0x20000020) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000880)) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m48.21670426s ago: executing program 3 (id=2959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="94010000100013070000000000000000ffffffff0000fcaa000000fb0000003442bd6e000000000000c0400000000001000000004e230080000000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000000000000000000094080000000000000000000000000000000000000000000000000080eb04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000"], 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m48.022822284s ago: executing program 2 (id=2961): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x2, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x4, 0x400) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001080)={0x0, 0x4}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001100)=@sack_info={r3, 0x0, 0x7ff}, 0xc) (async) connect$inet(r1, &(0x7f0000001140)={0x2, 0x4e21, @remote}, 0x10) (async) recvfrom$llc(0xffffffffffffffff, &(0x7f0000001180)=""/4096, 0x1000, 0x20, &(0x7f0000002180)={0x1a, 0x335, 0x3, 0xd3, 0x6, 0xd, @multicast}, 0x10) unshare(0x44000500) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000021c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x200080, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xee01) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002240)={r3, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}, 0x80, 0x2, 0xa, 0x6, 0x4, 0x0, 0xc}, &(0x7f0000002300)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000002340)={r7, 0x1000, "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"}, &(0x7f0000003380)=0x1008) (async) getsockopt(r6, 0x1, 0x0, &(0x7f00000033c0)=""/4096, &(0x7f00000043c0)=0x1000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004440), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x14}}}}, [""]}, 0x30}}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000004580)={r7, 0x4}, &(0x7f00000045c0)=0x8) (async) pipe(&(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x18, 0x1409, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x41) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004740)={'bridge0\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000047c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x34, r13, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x4, @l2={'ib', 0x3a, 'geneve0\x00'}}}}, [""]}, 0x34}}, 0xc4) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r14, 0x400448dc, &(0x7f00000048c0)="481195f9d389ca0c0848558b5bbc7459bc996506efa28c1b94b1cfa050902d0908a14b9004404c8ed39c90f6b055633a9d0dbc48d1705c250ff6d6e788ecd01fce24e8e619660c8bc18adc90213ff31a63f9ea7aa5cb034e03663d22c8aaa36c33379f210105d8b75b431c630bf80e4d8d8bd18cc4db2b9fb1c4d0a10c6ba987a143a33458cfb09c7a173923cf1e0fab40f1a970a0ab090517362212a4fce33d853770903e3939fe6eda0d9c9f2965fb02597ea2d8cf07236298") (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)=@deltclass={0x6c, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xa, 0x8}, {0x5, 0xfff2}, {0xe, 0xf}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8e, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0xdc, 0xf}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m45.652182976s ago: executing program 3 (id=2962): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1m45.01371898s ago: executing program 2 (id=2963): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt(r1, 0x84, 0x82, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000065feffff70000000001105000000ffffffff05000000070000130000000001000000050000000700000004000000aaffffff0000000001000000d880000001000000010000eb070000000100000003000000681e0000040000000300000007000000020000000300000003000000020000000000032fc5bae6562c46a047127d29555c675b567c431670e4e45c0f0affd3b8a2b642f44348781afba0b8da3bb207b36b16346718d5411cb0e0b735fa7d83ea87fa3a7ec10042ad67428aadccfd2be63bb1f59bb09d8e6e60d74153aa73ba106abb9a4f30e9"], 0x0, 0x8a, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) 1m43.542629564s ago: executing program 3 (id=2964): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x2}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r5, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$ax25(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa39f4379bdc8fcaf}, ["", "", "", "", ""]}, 0x1c}}, 0x8040) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000123d5bd7000fedbdf25077a0000", @ANYRES32=r4, @ANYBLOB="40004c070a0002000180c200000200000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1m40.710881257s ago: executing program 3 (id=2965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208", 0x29}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1m40.273733288s ago: executing program 2 (id=2966): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12404400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48094}, 0x4000000) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x48}}, 0x24040804) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30000008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-[\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x8000) 1m39.417902019s ago: executing program 3 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbaaaaaaaaaaa8fae8d747c1186dd60f4adf700082c00fe80000000000000000000001c7c98decbfe2df0b3304efe5f00000000ff0200000000000000000000000000018100"], 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x89a0, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180)=0x100, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x9}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}], 0x2c) 1m38.679690358s ago: executing program 2 (id=2968): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000540)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffdff, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="dc0100028289ff8c24672305e230b9b1c317", @ANYRES16=r4, @ANYBLOB="20002cbd7000ffdbdf250600000008000300", @ANYRES32, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000010) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0xc4, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x6, 0x3, 0x0, 0x3fa, 0x0, 0x1, 0x1, 0x1}, 0x409, 0x0, 0x52}}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x2c, 0x4c, [0xfac01, 0xc, 0xfac0e, 0xfac06, 0xb, 0xfac0c, 0xfac12, 0xfac02, 0xfac0b, 0xfac12]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x1, 0x56c7, 0x7f, 0xfffc}}}, @NL80211_ATTR_IE={0x31, 0x2a, [@cf={0x4, 0x6, {0x65, 0x91, 0x1, 0x7}}, @dsss={0x3, 0x1, 0x78}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x5}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val=0x1, @val=0x15, @val="d1363df19529b3d59a6c164437157ff8"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0xc4}}, 0x40010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) 1m33.883109964s ago: executing program 32 (id=2956): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256-generic)\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000031b00030000000000000004001c007400111f561fe7839e31b4c194e6adcae7717e990258bcccdd3c32752833c1c9230772ddf7f60783a5829d2c94bbe8092ec0c22fc77ab9a7537b32274e761fb9e4da8b1544e740c92953caa025a8f3dbc6ed445fb365c8ffd8deebb8dac9d6f22fab82ed6d9751c9b3afb522f154b419ee9a45c86ceba454f92c8c3eafd4a156a4f8c35c99a503bc36d29aecad210f75fc663139d49135f7c8071230c478d7e00a13ac78bfb9ef700972ed6084d046de4a859ef3324c5b07f4836851b6aaddf25d0524bb20398877ce7c9e77048b370080ec347f2c7fbb1f1ea5f495776d041b323227156790", @ANYRES16=r2, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40000080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) epoll_create1(0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$alg(0x26, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.471053769s ago: executing program 2 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1180, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'b', ' *:* ', 'rwm\x00'}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4000854) r6 = socket$kcm(0x2, 0xa, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080003000000000014000000456d00300066000107"], 0x3e) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m32.984430782s ago: executing program 33 (id=2958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x942}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xb9, &(0x7f0000000240)=""/185, 0x40f00, 0x12, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x8e6b, 0x1188}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x54}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r1) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x128, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2a}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x24, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40408c1}, 0x20000020) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000880)) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m24.000746907s ago: executing program 34 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbaaaaaaaaaaa8fae8d747c1186dd60f4adf700082c00fe80000000000000000000001c7c98decbfe2df0b3304efe5f00000000ff0200000000000000000000000000018100"], 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x89a0, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180)=0x100, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x9}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}], 0x2c) 1m17.521827736s ago: executing program 35 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1180, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'b', ' *:* ', 'rwm\x00'}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4000854) r6 = socket$kcm(0x2, 0xa, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080003000000000014000000456d00300066000107"], 0x3e) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.280956971s ago: executing program 6 (id=3178): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) r2 = accept(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000180)=0x80) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x14c, 0x12, 0x200, 0x70bd25, 0x25dfdbfb, {0x28, 0x83, 0xe2, 0x0, {0x4e22, 0x4e23, [0xfffffffe, 0x3, 0x4, 0xa], [0x1, 0x8, 0x1, 0x3], 0x0, [0xf9df, 0x5300ef1e]}, 0xfffffeff, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "6fe601bc4067362c19dcddeed06273ea13540a9fa51dbc997a3dfe4b1dbe771553e8fcf3e8e60d940cf285c2143a9ba47884da85f61bd3d09eb9c51042a916dc868982a98594eef307ed2c5f87c8fe48506ddcef4dbffac434c3d855c41775ebbd463e091f77717f46f94e8dda52bcc2de4630806c5776eb9e8b117d4814827171ab16b1733293552d909fac720470b9dcc21a0f689f59173200eb3d991e610f41b4d7b4a641de414f365accc8570bec2b93963c53074da069c36cf119f7e91ca81f3c0b6d180db52c0edca4755cf4a8f35e24694c2d8c981e598c27432e50bc5e39064d5d368084c102f899c55f4baf59f026f641d4aefcbf546ce9"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='f2fs_update_extent_tree_range\x00', r0}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 6.159300395s ago: executing program 5 (id=3179): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x20008004) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8, 0xa298bcafe42cc1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0xf00000000000000) 5.778714954s ago: executing program 6 (id=3181): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 5.587424597s ago: executing program 6 (id=3182): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a0006e925541300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+60000, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="01003c009000000076f7df0000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001340)=""/103) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.004706388s ago: executing program 6 (id=3186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0400f9f40700090401802a202000000000000000002e7ee24d0d000800", 0x24) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000040) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r9, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x800) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2.963894822s ago: executing program 5 (id=3187): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012"], 0x54}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x4}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xf6, 0x3, 0x8, 0xb, 0x1, 0xca2b, 0xc, 0x800, r3}, 0x20) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4081, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x10, 0xffff, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @eol, @timestamp={0x8, 0xa, 0x1000, 0xd}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.787364326s ago: executing program 7 (id=3190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r7, &(0x7f00000008c0)}, 0x20) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) close(0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 2.7574177s ago: executing program 4 (id=3191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x80000000, @remote, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r11, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r11, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) 2.664827707s ago: executing program 7 (id=3192): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 2.583545284s ago: executing program 5 (id=3193): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff85000000060000008510000004007c"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r5], 0x0, 0x10, 0x7fffffff}, 0x94) socket$kcm(0x10, 0x2, 0x0) 2.549564758s ago: executing program 7 (id=3194): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a2e97186202828aaf47ae6ea7e50fc25a3afaadf4724c3ad6df04b81c583ead044cdb019791e9cb975e2034109f40c348e778c1e935a9296f11ad5ebde95d03ee42a5a99ca9a44b21a9bb5418ac35cad00b5185562468f7816bbf30068ff6557fd557c2094ef67", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000080)=0x5, 0x4) connect$caif(r4, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x8}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r2}, 0x38) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x0, 0x0, 0x0, 0x7a000000}, 0x4040000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="66696c746509000000000000000000000000000000000000000000000000000004"], 0x68) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002000010000004300fbdbdf2504001780"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000001000000080000000000000000ed921ae1c4c7f9d46c558c592c00002020704a000000007300000000bfa100000000000007010000f8ffffffb7020000ce7239d31d4d0240d95c08000000b7030000ff0700000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) r8 = socket(0x9, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0x10}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbe9b5540000ea07ff722b", 0xe, 0x48000, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r10, 0x29, 0x1, 0x63, 0x7, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8000, 0x1, 0x9, 0x8}}) 2.212434224s ago: executing program 4 (id=3195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaab0aaaaff99a7ffffff86dd60169b52630000000c2b00000000000000000000009998cd020000fe8020000000000000000000000000aa00000000000c907801"], 0x0) 1.947983358s ago: executing program 4 (id=3196): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a0006e925541300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+60000, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="01003c009000000076f7df0000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001340)=""/103) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.854313879s ago: executing program 7 (id=3197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0xac1414aa}, "b00000000018276c"}}}}}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c3796364a00030425bd7127f68866df658a1507", @ANYRES32=0x0, @ANYBLOB="0085000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@bloom_filter={0x1e, 0x7ff, 0x6, 0x40, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x1b, &(0x7f0000000f00)=@raw=[@ringbuf_query, @map_fd={0x18, 0x3}, @alu={0x4, 0x1, 0x8, 0x5, 0xe, 0x30, 0x1}, @map_fd={0x18, 0x5}, @tail_call, @tail_call, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @ringbuf_query, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000001000)='GPL\x00', 0x40, 0x13, &(0x7f0000001040)=""/19, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000010c0)={0x4, 0x3, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff, 0x1, r8], &(0x7f0000001240)=[{0x2, 0x4, 0x9, 0x1}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x26c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7a91, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xc4, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x1, @broadcast, 0x5, @value=@broadcast, 0x4, 0x1, @device_b, 0xc82}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @link_id={0x65, 0x12}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x8, 0x4, @broadcast, 0xd, 0x2}}, @tim={0x5, 0x50, {0xcf, 0x23, 0x3, "a8ff07f4a7f36454662fdfd5b89b486a5d348fa44229d2cecf44200995c01aaa2acd185e754324c0f651465636b9a71951d73a741829f17f3fdd3ceb1ed7ffe8b545df845dc7d86ae8d4ee6c11"}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x140, 0x84, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x5c6d}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8eb}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="021aefd3673ed657e2889c867c0cc1caeb8fb2c3b9622294cdaf"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xaf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xe90}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="d29af1153fb7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x6a682b90}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffb}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x10, 0x0, @random="774287f5b5ac1be88a8f5d1e"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1000}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20044040}, 0x8c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r13, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000804}, 0x54400) r14 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r14, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000e00)={0xe4, 0x10, 0x50d, 0x3, 0x0, "", [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x1}, @typed={0xa5, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}, @nested={0x24, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xb, 0x6e, 0x0, 0x0, @str='batadv\x00'}]}]}, 0xe4}], 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x1ff, [{0x9, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x65, 0x3}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000009c0)=""/136, 0x44, 0x88, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r9, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000c00)='%pK \x00'}, 0x20) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0xc, &(0x7f0000000700)=@raw=[@ldst={0x3, 0x3, 0x3, 0x1, 0x6, 0x40, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x9, 0xe, 0x9, 0x3, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xa, 0x9, 0x2, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0xc0b, 0x0, 0x0, 0x41000, 0x20, '\x00', r12, 0x0, r15, 0x8, &(0x7f0000000ac0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x7, 0x206a, 0x7f}, 0x10, 0x2096f, r4, 0x0, &(0x7f0000000d00)=[r9, r16, r17, r9], 0x0, 0x10, 0x10000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', r12, 0x4, 0x1, 0x4, 0x4, 0x3b, @rand_addr=' \x01\x00', @empty, 0x1, 0x7800, 0x7, 0xf1f}}) 1.570948035s ago: executing program 5 (id=3200): r0 = socket$inet(0x2, 0x1, 0x100) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r1, 0x0, 0x0, 0x80000) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r0, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x818, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff4e}, 0x94) 1.407294006s ago: executing program 7 (id=3201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000002c0)=0x7, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000280)=0x8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8915, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) write$tun(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r11, 0xffffffffffffffff}, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/111, 0x6f}], 0x1, 0xfffffff9, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffff00001000000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 1.288179713s ago: executing program 4 (id=3203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfffffffffffffffc, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r3, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@local, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x2, 0xde3a, 0x48, @private2, @rand_addr=' \x01\x00', 0x80, 0x0, 0x6, 0xd561}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x2, 0x6, {{0x39, 0x4, 0x3, 0x8, 0xe4, 0x68, 0x0, 0x8e, 0x4, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0xb, 0xbd, [@broadcast, @local]}, @ssrr={0x89, 0x17, 0xc8, [@multicast2, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x13, 0x65, [@empty, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x7, [{@remote, 0x4}, {@empty, 0x4}]}, @generic={0x44, 0xf, "01a2669016c49302ea6f56b96c"}, @cipso={0x86, 0x16, 0x1, [{0x6, 0xd, "fdf6c296d5a22aaa9d58aa"}, {0x0, 0x3, 'G'}]}, @ssrr={0x89, 0x17, 0xa, [@remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback]}, @timestamp_prespec={0x44, 0x44, 0xea, 0x3, 0x3, [{@broadcast, 0xfff}, {@rand_addr=0x64010101, 0x6}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0x8}, {@loopback}, {@remote, 0x1}, {@private=0xa010101, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x80000001}]}}]}, 0x40}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x298, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5627}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xf2, 0x20, 0x4, 0xfbcf}, {0x2, 0xcc, 0x0, 0x10001}, {0x4, 0xfc, 0x1}, {0x5, 0x4, 0x8, 0x27}]}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x298}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a010400000000000000000200000058000480540001800b00010065787468647200004400028005000200830000000800034000000000080004400000003208000640000000020800014000000008080005400000000108000540d052aec108000640000000020900010073797a30000000000900020073797a32"], 0x6034}}, 0x0) 1.211491357s ago: executing program 8 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x0, 0x12, 0x0, &(0x7f0000000380)="e0920040abf967c71a", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r7, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYRES16=r2, @ANYRES64, @ANYRES32=r0], 0x6f4}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r10 = gettid() ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000400)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x70, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x4d}}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0xae, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x8, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x651, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x3, 0x87, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xfc8, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xcf, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x8, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x3, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x9, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x6, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffff, 0x81, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x4000002, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x402, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x9, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x5, 0x4, 0x4, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x47ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x9, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x3, 0x1ff, 0xc89c, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x7, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x7, 0x3, 0x1, 0x132c, 0x4, 0x8, 0xe, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x16, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x7f, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x40000003, 0x9c7, 0x2000001, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x6, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x5, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0xbb2e}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x78, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x78}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x51b6, 0x5, 0x8c, 0x8}, {0xb5, 0x1, 0x29, 0x7fff}, {0x3, 0x0, 0xfa}, {0x3, 0x6, 0x0, 0x5}]}, 0x10) 1.157980605s ago: executing program 6 (id=3206): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480), 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0x9, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) write(r0, &(0x7f00000000c0)="4b0003000000", 0x6) 1.010805707s ago: executing program 4 (id=3207): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a0006e925541300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESDEC], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+60000, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="01003c009000000076f7df0000000000", @ANYRES32=r12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r12, @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x24040811}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001340)=""/103) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 624.573782ms ago: executing program 8 (id=3208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) unshare(0x26020480) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xeb0, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r8, 0x9, 0x1, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@fallback=r5, r0, 0x2f, 0x2014, 0x0, @value=r6, @void, @void, @void, r9}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4dbc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xb4c, 0x0, 0x0, 0x40f00, 0x8, '\x00', r4, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r7, r1, r8], &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x3}], 0x10, 0xfffffffa}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 603.729922ms ago: executing program 5 (id=3209): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1c, 0x401, 0x7fe00, 0x5, 0x2, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x49) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x1}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x1}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x504) 477.384673ms ago: executing program 6 (id=3210): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff85000000060000008510000004007c"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r5], 0x0, 0x10, 0x7fffffff}, 0x94) socket$kcm(0x10, 0x2, 0x0) 379.52591ms ago: executing program 5 (id=3211): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009bc83f422a66f37886a4670a16ee233f4ed238c3b4489535f5d629ab00cad731561c111017b5d78ab375f768690c107d95ed316096354e75fdf79c7f5d8b17862f3ba376fd5a6747ec6a0d2ec4a4c23c3d02d23787209e4ff276fc42d8c6db7c3b4292df3d9e98d28976491adf21246c1de93dfc43b4473687a4998bde017c7704f40136d80d8af0f2be644a20a99edacb4b90a4c333b5acca2f4a887a8385db36df796cd5ceacd3d516d7dff232fc105dd1dfca1c947b6902c42fe8a58fa9668bf1639ab7a12b31790557150bca380e624a5025984aa38cb4eb98af6c2f8997de557b540f9708470b64cd4e9e97b6b11d7bd77d3ee2a71b947f507fa5e139225e8f059f9787a83c7189179d9bad385defac953951ded018e9cb2eb773e75d6c8bb007b37676cf419d35b115dd50878c41c9477b8db94f7b384f15ae3c113abe79547f75ae9cea3089ddeabe3e65"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x8) close(r3) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x1, 0x1000, 0x5, 0x800c2, r3, 0x10, '\x00', 0x0, r3, 0x5, 0x0, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="14000000236dec5f6e0000000600000082800100", @ANYRES32=r5, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000200"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x50) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) getsockopt$rose(r6, 0x104, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="3cf6123f", 0x4}], 0x1}, 0x24000000) r8 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x0, 0x99, {0xfffffffe, 0x54}}}}}, 0x3}, 0x1, 0x0, 0x0, 0xd0}, 0x2040011) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x7, 0x1, 0x12, @empty, @empty, 0x8, 0x10, 0x82}}) sendmsg$nl_route(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000019005200040026bd7000fcdbdf250a00000100", @ANYRES32=r9, @ANYBLOB="00000500ef980000000003000000000000000200bf000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYRESDEC=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x8b, &(0x7f0000000340)=""/139, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a38bf4c6de28503000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900080000007a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a07000000000000000073797a3000000000380003803400008028000180230001", @ANYRES64=r0, @ANYRES8=r10], 0xf0}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 374.51074ms ago: executing program 8 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107000000000000000006000000060001002b000000"], 0x1c}}, 0x0) 301.995627ms ago: executing program 8 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x144}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040100}, 0x20000041) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x1, 0xc8, 0x9, 0x2700}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x38}}, 0x0) 284.493237ms ago: executing program 4 (id=3214): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a0006e925541300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r12, @ANYRES64=r13/1000+60000, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="01003c009000000076f7df0000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001340)=""/103) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 120.164303ms ago: executing program 8 (id=3215): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 31.332978ms ago: executing program 7 (id=3216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)="f5a7933a00"/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x40048a4) 0s ago: executing program 8 (id=3217): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0400f9f40700090401802a202000000000000000002e7ee24d0d000800", 0x24) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000040) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r9, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x800) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) kernel console output (not intermixed with test programs): 16 bytes leftover after parsing attributes in process `syz.1.2418'. [ 549.080773][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 549.270323][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2418'. [ 549.312363][T15575] vlan1: entered promiscuous mode [ 549.330089][T15575] bond0: entered promiscuous mode [ 549.565045][T15596] syzkaller0: Caught tx_queue_len zero misconfig [ 549.602113][T15598] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2420'. [ 549.630616][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2423'. [ 549.732173][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 550.051704][T15611] Set syz1 is full, maxelem 65536 reached [ 550.068464][T15608] xt_hashlimit: size too large, truncated to 1048576 [ 550.270010][T15624] Set syz1 is full, maxelem 65536 reached [ 550.584962][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 550.610956][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 551.223344][T15657] Set syz1 is full, maxelem 65536 reached [ 551.227982][T15659] netlink: 'syz.1.2439': attribute type 1 has an invalid length. [ 551.260671][T15656] netlink: 'syz.0.2440': attribute type 1 has an invalid length. [ 551.295691][T15659] bond11: (slave veth25): Enslaving as an active interface with a down link [ 551.403277][T15661] bond12: (slave veth29): Enslaving as an active interface with a down link [ 551.430640][T15663] bond11: (slave veth27): Enslaving as an active interface with a down link [ 551.522299][T15667] bond12: (slave veth31): Enslaving as an active interface with a down link [ 551.570428][T15659] 8021q: adding VLAN 0 to HW filter on device bond11 [ 551.602055][T15656] 8021q: adding VLAN 0 to HW filter on device bond12 [ 551.799759][T15671] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 551.806334][T15671] syzkaller1: linktype set to 260 [ 552.309226][T15699] rdma_rxe: rxe_newlink: failed to add bond0 [ 554.470056][T15729] __nla_validate_parse: 9 callbacks suppressed [ 554.470080][T15729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 554.751596][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2454'. [ 554.903609][T15738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2455'. [ 554.937064][T15741] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2457'. [ 554.957421][T15738] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 555.205453][T15738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2455'. [ 555.307773][T15746] bond12: (slave veth29): Enslaving as an active interface with a down link [ 555.421372][T15749] bond12: (slave veth31): Enslaving as an active interface with a down link [ 555.455101][T15750] batadv1: entered promiscuous mode [ 555.481667][T15738] 8021q: adding VLAN 0 to HW filter on device bond12 [ 555.559789][T15765] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 555.630128][T15765] batman_adv: batadv0: Adding interface: gretap1 [ 555.657934][T15765] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.717261][T15765] batman_adv: batadv0: Interface activated: gretap1 [ 555.946070][T15756] lo speed is unknown, defaulting to 1000 [ 556.017307][T15773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.105332][T15776] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 556.118669][T15756] wg1 speed is unknown, defaulting to 1000 [ 556.214583][T15782] netlink: 'syz.0.2461': attribute type 10 has an invalid length. [ 556.356070][T15785] x_tables: duplicate underflow at hook 1 [ 558.634513][T15807] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2469'. [ 558.932917][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 559.806051][T15839] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 559.846114][T15835] tap0: tun_chr_ioctl cmd 2148553947 [ 559.865593][T15836] tap0: tun_chr_ioctl cmd 2148553947 [ 559.879770][T15835] tap0: tun_chr_ioctl cmd 2147767521 [ 559.892764][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 559.905602][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 559.922853][T15835] tap0: tun_chr_ioctl cmd 1342215183 [ 560.000203][T15844] syz1: rxe_newlink: already configured on bond0 [ 560.385815][T15859] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2482'. [ 560.943181][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 561.129768][T15884] rdma_rxe: rxe_newlink: failed to add bond0 [ 561.272159][T15875] netlink: 'syz.0.2488': attribute type 6 has an invalid length. [ 561.610637][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'. [ 561.641104][T15904] mac80211_hwsim hwsim5 wlan1: Master is either lo or non-ether device [ 561.772743][T15902] Set syz1 is full, maxelem 65536 reached [ 561.780280][T15908] netlink: 'syz.1.2497': attribute type 8 has an invalid length. [ 561.809908][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 561.846449][T15916] netlink: 'syz.1.2497': attribute type 2 has an invalid length. [ 561.950565][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 561.968185][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'. [ 562.197857][T15930] openvswitch: netlink: IP tunnel dst address not specified [ 562.229381][T15932] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 562.322574][T15930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.334233][T15930] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.692050][T15930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.757186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.036387][T15954] netlink: 'syz.3.2515': attribute type 10 has an invalid length. [ 563.083022][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.093136][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.185257][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 563.195979][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 563.198137][T15949] Set syz1 is full, maxelem 65536 reached [ 563.300377][T15963] netlink: 'syz.0.2516': attribute type 23 has an invalid length. [ 563.359345][T15967] netlink: 'syz.1.2519': attribute type 13 has an invalid length. [ 563.500657][T15967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.716980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.845553][T16000] netlink: 'syz.4.2528': attribute type 6 has an invalid length. [ 564.915331][T15991] lo speed is unknown, defaulting to 1000 [ 564.923309][T15991] wg1 speed is unknown, defaulting to 1000 [ 565.911693][T16013] FAULT_INJECTION: forcing a failure. [ 565.911693][T16013] name failslab, interval 1, probability 0, space 0, times 0 [ 565.957496][T16013] CPU: 0 UID: 0 PID: 16013 Comm: syz.2.2533 Not tainted syzkaller #0 PREEMPT(full) [ 565.957527][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.957539][T16013] Call Trace: [ 565.957547][T16013] [ 565.957556][T16013] dump_stack_lvl+0xe8/0x150 [ 565.957589][T16013] should_fail_ex+0x414/0x560 [ 565.957628][T16013] should_failslab+0xa8/0x100 [ 565.957655][T16013] __kmalloc_noprof+0xdf/0x800 [ 565.957675][T16013] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 565.957695][T16013] ? rcu_is_watching+0x15/0xb0 [ 565.957736][T16013] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 565.957768][T16013] genl_family_rcv_msg_doit+0xb8/0x300 [ 565.957795][T16013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.957825][T16013] ? apparmor_capable+0x137/0x1a0 [ 565.957857][T16013] ? bpf_lsm_capable+0x9/0x20 [ 565.957880][T16013] ? security_capable+0x7e/0x2e0 [ 565.957911][T16013] genl_rcv_msg+0x60e/0x790 [ 565.957939][T16013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.957958][T16013] ? __pfx_macsec_del_txsa+0x10/0x10 [ 565.957990][T16013] ? __asan_memcpy+0x40/0x70 [ 565.958020][T16013] ? __pfx_ref_tracker_free+0x10/0x10 [ 565.958051][T16013] netlink_rcv_skb+0x208/0x470 [ 565.958079][T16013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.958101][T16013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.958124][T16013] ? genl_rcv+0x19/0x40 [ 565.958163][T16013] ? down_read+0x274/0x2e0 [ 565.958186][T16013] ? genl_rcv+0xd/0x40 [ 565.958206][T16013] genl_rcv+0x28/0x40 [ 565.958224][T16013] netlink_unicast+0x82f/0x9e0 [ 565.958258][T16013] ? __pfx_netlink_unicast+0x10/0x10 [ 565.958280][T16013] ? __alloc_skb+0x198/0x3a0 [ 565.958303][T16013] ? netlink_sendmsg+0x642/0xb30 [ 565.958328][T16013] ? skb_put+0x11b/0x210 [ 565.958355][T16013] netlink_sendmsg+0x805/0xb30 [ 565.958393][T16013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.958424][T16013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.958452][T16013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.958472][T16013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.958500][T16013] __sock_sendmsg+0x21c/0x270 [ 565.958534][T16013] ____sys_sendmsg+0x505/0x820 [ 565.958567][T16013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.958604][T16013] ? import_iovec+0x74/0xa0 [ 565.958633][T16013] ___sys_sendmsg+0x21f/0x2a0 [ 565.958662][T16013] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.958738][T16013] ? __fget_files+0x2a/0x420 [ 565.958762][T16013] ? __fget_files+0x3a0/0x420 [ 565.958800][T16013] __x64_sys_sendmsg+0x19b/0x260 [ 565.958829][T16013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.958866][T16013] ? __pfx_ksys_write+0x10/0x10 [ 565.958903][T16013] do_syscall_64+0xec/0xf80 [ 565.958925][T16013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.958944][T16013] ? trace_irq_disable+0x37/0x100 [ 565.958970][T16013] ? clear_bhb_loop+0x60/0xb0 [ 565.958994][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.959013][T16013] RIP: 0033:0x7f82c138f749 [ 565.959033][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.959050][T16013] RSP: 002b:00007f82bf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.959074][T16013] RAX: ffffffffffffffda RBX: 00007f82c15e5fa0 RCX: 00007f82c138f749 [ 565.959089][T16013] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000005 [ 565.959103][T16013] RBP: 00007f82bf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 565.959116][T16013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.959128][T16013] R13: 00007f82c15e6038 R14: 00007f82c15e5fa0 R15: 00007ffe3e2ded98 [ 565.959165][T16013] [ 566.498463][T16030] rdma_rxe: rxe_newlink: failed to add bond0 [ 566.665360][T16034] netlink: 'syz.0.2540': attribute type 9 has an invalid length. [ 566.679001][T16039] __nla_validate_parse: 1 callbacks suppressed [ 566.679022][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 566.707025][T16043] netlink: 'syz.4.2544': attribute type 1 has an invalid length. [ 566.729120][T16043] netlink: 15542 bytes leftover after parsing attributes in process `syz.4.2544'. [ 567.037439][T16065] netlink: 'syz.2.2547': attribute type 13 has an invalid length. [ 567.068775][T16067] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 567.074657][T16067] syzkaller1: Linktype set failed because interface is up [ 567.162685][ T7028] syzkaller1: tun_net_xmit 90 [ 567.230457][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 567.294648][T16073] syzkaller0: Caught tx_queue_len zero misconfig [ 567.569642][T16092] Set syz1 is full, maxelem 65536 reached [ 567.697216][T16097] netlink: 'syz.1.2557': attribute type 1 has an invalid length. [ 567.705012][T16097] netlink: 15542 bytes leftover after parsing attributes in process `syz.1.2557'. [ 567.837407][T16105] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2558'. [ 567.936903][T16113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2563'. [ 568.223977][T16126] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 568.252550][T16126] FAULT_INJECTION: forcing a failure. [ 568.252550][T16126] name failslab, interval 1, probability 0, space 0, times 0 [ 568.289761][T16126] CPU: 1 UID: 0 PID: 16126 Comm: syz.0.2565 Not tainted syzkaller #0 PREEMPT(full) [ 568.289792][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.289804][T16126] Call Trace: [ 568.289812][T16126] [ 568.289821][T16126] dump_stack_lvl+0xe8/0x150 [ 568.289853][T16126] should_fail_ex+0x414/0x560 [ 568.289890][T16126] should_failslab+0xa8/0x100 [ 568.289917][T16126] kmem_cache_alloc_noprof+0x88/0x710 [ 568.289949][T16126] ? skb_clone+0x212/0x3a0 [ 568.289979][T16126] skb_clone+0x212/0x3a0 [ 568.290009][T16126] __netlink_deliver_tap+0x404/0x850 [ 568.290050][T16126] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.290077][T16126] netlink_deliver_tap+0x19c/0x1b0 [ 568.290102][T16126] netlink_sendskb+0x68/0x140 [ 568.290127][T16126] netlink_unicast+0x397/0x9e0 [ 568.290147][T16126] ? __asan_memcpy+0x40/0x70 [ 568.290185][T16126] ? __pfx_netlink_unicast+0x10/0x10 [ 568.290219][T16126] netlink_rcv_skb+0x28c/0x470 [ 568.290245][T16126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.290266][T16126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.290288][T16126] ? genl_rcv+0x19/0x40 [ 568.290325][T16126] ? down_read+0x274/0x2e0 [ 568.290346][T16126] ? genl_rcv+0xd/0x40 [ 568.290365][T16126] genl_rcv+0x28/0x40 [ 568.290381][T16126] netlink_unicast+0x82f/0x9e0 [ 568.290414][T16126] ? __pfx_netlink_unicast+0x10/0x10 [ 568.290436][T16126] ? __alloc_skb+0x198/0x3a0 [ 568.290456][T16126] ? netlink_sendmsg+0x642/0xb30 [ 568.290480][T16126] ? skb_put+0x11b/0x210 [ 568.290505][T16126] netlink_sendmsg+0x805/0xb30 [ 568.290542][T16126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.290572][T16126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 568.290601][T16126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.290629][T16126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.290658][T16126] __sock_sendmsg+0x21c/0x270 [ 568.290692][T16126] ____sys_sendmsg+0x505/0x820 [ 568.290724][T16126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.290761][T16126] ? import_iovec+0x74/0xa0 [ 568.290791][T16126] ___sys_sendmsg+0x21f/0x2a0 [ 568.290818][T16126] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.290887][T16126] ? __fget_files+0x2a/0x420 [ 568.290912][T16126] ? __fget_files+0x3a0/0x420 [ 568.290950][T16126] __x64_sys_sendmsg+0x19b/0x260 [ 568.290978][T16126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.291016][T16126] ? __pfx_ksys_write+0x10/0x10 [ 568.291051][T16126] do_syscall_64+0xec/0xf80 [ 568.291072][T16126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.291091][T16126] ? trace_irq_disable+0x37/0x100 [ 568.291117][T16126] ? clear_bhb_loop+0x60/0xb0 [ 568.291142][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.291161][T16126] RIP: 0033:0x7f0dfb58f749 [ 568.291178][T16126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.291196][T16126] RSP: 002b:00007f0dfc47f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.291219][T16126] RAX: ffffffffffffffda RBX: 00007f0dfb7e5fa0 RCX: 00007f0dfb58f749 [ 568.291234][T16126] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000005 [ 568.291247][T16126] RBP: 00007f0dfc47f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.291259][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.291271][T16126] R13: 00007f0dfb7e6038 R14: 00007f0dfb7e5fa0 R15: 00007ffd6fa02b88 [ 568.291306][T16126] [ 568.751146][T16131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2567'. [ 568.783470][T16135] netlink: 'syz.0.2566': attribute type 13 has an invalid length. [ 568.791174][T16122] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2564'. [ 568.806675][T16122] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2564'. [ 568.808935][T16134] netlink: 'syz.4.2568': attribute type 12 has an invalid length. [ 568.816189][T16122] netlink: 'syz.2.2564': attribute type 9 has an invalid length. [ 568.832880][T16122] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2564'. [ 568.857038][T16136] netlink: 'syz.0.2566': attribute type 13 has an invalid length. [ 568.877311][T16134] netlink: 'syz.4.2568': attribute type 29 has an invalid length. [ 569.412616][T16150] bond13: entered allmulticast mode [ 569.438285][T16150] 8021q: adding VLAN 0 to HW filter on device bond13 [ 570.166950][T16144] lo speed is unknown, defaulting to 1000 [ 570.186205][T16144] wg1 speed is unknown, defaulting to 1000 [ 570.666972][T16174] batadv_slave_0: Caught tx_queue_len zero misconfig [ 570.775600][T16158] lo speed is unknown, defaulting to 1000 [ 570.816092][T16158] wg1 speed is unknown, defaulting to 1000 [ 570.844032][T16183] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 571.708964][T16201] validate_nla: 1 callbacks suppressed [ 571.708985][T16201] netlink: 'syz.3.2582': attribute type 13 has an invalid length. [ 571.756428][T16206] __nla_validate_parse: 6 callbacks suppressed [ 571.756451][T16206] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2583'. [ 571.810758][T16206] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 571.968930][T16212] tipc: Enabling of bearer rejected, already enabled [ 571.995523][T16212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.055231][T16212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.082428][T16212] batadv_slave_0: Caught tx_queue_len zero misconfig [ 572.115684][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2586'. [ 572.717877][T16243] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2591'. [ 572.855272][T16250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2595'. [ 572.885403][T16250] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 572.962231][T16256] netlink: 'syz.0.2594': attribute type 38 has an invalid length. [ 573.069622][T16255] bond14: (slave veth37): Enslaving as an active interface with a down link [ 573.141548][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2595'. [ 573.153065][T16258] bond14: (slave veth39): Enslaving as an active interface with a down link [ 573.164730][T16227] lo speed is unknown, defaulting to 1000 [ 573.174912][T16250] 8021q: adding VLAN 0 to HW filter on device bond14 [ 573.187805][T16227] wg1 speed is unknown, defaulting to 1000 [ 573.389410][T16264] netlink: 'syz.2.2596': attribute type 13 has an invalid length. [ 573.630042][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2600'. [ 573.687939][T16279] rdma_rxe: rxe_newlink: failed to add bond0 [ 573.992326][T16293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2605'. [ 574.174560][T16306] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2606'. [ 574.454452][T16316] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 574.762869][T16328] netlink: 'syz.1.2611': attribute type 8 has an invalid length. [ 575.285909][T16328] lo speed is unknown, defaulting to 1000 [ 575.294429][T16328] wg1 speed is unknown, defaulting to 1000 [ 575.520696][T16358] netlink: 'syz.4.2616': attribute type 1 has an invalid length. [ 575.611357][T16358] veth21: entered promiscuous mode [ 575.706095][T16358] erspan0: entered allmulticast mode [ 575.960251][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 576.110854][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 576.374495][T16351] lo speed is unknown, defaulting to 1000 [ 576.384664][T16325] lo speed is unknown, defaulting to 1000 [ 576.384664][T16351] wg1 speed is unknown, defaulting to 1000 [ 576.479339][T16374] syzkaller0: entered promiscuous mode [ 576.484876][T16374] syzkaller0: entered allmulticast mode [ 576.491735][T16325] wg1 speed is unknown, defaulting to 1000 [ 577.064816][T16394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.620379][T16408] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2630'. [ 577.652890][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.662153][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.685380][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.699623][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.718141][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.761418][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.773392][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.806392][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.831170][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.857069][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.311115][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2633'. [ 579.263649][T16450] syzkaller0: entered promiscuous mode [ 579.287313][T16450] syzkaller0: entered allmulticast mode [ 579.428684][T16468] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 579.570863][T16470] xt_hashlimit: size too large, truncated to 1048576 [ 581.619813][T16468] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 581.642707][T16474] ip6tnl0: Caught tx_queue_len zero misconfig [ 581.861315][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 582.547850][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2648'. [ 582.937819][T16516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2649'. [ 583.029058][T16522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2652'. [ 583.156288][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 583.334975][T16537] bond0: Caught tx_queue_len zero misconfig [ 583.713498][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2659'. [ 583.739812][T16561] xt_hashlimit: size too large, truncated to 1048576 [ 584.419807][T16581] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 584.442649][T16581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2666'. [ 584.627875][T16575] net_ratelimit: 250 callbacks suppressed [ 584.627897][T16575] Set syz1 is full, maxelem 65536 reached [ 584.800149][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2667'. [ 584.893101][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2670'. [ 584.942130][T16594] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 584.959593][T16598] rdma_rxe: rxe_newlink: failed to add bond0 [ 584.973654][T16598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2672'. [ 585.099137][T16600] bond15: (slave veth41): Enslaving as an active interface with a down link [ 585.177943][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 585.221851][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 585.257555][T16594] bond15: (slave veth43): Enslaving as an active interface with a down link [ 585.287809][T16600] 8021q: adding VLAN 0 to HW filter on device bond15 [ 585.303680][T16620] syzkaller0: Caught tx_queue_len zero misconfig [ 585.350704][T16603] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 585.855315][T16635] veth0: entered promiscuous mode [ 585.967820][T16635] veth0 (unregistering): left promiscuous mode [ 586.024749][T16638] openvswitch: netlink: Unknown key attributes 2 [ 586.173526][T16644] netlink: 'syz.2.2681': attribute type 9 has an invalid length. [ 586.182592][T16644] netlink: 'syz.2.2681': attribute type 11 has an invalid length. [ 586.191474][T16644] netlink: 'syz.2.2681': attribute type 11 has an invalid length. [ 586.479032][T16629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.647436][T16661] sctp: [Deprecated]: syz.1.2692 (pid 16661) Use of int in maxseg socket option. [ 586.647436][T16661] Use struct sctp_assoc_value instead [ 586.868802][T16670] netlink: 'syz.1.2696': attribute type 13 has an invalid length. [ 587.034047][T16674] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 587.245940][T16649] bond16: option miimon: invalid value (18446744073709551607) [ 587.254523][T16649] bond16: option miimon: allowed values 0 - 2147483647 [ 587.271754][T16649] bond16 (unregistering): Released all slaves [ 588.075402][T16686] lo speed is unknown, defaulting to 1000 [ 588.083439][T16686] wg1 speed is unknown, defaulting to 1000 [ 588.333731][T16619] Set syz1 is full, maxelem 65536 reached [ 588.430004][T16714] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 588.488411][T16714] bond0: (slave gre0): Error -95 calling set_mac_address [ 588.617332][T16721] __nla_validate_parse: 6 callbacks suppressed [ 588.617354][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2708'. [ 588.686820][T16721] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 588.734914][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 588.915031][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2708'. [ 589.113196][T16731] bond9: (slave veth23): Enslaving as an active interface with a down link [ 589.130924][T16732] 8021q: adding VLAN 0 to HW filter on device bond9 [ 589.492799][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 589.561875][T16761] netlink: 'syz.4.2715': attribute type 29 has an invalid length. [ 589.665838][T16766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 590.052286][T16770] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2716'. [ 590.068152][T16770] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2716'. [ 590.077930][T16770] netlink: 'syz.3.2716': attribute type 9 has an invalid length. [ 590.091322][T16770] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2716'. [ 590.118242][T16770] netlink: 'syz.3.2716': attribute type 11 has an invalid length. [ 590.134821][T16770] netlink: 'syz.3.2716': attribute type 11 has an invalid length. [ 590.144314][T16770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2716'. [ 590.203315][T16741] lo speed is unknown, defaulting to 1000 [ 590.234147][T16741] wg1 speed is unknown, defaulting to 1000 [ 590.297448][T16750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.629015][T16760] lo speed is unknown, defaulting to 1000 [ 590.636951][T16760] wg1 speed is unknown, defaulting to 1000 [ 591.143666][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2726'. [ 591.164281][T16794] netlink: 'syz.3.2726': attribute type 1 has an invalid length. [ 591.402789][T16795] bond16: (slave veth1): Enslaving as an active interface with a down link [ 591.434992][T16798] bond16: (slave veth45): Enslaving as an active interface with a down link [ 591.466874][T16802] 8021q: adding VLAN 0 to HW filter on device bond16 [ 591.681765][T16812] team0: entered promiscuous mode [ 591.687150][T16812] team0: entered allmulticast mode [ 591.692752][T16812] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 592.618128][T16839] netlink: 'syz.4.2737': attribute type 9 has an invalid length. [ 592.704703][T16845] netlink: 'syz.2.2739': attribute type 12 has an invalid length. [ 592.753930][T16846] syz.3.2740: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 592.810082][T16846] CPU: 0 UID: 0 PID: 16846 Comm: syz.3.2740 Not tainted syzkaller #0 PREEMPT(full) [ 592.810115][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.810128][T16846] Call Trace: [ 592.810137][T16846] [ 592.810147][T16846] dump_stack_lvl+0xe8/0x150 [ 592.810181][T16846] warn_alloc+0x214/0x310 [ 592.810205][T16846] ? stack_trace_save+0x9c/0xe0 [ 592.810242][T16846] ? __pfx_warn_alloc+0x10/0x10 [ 592.810273][T16846] ? kasan_save_track+0x4f/0x80 [ 592.810294][T16846] ? kasan_save_track+0x3e/0x80 [ 592.810312][T16846] ? __kasan_kmalloc+0x93/0xb0 [ 592.810331][T16846] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 592.810351][T16846] ? xskq_create+0x56/0x170 [ 592.810392][T16846] ? xsk_setsockopt+0x4dc/0x8d0 [ 592.810419][T16846] ? do_sock_setsockopt+0x17c/0x1b0 [ 592.810442][T16846] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 592.810464][T16846] ? do_syscall_64+0xec/0xf80 [ 592.810490][T16846] __vmalloc_node_range_noprof+0x134/0x16a0 [ 592.810550][T16846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.810580][T16846] ? __kasan_kmalloc+0x93/0xb0 [ 592.810609][T16846] vmalloc_user_noprof+0xad/0xf0 [ 592.810630][T16846] ? xskq_create+0xbf/0x170 [ 592.810662][T16846] xskq_create+0xbf/0x170 [ 592.810693][T16846] xsk_init_queue+0xb0/0x110 [ 592.810727][T16846] xsk_setsockopt+0x4dc/0x8d0 [ 592.810759][T16846] ? __pfx_xsk_setsockopt+0x10/0x10 [ 592.810789][T16846] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.810819][T16846] ? aa_sock_opt_perm+0xff/0x1a0 [ 592.810850][T16846] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 592.810874][T16846] ? __pfx_xsk_setsockopt+0x10/0x10 [ 592.810904][T16846] do_sock_setsockopt+0x17c/0x1b0 [ 592.810931][T16846] __x64_sys_setsockopt+0x13f/0x1b0 [ 592.810962][T16846] do_syscall_64+0xec/0xf80 [ 592.810982][T16846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.811002][T16846] ? trace_irq_disable+0x37/0x100 [ 592.811027][T16846] ? clear_bhb_loop+0x60/0xb0 [ 592.811051][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.811067][T16846] RIP: 0033:0x7f6e95b8f749 [ 592.811086][T16846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.811103][T16846] RSP: 002b:00007f6e9694b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 592.811126][T16846] RAX: ffffffffffffffda RBX: 00007f6e95de5fa0 RCX: 00007f6e95b8f749 [ 592.811140][T16846] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 592.811153][T16846] RBP: 00007f6e95c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 592.811166][T16846] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.811177][T16846] R13: 00007f6e95de6038 R14: 00007f6e95de5fa0 R15: 00007ffe34510b38 [ 592.811211][T16846] [ 592.813306][T16846] Mem-Info: [ 592.849691][T16819] netlink: 'syz.1.2733': attribute type 3 has an invalid length. [ 592.851973][T16846] active_anon:7395 inactive_anon:0 isolated_anon:0 [ 592.851973][T16846] active_file:3756 inactive_file:40103 isolated_file:0 [ 592.851973][T16846] unevictable:768 dirty:212 writeback:0 [ 592.851973][T16846] slab_reclaimable:11725 slab_unreclaimable:108756 [ 592.851973][T16846] mapped:33067 shmem:4800 pagetables:1104 [ 592.851973][T16846] sec_pagetables:0 bounce:0 [ 592.851973][T16846] kernel_misc_reclaimable:0 [ 592.851973][T16846] free:1301234 free_pcp:13442 free_cma:0 [ 593.178990][T16846] Node 0 active_anon:33464kB inactive_anon:0kB active_file:15024kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136264kB dirty:852kB writeback:0kB shmem:21656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13448kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.290272][T16846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.372726][T16846] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.474950][T16846] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 593.481843][T16846] Node 0 DMA32 free:1299544kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27064kB inactive_anon:0kB active_file:15024kB inactive_file:160208kB unevictable:1536kB writepending:852kB zspages:0kB present:3129332kB managed:2559500kB mlocked:0kB bounce:0kB free_pcp:35284kB local_pcp:19664kB free_cma:0kB [ 593.569160][T16846] lowmem_reserve[]: 0 0 1 1 1 [ 593.575691][T16846] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.612593][T16846] lowmem_reserve[]: 0 0 0 0 0 [ 593.627839][T16846] Node 1 Normal free:3899332kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12480kB local_pcp:6144kB free_cma:0kB [ 593.694471][T16846] lowmem_reserve[]: 0 0 0 0 0 [ 593.695519][T16863] xt_l2tp: v2 doesn't support IP mode [ 593.708309][T16846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.750416][T16846] Node 0 DMA32: 3429*4kB (UM) 2586*8kB (UME) 1185*16kB (UME) 562*32kB (UME) 96*64kB (UM) 87*128kB (UME) 78*256kB (UM) 74*512kB (UM) 48*1024kB (UM) 23*2048kB (UM) 258*4096kB (UM) = 1299508kB [ 593.789672][T16846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.801738][T16846] Node 1 Normal: 207*4kB (UME) 47*8kB (UME) 43*16kB (UME) 193*32kB (UME) 69*64kB (UME) 14*128kB (UME) 6*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3899332kB [ 593.867969][T16846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.882915][T16846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.892888][T16846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.903030][T16846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.930589][T16846] 45229 total pagecache pages [ 593.935321][T16846] 0 pages in swap cache [ 593.950666][T16846] Free swap = 124996kB [ 593.954881][T16846] Total swap = 124996kB [ 593.968183][T16846] 2097051 pages RAM [ 593.972098][T16846] 0 pages HighMem/MovableOnly [ 593.981439][T16871] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 593.997093][T16846] 425086 pages reserved [ 594.001344][T16846] 0 pages cma reserved [ 594.057251][T16871] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 594.078509][T16871] __nla_validate_parse: 6 callbacks suppressed [ 594.078533][T16871] netlink: 15522 bytes leftover after parsing attributes in process `syz.0.2747'. [ 594.209840][T16882] syzkaller1: entered promiscuous mode [ 594.215938][T16882] syzkaller1: entered allmulticast mode [ 594.270830][T16885] netlink: 'syz.2.2753': attribute type 7 has an invalid length. [ 594.314213][T16885] netlink: 'syz.2.2753': attribute type 8 has an invalid length. [ 594.491028][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 594.535385][T16899] syzkaller0: Caught tx_queue_len zero misconfig [ 594.552529][T16902] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2757'. [ 594.672558][T16909] syz1: rxe_newlink: already configured on bond0 [ 594.691588][T16909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2759'. [ 594.843444][T16916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.853355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.095898][T16927] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 595.106780][T16927] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 595.146670][T16927] netlink: 15522 bytes leftover after parsing attributes in process `syz.1.2765'. [ 595.315807][T16934] xt_recent: Unsupported userspace flags (000000b1) [ 595.469147][T16930] bond17: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 595.482512][T16930] bond17 (unregistering): Released all slaves [ 595.559952][T16940] 8021q: adding VLAN 0 to HW filter on device bond13 [ 595.689823][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 595.769554][T16949] syz1: rxe_newlink: already configured on bond0 [ 595.793109][T16949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2772'. [ 596.045491][T16960] tunl0: Caught tx_queue_len zero misconfig [ 596.062236][T16957] netlink: 'syz.1.2776': attribute type 13 has an invalid length. [ 596.263841][T16957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.448711][T16973] netlink: 'syz.3.2780': attribute type 4 has an invalid length. [ 596.466787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.672898][T16874] Set syz1 is full, maxelem 65536 reached [ 596.778504][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 596.812775][T16988] rdma_rxe: rxe_newlink: failed to add bond0 [ 596.853647][T16988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2784'. [ 596.866121][T16992] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2785'. [ 596.912915][T16992] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 597.380726][T17014] netlink: 'syz.4.2791': attribute type 13 has an invalid length. [ 597.592579][T17006] lo speed is unknown, defaulting to 1000 [ 597.602947][T17006] wg1 speed is unknown, defaulting to 1000 [ 598.470136][T17047] sctp: [Deprecated]: syz.1.2801 (pid 17047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.470136][T17047] Use struct sctp_sack_info instead [ 598.633507][T17052] veth0_macvtap: Caught tx_queue_len zero misconfig [ 599.129970][T17062] __nla_validate_parse: 8 callbacks suppressed [ 599.129994][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2804'. [ 599.168714][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 599.189185][T17059] tipc: Enabling of bearer rejected, failed to enable media [ 599.216144][T17062] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 599.368504][T17066] bond14: (slave veth33): Enslaving as an active interface with a down link [ 599.427192][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2804'. [ 599.509025][T17062] bond14: (slave veth35): Enslaving as an active interface with a down link [ 599.635298][T17066] 8021q: adding VLAN 0 to HW filter on device bond14 [ 600.019466][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2811'. [ 600.381006][T17107] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2815'. [ 600.404812][T17108] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2814'. [ 600.735823][T17121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.743197][T17121] IPv6: NLM_F_CREATE should be set when creating new route [ 600.750493][T17121] IPv6: NLM_F_CREATE should be set when creating new route [ 600.801741][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 600.816909][T17126] netlink: 'syz.1.2820': attribute type 2 has an invalid length. [ 600.831475][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2820'. [ 601.020224][T17134] netlink: 'syz.2.2822': attribute type 13 has an invalid length. [ 601.083914][T17134] syzkaller0: Caught tx_queue_len zero misconfig [ 601.227740][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 601.243866][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2824'. [ 601.323796][T17149] x_tables: duplicate underflow at hook 2 [ 601.478391][T16415] Bluetooth: hci4: command 0x0405 tx timeout [ 601.670717][T17158] netlink: 'syz.1.2830': attribute type 10 has an invalid length. [ 601.684668][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.284460][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.293615][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 602.331983][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.344954][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.353587][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.232970][T17173] lo speed is unknown, defaulting to 1000 [ 603.251657][T17173] wg1 speed is unknown, defaulting to 1000 [ 603.432453][T17234] netlink: 'syz.0.2849': attribute type 29 has an invalid length. [ 603.557414][T16415] Bluetooth: hci4: command 0x0405 tx timeout [ 603.806027][T17173] chnl_net:caif_netlink_parms(): no params data found [ 603.829219][T17230] lo speed is unknown, defaulting to 1000 [ 603.846641][T17230] wg1 speed is unknown, defaulting to 1000 [ 604.132900][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.150781][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.178528][T17173] bridge_slave_0: entered allmulticast mode [ 604.191863][T17173] bridge_slave_0: entered promiscuous mode [ 604.202058][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.232373][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.257131][T17173] bridge_slave_1: entered allmulticast mode [ 604.265100][T17173] bridge_slave_1: entered promiscuous mode [ 604.399026][T17268] __nla_validate_parse: 13 callbacks suppressed [ 604.399048][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 604.437904][T16415] Bluetooth: hci5: command tx timeout [ 604.505214][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.647139][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.846397][T17173] team0: Port device team_slave_0 added [ 604.860296][T17173] team0: Port device team_slave_1 added [ 604.955607][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.963394][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.003981][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.037097][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.075850][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.127969][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.418070][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 605.474842][T17285] netlink: 'syz.0.2858': attribute type 1 has an invalid length. [ 605.497532][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 605.535057][T17173] hsr_slave_0: entered promiscuous mode [ 605.558242][T17173] hsr_slave_1: entered promiscuous mode [ 605.615588][T17289] Set syz1 is full, maxelem 65536 reached [ 605.795864][T17294] dummy0: Caught tx_queue_len zero misconfig [ 605.866011][ T60] bridge_slave_1: left allmulticast mode [ 605.873035][ T60] bridge_slave_1: left promiscuous mode [ 605.881709][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.902817][ T60] bridge_slave_0: left allmulticast mode [ 605.917971][ T60] bridge_slave_0: left promiscuous mode [ 605.927768][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.993682][ T60] tipc: Resetting bearer [ 606.371341][ T60] dvmrp6 (unregistering): left allmulticast mode [ 606.527084][T16415] Bluetooth: hci5: command tx timeout [ 606.721804][ T60] tipc: Disabling bearer [ 606.794804][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'. [ 606.961519][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.970687][ T60] bond_slave_0: left promiscuous mode [ 606.978323][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.988152][ T60] bond_slave_1: left promiscuous mode [ 606.994052][ T60] bond0 (unregistering): Released all slaves [ 607.113181][ T60] bond1 (unregistering): (slave veth5): Releasing active interface [ 607.122287][ T60] bond1 (unregistering): Released all slaves [ 607.135695][ T60] bond2 (unregistering): Released all slaves [ 607.150082][ T60] bond3 (unregistering): (slave veth7): Releasing active interface [ 607.159878][ T60] bond3 (unregistering): (slave veth9): Releasing active interface [ 607.174040][ T60] bond3 (unregistering): Released all slaves [ 607.188625][ T60] bond4 (unregistering): (slave veth11): Releasing active interface [ 607.198391][ T60] bond4 (unregistering): (slave veth13): Releasing active interface [ 607.207833][ T60] bond4 (unregistering): Released all slaves [ 607.328277][ T60] bond5 (unregistering): Released all slaves [ 607.403451][T17326] netlink: 'syz.4.2868': attribute type 29 has an invalid length. [ 607.497317][ T60] tipc: Left network mode [ 607.749028][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 608.231266][T17322] lo speed is unknown, defaulting to 1000 [ 608.250569][T17322] wg1 speed is unknown, defaulting to 1000 [ 608.596719][T16415] Bluetooth: hci5: command tx timeout [ 608.707483][ T60] hsr_slave_0: left promiscuous mode [ 608.717749][ T60] hsr_slave_1: left promiscuous mode [ 608.724075][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.511461][ T60] team0 (unregistering): Port device team_slave_1 removed [ 609.579700][ T60] team0 (unregistering): Port device team_slave_0 removed [ 609.666237][T17360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 610.066045][ T60] lo (unregistering): left allmulticast mode [ 610.220495][T17173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 610.243373][T17173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 610.274720][T17173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 610.298878][T17173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 610.348049][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'. [ 610.460229][T17377] lo: entered promiscuous mode [ 610.496232][T17377] tunl0: entered promiscuous mode [ 610.509665][T17377] gre0: entered promiscuous mode [ 610.515211][T17377] gretap0: entered promiscuous mode [ 610.542823][T17377] erspan0: entered promiscuous mode [ 610.549301][T17377] ip_vti0: entered promiscuous mode [ 610.555250][T17377] ip6_vti0: entered promiscuous mode [ 610.561893][T17377] sit0: entered promiscuous mode [ 610.571518][T17377] ip6tnl0: entered promiscuous mode [ 610.579712][T17369] Cannot find add_set index 3 as target [ 610.586045][T17377] ip6gre0: entered promiscuous mode [ 610.596024][T17377] ip6gretap0: entered promiscuous mode [ 610.602848][T17377] bridge0: entered promiscuous mode [ 610.609867][T17377] vcan0: entered promiscuous mode [ 610.615688][T17377] bond0: entered promiscuous mode [ 610.623812][T17377] bond_slave_0: entered promiscuous mode [ 610.631008][T17377] bond_slave_1: entered promiscuous mode [ 610.639399][T17377] team0: entered promiscuous mode [ 610.644582][T17377] team_slave_0: entered promiscuous mode [ 610.650784][T17377] team_slave_1: entered promiscuous mode [ 610.657803][T17377] bridge1: entered promiscuous mode [ 610.664370][T17377] dummy0: entered promiscuous mode [ 610.671435][T17377] nlmon0: entered promiscuous mode [ 610.680863][T17377] caif0: entered promiscuous mode [ 610.695768][T16415] Bluetooth: hci5: command tx timeout [ 610.704243][T17377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.812882][T17359] lo speed is unknown, defaulting to 1000 [ 610.831927][ T60] IPVS: stop unused estimator thread 0... [ 610.832355][T17359] wg1 speed is unknown, defaulting to 1000 [ 610.838602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.982364][T17173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.095563][T17386] batadv1: entered promiscuous mode [ 611.238301][T17390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2880'. [ 611.248956][T17173] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.291506][T15570] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.298788][T15570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.354297][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.361593][T16049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.599281][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 611.702895][T17173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 611.737412][T17173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.590261][T17386] lo speed is unknown, defaulting to 1000 [ 612.637521][T17386] wg1 speed is unknown, defaulting to 1000 [ 612.787903][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.992540][T17418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 613.007647][T17418] syzkaller1: linktype set to 260 [ 613.183671][T17173] veth0_vlan: entered promiscuous mode [ 613.229194][T17173] veth1_vlan: entered promiscuous mode [ 613.344265][T17173] veth0_macvtap: entered promiscuous mode [ 613.396750][T17173] veth1_macvtap: entered promiscuous mode [ 613.480535][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.505938][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.553411][T17346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.581778][T17346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.626717][T17346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.647725][T17346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.075183][T17437] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 614.192441][T17443] Set syz1 is full, maxelem 65536 reached [ 614.261976][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 614.307297][T17446] xt_hashlimit: size too large, truncated to 1048576 [ 616.032918][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.051331][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.117585][T17458] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2894'. [ 616.149029][T17458] erspan0: left allmulticast mode [ 616.164698][T17458] sit0: left promiscuous mode [ 616.170918][T17458] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 616.209384][T17458] bridge1: left allmulticast mode [ 616.216074][T17458] bridge2: left promiscuous mode [ 616.235307][T17458] bridge2: left allmulticast mode [ 616.245582][T17458] bridge3: left promiscuous mode [ 616.258336][T17458] veth21: left promiscuous mode [ 616.340563][T17461] bond0: (slave rose0): Enslaving as an active interface with an up link [ 616.363849][T17439] lo speed is unknown, defaulting to 1000 [ 616.364767][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.381285][T17439] wg1 speed is unknown, defaulting to 1000 [ 616.385056][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.292716][T17478] Set syz1 is full, maxelem 65536 reached [ 617.870250][T17481] lo speed is unknown, defaulting to 1000 [ 617.889404][T17481] wg1 speed is unknown, defaulting to 1000 [ 618.222997][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 618.233863][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.243758][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.256845][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.268244][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 619.256033][T17503] lo speed is unknown, defaulting to 1000 [ 619.270001][T17503] wg1 speed is unknown, defaulting to 1000 [ 619.360010][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 619.689170][T17503] chnl_net:caif_netlink_parms(): no params data found [ 620.075365][T17503] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.088530][T17503] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.096202][T17503] bridge_slave_0: entered allmulticast mode [ 620.105224][T17503] bridge_slave_0: entered promiscuous mode [ 620.131382][T17503] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.147684][T17503] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.155305][T17503] bridge_slave_1: entered allmulticast mode [ 620.168697][T17503] bridge_slave_1: entered promiscuous mode [ 620.359252][T16415] Bluetooth: hci2: command tx timeout [ 620.420093][T17556] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2916'. [ 620.484024][T17503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.501128][T17503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.513966][T17556] netlink: 'syz.3.2916': attribute type 11 has an invalid length. [ 620.527568][T17556] netlink: 'syz.3.2916': attribute type 11 has an invalid length. [ 620.535523][T17556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2916'. [ 620.656678][T17503] team0: Port device team_slave_0 added [ 620.675365][T17503] team0: Port device team_slave_1 added [ 620.812752][T17503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.829895][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.872745][T17503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.889403][T17503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.899246][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.934745][T17503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.963063][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.361092][T17503] hsr_slave_0: entered promiscuous mode [ 621.375053][T17503] hsr_slave_1: entered promiscuous mode [ 621.388614][T17503] debugfs: 'hsr0' already exists in 'hsr' [ 621.394470][T17503] Cannot create hsr debugfs directory [ 621.518199][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2928'. [ 621.560581][T17602] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 621.606420][T17602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2930'. [ 621.859741][T17606] bond17: option min_links: invalid value (18446744073709551612) [ 621.889129][T17606] bond17: option min_links: allowed values 0 - 2147483647 [ 621.900780][T17606] bond17 (unregistering): Released all slaves [ 622.057911][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'. [ 622.103060][T17623] netlink: 'syz.2.2935': attribute type 29 has an invalid length. [ 622.292638][T17628] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2934'. [ 622.313284][T17628] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 622.325490][T17628] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 622.337953][T17628] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2934'. [ 622.437642][T16415] Bluetooth: hci2: command tx timeout [ 622.693400][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.866146][T17620] lo speed is unknown, defaulting to 1000 [ 622.934450][T17620] wg1 speed is unknown, defaulting to 1000 [ 623.069920][T17503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 623.091474][T17503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 623.153431][T17503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 623.391468][T17503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.550161][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 623.673346][T17654] netlink: 'syz.4.2941': attribute type 29 has an invalid length. [ 624.155563][T17503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.221661][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.262038][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.269380][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.329001][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.336264][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.427621][T17650] lo speed is unknown, defaulting to 1000 [ 624.456313][T17650] wg1 speed is unknown, defaulting to 1000 [ 624.521088][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.522386][ T52] Bluetooth: hci2: command tx timeout [ 624.993375][T17503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.010389][T17685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2949'. [ 625.080068][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 625.135546][T17503] veth0_vlan: entered promiscuous mode [ 625.153295][T17503] veth1_vlan: entered promiscuous mode [ 625.214120][T17503] veth0_macvtap: entered promiscuous mode [ 625.228981][T17503] veth1_macvtap: entered promiscuous mode [ 625.282478][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.322177][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.431648][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.476583][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.502003][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.520117][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.717198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.777351][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.805815][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.951523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.963832][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.130500][T17706] xt_l2tp: wrong L2TP version: 1 [ 626.264926][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 626.347693][T17716] pim6reg: entered allmulticast mode [ 626.353909][T17717] xt_hashlimit: size too large, truncated to 1048576 [ 626.378388][T17718] netlink: 'syz.0.2956': attribute type 29 has an invalid length. [ 626.422248][T17716] pim6reg: left allmulticast mode [ 626.606499][T16415] Bluetooth: hci2: command tx timeout [ 626.953411][T17663] Set syz1 is full, maxelem 65536 reached [ 627.038416][T17711] lo speed is unknown, defaulting to 1000 [ 627.071157][T17711] wg1 speed is unknown, defaulting to 1000 [ 628.132286][T17735] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2959'. [ 628.660518][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.682495][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.704351][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.822195][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.894081][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.091138][T16415] Bluetooth: hci0: command tx timeout [ 633.161631][T16415] Bluetooth: hci0: command tx timeout [ 633.433980][ T5846] bond0: (slave syz_tun): Releasing backup interface [ 635.203018][T17766] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2965'. [ 635.239864][T16415] Bluetooth: hci0: command tx timeout [ 637.214956][T17774] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 637.322334][T16415] Bluetooth: hci0: command tx timeout [ 637.801394][T17741] lo speed is unknown, defaulting to 1000 [ 637.865385][T17741] wg1 speed is unknown, defaulting to 1000 [ 637.989706][ T12] veth0_to_bridge: left allmulticast mode [ 637.995833][ T12] veth0_to_bridge: left promiscuous mode [ 638.152278][ T12] bridge0: port 4(veth0_to_bridge) entered disabled state [ 638.634171][ T12] bond7: left allmulticast mode [ 638.684185][ T12] bond7: left promiscuous mode [ 638.714480][ T12] bridge0: port 3(bond7) entered disabled state [ 639.072409][T17776] xt_hashlimit: size too large, truncated to 1048576 [ 639.302208][ T12] bridge_slave_1: left allmulticast mode [ 639.335024][ T12] bridge_slave_1: left promiscuous mode [ 639.359934][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.846268][ T12] bridge_slave_0: left allmulticast mode [ 639.933775][ T12] bridge_slave_0: left promiscuous mode [ 640.005283][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.572131][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.620879][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.723412][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.915693][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.944933][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.399513][T16415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 643.434190][T16415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 643.525705][T16415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 643.672367][T16415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 643.714429][T16415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.163851][T16415] Bluetooth: hci4: command tx timeout [ 645.962271][T16415] Bluetooth: hci6: command tx timeout [ 646.871412][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.054714][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.134731][ T12] bond0 (unregistering): Released all slaves [ 647.242480][T16415] Bluetooth: hci4: command tx timeout [ 647.292647][ T12] bond1 (unregistering): Released all slaves [ 647.554706][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 647.645580][ T12] bond2 (unregistering): (slave veth5): Releasing active interface [ 647.710552][ T12] bond2 (unregistering): Released all slaves [ 648.042243][T16415] Bluetooth: hci6: command tx timeout [ 648.701037][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 648.744486][ T12] bond3 (unregistering): Released all slaves [ 649.322105][T16415] Bluetooth: hci4: command tx timeout [ 649.795492][ T12] bond4 (unregistering): Released all slaves [ 649.924311][ T12] bond5 (unregistering): (slave lo): Releasing backup interface [ 649.984945][ T12] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 650.009651][ T12] bond5 (unregistering): Released all slaves [ 650.121317][T16415] Bluetooth: hci6: command tx timeout [ 651.045430][ T12] bond6 (unregistering): Released all slaves [ 651.400276][T16415] Bluetooth: hci4: command tx timeout [ 652.202626][T16415] Bluetooth: hci6: command tx timeout [ 652.263832][T16415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 652.303755][T16415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 652.333302][T16415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 652.413845][T16415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 652.551982][T16415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 652.940110][ T12] bond7 (unregistering): Released all slaves [ 654.242712][ T12] bond8 (unregistering): (slave veth17): Releasing active interface [ 654.345084][ T12] bond8 (unregistering): (slave veth19): Releasing active interface [ 654.394855][ T12] bond8 (unregistering): Released all slaves [ 654.772160][T16415] Bluetooth: hci7: command tx timeout [ 655.423278][ T12] bond9 (unregistering): (slave veth23): Releasing active interface [ 655.455243][ T12] bond9 (unregistering): Released all slaves [ 655.834846][T17729] lo speed is unknown, defaulting to 1000 [ 656.312099][T17431] lo speed is unknown, defaulting to 1000 [ 656.385328][T17431] syz2: Port: 1 Link DOWN [ 656.401459][T17729] wg1 speed is unknown, defaulting to 1000 [ 656.521807][ T12] : left promiscuous mode [ 656.844447][T16415] Bluetooth: hci7: command tx timeout [ 657.719899][ T12] tipc: Left network mode [ 658.925849][T16415] Bluetooth: hci7: command tx timeout [ 659.274965][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.335384][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.431565][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.544423][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.658204][T17796] lo speed is unknown, defaulting to 1000 [ 659.665905][T17796] wg1 speed is unknown, defaulting to 1000 [ 659.694736][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 661.000908][ T52] Bluetooth: hci7: command tx timeout [ 661.882832][ T52] Bluetooth: hci1: command tx timeout [ 662.729241][T17785] lo speed is unknown, defaulting to 1000 [ 663.424522][T17741] chnl_net:caif_netlink_parms(): no params data found [ 663.960261][ T52] Bluetooth: hci1: command tx timeout [ 664.594610][T17788] lo speed is unknown, defaulting to 1000 [ 665.822569][T17788] wg1 speed is unknown, defaulting to 1000 [ 666.060342][ T52] Bluetooth: hci1: command tx timeout [ 666.991887][T17785] wg1 speed is unknown, defaulting to 1000 [ 667.099848][T17741] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.164380][T17741] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.183816][T17741] bridge_slave_0: entered allmulticast mode [ 667.205289][T17741] bridge_slave_0: entered promiscuous mode [ 667.253523][T17741] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.300313][T17741] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.310889][T17741] bridge_slave_1: entered allmulticast mode [ 667.341417][T17741] bridge_slave_1: entered promiscuous mode [ 667.549727][T17800] lo speed is unknown, defaulting to 1000 [ 668.120808][ T52] Bluetooth: hci1: command tx timeout [ 669.264321][T17800] wg1 speed is unknown, defaulting to 1000 [ 669.504208][T17741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.545584][T17741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.773881][T17796] chnl_net:caif_netlink_parms(): no params data found [ 670.223964][ T12] hsr_slave_0: left promiscuous mode [ 670.276076][ T12] hsr_slave_1: left promiscuous mode [ 670.313424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.356325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.405082][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 675.504892][ T12] team0 (unregistering): Port device team_slave_1 removed [ 675.813496][ T12] team0 (unregistering): Port device team_slave_0 removed [ 681.975611][T17741] team0: Port device team_slave_0 added [ 682.003769][T17741] team0: Port device team_slave_1 added [ 683.246393][T17741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.295490][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.340886][T17741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.274241][T17741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.309574][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.356254][T17741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.409195][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.425537][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.436075][T17796] bridge_slave_0: entered allmulticast mode [ 684.444453][T17796] bridge_slave_0: entered promiscuous mode [ 684.469445][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.477756][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.486005][T17796] bridge_slave_1: entered allmulticast mode [ 684.495442][T17796] bridge_slave_1: entered promiscuous mode [ 684.563948][T17788] chnl_net:caif_netlink_parms(): no params data found [ 684.590648][T17796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.631373][T17741] hsr_slave_0: entered promiscuous mode [ 684.637915][T17741] hsr_slave_1: entered promiscuous mode [ 684.643976][T17741] debugfs: 'hsr0' already exists in 'hsr' [ 684.650641][T17741] Cannot create hsr debugfs directory [ 684.668043][T17796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.794310][T17796] team0: Port device team_slave_0 added [ 684.829522][T17796] team0: Port device team_slave_1 added [ 684.876026][T17785] chnl_net:caif_netlink_parms(): no params data found [ 684.966273][T17796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.974026][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.002020][T17796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.040351][T17796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.047440][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.073753][T17796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.118258][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.125512][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.133274][T17788] bridge_slave_0: entered allmulticast mode [ 685.140748][T17788] bridge_slave_0: entered promiscuous mode [ 685.167590][T17800] chnl_net:caif_netlink_parms(): no params data found [ 685.179977][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.187783][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.194982][T17788] bridge_slave_1: entered allmulticast mode [ 685.204119][T17788] bridge_slave_1: entered promiscuous mode [ 685.339787][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.367703][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.374965][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.382791][T17785] bridge_slave_0: entered allmulticast mode [ 685.390329][T17785] bridge_slave_0: entered promiscuous mode [ 685.407672][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.422058][T17796] hsr_slave_0: entered promiscuous mode [ 685.429709][T17796] hsr_slave_1: entered promiscuous mode [ 685.435866][T17796] debugfs: 'hsr0' already exists in 'hsr' [ 685.441731][T17796] Cannot create hsr debugfs directory [ 685.454134][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.462428][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.470101][T17785] bridge_slave_1: entered allmulticast mode [ 685.478682][T17785] bridge_slave_1: entered promiscuous mode [ 685.545503][T17788] team0: Port device team_slave_0 added [ 685.599219][T17788] team0: Port device team_slave_1 added [ 685.625626][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.683949][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.693609][T17800] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.701309][T17800] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.708733][T17800] bridge_slave_0: entered allmulticast mode [ 685.717905][T17800] bridge_slave_0: entered promiscuous mode [ 685.740433][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.748008][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.775134][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.809730][T17800] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.818549][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.825840][T17800] bridge_slave_1: entered allmulticast mode [ 685.833715][T17800] bridge_slave_1: entered promiscuous mode [ 685.848947][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.855930][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.882651][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.944821][T17785] team0: Port device team_slave_0 added [ 685.960666][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.991719][T17785] team0: Port device team_slave_1 added [ 686.013263][T17800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.054667][T17800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.102712][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.111162][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.139215][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.183099][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.190708][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.217722][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.255843][T17788] hsr_slave_0: entered promiscuous mode [ 686.263435][T17788] hsr_slave_1: entered promiscuous mode [ 686.270188][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 686.275924][T17788] Cannot create hsr debugfs directory [ 686.301984][T17800] team0: Port device team_slave_0 added [ 686.312330][T17800] team0: Port device team_slave_1 added [ 686.372198][ T12] IPVS: stop unused estimator thread 0... [ 686.460879][T17800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.469218][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.501980][T17800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.539318][T17785] hsr_slave_0: entered promiscuous mode [ 686.546228][T17785] hsr_slave_1: entered promiscuous mode [ 686.553517][T17785] debugfs: 'hsr0' already exists in 'hsr' [ 686.559996][T17785] Cannot create hsr debugfs directory [ 686.574822][T17800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.582618][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.614710][T17800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.858128][T17800] hsr_slave_0: entered promiscuous mode [ 686.865189][T17800] hsr_slave_1: entered promiscuous mode [ 686.871826][T17800] debugfs: 'hsr0' already exists in 'hsr' [ 686.878398][T17800] Cannot create hsr debugfs directory [ 686.943492][T17741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 686.981489][T17741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.020423][T17741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.072238][T17741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.153410][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.264522][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.279077][T17796] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.289607][T17796] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 687.321747][T17796] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.374216][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.391193][T17796] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 687.473251][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.532076][T17788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 687.543346][T17788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 687.554080][T17788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.567332][T17788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.722988][T17800] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 687.774493][T17800] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 687.821956][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.841894][T17800] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 687.852789][T17800] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 687.935847][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.997507][T17785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.017967][T17785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 688.045101][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.064457][T17741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.079986][T17785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 688.091423][T17785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 688.189535][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.333456][T16415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.339382][T17796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.357630][T16415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.366080][T16415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.375680][T16415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.383598][T16415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.534747][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.592211][T17796] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.645802][T15570] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.653041][T15570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.664781][T15570] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.672012][T15570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.683636][ T12] bridge_slave_1: left allmulticast mode [ 688.697405][ T12] bridge_slave_1: left promiscuous mode [ 688.703251][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.717822][ T12] bridge_slave_0: left allmulticast mode [ 688.723517][ T12] bridge_slave_0: left promiscuous mode [ 688.733650][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.749164][ T12] bridge_slave_1: left allmulticast mode [ 688.754869][ T12] bridge_slave_1: left promiscuous mode [ 688.762704][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.773134][ T12] bridge_slave_0: left allmulticast mode [ 688.785220][ T12] bridge_slave_0: left promiscuous mode [ 688.793507][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.227617][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.240711][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.252040][ T12] bond0 (unregistering): Released all slaves [ 689.574326][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.585838][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.597060][ T12] bond0 (unregistering): Released all slaves [ 689.804367][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.902965][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.910284][T16049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.988721][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.995835][T16049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.024479][T17800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.232500][T17800] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.281087][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.351889][T17862] chnl_net:caif_netlink_parms(): no params data found [ 690.432716][ T9358] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.439957][ T9358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.457227][T16415] Bluetooth: hci2: command tx timeout [ 690.464595][ T9358] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.471841][ T9358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.652949][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.753080][ T12] hsr_slave_0: left promiscuous mode [ 690.760489][ T12] hsr_slave_1: left promiscuous mode [ 690.770895][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.778955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.788434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.795860][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.811352][ T12] hsr_slave_0: left promiscuous mode [ 690.818672][ T12] hsr_slave_1: left promiscuous mode [ 690.824593][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.832498][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.840979][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.848538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.893697][ T12] veth1_macvtap: left promiscuous mode [ 690.899547][ T12] veth0_macvtap: left promiscuous mode [ 690.905154][ T12] veth1_vlan: left promiscuous mode [ 690.910979][ T12] veth0_vlan: left promiscuous mode [ 690.920312][ T12] veth1_macvtap: left promiscuous mode [ 690.927569][ T12] veth0_macvtap: left promiscuous mode [ 690.933202][ T12] veth1_vlan: left promiscuous mode [ 690.938818][ T12] veth0_vlan: left promiscuous mode [ 691.514683][ T12] team0 (unregistering): Port device team_slave_1 removed [ 691.559361][ T12] team0 (unregistering): Port device team_slave_0 removed [ 692.367477][ T12] team0 (unregistering): Port device team_slave_1 removed [ 692.415509][ T12] team0 (unregistering): Port device team_slave_0 removed [ 692.531753][T16415] Bluetooth: hci2: command tx timeout [ 692.895905][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.903239][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.963304][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.972257][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.981733][T17862] bridge_slave_0: entered allmulticast mode [ 692.993853][T17862] bridge_slave_0: entered promiscuous mode [ 693.024545][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.034040][T17862] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.043513][T17862] bridge_slave_1: entered allmulticast mode [ 693.053139][T17862] bridge_slave_1: entered promiscuous mode [ 693.062544][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.069693][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.151493][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.188488][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.210267][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.327892][T17862] team0: Port device team_slave_0 added [ 693.379795][T17862] team0: Port device team_slave_1 added [ 693.481427][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.532189][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.568111][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.633607][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.652206][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.660951][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.693201][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.755386][T17785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.911714][T17862] hsr_slave_0: entered promiscuous mode [ 693.923464][T17862] hsr_slave_1: entered promiscuous mode [ 694.148097][T17800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.440821][T17796] veth0_vlan: entered promiscuous mode [ 694.451112][T17788] veth0_vlan: entered promiscuous mode [ 694.466077][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.501006][T17788] veth1_vlan: entered promiscuous mode [ 694.510113][T17796] veth1_vlan: entered promiscuous mode [ 694.601454][T16415] Bluetooth: hci2: command tx timeout [ 694.695750][T17796] veth0_macvtap: entered promiscuous mode [ 694.708394][T17800] veth0_vlan: entered promiscuous mode [ 694.744155][T17788] veth0_macvtap: entered promiscuous mode [ 694.759243][T17796] veth1_macvtap: entered promiscuous mode [ 694.792694][T17800] veth1_vlan: entered promiscuous mode [ 694.801695][T17788] veth1_macvtap: entered promiscuous mode [ 694.865555][T17796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.895716][ T12] bridge_slave_1: left allmulticast mode [ 694.901520][ T12] bridge_slave_1: left promiscuous mode [ 694.909022][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.921974][ T12] bridge_slave_0: left allmulticast mode [ 694.928306][ T12] bridge_slave_0: left promiscuous mode [ 694.935446][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.271563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.283329][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.295378][ T12] bond0 (unregistering): Released all slaves [ 695.315567][T17796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.354592][ T3502] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.374217][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.383025][ T3005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.405185][ T3005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.452809][ T3005] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.511276][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.612860][ T3005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.624147][T17800] veth0_macvtap: entered promiscuous mode [ 695.664562][ T3005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.674775][ T3005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.724812][ T12] hsr_slave_0: left promiscuous mode [ 695.732082][ T12] hsr_slave_1: left promiscuous mode [ 695.738018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.745681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.895940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 695.928062][ T12] team0 (unregistering): Port device team_slave_0 removed [ 696.121400][ T3005] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.133876][T17800] veth1_macvtap: entered promiscuous mode [ 696.240392][T17346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.249080][T17800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.257614][T17346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.354504][T17800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.442412][T16049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.452004][T17785] veth0_vlan: entered promiscuous mode [ 696.460292][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.468645][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.474827][T17346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.475976][T16049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.493490][T17346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.500162][T16049] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.524842][T16049] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.563493][T17862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.587642][T17862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.619291][T17785] veth1_vlan: entered promiscuous mode [ 696.626028][ T9358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.635808][T17862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.649239][ T9358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.652273][T17862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.676785][T16415] Bluetooth: hci2: command tx timeout [ 696.817267][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.832093][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.843334][T17785] veth0_macvtap: entered promiscuous mode [ 696.888046][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2972'. [ 696.939931][T17785] veth1_macvtap: entered promiscuous mode [ 696.971495][ T9358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.991644][ T9358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.219647][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.246894][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.285541][T17346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.313345][T17346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.343343][T17346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.362376][T17346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.504335][T17938] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.2976'. [ 697.643529][T16510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.661414][T16510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.712543][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.721746][T17940] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2977'. [ 697.789175][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.827162][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.853342][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.877969][T17942] xt_hashlimit: size too large, truncated to 1048576 [ 697.926471][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.933805][ T9364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.981094][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.988442][ T9364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.579554][T17958] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2980'. [ 699.773293][T17983] netlink: 'syz.8.2984': attribute type 3 has an invalid length. [ 699.783049][T17983] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.2984'. [ 701.021957][T17986] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.2985'. [ 701.122907][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.242635][T17988] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2987'. [ 701.517490][T18000] veth1_macvtap: left promiscuous mode [ 701.528308][T18000] macsec0: entered promiscuous mode [ 701.558968][T17998] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2988'. [ 702.213695][T18023] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2993'. [ 702.223464][T17862] veth0_vlan: entered promiscuous mode [ 702.254578][T17862] veth1_vlan: entered promiscuous mode [ 702.429187][T17862] veth0_macvtap: entered promiscuous mode [ 702.453035][T17862] veth1_macvtap: entered promiscuous mode [ 702.525313][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.573439][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.627739][ T3502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.648918][ T3502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.669178][ T3502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.687530][ T3502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.798332][T18037] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.2996'. [ 703.023541][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2997'. [ 703.172568][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.181458][T18046] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2995'. [ 703.181522][T18046] netlink: 'syz.7.2995': attribute type 9 has an invalid length. [ 703.181539][T18046] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2995'. [ 703.182103][T18046] netlink: 'syz.7.2995': attribute type 11 has an invalid length. [ 703.203889][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.261632][T18046] netlink: 'syz.7.2995': attribute type 11 has an invalid length. [ 703.305512][T18046] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2995'. [ 703.361354][T18050] rdma_rxe: rxe_newlink: failed to add bond0 [ 703.373595][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.392088][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.450808][T18033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.672208][T18052] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3000'. [ 703.789397][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3001'. [ 703.812251][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 704.014612][T18061] netlink: 'syz.4.2960': attribute type 29 has an invalid length. [ 704.478501][T18081] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.3006'. [ 704.746200][T18085] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.895805][T18085] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.920127][T18099] netlink: 'syz.5.3011': attribute type 29 has an invalid length. [ 705.119412][T18085] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.362829][T18110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 705.381968][T18085] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.629957][T18119] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:0 [ 705.837530][ T9363] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.861753][ T9363] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.929845][ T3691] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.947168][T18123] netlink: 'syz.5.3016': attribute type 12 has an invalid length. [ 705.955557][ T3691] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.457305][T18135] bridge_slave_1: left allmulticast mode [ 706.470528][T18135] bridge_slave_1: left promiscuous mode [ 706.507735][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.543833][T18135] bridge_slave_0: left allmulticast mode [ 706.561724][T18135] bridge_slave_0: left promiscuous mode [ 706.578273][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.201535][T18149] netlink: 'syz.4.3023': attribute type 4 has an invalid length. [ 707.247358][T18149] netlink: 'syz.4.3023': attribute type 4 has an invalid length. [ 707.842240][T18149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.873670][T18149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.133848][ T1152] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.172638][ T1152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.180185][T18167] __nla_validate_parse: 1 callbacks suppressed [ 708.180203][T18167] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3028'. [ 708.251887][ T1152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.278643][ T1152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.380133][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 708.441119][T18175] netlink: 'syz.4.3027': attribute type 29 has an invalid length. [ 708.477101][T18182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3031'. [ 708.561766][T18177] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 709.308622][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3035'. [ 709.374591][T18204] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3036'. [ 709.394636][T18204] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3036'. [ 710.167902][T18222] FAULT_INJECTION: forcing a failure. [ 710.167902][T18222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.204975][T18222] CPU: 0 UID: 0 PID: 18222 Comm: syz.5.3041 Not tainted syzkaller #0 PREEMPT(full) [ 710.205008][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.205020][T18222] Call Trace: [ 710.205029][T18222] [ 710.205037][T18222] dump_stack_lvl+0xe8/0x150 [ 710.205071][T18222] should_fail_ex+0x414/0x560 [ 710.205116][T18222] _copy_from_user+0x2d/0xb0 [ 710.205151][T18222] __sys_bpf+0x1e3/0x860 [ 710.205181][T18222] ? __pfx___sys_bpf+0x10/0x10 [ 710.205226][T18222] ? ksys_write+0x22a/0x250 [ 710.205248][T18222] ? __pfx_ksys_write+0x10/0x10 [ 710.205277][T18222] __x64_sys_bpf+0x7c/0x90 [ 710.205302][T18222] do_syscall_64+0xec/0xf80 [ 710.205324][T18222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.205343][T18222] ? trace_irq_disable+0x37/0x100 [ 710.205369][T18222] ? clear_bhb_loop+0x60/0xb0 [ 710.205392][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.205411][T18222] RIP: 0033:0x7fb93538f749 [ 710.205430][T18222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.205446][T18222] RSP: 002b:00007fb9361fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.205468][T18222] RAX: ffffffffffffffda RBX: 00007fb9355e6090 RCX: 00007fb93538f749 [ 710.205483][T18222] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005 [ 710.205495][T18222] RBP: 00007fb9361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 710.205508][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.205520][T18222] R13: 00007fb9355e6128 R14: 00007fb9355e6090 R15: 00007ffe5b8e8158 [ 710.205553][T18222] [ 710.206232][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3041'. [ 710.350409][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3042'. [ 710.515280][T18222] veth1_macvtap: left promiscuous mode [ 710.555397][T18224] veth1_macvtap: left promiscuous mode [ 710.624004][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 710.854892][T18234] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 710.987408][T18235] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 711.632557][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 712.010941][T18269] netlink: 'syz.7.3053': attribute type 29 has an invalid length. [ 712.237089][T18279] FAULT_INJECTION: forcing a failure. [ 712.237089][T18279] name failslab, interval 1, probability 0, space 0, times 0 [ 712.296855][T18279] CPU: 1 UID: 0 PID: 18279 Comm: syz.5.3054 Not tainted syzkaller #0 PREEMPT(full) [ 712.296891][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.296904][T18279] Call Trace: [ 712.296912][T18279] [ 712.296921][T18279] dump_stack_lvl+0xe8/0x150 [ 712.296957][T18279] should_fail_ex+0x414/0x560 [ 712.296992][T18279] should_failslab+0xa8/0x100 [ 712.297018][T18279] __kmalloc_cache_node_noprof+0x88/0x700 [ 712.297039][T18279] ? __get_vm_area_node+0x13f/0x300 [ 712.297073][T18279] __get_vm_area_node+0x13f/0x300 [ 712.297106][T18279] __vmalloc_node_range_noprof+0x371/0x16a0 [ 712.297126][T18279] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.297156][T18279] ? __pfx___schedule+0x10/0x10 [ 712.297190][T18279] ? lockdep_hardirqs_on+0x7b/0x110 [ 712.297218][T18279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.297241][T18279] ? __lock_acquire+0x6b6/0x2cf0 [ 712.297277][T18279] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.297299][T18279] __vmalloc_noprof+0xd2/0x120 [ 712.297316][T18279] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.297345][T18279] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.297377][T18279] bpf_prog_alloc+0x3c/0x1a0 [ 712.297405][T18279] bpf_prog_load+0x735/0x1a10 [ 712.297437][T18279] ? get_pid_task+0x20/0x1f0 [ 712.297463][T18279] ? __pfx_bpf_prog_load+0x10/0x10 [ 712.297487][T18279] ? __might_fault+0xb0/0x130 [ 712.297533][T18279] ? bpf_lsm_bpf+0x9/0x20 [ 712.297555][T18279] ? security_bpf+0x7e/0x300 [ 712.297599][T18279] __sys_bpf+0x507/0x860 [ 712.297626][T18279] ? __pfx___sys_bpf+0x10/0x10 [ 712.297668][T18279] ? rcu_is_watching+0x15/0xb0 [ 712.297699][T18279] __x64_sys_bpf+0x7c/0x90 [ 712.297722][T18279] do_syscall_64+0xec/0xf80 [ 712.297742][T18279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.297759][T18279] ? trace_irq_disable+0x37/0x100 [ 712.297781][T18279] ? clear_bhb_loop+0x60/0xb0 [ 712.297803][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.297822][T18279] RIP: 0033:0x7fb93538f749 [ 712.297840][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.297856][T18279] RSP: 002b:00007fb9361dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.297879][T18279] RAX: ffffffffffffffda RBX: 00007fb9355e6180 RCX: 00007fb93538f749 [ 712.297893][T18279] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005 [ 712.297905][T18279] RBP: 00007fb9361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 712.297918][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.297928][T18279] R13: 00007fb9355e6218 R14: 00007fb9355e6180 R15: 00007ffe5b8e8158 [ 712.297962][T18279] [ 712.297975][T18279] syz.5.3054: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 712.749311][T18279] CPU: 1 UID: 0 PID: 18279 Comm: syz.5.3054 Not tainted syzkaller #0 PREEMPT(full) [ 712.749340][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.749362][T18279] Call Trace: [ 712.749370][T18279] [ 712.749380][T18279] dump_stack_lvl+0xe8/0x150 [ 712.749412][T18279] warn_alloc+0x214/0x310 [ 712.749440][T18279] ? __pfx_warn_alloc+0x10/0x10 [ 712.749462][T18279] ? __get_vm_area_node+0x13f/0x300 [ 712.749497][T18279] ? __get_vm_area_node+0x2b5/0x300 [ 712.749533][T18279] __vmalloc_node_range_noprof+0x396/0x16a0 [ 712.749554][T18279] ? __pfx___schedule+0x10/0x10 [ 712.749593][T18279] ? lockdep_hardirqs_on+0x7b/0x110 [ 712.749623][T18279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.749643][T18279] ? __lock_acquire+0x6b6/0x2cf0 [ 712.749671][T18279] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.749695][T18279] __vmalloc_noprof+0xd2/0x120 [ 712.749711][T18279] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.749740][T18279] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 712.749771][T18279] bpf_prog_alloc+0x3c/0x1a0 [ 712.749800][T18279] bpf_prog_load+0x735/0x1a10 [ 712.749835][T18279] ? get_pid_task+0x20/0x1f0 [ 712.749859][T18279] ? __pfx_bpf_prog_load+0x10/0x10 [ 712.749886][T18279] ? __might_fault+0xb0/0x130 [ 712.749934][T18279] ? bpf_lsm_bpf+0x9/0x20 [ 712.749956][T18279] ? security_bpf+0x7e/0x300 [ 712.749981][T18279] __sys_bpf+0x507/0x860 [ 712.750007][T18279] ? __pfx___sys_bpf+0x10/0x10 [ 712.750053][T18279] ? rcu_is_watching+0x15/0xb0 [ 712.750085][T18279] __x64_sys_bpf+0x7c/0x90 [ 712.750109][T18279] do_syscall_64+0xec/0xf80 [ 712.750129][T18279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.750148][T18279] ? trace_irq_disable+0x37/0x100 [ 712.750173][T18279] ? clear_bhb_loop+0x60/0xb0 [ 712.750195][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.750213][T18279] RIP: 0033:0x7fb93538f749 [ 712.750232][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.750249][T18279] RSP: 002b:00007fb9361dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.750270][T18279] RAX: ffffffffffffffda RBX: 00007fb9355e6180 RCX: 00007fb93538f749 [ 712.750284][T18279] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005 [ 712.750296][T18279] RBP: 00007fb9361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 712.750308][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.750320][T18279] R13: 00007fb9355e6218 R14: 00007fb9355e6180 R15: 00007ffe5b8e8158 [ 712.750362][T18279] [ 712.750774][T18279] Mem-Info: [ 713.017219][T18279] active_anon:3922 inactive_anon:0 isolated_anon:0 [ 713.017219][T18279] active_file:3848 inactive_file:40161 isolated_file:0 [ 713.017219][T18279] unevictable:768 dirty:471 writeback:0 [ 713.017219][T18279] slab_reclaimable:12327 slab_unreclaimable:119473 [ 713.017219][T18279] mapped:30751 shmem:1358 pagetables:1133 [ 713.017219][T18279] sec_pagetables:0 bounce:0 [ 713.017219][T18279] kernel_misc_reclaimable:0 [ 713.017219][T18279] free:1302315 free_pcp:12507 free_cma:0 [ 713.124353][T18279] Node 0 active_anon:15632kB inactive_anon:0kB active_file:15392kB inactive_file:160440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123020kB dirty:1888kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14248kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 713.186841][T18279] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 713.306874][T18279] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.408290][T18279] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 713.426099][T18279] Node 0 DMA32 free:1291440kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15832kB inactive_anon:0kB active_file:15392kB inactive_file:160440kB unevictable:1536kB writepending:1888kB zspages:0kB present:3129332kB managed:2559500kB mlocked:0kB bounce:0kB free_pcp:40904kB local_pcp:20396kB free_cma:0kB [ 713.475399][T18279] lowmem_reserve[]: 0 0 1 1 1 [ 713.542385][T18279] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.618234][T18279] lowmem_reserve[]: 0 0 0 0 0 [ 713.629677][T18279] Node 1 Normal free:3902524kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9296kB local_pcp:3968kB free_cma:0kB [ 713.689113][T18279] lowmem_reserve[]: 0 0 0 0 0 [ 713.703206][T18279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 713.720758][T18279] Node 0 DMA32: 6622*4kB (UME) 4457*8kB (UME) 1845*16kB (UME) 43*32kB (UME) 155*64kB (UME) 224*128kB (UME) 264*256kB (UME) 212*512kB (UM) 117*1024kB (UM) 60*2048kB (UME) 181*4096kB (UM) = 1291824kB [ 713.743933][T18279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 713.756265][T18279] Node 1 Normal: 201*4kB (UME) 47*8kB (UME) 44*16kB (UME) 231*32kB (UME) 90*64kB (UME) 19*128kB (UME) 6*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3902524kB [ 713.779827][T18279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 713.790380][T18279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 713.804103][T18279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 713.814208][T18279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 713.823872][T18279] 45362 total pagecache pages [ 713.828985][T18279] 0 pages in swap cache [ 713.833237][T18279] Free swap = 124996kB [ 713.838170][T18279] Total swap = 124996kB [ 713.842626][T18279] 2097051 pages RAM [ 713.851058][T18279] 0 pages HighMem/MovableOnly [ 713.864459][T18279] 425086 pages reserved [ 713.898521][T18279] 0 pages cma reserved [ 714.073905][T18327] __nla_validate_parse: 4 callbacks suppressed [ 714.073926][T18327] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.3067'. [ 714.090975][T18331] xt_hashlimit: size too large, truncated to 1048576 [ 714.145136][T18327] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3067'. [ 715.284925][T18369] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3078'. [ 715.309468][T18366] vlan0: entered promiscuous mode [ 715.360560][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3078'. [ 715.546030][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3078'. [ 715.613404][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3079'. [ 715.816334][T18382] netlink: 'syz.6.3079': attribute type 29 has an invalid length. [ 715.862474][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3082'. [ 716.198716][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3084'. [ 716.254162][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3085'. [ 716.281893][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 716.789522][T18413] vcan0: Master is either lo or non-ether device [ 718.565292][T18456] syzkaller0: entered promiscuous mode [ 718.580420][T18456] syzkaller0: entered allmulticast mode [ 718.593091][T18459] xt_hashlimit: size too large, truncated to 1048576 [ 719.001185][T18470] xt_hashlimit: size too large, truncated to 1048576 [ 719.117857][T18474] netlink: 'syz.7.3101': attribute type 1 has an invalid length. [ 719.132419][T18474] __nla_validate_parse: 4 callbacks suppressed [ 719.132442][T18474] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3101'. [ 719.304983][T18476] gretap0: entered promiscuous mode [ 719.322760][T18476] vlan2: entered promiscuous mode [ 719.593082][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 719.703838][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 719.772266][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3108'. [ 719.818228][T18492] netlink: 'syz.6.3107': attribute type 29 has an invalid length. [ 720.064200][T18513] xt_TCPMSS: Only works on TCP SYN packets [ 720.068652][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 720.227844][T18520] FAULT_INJECTION: forcing a failure. [ 720.227844][T18520] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 720.262425][T18520] CPU: 1 UID: 0 PID: 18520 Comm: syz.5.3114 Not tainted syzkaller #0 PREEMPT(full) [ 720.262462][T18520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.262475][T18520] Call Trace: [ 720.262483][T18520] [ 720.262492][T18520] dump_stack_lvl+0xe8/0x150 [ 720.262525][T18520] should_fail_ex+0x414/0x560 [ 720.262563][T18520] prepare_alloc_pages+0x22b/0x650 [ 720.262596][T18520] __alloc_frozen_pages_noprof+0x123/0x370 [ 720.262625][T18520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 720.262654][T18520] ? __lock_acquire+0x6b6/0x2cf0 [ 720.262678][T18520] ? policy_nodemask+0x27c/0x720 [ 720.262707][T18520] alloc_pages_mpol+0x232/0x4a0 [ 720.262747][T18520] vma_alloc_folio_noprof+0xe4/0x200 [ 720.262774][T18520] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 720.262806][T18520] ? ___pte_offset_map+0x29/0x240 [ 720.262838][T18520] folio_prealloc+0x30/0x180 [ 720.262871][T18520] do_pte_missing+0x14e8/0x3330 [ 720.262915][T18520] handle_mm_fault+0x1b26/0x32b0 [ 720.262944][T18520] ? __pte_offset_map_lock+0x13e/0x210 [ 720.262987][T18520] ? handle_mm_fault+0xdb/0x32b0 [ 720.263025][T18520] ? __pfx_handle_mm_fault+0x10/0x10 [ 720.263062][T18520] ? follow_page_pte+0x7ef/0x13e0 [ 720.263101][T18520] ? __pfx_follow_page_pte+0x10/0x10 [ 720.263143][T18520] __get_user_pages+0x1650/0x29f0 [ 720.263206][T18520] __gup_longterm_locked+0xde4/0x1660 [ 720.263247][T18520] ? sanity_check_pinned_pages+0x123a/0x1300 [ 720.263283][T18520] gup_fast_fallback+0x1d26/0x2290 [ 720.263347][T18520] ? __pfx_gup_fast_fallback+0x10/0x10 [ 720.263372][T18520] ? rcu_is_watching+0x15/0xb0 [ 720.263397][T18520] ? is_valid_gup_args+0x11f/0x200 [ 720.263427][T18520] ? pin_user_pages_fast+0x4d/0xb0 [ 720.263457][T18520] rds_info_getsockopt+0x1fb/0x470 [ 720.263491][T18520] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 720.263521][T18520] ? __might_fault+0xb0/0x130 [ 720.263553][T18520] ? rds_getsockopt+0x2a9/0x500 [ 720.263573][T18520] ? __pfx_rds_getsockopt+0x10/0x10 [ 720.263596][T18520] do_sock_getsockopt+0x2b4/0x3d0 [ 720.263625][T18520] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 720.263650][T18520] ? __fget_files+0x3a0/0x420 [ 720.263674][T18520] ? __fget_files+0x2a/0x420 [ 720.263707][T18520] __x64_sys_getsockopt+0x1a5/0x250 [ 720.263743][T18520] do_syscall_64+0xec/0xf80 [ 720.263764][T18520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.263782][T18520] ? trace_irq_disable+0x37/0x100 [ 720.263807][T18520] ? clear_bhb_loop+0x60/0xb0 [ 720.263832][T18520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.263852][T18520] RIP: 0033:0x7fb93538f749 [ 720.263871][T18520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.263888][T18520] RSP: 002b:00007fb93621e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 720.263911][T18520] RAX: ffffffffffffffda RBX: 00007fb9355e5fa0 RCX: 00007fb93538f749 [ 720.263925][T18520] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000005 [ 720.263938][T18520] RBP: 00007fb93621e090 R08: 0000200000000040 R09: 0000000000000000 [ 720.263951][T18520] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 720.263963][T18520] R13: 00007fb9355e6038 R14: 00007fb9355e5fa0 R15: 00007ffe5b8e8158 [ 720.263998][T18520] [ 720.647388][T18522] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3115'. [ 720.657880][T18523] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3115'. [ 720.773948][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.782962][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.857455][T18523] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.864734][T18523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.872352][T18523] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.879582][T18523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.240394][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3120'. [ 721.362628][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 721.771629][T18537] bond0: (slave bond_slave_1): Releasing backup interface [ 721.796139][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 721.806969][T18544] tipc: Enabling of bearer rejected, failed to enable media [ 722.623467][T18577] netlink: 'syz.7.3133': attribute type 8 has an invalid length. [ 723.042073][T18593] netlink: 'syz.6.3137': attribute type 29 has an invalid length. [ 724.730805][T18639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 725.186302][T18647] __nla_validate_parse: 6 callbacks suppressed [ 725.186323][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3148'. [ 725.612140][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3149'. [ 726.301587][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3153'. [ 726.408456][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3154'. [ 726.431992][T18677] veth1_macvtap: left promiscuous mode [ 726.948800][T18697] netlink: 15518 bytes leftover after parsing attributes in process `syz.8.3159'. [ 727.245399][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3161'. [ 727.327521][T18710] netlink: 'syz.8.3161': attribute type 29 has an invalid length. [ 727.827951][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3163'. [ 727.969484][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3167'. [ 728.257643][T18746] netlink: 15518 bytes leftover after parsing attributes in process `syz.8.3171'. [ 728.330701][T18748] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3170'. [ 728.874386][T18765] netlink: 'syz.7.3175': attribute type 1 has an invalid length. [ 729.016079][T18772] netlink: 'syz.6.3178': attribute type 10 has an invalid length. [ 730.385202][T18806] __nla_validate_parse: 2 callbacks suppressed [ 730.385225][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3185'. [ 732.368579][T18815] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3187'. [ 732.387741][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3187'. [ 732.552439][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 733.460028][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3197'. [ 733.475538][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 733.962632][T18871] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.995906][T17694] IPVS: starting estimator thread 0... [ 734.010370][T18875] sch_fq: defrate 0 ignored. [ 734.051461][T18879] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3201'. [ 734.062211][T18880] netlink: 'syz.4.3203': attribute type 1 has an invalid length. [ 734.076926][T18880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.092912][T18871] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.110147][T18878] IPVS: using max 28 ests per chain, 67200 per kthread [ 734.182406][T18886] batadv_slave_1: entered promiscuous mode [ 734.207907][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3206'. [ 734.315798][T18886] bridge_slave_1: left allmulticast mode [ 734.346283][T18886] bridge_slave_1: left promiscuous mode [ 734.371237][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.402337][T18886] bridge_slave_0: left allmulticast mode [ 734.422607][T18886] bridge_slave_0: left promiscuous mode [ 734.430424][T18886] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.470682][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 734.535949][T18887] vlan0: entered promiscuous mode [ 734.541852][T18887] geneve1: entered promiscuous mode [ 734.548068][T18887] vlan0: entered allmulticast mode [ 734.553382][T18887] geneve1: entered allmulticast mode [ 734.569190][T18871] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.633828][T18885] batadv_slave_1: left promiscuous mode [ 734.791327][T18871] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.003388][T18516] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.055051][T18516] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.088796][T18516] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.114403][T18516] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.235487][T18918] ------------[ cut here ]------------ [ 735.243289][T18918] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfb, 0xf9] s64=[0xfb, 0xf9] u32=[0xfb, 0xf9] s32=[0xfb, 0xf9] var_off=(0xfb, 0x0) [ 735.262485][T18918] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.4.3214/18918 [ 735.275845][T18918] Modules linked in: [ 735.281873][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.4.3214 Not tainted syzkaller #0 PREEMPT(full) [ 735.291788][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.302808][T18918] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 735.310019][T18918] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 735.331260][T18918] RSP: 0018:ffffc9000c6c6ed0 EFLAGS: 00010246 [ 735.338681][T18918] RAX: dffffc0000000000 RBX: 1ffff1100f26dc2e RCX: 00000000000000fb [ 735.347181][T18918] RDX: ffffffff8b71cde0 RSI: ffffffff8b7255a0 RDI: ffffffff8f8615e0 [ 735.355305][T18918] RBP: 00000000000000f9 R08: 00000000000000f9 R09: 00000000000000fb [ 735.363723][T18918] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88807936e170 [ 735.371797][T18918] R13: 00000000000000fb R14: 1ffff1100f26dc2d R15: 00000000000000fb [ 735.380485][T18918] FS: 00007f5cb15f66c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 735.390772][T18918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.398221][T18918] CR2: 00007fb9361fcf98 CR3: 00000000227cc000 CR4: 00000000003526f0 [ 735.406252][T18918] Call Trace: [ 735.408865][T18907] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.410006][T18918] [ 735.419427][T18918] reg_set_min_max+0x2b4/0x340 [ 735.424242][T18918] check_cond_jmp_op+0x19c6/0x2e20 [ 735.425963][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3217'. [ 735.429950][T18918] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 735.429991][T18918] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 735.430021][T18918] do_check+0x58f5/0xeba0 [ 735.455769][T18918] ? __pfx_stack_trace_save+0x10/0x10 [ 735.461823][T18918] ? __pfx_do_check+0x10/0x10 [ 735.467067][T18918] ? init_func_state+0x1ab2/0x28d0 [ 735.472247][T18918] do_check_common+0x19cc/0x25b0 [ 735.478109][T18918] bpf_check+0x5e7a/0x1c300 [ 735.483912][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.490582][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.495601][T18918] ? __mutex_trylock_common+0x153/0x260 [ 735.501737][T18918] ? __mutex_trylock_common+0x153/0x260 [ 735.507944][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.512940][T18918] ? pcpu_block_update+0x3c6/0x8d0 [ 735.518644][T18918] ? css_rstat_updated+0x239/0x520 [ 735.523823][T18918] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 735.530203][T18918] ? __pfx_bpf_check+0x10/0x10 [ 735.535027][T18918] ? ktime_get_with_offset+0x93/0x2a0 [ 735.541013][T18918] ? ktime_get_with_offset+0x93/0x2a0 [ 735.547011][T18918] ? __asan_memset+0x22/0x50 [ 735.551659][T18918] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 735.557589][T18918] ? security_bpf_prog_load+0x125/0x3f0 [ 735.563199][T18918] bpf_prog_load+0x13ba/0x1a10 [ 735.568551][T18918] ? __pfx_bpf_prog_load+0x10/0x10 [ 735.573718][T18918] ? __might_fault+0xb0/0x130 [ 735.578978][T18918] ? bpf_lsm_bpf+0x9/0x20 [ 735.584601][T18918] ? security_bpf+0x7e/0x300 [ 735.590663][T18918] __sys_bpf+0x507/0x860 [ 735.594978][T18918] ? __pfx___sys_bpf+0x10/0x10 [ 735.600402][T18918] ? rcu_is_watching+0x15/0xb0 [ 735.605234][T18918] __x64_sys_bpf+0x7c/0x90 [ 735.610254][T18918] do_syscall_64+0xec/0xf80 [ 735.614803][T18918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.621441][T18918] ? trace_irq_disable+0x37/0x100 [ 735.627059][T18918] ? clear_bhb_loop+0x60/0xb0 [ 735.631785][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.638457][T18918] RIP: 0033:0x7f5cb338f749 [ 735.642921][T18918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.647183][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3214'. [ 735.663195][T18918] RSP: 002b:00007f5cb15f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.680741][T18918] RAX: ffffffffffffffda RBX: 00007f5cb35e6180 RCX: 00007f5cb338f749 [ 735.690133][T18918] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005 [ 735.699379][T18918] RBP: 00007f5cb3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.707915][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.715925][T18918] R13: 00007f5cb35e6218 R14: 00007f5cb35e6180 R15: 00007ffe80fdfd68 [ 735.725904][T18918] [ 735.729716][T18918] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 735.737036][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.4.3214 Not tainted syzkaller #0 PREEMPT(full) [ 735.746439][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.756621][T18918] Call Trace: [ 735.759936][T18918] [ 735.762910][T18918] vpanic+0x1e0/0x670 [ 735.766989][T18918] panic+0xb9/0xc0 [ 735.770844][T18918] ? __pfx_panic+0x10/0x10 [ 735.775331][T18918] __warn+0x317/0x4b0 [ 735.779351][T18918] ? reg_bounds_sanity_check+0x201/0xc30 [ 735.785049][T18918] ? reg_bounds_sanity_check+0x201/0xc30 [ 735.790723][T18918] __report_bug+0x288/0x500 [ 735.795273][T18918] ? reg_bounds_sanity_check+0x201/0xc30 [ 735.800957][T18918] ? __pfx___report_bug+0x10/0x10 [ 735.806031][T18918] ? bpf_prog_load+0x13ba/0x1a10 [ 735.811035][T18918] report_bug_entry+0x19a/0x290 [ 735.816020][T18918] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 735.821852][T18918] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 735.827525][T18918] handle_bug+0xca/0x200 [ 735.831816][T18918] exc_invalid_op+0x1a/0x50 [ 735.836366][T18918] asm_exc_invalid_op+0x1a/0x20 [ 735.841250][T18918] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 735.847513][T18918] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 735.867132][T18918] RSP: 0018:ffffc9000c6c6ed0 EFLAGS: 00010246 [ 735.873317][T18918] RAX: dffffc0000000000 RBX: 1ffff1100f26dc2e RCX: 00000000000000fb [ 735.881325][T18918] RDX: ffffffff8b71cde0 RSI: ffffffff8b7255a0 RDI: ffffffff8f8615e0 [ 735.889325][T18918] RBP: 00000000000000f9 R08: 00000000000000f9 R09: 00000000000000fb [ 735.897398][T18918] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88807936e170 [ 735.905373][T18918] R13: 00000000000000fb R14: 1ffff1100f26dc2d R15: 00000000000000fb [ 735.913392][T18918] reg_set_min_max+0x2b4/0x340 [ 735.918179][T18918] check_cond_jmp_op+0x19c6/0x2e20 [ 735.923308][T18918] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 735.928777][T18918] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 735.934767][T18918] do_check+0x58f5/0xeba0 [ 735.939107][T18918] ? __pfx_stack_trace_save+0x10/0x10 [ 735.944548][T18918] ? __pfx_do_check+0x10/0x10 [ 735.949235][T18918] ? init_func_state+0x1ab2/0x28d0 [ 735.954365][T18918] do_check_common+0x19cc/0x25b0 [ 735.959325][T18918] bpf_check+0x5e7a/0x1c300 [ 735.963840][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.968789][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.973745][T18918] ? __mutex_trylock_common+0x153/0x260 [ 735.979308][T18918] ? __mutex_trylock_common+0x153/0x260 [ 735.984870][T18918] ? __lock_acquire+0x6b6/0x2cf0 [ 735.989827][T18918] ? pcpu_block_update+0x3c6/0x8d0 [ 735.994960][T18918] ? css_rstat_updated+0x239/0x520 [ 736.000101][T18918] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 736.005933][T18918] ? __pfx_bpf_check+0x10/0x10 [ 736.010708][T18918] ? ktime_get_with_offset+0x93/0x2a0 [ 736.016100][T18918] ? ktime_get_with_offset+0x93/0x2a0 [ 736.021573][T18918] ? __asan_memset+0x22/0x50 [ 736.026264][T18918] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 736.031470][T18918] ? security_bpf_prog_load+0x125/0x3f0 [ 736.037026][T18918] bpf_prog_load+0x13ba/0x1a10 [ 736.041810][T18918] ? __pfx_bpf_prog_load+0x10/0x10 [ 736.046964][T18918] ? __might_fault+0xb0/0x130 [ 736.051669][T18918] ? bpf_lsm_bpf+0x9/0x20 [ 736.056001][T18918] ? security_bpf+0x7e/0x300 [ 736.060605][T18918] __sys_bpf+0x507/0x860 [ 736.064956][T18918] ? __pfx___sys_bpf+0x10/0x10 [ 736.069774][T18918] ? rcu_is_watching+0x15/0xb0 [ 736.074570][T18918] __x64_sys_bpf+0x7c/0x90 [ 736.079015][T18918] do_syscall_64+0xec/0xf80 [ 736.083530][T18918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.089606][T18918] ? trace_irq_disable+0x37/0x100 [ 736.094642][T18918] ? clear_bhb_loop+0x60/0xb0 [ 736.099334][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.105233][T18918] RIP: 0033:0x7f5cb338f749 [ 736.109742][T18918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.129456][T18918] RSP: 002b:00007f5cb15f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.137903][T18918] RAX: ffffffffffffffda RBX: 00007f5cb35e6180 RCX: 00007f5cb338f749 [ 736.145898][T18918] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005 [ 736.153878][T18918] RBP: 00007f5cb3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.161868][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.169871][T18918] R13: 00007f5cb35e6218 R14: 00007f5cb35e6180 R15: 00007ffe80fdfd68 [ 736.177966][T18918] [ 736.181346][T18918] Kernel Offset: disabled [ 736.185668][T18918] Rebooting in 86400 seconds..