last executing test programs: 6m24.529693518s ago: executing program 2 (id=4404): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x188, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x140}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c5d9f621e9899ae}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe4c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_NAT_DST={0xbc, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x188}, 0x1, 0x0, 0x0, 0x24008890}, 0x24004000) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) (async) read$alg(0xffffffffffffffff, &(0x7f0000001500)=""/4085, 0xff5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6m24.396984422s ago: executing program 2 (id=4406): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6m24.383723464s ago: executing program 2 (id=4408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000070000000000000000000f0000009500000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) unshare(0x62020600) 6m24.08262671s ago: executing program 2 (id=4411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) 6m23.821291712s ago: executing program 2 (id=4414): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x8, 0x5, @local}, @RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2, 0x1}, 0x80, 0x0}, 0x4048040) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000a0000004a68030000000000100000000000000010010000020000004478fd281c1f28b93e9499c715dceb9d351150656bd3ae197ea9940185cda3e4ce497a28d8d63743f865855985a48d901504683765208052b67cd641bf4914c4ba5fb33c13829f10a5cfef839f6346cb3b83cd2cc3cfb7b3f29674644fee2008b82a02d8f04167e18dc30397c78eca46840ba2f425ee347219c976314905db7d9bf8dc176159aa54c834a2d3b2"], 0x28}, 0xfc40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x50, r8, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r7) 6m23.656464031s ago: executing program 2 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x2d, 0x806, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f4000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000055090100000000009500000000000000183800000300000000000000000000008520000001000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000ad3a0c0004000000186b0000030000000000000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500"/208], &(0x7f0000000000)='syzkaller\x00', 0xffffc635, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x8, 0x4}], 0x10, 0x4}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='\x00', 0x96f62656f0cca6e8, &(0x7f0000000400)={@align=0xe, {0x3, 0x9, 0x0, 0xffffffffffffffa2}}, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000540)={0x4, 0x8}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008000000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x3) 6m8.466843883s ago: executing program 32 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x2d, 0x806, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f4000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000055090100000000009500000000000000183800000300000000000000000000008520000001000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000ad3a0c0004000000186b0000030000000000000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500"/208], &(0x7f0000000000)='syzkaller\x00', 0xffffc635, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x8, 0x4}], 0x10, 0x4}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='\x00', 0x96f62656f0cca6e8, &(0x7f0000000400)={@align=0xe, {0x3, 0x9, 0x0, 0xffffffffffffffa2}}, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000540)={0x4, 0x8}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008000000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x3) 2m37.690945694s ago: executing program 5 (id=5612): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xa0, 0x1, 0x1}, 0x1c) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @bcast, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @bcast, 0x0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000081b50000006e1697eabf91654ac54da0de00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendto$l2tp6(r0, &(0x7f0000000240)="26dfa9057f8c7ce92ce0340ca27e4ded65bde1fecde873cffc8771520b2a17e04074480469346243909cb590627c567a8a99d4e9acbff96b87c5a528b456e286195b2b9d51e98cf3b853bad49d8afefb0e3d26f5b2701f", 0x57, 0x4000000, &(0x7f0000000080)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xad6, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f0000000100)) 2m36.643016778s ago: executing program 5 (id=5613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x9, 0xfffffffd, 0x0, 0x8, 0x0, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x45, [0x0, 0x2]}}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000000)) 2m35.721679481s ago: executing program 5 (id=5617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x3f, 0x107, 0xfffffefe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0x4, 0x142}, @typed={0x44, 0x59, 0x0, 0x0, @binary="a87434b5a23fcd579e89a262fd34ab6507e63ac3c5325c069bd19be16f8b2046485f66e7c349c9b1177ceae16b30226f5ebffcb105d0aa2007ce039096b55ef2"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48815}, 0x4004080) 2m34.776993987s ago: executing program 5 (id=5620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4) (async) r1 = epoll_create(0x3ff) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0xfffffffffffffe45) listen(r2, 0x50) (async) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x50) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) close(0x3) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ppoll(&(0x7f0000000240)=[{r6}, {r6, 0x8153}], 0x2, 0x0, 0x0, 0x0) (async) close(0x3) r8 = epoll_create1(0x80000) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$key(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0216cb090d0000002bbd7000fcdbdf250100140000000000050005006c6000000a004e20000004fcff010000000000000000000000000001080000000000000005001a00e0000001000000000000000000000000fe0100000000000000000000000001010f001010"], 0x68}}, 0xc810) (async) sendmmsg$unix(r10, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048080}}], 0x1, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000280)={0x2000000}) 2m34.66229785s ago: executing program 5 (id=5621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x73bd2679bf2f40c0}, {0x0, 0xfff3}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m34.225891632s ago: executing program 5 (id=5622): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r1, 0x607d8000) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) listen(r6, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r8, r7, r7]}}, @rights={{0x18, 0x1, 0x1, [r8]}}], 0x38}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf250e0000000c0099000f0000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000005c800000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 2m24.424928729s ago: executing program 4 (id=5697): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000400007ffffbd7000fedbdf25037c00000400c280100001800b00108007000000772e8b00040009"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000400)={0x10, 0x0, "9a347a5cfed418d274dfe2e3a9055c59"}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7fffffff, 0x7, 0xd6, 0x9e}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004080) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r8, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m24.346519064s ago: executing program 4 (id=5698): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r2, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000001580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)={0x1264, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1250, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "76e00dcea0f406df2364cbad2fa08ff9492fb94f8c1486056e8f2be5fe59c03f20eeee4efca5e84a0e0b44c1cc8b3e912e6e0365b8ad66bdd1a92f53dbca69f10cd3830217b693396f94ad2df4fef4cc3883808233513f55a0ee4401f795acf1622cb70f6ca9f21b754a75adc1b1de75ab3a0ff7d081bd1819b2dbd56f6c1fbeac3ecf242a6b704dfae1d3b97d5985d6ef173638657b99b5f2e69540c52617ee7482de36d2fd896a72cf77e1c184ce6e83a77fbb403f72cb9704122f5dedbbf7"}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "73466e6567cb25257de4dfef2d1d780400a9d2b1248e65df7bf264210890f8241ed855738c2033cac3bbff60797c080ff2a908c3af17bc60e81b3b1a2ce98ccabf1a2f2e0b305ddb7489bbe58eb4c4002605f654143c35d9db883496effe94e303ed42fd8b4a7b2ce1d1c7e33d6780ea92d28dd720"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "238d70a37bd831626e0df7336201d68725aac91c333a3e9357f545ea4e1a9088d3583c461bcb84939c315a444e698e7f2ed08d1af4c110f47d8596c8ca6ad2938aedc4566f2471d40a94c9752807b8f50e78c39277d2511db70f330dd8231ee530f00bbf9f499a1726f6fbf5951c8d461d4bf448638a746f782d656d693419c8c5edc60ab75e8c46a474c8223e6fa1d0f99b59664e7b25bfe292cf784806d27bb28e0806f3e5946fef8aa1ced57ab579d66a291502e8c5c162f7dcaafa4b2db5530fb45e9633a639cc1863b2aaed92bc1795eb46bf1bcccfa1300e4894712f52ace707bb9c12b4400d8c8a5bdca7c6501a6960a178ec"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "f5a824985931a06f4e7e11e60622433a075f6819f9811e311a5ce500026214d657c7cc84b6c639c36562f38e1f6c7b4a59de4575862d197b660abad390421aa5525aae4f4bba0e1e4863c476ad2beb549a7399266f5457b56342a774ecc02803e4bcb5e5e90c6c8fcafb53d450094f89aec7671fddc59dfc22cb01a983d0e9166be0913a07cf296af39e996b40f9ea7d871b10ee38310d85b7f62eb0700fe5151c20425a4d53202f5666b15d245e2c846a2f9c1340d8a5f67a76c3cb42ed130c41a5f1973b5b399898a9688101a269a841fe5d5d1341cbacf4f5f27318418caa2110555ee13d13cf26af49ea47a631b81a4595bdb88c63fa20be1a453832ab62b14f34e783e42c1ca0d865e732595c563cb8573c55b919bbab69abfa72d1e15d6a356b9977d4f5a8ecffea9ac403891accacdb08b990a2c2f7fc52f222036f688c56698ff1b30eea434a4821547bd4ec322a7ba44337108ccbe8e7a705a184ff67916abdb3dff8d28d95a41581e4f48b04ba43db8fb2299fca088eaac996f39ea33e4f3b781a0bb8c8a65f9edbde143780f95fc00a95e91e2b049217f0d6c2b5e759af9adcfc887ca928cb38453a850d1dd51551d311e59802a783696d586c04a88815cc034b984440158eeac23de3a928ceec0ee330a39c220d19e0ae660fd2dd5bc7234bda4b820a813b96e7e063ca19c2e04ff93ba3624a4c6e2c7c161e7abeedc0484cc09357dfb52d0acfda0081dc66c90b51adfa2e046699c8de0e0357a26a6eab4c0918b0ef51a37713d6848c4bfcf2832f621bb4c4b9ce8bcad34b1e8bfcff88f0c14b3ed4ac3c5f7fac5e4c1053a784f9515486d7ae73918c01afc99457c2d4d6e3a65f0bddcfedca49dc8b5fcfaa633ed210122e7395a77896ba4c52d13efaa2c9768f02be96ae1744e04c7ce8b3d669919672c3827aefe1f68467912e49aa7a19b43282f07a4043dc2a5d2881801eef33b2ecbf509cb8f86d3d69c9d3baff5e3fa1b093557bd472bde11acc10a8f291a048ba1042bf12baab544e89b909f4de0c9a973abc7859da99e496eeed49ff55595f02793931aba6cdf680ea5c1d2ea2196af9c8fcaa938aa89b89a95a000121f2b60ecda38070f7e3e64126cefe05668a4693d86de89b6a48b74555ffc881ec17b50ca5e2c4bbb9a081a59da15ad4c0423142640da31631fc8b666420bab71453bc6bfdeef175912b0f0f9c453a2a69256df55f3d95a5eae957ec82ec93188eef9f51c8b7d842bfaca646c1cb692138337afd11180d5aaa02b087f82ddaf88a448b6e8b54b1b9b186ad6da3e578a589777cdabc0ba4cf6ab5e2b7920dd38ce28aa67f1a699780e1c7dc92ee933e33fee706408163661e9cedf842240dae4ab287df6cb82200446a655b84581c4b200c9d5911616fe09bf1cee2d548e97a1489c72bc69bcdd3692f9c4eccf09d8726fcddd5082b457176e62bda135600adf03f88b26ca14b6618ecf7ad4311bf26034cb936f7235c8e42adda8c0e1013dde1350a2769a0f24d96017a1b94a01c22135b3899c08de078ac9c1d6a9a677df0530f64a47c8ed339202d50764a5325690678a7aa9c202bf9c04f92acec7666508cd86354725cf90574b4ee40fa57f097df21a6a08ea26c2eec184339f242b34e988353e83fb7e0a4d82df6213b83f8b5cabad5825f1ac8b431660fd3bec04a6a71f7defe53882f9c30d01a7f770e55e1a96f89eab15dea5662c9bd523b6299f67c060ffa34b3170bdfb456394b13620750132816e22b4fd017894ab2d86d0cf2b4b2a20f1d93dc5fc191753674049194f52d3df9adb6160d16455afa774d70bb7759afca9559c8fd6ae42394a4e611ff0b30e13845c21c20d8d5cd117953bab1b8a495744739e26e48ed022916c81a07bbeed0a26225194b2730e6100981ea1b786cba3a13f9bf8c1f79929d55f785ab936d795e6c783966c4c8c8d920a453268af82fb5783fa19bf1a336d4d3bb756bb7161ef72ddf449470bc6b3395f91f7283f6d7b345706728e88c99e9d6939d870edab5954c4c5af7d6d4b95c855c3eb0ca1e76417f4e0b3d465c761f7004fb75d39764d45d901dd5871928060163a26d6f990fdab268362c160f70031306cbbb2eb0810c0c4dc171b6e264de3278ee5b92949f96a237dc09819e37b856bde6b27c2c2f7ccc2838abc977742cc881d81d7680d4bd14164e97efde21ece80a8ba4ba5f60ef4bf8c0e69957dd66b8b2955bb193104df167c2618a3e31516a959fdbbd55fda6d5b61a7e6017d0d871ff432e90821a963d2ff9827bc47fb201a70910175642c365586b36724a54a6f455a475eb1b1fe6ffb7de5152bb760cebe0cb5773442f26d9d5cee449cc3044e4e69857a0c13e87971f2ddb96ead800d4b11c32cdbc90974126e913c405f734515384f196727f312420857a25264b03b0aac5442872c91362aa47cc8dd8096295d654874d37ecd73056969289755a225df2fa828e15399d7d1f97224459486346c654633f8299c0c3edf2999fac03a0622b2eb8156817ffb06aeb0d6f9172f678a02757a95a2a8304fcc5697be4f7eb3b1d63828dff6a851afe6db061ac305d4e820108abc95994a362049f9bf09128791bbae56fd9aaf2784137daead5f109bf7688538e60651b3ab115db0fd54d45dc0293385ccd7cc74c543d10c8d5bff6ff7163816ac620d71d2d55d51a96dff88c0554b0a6cd5465a81bd7b72720ccf05fa59184fc08b8765fbc4416d24bf5460dffee54467063a0adb06b550b7cfbe282bfcc949f88f6a49100b2088d57a34c2bd6ff175e10d0ebaa5d864943eeff6ca804d0503d572741530446396fc3acdc1d0a420b9e6c2e1ab774ea064ff5a9ef1c7c647e7965c87f0ee5477faede431ef6e34e633ef418e60c1ee4c86d580988fca0dbf9d78caa974dbba8316ae5b0e2fa7316fbef0e2e881422d14d82a3eaf84edd8ad21b9cda1dee502a83bfd1b044631a3d30b82cd666e264d4ba8100cec3a068774c7a0f704c29554ab979228d47c7a5280480bddd3143725ddf53830216c7b52009b8308a91de9beb2deeeac1a7018b161de0cbb66bd0dd14ef2df7fc98aa21600543b61a45cc6a7c62f558723686fe804fd9faaf8e2d793aa42ea3246745502d7ed76007a1d0a633e61a8a2efc898bd0e4eae24c5cfdfd362553e1fd97a1d04ceb337ef6d0a389afd904bafaeb4c745c44946d7e011721e88f059f0891c3b661e2cddcf4c63ae55081f127f57ea138af323a09fd09a5f8f80c85a51394717bd5e5d6bd253c0692990aeeb95cba32c2e5046ba09f0c429588350a734846b84ffa6432dce55fdeaab45bc2ddc548eb495f18e8553a583c85726fdd0834f70bb87e7cb251ec9a53d4fd736784a030eecf208db4920e20b61563ba4beb1806e8effdd15faa40e22d09dbd8c34a6f3d332a37ae0923b5a58f4c4c4cda1e47102a0293c1e63a5f59ced47cb0dfbe1f76b46407d0dfeda9938604446737e66231ad0e520fb03f15e940435549797ce9016ad888894c532854f50db6fbbbd9812e6dec0d3bab0bba698a53d251bc33d98a9cf680f2b888e39eec7b40d6fad1aa5a90def8584c4de4debd5b38badbfae61590b10aa853307ca176a53a5bfdec09773d6ecd4fbb31ae8f0a5801866328f13f6b719334f5a7a9cf9a8ddbddf8ee2605be0312225b93e2f21188cef7f9b74f6651fa5b99d060f69dd4c9b104506ccce1c550c8d87eb0d5493d8405214e20262bdb591cbc70ca37f9b8379c6bcb710c9dd0cac8f8195f295bdc5f47cda0fccd1379feeaece08e325504ff565e7cae43be1abdfd534ae340a4f6bacf0c1e8a63ab2a67334beebda042bea28ffeb0ad82c0de2bb182df4f39d3e9d1bebe8ac52e29d6d613d2cc8d71585c9d22a9cd7b92b0b68ae241b9d7e406efe13ba4e67d8183b98409ed0661778a469f420049b9cc84acfdfcc4a9d3cdb00869dd352f6c083158112dd152fcdb1157f7ff665dff622b66be30e1085bd24c47aa8c54e62ce893030e52b832088eab8c417e556761bf930fb75cc6b2eb774c584a66e097f2d972791a47a790da94f913f918d3970149131db3dd2875c4263182244aa32b46ea6d1a758303e27cba7b4236908bc661b598a6b03ef27a96073d8b52428b25282b3f5fb6ce3399b96b6cf164945140e842866274621dc8c6ed1100b95a193c42f72f077ad6e5a9853b7d2a682aad1453816e64a8e4e59ddb57f316bc15f78251de7190ffb86614ed70f0e84c8b0aa9a2cb1619d3a8737d0d6f9f623876e6f33cb8c5dbed39ec646f7c74533b2e15c32d8eab864d46f02866bb455fc34f21bf693080e9b4cddbb1526754b54dd0151c919db540ab20dd1167e61b54ad4178e24700cc04ee477c3530afc85afea5472d685a567f1049fec3ec7218fe5f933b8941eb5c8990aa154f968963c7992060b1424d6a50717294f474b851544bb4f3ce7e17dac4275b3159f1669dd6bc80478f35bd28dbe8c43f34900bc5d443bcf4b3b8a0200939e434992366a2cb672f3a7a4b2dea4372d82ac67bac7df4bf5c8d08904f9381be0d337dbf63c2dab2bdab850824bc7fd05255967ecf7901308a78ce3a7f5cc8806555b0d5d4102bb327e1688feeaf3b58f8d2c53e494c4f2f1a2c0677b6451404c08801b062749eb897f29436fad383d94184cfa413722f22474d9f27d9b813b99934aec8a87ae8efc100cf412a0fac9a36ad2beb265026740b5adb4abb748c537eed6a82c042b977560ef474f7b657e72f00541a379ea995a38cc5aeeb14da89fe50603a77b9b8405fdcf455c59859855453e81d4792cca5cf4fcdba73a57c7e43c590cf85104953b212f230a97d98f509638c2b3eae476311667478c8c1372ea0f647c33b970652982355734cb0d76600961f116fbfec3147c72d54bda6058a1968045b75bf760c93f48f52a36c475fe683f8a4f0e5e62555e9f170763e3103d335d150fa11af91bb51da83d2260c0772e0ecb71360636d3f4d0994cf4e650a8c918b31aa3ab1e4815b1549fd19ba7621884eefc1632ef9d1d3348b65024d5abeea090b213ddb59d05ba021953d61f79e360f05bcbf36fee64451adb3ba0e65004b9b9bdc0f9db27eb5fda660d44834c7fbfbda21227b2f5d4a4bad3ad3a490d39470d18f8adad8aa66b9535a7161207a27b61c80d77c07621e4624d6ae4c276106a65071fce09dbaebe16a70b3519c5b542c76ebdabd8acc9459f3fdae6cdf723f943cf398acedaa3fcfcece48d2802d63e3badc3af7998d226441cfd541817b4f2da97437580c92f90a7abf0e18781e0ddcbcadca0b2a006172a62c6894a29140745e41c7a2666de51eaf985226f64208c5dd16ce546b866e0a7aa3db60f13b0c035259dec793a8b998377e12c03d34530d37ae9ef90d728aeb64dd7fd7c7a99e47b1b19c15eca457dc5848e5d2a0af5569d884236e66d29e961f7e5dbec74c4f0ce316e8725edf4ed3405cee130738c589e4e82c3fb8de842cb4ec75d808bcc8ab5d4ec0da1221f2804581beace514a3388444bead21254a8d930c6d2afa5528f05f9668c63e0731607033824882d48cf2cca19870ecf895369cdffc07cf8ac6d7ecb9a4511499c10951aa54969ce0c659ccda9d2e4f7970edbae2a9d2d0d18d9e5a73947a577682772ad9295b96d5646c743b41dc275c60b37d203b8c5c3dafdd62ccf61ebe3df3921c24c45e9d051e6bb20d892ab4cde15de770cf81c7ed8acb01751c21ed8edbe2562b7b4260875a1d731145100f5ad50e55de839c"}]}]}, 0x1264}, 0x1, 0x0, 0x0, 0x1}, 0x404c000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x4f, &(0x7f0000000340)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x19, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x39, 0x0, "bf5c1c"}]}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xac, 0xfffffffe, 0xd88, 0x1, 0x5, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x8, @private1, 0xc6}}, 0x20, 0x80, 0xbed5, 0xb1e, 0x6}}, &(0x7f0000000140)=0xb0) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty}}}], 0x20}, 0x400c804) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000340)={'ip6_vti0\x00', {0x2, 0x0, @loopback}}) 2m24.220369689s ago: executing program 4 (id=5701): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x32}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m24.195648567s ago: executing program 4 (id=5702): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x6, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3, 0xb}, {0x20}, {}, {0x0, 0x2}, {0x6}]}) r2 = socket$inet6(0xa, 0x800, 0xbcae) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r3, 0xa}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x80800, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002e00090027bd7000001d00968fb7ae0b4afa0004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m24.060956014s ago: executing program 4 (id=5703): socket$inet6_sctp(0xa, 0x5, 0x84) 2m23.982430257s ago: executing program 4 (id=5705): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x8}, [@generic="898e8c48f51d"]}, 0x1c}, 0x1, 0x0, 0x0, 0x60045005}, 0x8000) 2m18.715753474s ago: executing program 33 (id=5622): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r1, 0x607d8000) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) listen(r6, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) sendmmsg$unix(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r8, r7, r7]}}, @rights={{0x18, 0x1, 0x1, [r8]}}], 0x38}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf250e0000000c0099000f0000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000005c800000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 2m8.63668173s ago: executing program 34 (id=5705): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x8}, [@generic="898e8c48f51d"]}, 0x1c}, 0x1, 0x0, 0x0, 0x60045005}, 0x8000) 11.131773383s ago: executing program 3 (id=6387): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x67}}}], 0x30}}], 0x1, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 10.156373725s ago: executing program 6 (id=6391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="b2d7a15076ce3180f4bfea0a810bf4f5537fa1769c", @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) 7.864999083s ago: executing program 6 (id=6392): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a0000001b000000420000003e00200042"], 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x50) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4002, 0x100000, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3fd}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.57160638s ago: executing program 3 (id=6397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[], 0x10) 4.354205336s ago: executing program 3 (id=6400): getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000680)=""/161, 0xa1}, {&(0x7f0000000740)=""/156, 0x9c}], 0xa}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000980)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x4, 0x9, {{0x19, 0x4, 0x0, 0x3e, 0x64, 0x64, 0x0, 0x46, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x12, "4f8e6a9d2e9599d702670ba3f96514a7"}]}, @generic={0x89, 0xc, "cd426bdcd7ddfef0acbd"}, @ssrr={0x89, 0x1f, 0xc8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote, @multicast1, @remote, @remote]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x100, 0x5807]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x93}]}, 0x74}}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000c80)={0x3, 0x3, 0xd3, &(0x7f0000000b80)=""/211}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000ec0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000001000)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x17, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x3, 0x10, &(0x7f0000001240)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}], &(0x7f00000012c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x61, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x3, 0x7, 0x7, 0xb82}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x1, 0x2, 0x5, 0x2}, {0x5, 0x3, 0x0, 0x5}, {0x1, 0x5, 0x3, 0xa}, {0x2, 0x2, 0x6}], 0x10, 0x33}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x11, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfcc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffc0, 0x8}, @alu={0x4, 0x0, 0x0, 0x4, 0xa, 0xfffffffffffffffa, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='GPL\x00', 0x4, 0xee, &(0x7f0000000dc0)=""/238, 0x41000, 0x7f, '\x00', r4, @sock_ops=0x3, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x0, 0x1, 0xc000, 0x7}, 0x10, r6, r7, 0x4, &(0x7f0000001600)=[r8, 0xffffffffffffffff, r9, r10, r11], &(0x7f0000001640)=[{0x4, 0x5, 0x3, 0x1}, {0x4, 0x4, 0x3, 0x2}, {0x3, 0x2, 0x9, 0xc}, {0x0, 0x1, 0x6, 0xc}], 0x10, 0x7}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001880)={{r10, &(0x7f0000001740)='syzkaller\x00', 0x200, &(0x7f0000001780)={@align=0x2, {0x6, 0x0, 0x4, 0x1}}, 0xb3, &(0x7f00000017c0), &(0x7f0000001800)=0x9}, {[0x2000000, 0x401, 0x8, 0x7]}, 0x101, 0xc, &(0x7f0000001840)=""/12}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000019c0)={{r2}, 0x3, &(0x7f0000001980)=[0x7, 0x4, 0x7], 0xa6, 0x8, 0x1}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r12, 0x80089419, &(0x7f0000001a40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5}, 0x50) socket$netlink(0x10, 0x3, 0x15) sendmmsg$sock(r12, &(0x7f0000002640)=[{{&(0x7f0000001b00)=@ethernet={0x1}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001b80)="00c0a881e7d15773eca4f0d38263f17f21cfa6510e27a2483b85e86f48c2841240f14d720ce1445bd8ba2b2054472682cd667ba854f6864ea4e6761ef0974819315c6785778416d889c667b56942f0d2fde0788ba3854232f9d566a47e062a832193834638c1de220eb2fc9f213ee52ded726a96de0f9ea41eff7e7e907293bfa934192ff24f3ee64adbfd4b174d64fa64b7a0b4e69442d88a203f6927fb9dece27aabe9f77a273f38064e7bb6a298b4091607802411240c13dfed990c3e2b545c33984869c8a025200ffe4c9671c5", 0xcf}, {&(0x7f0000001c80)="e330f739009e10847599ae30f66043d4c805ae60e1189535a8bfe51fcef99ff15e6bc8adf1b2aa497064bb36f82193f6ccd82936b4a98fce04d537f42143f62970927b5a7d2a46e719988bb461138ef8fe6c44eae4e318dc1ab8acd598930693659ef3bb2f7bc1da6c64e99b3943728962bbdfafd8bc97355cd0925c756ea7cd3f30f684c1a4c496356dc98712236a2d9a63cc0bf380098e5e69bd74af50271383b1d1069b80390c385c7ac56b80b871be7786a2125106e493d60bbcb6481880dc571dec840b33eb19ebdbdb2a2388fcad1d7ac33a8df270cbec2334d83d546a9610", 0xe2}, {&(0x7f0000001d80)="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", 0xfe}, {&(0x7f0000001e80)="6259144af24db8fad1d7b1ced243370de6e007bc97ee6a8b6992bd7b12fc4419e6fec4b21f8d1d5b850378d013bc0018850de370", 0x34}, {&(0x7f0000001ec0)="9607b47035e3d50a98147bb60eeba0", 0xf}, {&(0x7f0000001f00)="0ea07d9134959b2370b7c95127a59f688b70908e07987b3ce76b432b9c4968085ac7a8109e4224e21c0a4d5e4480cb6a5a462dede86a6e06347e5f04a7688552935e678e8ec3910578a1775188bf70068f02674321ce3c075e6f92067d43082c98b53ba60bc52192488bf29a9d0e229f9ee2ca817f783e94", 0x78}, {&(0x7f0000001f80)="6c32ce942cf17dc3926f516c0b20aaab7cc3d58d83a712784bc291244ea7c91728dde4bac348eff8c346c988eb944d95e0e4c27cb5e5b0fcd89cd78aa307076a0a40f018559e64545c953dffc2c1c2d1bea29ddf0d558982d56dc470191f3d8282036e23fc280a441e244d4bfd79d5cf6ed5d635db615b95bd98c733039ef9bf4c9edb9793b5d2ebf81e62fd08e068da43c3de99290f1f069190687a03bfc9bf07ef1ecdc7058ece3189ee18c15d9365a1ddee33b1e51e44c2de4852bd3b425d6291949586b9a9d960fadda6bced2481b9e0a5cc3dd9aa6cbdf1abe4cd18272f68e7da4260720ce6f3ac7ec80e3e4be187125105", 0xf4}, {&(0x7f0000002080)="b358aadee3de49360ae40b258538d652ca96df0037234635fefdaeb099eee41f2b6e8e3f214e9c5164704dd90524223e4195de807f3025764d389d13b196d5b84614550a0d3da639c9600c5af1cc030cb24ad04a1f3f0dbed8251075e329d346f0c2b0c443f0c167ee134592df5392e51c9837e1ffd446ace223ca3d5456153b78510fdb84c801fd442443bc7bb6e2b437c882a599cea521278cf9c6de991b0675a8ee53c5571c2a5a28fbbeaf71dbddf14ac99d4e5b0b7c61ad717a87608480a0ca76a3d5178510b2f3be38743629b63201c3f7cd60a0acb61571289c4af7ee8d", 0xe1}, {&(0x7f0000002180)="f12172fc0f21fea01edbde563ca1538dcf5485e278560d8742cdd0039aed8b28baaf7982767dd07b59604e14f1529bcfc0ffe897954e64d68fdf7e0440b3004e076ba1a53aa66634032d4d4badba31204599ef13a2ec30bee095278a8262641a88dd9fb87cca7ca53f494c115e52da779c56c999d4666e2efa90aece8d32c30fdf828c022a0bf3a5a1d5a796d95f131cd0649b", 0x93}], 0x9, &(0x7f0000002300)=[@mark={{0x14, 0x1, 0x24, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x1a02}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}}, {{&(0x7f0000002380)=@in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002400)="630ae6ed15861aede8fdc5dacb04fb5db25f0e39b76d998dfe651b9477b06ac99fc518c1a14eed557e87c9f414d592bf73cac8f7fb6c5a60f855f109bc511ce2e7ac12689bd1894d3fd30098ca2dfae4e8cc09cd918f1e44e96774db4e485b9e3424dca4e91843df23536c032c3f7e", 0x6f}, {&(0x7f0000002480)="9bee8cfb4246fa27e3fa5d488958643b90a60af490235e1a4c3271dcd8ba099f6615ed5ec01e7b8ac7721e53a10d7d2fe12c29c628813f8f1c812dab2bff6a0931bd56e68dd37ddf8cf466d0e378646d32fa3225b88bffd9bc8d9386f4d205679f346a6db6ffdd318beef738c5a8a00f60a98c551deb9671d3b91bd6558c2254ca29d56d52dff7ea82d88c756d19295d1ebf4c565faf343bdd603cefc3ee3114cf2aded7ee08012d90a52e5ee918f5ea410d0efe1a7bb1c9a270eb8debe31aaea09d89a24c3179c24445aaf68ac987f6", 0xd0}], 0x2, &(0x7f00000025c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}], 0x2, 0x20000000) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002700), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002880)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f0000002740)={0xd0, r13, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x14) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r12) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r12, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x24, r14, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 4.10519407s ago: executing program 3 (id=6402): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) (async) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x2, 0x70bd29, 0x25dfdbfd, {0xa, 0x18, 0x1, 0x250dd3af3a36444e, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xd434}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x40808) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) close(0x3) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) (async) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r6, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000003"], 0x28, 0x2000c000}}], 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0x6}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 3.913241054s ago: executing program 3 (id=6405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x36, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40004010) 3.672937785s ago: executing program 3 (id=6407): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x67}}}], 0x30}}], 0x1, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 3.029322192s ago: executing program 1 (id=6413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x2}, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f00000004c0)={r1, r6, 0x6, 0xf4, &(0x7f0000000280)="b757666ae41f4de2e1db36a219619dd47e99feab991ad0d73655a5a8954efccb30172127a665cdfe9645bfa91eddeb499e428a5e363c57f0fe746b74492a02868b5eeb53da48be57e5a0727d2b9c3213ff837613217331c660e47c4e78b5fd6bca40f62b8cdfa80a3b905f1463dac1d656f0308538b15ebc76b52fbb3f5e2ac896ecb5f2720854eeff560420ae6dfe2c038cd25d8308a21f601bb2ae6503ea98116d6af616282ca861ddbf65e2b5057cf11c080df86555f532a794180169736a44b8a0b3f46d5fca8c7508ef2fa4553171a4d6bcc1db56e8d5992d4abf722746161f3afdb58bf27c809057ea82f9ebf657c68c2a", 0x2, 0x7, 0x8, 0x1000, 0x7e, 0x3, 0x8, 'syz1\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x8e8, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8c8, 0x111, 0x0, 0x1, {0x8c4, 0x5, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2889}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x97}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}]}, {0x254, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8e5f}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}]}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x20004005}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="040082040a00010001"], 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x80c0) 2.490496896s ago: executing program 6 (id=6414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80002, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000500db"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x80000001, 0xfffffffd, 0x0, 0x5}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x28010}, 0x4000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x51c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 2.418306393s ago: executing program 6 (id=6415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80800) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r4) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r12], 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x64, r5, 0x1, 0x70bd2a, 0x25cfdbfc, {}, [{{0x8, 0x1, r11}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x1000000, 0x0, 0x24044000}, 0x24040840) sendmsg$nl_generic(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) 1.748343412s ago: executing program 7 (id=6417): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x8000}, 0x20000814) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000002060500000000000000000007000004140007800800134000000008080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31170000000c000300686173683a6970000900020073797a30000000000c000300686173683a697000050004000200000005000400010000000500040002000000"], 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r8, @ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047452, &(0x7f0000001200)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000fc000000fc000000050000000900000000000002030000000b00000004000006040000000a0000000500100010000000810000000d0000000000000005000000000000000200000005000005050000000200000004000000030000000000000003000000090000000b00000002000000ff0700001000000002000000110100000900f2000400000008000000080000000000000c04000000090000000000000b010000000a00000004000084107dea250900000003000000010000800400000000000000020000000000000004000000200e000005000000030000001b0100000900000000000011050000000a000000070000000000000905000000020000000000001004000000005f2e2e00"], &(0x7f0000000300)=""/137, 0x119, 0x89, 0x0, 0x3ff, 0x10000}, 0x28) 1.598643514s ago: executing program 1 (id=6418): socket(0x2, 0x80805, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002}}]}, 0x9b}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.361781819s ago: executing program 7 (id=6420): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0x7}]}}}]}, 0x48}}, 0x0) 1.257517452s ago: executing program 7 (id=6421): ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r1, &(0x7f0000000040)='}@#$.*)+(:(\x9f!\\{,/.*{\xb4%\x00', 0x2040, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x9]}, {0x7, 0x0, 0x2, 0x4}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x61c6}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000180), 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x1, 'dvmrp0\x00', {}, 0x7ff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000240)={0x1, 'veth0_macvtap\x00', {}, 0x3}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r2, 0x20, &(0x7f0000001440)={&(0x7f00000003c0)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)=""/72, 0x48}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f00000002c0)='syzkaller\x00', 0xffffff7f, 0x2b, &(0x7f0000000300)=""/43, 0x41000, 0x10, '\x00', r3, @fallback=0x31, r2, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r2, 0x3, 0x0, &(0x7f00000014c0)=[{0x7fff, 0x5, 0xb, 0x3}, {0x4, 0x2, 0xd, 0xb}, {0x1, 0x2, 0xf, 0x1}], 0x10, 0x3}, 0x94) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000015c0)={'nat\x00', 0x8, "00973e6297976f3a"}, &(0x7f0000001600)=0x2c) unshare(0x46010280) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001640)=@generic={0x1, 0x7f, 0x7fffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000001680)={0x6, 0x200, 0x3}) sendto$ax25(r2, &(0x7f00000016c0)="b3fedf24082f8196401f10ae801053fd266e4666a8adc2fa9fb4ad1c8bab4794c7866e1888b7d17d7f9201441f8251ffff2c3f3fba2d8eda83ac6d555a8729785d6bafa685e9b741afd1449837c40ba890711f3ef56ca36a6ca773a76af95adc6ceb97f5078e1694faafdad4d7c3b063718e0d77ab11555199d095e27c813cd7414f193c7952f5cca9c1173a9ef0b84a5daa6c40d841d8881390eb6346fddcb8057f4cfe74056c87a8d2c3d62cadf74b29eb78d450b163d82b8fbdb05246c114b1389878069791baee09b1c62030b60217cc64b8559758dba760da6ebf8011b79636", 0xe2, 0x4000814, &(0x7f00000017c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001840)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001880)={0x0, 0x0, 0x1, 0xd, @vifc_lcl_ifindex=r5, @remote}, 0x10) r6 = accept4$nfc_llcp(r2, &(0x7f0000001900), &(0x7f0000001980)=0x60, 0x800) splice(0xffffffffffffffff, &(0x7f00000018c0)=0x1ff, r6, &(0x7f00000019c0)=0xe, 0x81, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a00)=r4, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@bloom_filter={0x1e, 0x8000, 0x80000001, 0x4, 0x3023, 0xffffffffffffffff, 0x401, '\x00', r3, r7, 0x0, 0x2, 0x4, 0xd}, 0x50) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000001ac0)={0x2, 0x40}) bind$can_raw(r2, &(0x7f0000001b00), 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000001c40)={r2, &(0x7f0000001b40)='nat\x00', 0x400081, &(0x7f0000001b80)={@align=0x7, {0xe3ed, 0x8, 0x7, 0x8000000000000001}}, 0x8, &(0x7f0000001bc0), &(0x7f0000001c00)}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x34, r10, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0xc4040) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001dc0)={0x4}, 0x8) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000001e00)=0xf3a, &(0x7f0000001e40)=0x2) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000001e80)=0x3) 1.247584375s ago: executing program 6 (id=6422): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[@ANYBLOB="5800000010000104000002000000000000faff00", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00b00200000c0a03000000000000000000070000000900020073797a31000000000900010073797a3000000000840203808002008008000340000000027402028034000280080003400000000308000180fffffffd0900020073797a310000000008000180fffffffe098679b2"], 0x344}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000300)={0x1, 0x7ff}) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r7, 0x32b, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x2400c040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000003095bc35eaeb121681294db3dd5b00000000000300000a50000200060a010400000000000000000a0000070900010073797a31000000002400048020000180070001006374000032532f03db4389b900000001080002400000000a0900020073797a320000000014000000110001000000000000005afab1214fe8e8313c723cada8098a7b427e2561388d970a401a0b81616c3a21d2084f8d364e9439d42ff2bc3babdb9acd4355e32a530ebfb17365ee099c5577a97edc28e9252a6ce4a5536966e406146c2041c7f471978d7811846af24b90ab9a9dbe17f4a4e2c3d837195c37"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) close(r12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.08119544s ago: executing program 0 (id=6423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000006c0)="8c125bf8679f1392eca2d94c0604f5e7f324c7d075396b709298e827f4ac084286b647107ee08888fb01d3eb4fe0209f49b2b13f81f03549938c61ec1c6f88c7a1148482d6e112cf1b18512d7cd8ac05ba209e24", 0x54}, {&(0x7f0000000740)="eedc1a81b551e0c6202814f98376864cf5c12aa572160edbad57089c3daf9ea578619dd7df03cb2eada5287a8d710eb2c261982a24003a120c102a604703d6008c6808702942fb97524d3ae096fadc43411836690e434a43c446ac1eb6fd4fb9ebd8da5cfc86c3b04b1e89475bceb7bc525018027cf010dddf556ffaec6f039d2d0e2431d6cd2b831c7af8b8797d5e9585fe8523b3e9508452a05ab683f59cb11024516ee34528067d98060a74a3afe7a20b0e5948bae68524ce6a5554c48b51892dce45d57fb772aa9e87714ee7b79ddbc3db8b6030", 0xd6}], 0x2, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xb36a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5c18742bb7665c80fb7e695f314528cc09d4417b8759452f35da4871ff3265a0349505f36a22c74fa1c43a9c555a8a05e00036927fa2d1c6304c20d7a7ca66afbe4de894d85ad7d00d3d02f6f49e7f9f523b9e03f8302f9bc6d712f76ed287b86bee2df2dae0890e6643e4e5ec96f8c4b1ad5650d4332ed90b9c2257a1dd300dd3a620b62f83bca5ed3596f9d66d02dee02f991782977e0879bfdf81c2b15b095718f29595702ca31acc4f2d6c", 0xad}], 0x1, &(0x7f0000000980)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hopopts_2292={{0x178, 0x29, 0x36, {0x2b, 0x2b, '\x00', [@generic={0x2, 0xb2, "2c869fedf1029db7c9af603c7d87b99ae881b07277dc78ea7f3f3028522c60675eaaa1157270fab1c618b2321614b13edf479f22cdbe8c7d48b0d86ef4940fcfac7c591c303ae2276cd71bd7b3947803284d94595cd568a38d37e23aac61910263cc8c974747115f2a5ac2311f0c2688ea05f870fe2716c98f20649a9fee136427474066c020d9da42ffb7de294073467f8c728b8c528204b678ea80c49a37cc5c18ecc5a6d9c65b7f239b3642946db0b9de"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x3, 0xe, 0x80, 0x1, [0x2, 0x3, 0x3, 0x5, 0x6, 0x8, 0xb]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x1ff, [0x3, 0x2, 0x20000000000000, 0xd, 0x2]}}, @jumbo, @jumbo={0xc2, 0x4, 0x40}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}]}}}], 0x1d0}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x0, @private2, 0x10000}, 0x1c, &(0x7f0000003080)=[{&(0x7f0000000bc0)="a52d42613b65ebbce6c83d4ff554d14bc47184fe6e79f505ea1c88143076d2eb1bcaabbc1f4068fbbdc60d92b156689146b8225c697b8e7e3fb00ae8f435461e6d9cb68e724a8b9fcdfad0343b31301c82e147791f0977d900502873d8e7b421787ef6744a54583c241c1af5c2d23d182358267b9821b06fbc0de95fd360772c4d701bb83d9e3673098102147c42eeeb220da257b82c0f187d0857d708b52f564774531a227ad7fcf109290f682b86955f6b0250b21e3d233beec64d571e0fe1b1d31fc023fdd5037cf73dc3bdf6139d4ca6f4b665d2385a903508a60965e6", 0xdf}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="bed17f6640cf42aa4d157b2e3b96649e78c3f14285879b6a2c33386fd5a4d88a9495d713d75070a61169a2c989c0dfc76fac69b25386f3eade791a3688e3ee33af87e15ff1bf9298e7694f00a25a33a4d3eb57b7764ac76bc1f27a065f14153232d7cbe4199dc271cce96bc3d3091f24a167d1c52652983b0830ea22ebc6aa5bfd79065032f487c193f8383d93d2ef007109528d6ffcdd4aeff832ad5b88193b9158", 0xa2}, {&(0x7f0000001d80)="578cb825b46efb1b3151e02bc95b39a7c30413c1d23e7014491697eda96b2bb92eaa9bb114a421cb9f96d575940848b2469f4f1a6a1bc950cbe026f03ec8f12861c6ad410e9cac749f4db006e8d643", 0x4f}, {&(0x7f0000000140)="4e05c3cf0241fd517f93fe40f3677d9aba1630321abee0bc7c973fe380e3bd679a1c44f4e34ec652d9695a77a920a6e9a67e91d2b23a7dca44918f1ddd97f2c5b7a7f41590fa7fd7b00fd62186a5181428285a484313e40923601cda834471849e66f6146c8c0b00cb1bbbc3e7215624614e40b45865f2269ff3503b4a0a2854677030391f8b7691bb8339", 0x8b}, {&(0x7f0000001ec0)="174a44d2033902859c2427443e32fff7b2b0167971219466ec5eb8c3b01c9d7991080b5c89bb08eb2b658195ab27e93c176ad2cb96140686231a", 0x3a}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="4f987c23b6abd74b5ed8bf537808c5edff425cc3f9bd5ee1ca0d0f2f73c957df60b0b9044692e6e4d75e781769d46d5ef5032ad11785b822b8fc052e4e0414da6d9fd4e7b3cdc8b5ae5c119a0a055c12294c329a74b1dfd49cc4f0feb106d50d6309ebb16dc1c05676d2b0d06ac3552df4989c7e61f31ec6fe2c98ddfdbd9963cc0ea52d5a30fda9aa73031b08117fd7bdf46f6609cd9d3331bfdae96972f2637952994c0da59eaea12ff315bf0e3072a5", 0xb1}, {&(0x7f0000002fc0)="1eb8", 0x2}, {&(0x7f0000003000)="e4fc74adb9c654242c8beeb4bf1fdc66ea83c0ba055f1ed6cb40c2c748e658c3271d143842b4bf64e9a00739447dd75435001ff53d7c3e2deec8138423cbfcf7b85acb9391fd8e98ed588cc68150456de1af8f2c4373919bf108", 0x5a}], 0xa}}, {{&(0x7f0000003140)={0xa, 0x4e22, 0x10000, @mcast2}, 0x1c, &(0x7f0000005680)=[{&(0x7f0000003180)="be5d84c1f208970cb581d4c95b18c2de8d0aa2130cc916ae3b261bf51390936031eb324bfc76a1342e96ca74beafc6905bc7850e568fed6aae4ae21a5e76f68e89099b283f50e55de2fa070f428655207abbc6a0ceb1a46fde2fd685ead7fdf7d4184def6da31995838cbf69043965ff9b382e3a57919a434fb899b2342b56d9b0acc623910f09061d18684bd2f6", 0x8e}, {&(0x7f0000005900)="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", 0x1001}, {&(0x7f0000003240)="726a14c335a69e51866f7f08fa791086e4860fbf8ed8886f37f42ce142497080ef13e3d291456173c2adcc", 0x2b}, {&(0x7f0000003280)="87a659e8c093d581a11bd6b3e7861336af1cfc87094b4398d680f9e342febb40a26f8ab99c8dae9974586b7f24c799f8ca7c966fa14623ec8d49b9785f4152562cbe4720539878213fb2a9a2e15e2c9fb69fa947701d297c9273d415f7c83febd7bbfa1b00166a8c0a981e4d1ad0529e6e55114869bd6653590a7bea5797f6a429692c931720040d42cd", 0x8a}, {&(0x7f0000003340)="ae6c896e56300d33c79e656a59574865231cb40ba3476fca31a3277d2d16fa27940d3385360c16b9e2ce70d9d1014ccda2d9a6019e33cb1d4c943190bcf64566749dd1c25b9efe748917b6b1d9b1e2a835a97a7bb8ca9cadb6f8543b2c9bf04471da8761194e0099ae2f77c2bbad86d3b167e975e7f4c05005102fa2a0887aee6def", 0x82}, {&(0x7f0000003400)="65fa9fa5aa1938fa230c63688214cf12c27bafd9b76ece66295d156d27708a74c81325efa5bf5d9914773066f6015ec841780feefb1fffbfc010cec1b9eb10884b06f4185625bc1f26b1b8298f500762f96fe6295fca819f1668eae2d388c129364457c90c5598d0cdbbfa7b40724e21babe855a211829c748d837d031ffba4a0e895a2c711423b6c78427ba2fa6d28958eabcb9fd026bbb58db3c3262fc69b4404614bb6effc4b83cff12f96ed770cd1a24b905ac8d667d3fa1470b386703321cb6c567afe339f0ef58c561", 0xcc}, {&(0x7f0000005580)="d070741dc80318390b1f04d3c61be5d3afa8b2fb53f3a9b81aab8522a41b8129e319e5575c9d001b25864aa8788c82dacd8ba7a87f097066dac19911d40b8c9d612275807f8c3ff27f9bfb111ce7033f417cd63ee48055bf55d6a9660fe638f76ffbd8d3b4c72d2e948e415972b067824edc254ba1345d92c16d8c855e4b419269710c9ac999f84192d30e38cc5f3f6c03ea03bb29c2364a7b835867a52275f74be3d2d1066280ae0350f28394730aefe4905c04a946af62e340a71989275ebe026b6122d34db1c6cd58a9e35359e6467bd1c908e63690763fd04fa37b1e3ab863cf40", 0xe3}, {&(0x7f0000003500)="7898e20656cf6497dc2c811683e120590598e16896393db062d030c533d6c974f1b1b503720632eb05ef14dea43bbb2e6e7191538428ef7b27891b1f73e39f7b71d7ce14d21a30d8", 0x48}], 0x8, &(0x7f0000005700)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x8, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x28, {0x2, 0x8, 0xbe, 0x101, [0x9228, 0x2c, 0x4, 0xfffffffffffffffc]}}, @ra]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x98}}], 0x5, 0x20008050) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) 985.97991ms ago: executing program 1 (id=6424): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x804) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000d40)={0x0, "2f2152e1e90aab4a6d702027eb1afe78"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000680)={r3, 0x8, 0x1, [0x1, 0x7, 0x20512456d3, 0x3, 0x4], [0x6, 0x8, 0x6, 0x2, 0x763, 0x6, 0x29b9ea97, 0x2, 0x6, 0x7, 0x2, 0x1b17, 0x2, 0x1, 0x2, 0x1, 0x4, 0x4, 0x7ff, 0x0, 0x9, 0x85, 0x2, 0xe69a, 0x0, 0x2, 0x4, 0x9, 0x1, 0x9, 0x229, 0xbd, 0x100000001, 0x9, 0x4598, 0x8, 0x4, 0x8000000000000001, 0xce, 0x7, 0x9, 0x1ff, 0x2ab, 0x1980000000, 0x1, 0x4, 0xe1e7, 0x80000000, 0x6, 0xdbf, 0x80, 0x71, 0x4, 0x0, 0x7, 0x67, 0x2, 0x8, 0x11, 0x100000000, 0xaf26, 0x9, 0xf, 0x6, 0xfffffffffffffffe, 0x10000, 0x0, 0x1, 0x9, 0x2, 0x4, 0x10001, 0x5, 0x8, 0x7ff, 0x0, 0x38f, 0xffffffffffff8e4c, 0x2, 0x1, 0x9305, 0x9, 0x9, 0xd2, 0xb8f, 0x3, 0x0, 0x8001, 0x5, 0x0, 0x81, 0x80000001, 0xffffffff00000001, 0x6, 0x6, 0x5, 0x1, 0x8, 0x4, 0x7, 0x100000001, 0x8, 0x6, 0x8, 0xe, 0x100000000, 0xffffffffffff8001, 0x4, 0x1d, 0x7, 0x8, 0x0, 0x1a4c, 0x3d, 0x7, 0x7, 0x5, 0x3, 0xffff, 0x5, 0x4]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000680)={r3, 0x8, 0x1, [0x1, 0x7, 0x20512456d3, 0x3, 0x4], [0x6, 0x8, 0x6, 0x2, 0x763, 0x6, 0x29b9ea97, 0x2, 0x6, 0x7, 0x2, 0x1b17, 0x2, 0x1, 0x2, 0x1, 0x4, 0x4, 0x7ff, 0x0, 0x9, 0x85, 0x2, 0xe69a, 0x0, 0x2, 0x4, 0x9, 0x1, 0x9, 0x229, 0xbd, 0x100000001, 0x9, 0x4598, 0x8, 0x4, 0x8000000000000001, 0xce, 0x7, 0x9, 0x1ff, 0x2ab, 0x1980000000, 0x1, 0x4, 0xe1e7, 0x80000000, 0x6, 0xdbf, 0x80, 0x71, 0x4, 0x0, 0x7, 0x67, 0x2, 0x8, 0x11, 0x100000000, 0xaf26, 0x9, 0xf, 0x6, 0xfffffffffffffffe, 0x10000, 0x0, 0x1, 0x9, 0x2, 0x4, 0x10001, 0x5, 0x8, 0x7ff, 0x0, 0x38f, 0xffffffffffff8e4c, 0x2, 0x1, 0x9305, 0x9, 0x9, 0xd2, 0xb8f, 0x3, 0x0, 0x8001, 0x5, 0x0, 0x81, 0x80000001, 0xffffffff00000001, 0x6, 0x6, 0x5, 0x1, 0x8, 0x4, 0x7, 0x100000001, 0x8, 0x6, 0x8, 0xe, 0x100000000, 0xffffffffffff8001, 0x4, 0x1d, 0x7, 0x8, 0x0, 0x1a4c, 0x3d, 0x7, 0x7, 0x5, 0x3, 0xffff, 0x5, 0x4]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) epoll_pwait(r4, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xc, &(0x7f0000000500)={[0x100]}, 0x8) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000427bd708a5938a92a0080edd30f9d2140fbdbdf25250000000e0001006e657464657673696d0000001c0002006e657464650173696d300138ed29de87e1a4de9950f81f7dfb4cfa3de60653817f48c81ed46c51c065e33f3b5170ce689cca8b5bb63ce1e27d368754944b4041ce5bad", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24000030) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 976.228719ms ago: executing program 7 (id=6425): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x313b, 0x1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000480)=0x8, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="43823c", 0x3}, {0x0}], 0x2}}], 0x1, 0x4) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x48) splice(r3, 0x0, r5, 0x0, 0x3000, 0x100000000000000d) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x6000}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1e0101000000000000000000000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff0000000000000000000000004e2300004e2300000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000200030000000000f9ffffff0000400000000000000000004400050020010000000000000000000000000001000004d4320000000a000000ac1414190000000000000000000000000435000400020100090000000101000008000000"], 0x16c}}, 0x0) 828.811345ms ago: executing program 6 (id=6426): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaffffffffffff080049f00050006700000306907864010100e000000101440c0651ac14142e00000005f57690673144f805000000000000000000000000004e2200004e220000000100000000000000030000000300000001"], 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 816.283304ms ago: executing program 0 (id=6427): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000002100000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007f6bae0f7ffffffbfa600000000000007040000f0ffffffb70200000800200018230000", @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 684.182097ms ago: executing program 1 (id=6428): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00'}, 0x48) 629.567939ms ago: executing program 7 (id=6429): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0x6}}, @TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0x1ff, 0xd5bd}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800380600fe88000000000000000000000000ff01fe8000000000000000000000000000aa00005001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0c200009078006504f62b93c9f4982fb12567d73a1e4f2100842212040000000000000037060e438a61e397"], 0x0) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) listen(r7, 0x50) close(r6) (async) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000001c0)=[{0x3, 0x2, {0x0, 0xff, 0x3}, {0x1, 0xf0, 0x2}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x2}, {0x3, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x1, {0x0, 0x0, 0x3}, {0x0, 0x1, 0x2}, 0xff, 0xff}], 0x60) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d7fe) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="18230000", @ANYRES32=0x1, @ANYBLOB="0010000033e20000"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xc4, &(0x7f00000006c0)=""/196, 0x40f00, 0x1, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x4, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, 0x1], &(0x7f0000000880)=[{0x4, 0x1, 0x3, 0x9}, {0x8, 0x1, 0xb, 0x6}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0xf, 0x1}, {0x1, 0x5, 0x6, 0x3}, {0x4, 0x3, 0xc, 0x5}], 0x10, 0xfffff801}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010003904000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="01980000000000002c0012800b00010062726964676500001c0002800c00230000000000000000000c002200ff01000000000000"], 0x4c}}, 0x0) (async) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x80000) 629.15368ms ago: executing program 0 (id=6430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0x3e, "b0cb588096dc1406be2ffc73f6763ed5639cc127e47ebaf4c672e742fd632ec590d9b3ad8c1c6a8553465220d0020f7aa0fcb051bd96e995fba7ed6d2e3b"}, &(0x7f0000000100)=0x62) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r2, 0x531}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x44) 468.646007ms ago: executing program 0 (id=6431): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x38}, 0x1, 0xfffc}, 0x4000800) accept4$alg(r1, 0x0, 0x0, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 284.306875ms ago: executing program 7 (id=6432): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x39, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x17}, @val={0x0, 0x4, 0x6, 0x0, 0x7, 0x7}, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0xf, 0x4, 0x1, 0x2, 0xf1, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@local, 0x7}, {@remote, 0x10}]}]}}, "503b3e9c2af8f0ddab62c942aeda6604370dd31afdb8c6f94d41d7e3f4f14fe5889c0d722c6f0fcf4665b8e3c7883cb6bc0803baa6b545e3db0ddd09ce29f4766b2e678473994021694e1181ef05e560bd98fd95d59c7308d2095c2e4e3a8447180eacab60487b34d11b3280284dbd109aa9804e3b07338123202210b992b0db48d36560383ebadf1e6a72d854030650c30076a2a01d2782eb1dd91b272839dc7e81830e1f4401b9f9ca8143b259c5e0aa47e13e17"}}}}}, 0x111) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 173.779857ms ago: executing program 1 (id=6433): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0x0, 0xd0, 0x360, 0x1a0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xff, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x32, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x40}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x24, 0x8, 0x6}}}, {{@ipv6={@mcast1, @empty, [0x0, 0xff000000, 0xff000000], [], 'xfrm0\x00', 'batadv_slave_1\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x2}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x3da00000, 0x0, 0x1, [0x1000, 0x2, 0x1d3, 0x2, 0xa53, 0xa96, 0x6, 0x5c2, 0xfffe, 0x4, 0x9516, 0x7ff, 0xf6, 0xa, 0x3, 0x8000], 0x10}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0x0, 0xd0, 0x360, 0x1a0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xff, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x32, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x40}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x24, 0x8, 0x6}}}, {{@ipv6={@mcast1, @empty, [0x0, 0xff000000, 0xff000000], [], 'xfrm0\x00', 'batadv_slave_1\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x2}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x3da00000, 0x0, 0x1, [0x1000, 0x2, 0x1d3, 0x2, 0xa53, 0xa96, 0x6, 0x5c2, 0xfffe, 0x4, 0x9516, 0x7ff, 0xf6, 0xa, 0x3, 0x8000], 0x10}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) (async) 172.339657ms ago: executing program 0 (id=6434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 54.030556ms ago: executing program 1 (id=6435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0xffffffffffffff68}, {0x0, 0x0, 0x0, 0x2}, 0x2}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x20000, 0x2, 0x0, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xe0, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "92fbb394b4a33f45"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "eb20c9eeb09fa6eb"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "6543ae6bd302188b"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ef34f59247553ad2"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "505152aab5b31aaf"}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1b}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2c}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0xe0}}, 0x80) r6 = accept$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) accept4$packet(r6, 0x0, &(0x7f00000001c0), 0x800) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000008001800f7ab0f000400"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r7, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100e71600010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1414bb000000000000000000000000053500000301f900090000020300000000020000"], 0x1ac}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 0s ago: executing program 0 (id=6436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="0100000000"], 0x6f4}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x6, 0xa, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@tracing={0x0, 0x5b76}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000004c0)=r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", ""]}, 0x14}}, 0x91) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f0000001540)=""/94, 0x5e}, &(0x7f0000000180)=0x40) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x2}}, 0x18) kernel console output (not intermixed with test programs): vsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.013609][T27377] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5329'. [ 898.043938][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5327'. [ 898.054095][T27374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5327'. [ 898.094931][ T8368] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.139475][T27377] netlink: 'syz.5.5329': attribute type 11 has an invalid length. [ 898.148711][ T8368] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.165618][ T8368] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.174661][T27377] netlink: 'syz.5.5329': attribute type 23 has an invalid length. [ 898.194689][T27377] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5329'. [ 898.222367][T24753] IPVS: starting estimator thread 0... [ 898.236236][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5329'. [ 898.276942][T27382] gretap1: entered promiscuous mode [ 898.334628][T27390] sock: sock_set_timeout: `syz.1.5332' (pid 27390) tries to set negative timeout [ 898.344415][T27386] IPVS: using max 28 ests per chain, 67200 per kthread [ 898.704271][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 898.825179][T27413] lo speed is unknown, defaulting to 1000 [ 898.977158][T27429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5343'. [ 899.335314][T27448] syzkaller1: entered promiscuous mode [ 899.346834][T27448] syzkaller1: entered allmulticast mode [ 899.422114][T27451] 8021q: VLANs not supported on vxcan0 [ 899.439661][T27456] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 900.809437][T27505] tipc: Enabling of bearer rejected, failed to enable media [ 900.962308][T27513] lo speed is unknown, defaulting to 1000 [ 901.448559][ T29] audit: type=1107 audit(1772449502.243:19): pid=27534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 901.481386][ T5490] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 901.494454][T27016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 901.711385][T27553] macsec1: entered promiscuous mode [ 901.745299][T27553] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 901.880126][T27564] lo speed is unknown, defaulting to 1000 [ 902.384189][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 902.392296][ C0] lec:lec_tx_timeout: lec0 [ 902.397054][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 902.599703][T27607] nbd: must specify a size in bytes for the device [ 903.390133][T27643] netlink: 'syz.0.5396': attribute type 1 has an invalid length. [ 903.563163][T27643] bond18: entered promiscuous mode [ 903.569031][T27643] 8021q: adding VLAN 0 to HW filter on device bond18 [ 903.693061][T27661] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 903.739578][T27667] __nla_validate_parse: 43 callbacks suppressed [ 903.739600][T27667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5401'. [ 903.744761][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 903.787957][T27667] veth1_to_team: entered promiscuous mode [ 903.802034][T27667] veth1_to_team: left promiscuous mode [ 903.939627][T27681] pim6reg: entered allmulticast mode [ 903.980140][T27675] pim6reg: left allmulticast mode [ 904.165054][T27690] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.172620][T27690] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.248752][T27690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.266859][T27690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.369422][ T8368] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.390146][ T8368] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.464877][ T8368] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.552229][T27706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.563119][T27706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.587297][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.620310][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.651343][T27707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'. [ 904.668097][ T8368] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.695124][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.711809][T27707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.720301][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 904.789866][T27711] netlink: 'syz.0.5413': attribute type 4 has an invalid length. [ 904.842195][T27717] netlink: 'syz.0.5413': attribute type 4 has an invalid length. [ 904.900442][T27720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.912252][T27720] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5413'. [ 904.991642][T27723] lo: Caught tx_queue_len zero misconfig [ 905.092134][T27725] syzkaller0: left promiscuous mode [ 905.101884][T27721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5415'. [ 905.103623][T27725] syzkaller0: left allmulticast mode [ 905.125274][T27718] lo speed is unknown, defaulting to 1000 [ 905.301985][T27739] netlink: 'syz.1.5421': attribute type 1 has an invalid length. [ 905.728983][T27756] xt_hashlimit: size too large, truncated to 1048576 [ 906.198259][T27775] netlink: 'syz.1.5430': attribute type 1 has an invalid length. [ 906.498258][T27778] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 906.595592][ T8347] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.616044][ T8347] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.729445][ T8347] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.758839][ T8347] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.223483][T27833] tunl0: Caught tx_queue_len zero misconfig [ 907.238647][T27834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.252911][T27834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.278861][T27834] batadv0 (unregistering): left allmulticast mode [ 907.295659][T27834] batadv0 (unregistering): left promiscuous mode [ 907.402809][T27840] vlan2: entered allmulticast mode [ 907.410488][T27840] bridge0: port 3(vlan2) entered blocking state [ 907.417904][T27840] bridge0: port 3(vlan2) entered disabled state [ 907.424923][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 907.424953][ C0] lec:lec_tx_timeout: lec0 [ 907.444344][T27840] vlan2: entered promiscuous mode [ 907.573002][T27844] batadv_slave_0: Caught tx_queue_len zero misconfig [ 907.603532][T27848] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 908.007336][T27871] vlan3: entered promiscuous mode [ 908.012579][T27871] bridge0: entered promiscuous mode [ 908.088353][T27878] tap0: tun_chr_ioctl cmd 2147767521 [ 908.703488][T27917] netlink: 'syz.0.5468': attribute type 1 has an invalid length. [ 908.784292][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 909.036341][T27935] tipc: Enabled bearer , priority 0 [ 909.057916][T27935] syzkaller0: entered promiscuous mode [ 909.063534][T27935] syzkaller0: entered allmulticast mode [ 909.164065][T27935] tipc: Resetting bearer [ 909.208565][T27933] tipc: Resetting bearer [ 909.272699][T27933] tipc: Disabling bearer [ 909.288723][T27945] __nla_validate_parse: 6 callbacks suppressed [ 909.288743][T27945] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.5474'. [ 909.307682][T27945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5474'. [ 909.317594][T27945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5474'. [ 909.332252][T27945] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 909.408954][T27948] netlink: 'syz.4.5475': attribute type 2 has an invalid length. [ 909.467536][T27953] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5477'. [ 909.596501][T27962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5480'. [ 909.632492][T27963] : renamed from vlan1 (while UP) [ 909.689694][T27966] geneve2: entered allmulticast mode [ 909.714641][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 909.724769][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5481'. [ 909.771235][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 909.771285][ T8368] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.780575][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5481'. [ 909.801261][ T8368] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.823509][ T8368] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.843230][ T8368] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.847726][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5484'. [ 909.925565][T27978] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 909.987615][T27982] netlink: 'syz.4.5487': attribute type 11 has an invalid length. [ 910.001002][T27978] tipc: Enabled bearer , priority 0 [ 910.090881][T27978] syzkaller0: entered promiscuous mode [ 910.096782][T27978] syzkaller0: entered allmulticast mode [ 910.103136][T27978] tipc: Resetting bearer [ 910.118676][T27977] tipc: Resetting bearer [ 910.651855][T28003] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 911.008107][T28006] netlink: 'syz.4.5493': attribute type 1 has an invalid length. [ 911.991798][T28018] nft_compat: unsupported protocol 1 [ 912.234786][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 912.632872][T27977] tipc: Disabling bearer [ 912.656911][T27998] dvmrp0: entered allmulticast mode [ 912.663200][ T7526] tipc: Node number set to 2801127864 [ 912.696111][T27996] lo speed is unknown, defaulting to 1000 [ 913.283183][T28061] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 913.308157][T28061] 8021q: VLANs not supported on nlmon0 [ 913.663724][T28034] delete_channel: no stack [ 913.824382][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 914.349180][T28113] netlink: 'syz.4.5523': attribute type 11 has an invalid length. [ 914.634807][T28124] netlink: 'syz.4.5525': attribute type 2 has an invalid length. [ 914.642923][T28124] netlink: 'syz.4.5525': attribute type 2 has an invalid length. [ 914.772252][T14259] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.790035][T14259] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.820961][T28130] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 914.833294][T14259] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.853280][T14259] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.990293][T28135] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 915.001212][T28151] __nla_validate_parse: 7 callbacks suppressed [ 915.001233][T28151] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5532'. [ 915.075218][T28155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5531'. [ 915.370416][T28165] xt_hashlimit: size too large, truncated to 1048576 [ 915.471111][T28174] syzkaller1: entered promiscuous mode [ 915.485355][T28174] syzkaller1: entered allmulticast mode [ 915.508190][T28174] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5536'. [ 915.652636][T28184] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5542'. [ 915.663355][T28184] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5542'. [ 915.677204][T28184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5542'. [ 915.686653][T28184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5542'. [ 915.867863][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 915.898393][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 916.330680][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'. [ 916.418044][T28214] lo speed is unknown, defaulting to 1000 [ 917.191460][T27016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.424224][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 917.432423][ C0] lec:lec_tx_timeout: lec0 [ 917.437350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 917.490201][T28265] siw: device registration error -23 [ 917.547325][T28264] lo speed is unknown, defaulting to 1000 [ 917.557131][T28271] ip6erspan0: entered allmulticast mode [ 917.874432][T28283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.916839][T28279] lo speed is unknown, defaulting to 1000 [ 918.839097][T28323] openvswitch: netlink: IP tunnel dst address not specified [ 918.864459][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 919.443103][T28343] ip6tnl0: Caught tx_queue_len zero misconfig [ 919.568409][T28347] x_tables: duplicate underflow at hook 1 [ 919.591375][T28349] x_tables: duplicate underflow at hook 1 [ 919.796996][T28354] lo speed is unknown, defaulting to 1000 [ 919.865376][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.874323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.937722][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.015921][T28360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 920.026966][T28360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 920.045143][T28360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 920.064764][T28360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 920.075440][T28360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 920.130283][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 920.139198][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 920.152478][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.161316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.179416][T28367] netlink: 'syz.1.5593': attribute type 4 has an invalid length. [ 920.194479][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 920.202687][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 920.209785][T28367] __nla_validate_parse: 8 callbacks suppressed [ 920.209803][T28367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5593'. [ 920.210460][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 920.263277][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.272927][T28356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.314539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.415328][T28369] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 920.460190][T28369] team0 (unregistering): Port device team_slave_0 removed [ 920.490115][T28378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5593'. [ 920.518587][T28369] team0 (unregistering): Failed to send options change via netlink (err -105) [ 920.545074][T28369] team0 (unregistering): Failed to send port change of device 76žÿ via netlink (err -105) [ 920.585594][T28369] team0 (unregistering): Port device 76žÿ removed [ 920.612595][T28369] team0 (unregistering): Failed to send options change via netlink (err -105) [ 920.644460][T28369] team0 (unregistering): Failed to send port change of device bridge1 via netlink (err -105) [ 920.675708][T28369] team0 (unregistering): Port device bridge1 removed [ 920.793246][T28348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.905400][T17928] syz_tun (unregistering): left allmulticast mode [ 920.917224][T17928] team0: Port device syz_tun removed [ 920.982795][T28359] lo speed is unknown, defaulting to 1000 [ 921.049599][ T8366] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.085606][ T8366] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.127556][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5599'. [ 921.159835][T28392] macvtap1: entered promiscuous mode [ 921.178310][T28392] veth0_to_bridge: entered promiscuous mode [ 921.187756][T28397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5598'. [ 921.190311][T28392] macvtap1: entered allmulticast mode [ 921.205878][T28392] veth0_to_bridge: entered allmulticast mode [ 921.213844][T28392] veth0_to_bridge: left allmulticast mode [ 921.220043][T28392] veth0_to_bridge: left promiscuous mode [ 921.269310][ T8366] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.284612][ T8366] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.366342][T28392] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5598'. [ 921.481189][ T8366] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.505207][ T8366] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.653620][ T8366] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.667343][ T8366] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.727062][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5603'. [ 921.927841][T28416] nbd: socks must be embedded in a SOCK_ITEM attr [ 922.042040][T25917] block nbd64: NBD_DISCONNECT [ 922.301949][T28425] syzkaller0: entered promiscuous mode [ 922.309281][T28360] Bluetooth: hci6: command tx timeout [ 922.327433][T28430] IPVS: set_ctl: invalid protocol: 2 172.20.20.12:21 [ 922.338987][T28439] IPVS: set_ctl: invalid protocol: 2 172.20.20.12:21 [ 922.364881][T28425] syzkaller0: entered allmulticast mode [ 922.444131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 922.452226][ C0] lec:lec_tx_timeout: lec0 [ 922.489550][T25917] udevd[25917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 922.653064][T28446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5607'. [ 922.662613][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5607'. [ 922.763480][T28446] geneve3: entered promiscuous mode [ 922.777083][T28446] geneve3: entered allmulticast mode [ 922.850842][T14259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.871805][T14259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.955484][T14259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.968699][T14259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.136379][ T8366] bridge_slave_0: left allmulticast mode [ 923.164350][ T8366] bridge_slave_0: left promiscuous mode [ 923.172115][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.580134][ T8366] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 923.863921][ T8366] bond9 (unregistering): (slave erspan1): Releasing active interface [ 923.904353][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 924.145470][ T8366] bond3 (unregistering): (slave bridge1): Releasing active interface [ 924.338632][ T8366] team0: Port device bridge4 removed [ 924.384873][T28360] Bluetooth: hci6: command tx timeout [ 924.491405][ T8366] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 924.591123][ T8366] bond13 (unregistering): (slave bridge9): Releasing active interface [ 924.599655][ T8366] bond13 (unregistering): (slave bridge9): the permanent HWaddr of slave - 42:9e:59:3a:5f:bb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 924.660345][ T8366] bond13 (unregistering): (slave bridge10): Releasing active interface [ 924.759532][ T8366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.775267][ T8366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.791558][ T8366] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 924.803904][ T8366] bond0 (unregistering): Released all slaves [ 924.818160][ T8366] bond1 (unregistering): Released all slaves [ 924.843525][ T8366] bond2 (unregistering): (slave veth3): Releasing active interface [ 924.852687][ T8366] batadv1: entered promiscuous mode [ 924.862330][ T8366] bond2 (unregistering): (slave batadv1): Releasing active interface [ 924.873882][ T8366] bond2 (unregistering): Released all slaves [ 924.892407][ T8366] bond3 (unregistering): Released all slaves [ 924.909037][ T8366] bond4 (unregistering): Released all slaves [ 924.923647][ T8366] bond5 (unregistering): Released all slaves [ 924.942073][ T8366] bond6 (unregistering): Released all slaves [ 924.961722][ T8366] bond7 (unregistering): Released all slaves [ 924.976071][ T8366] bond8 (unregistering): Released all slaves [ 924.991539][ T8366] bond9 (unregistering): Released all slaves [ 925.014704][ T8366] bond10 (unregistering): Released all slaves [ 925.029212][ T8366] bond11 (unregistering): Released all slaves [ 925.046788][ T8366] bond12 (unregistering): Released all slaves [ 925.063234][ T8366] bond13 (unregistering): Released all slaves [ 925.081640][ T8366] bond14 (unregistering): Released all slaves [ 925.095574][ T8366] bond15 (unregistering): Released all slaves [ 925.125052][ T8366] bond16 (unregistering): (slave bond17): Releasing backup interface [ 925.147253][ T8366] bond17 (unregistering): left promiscuous mode [ 925.153801][ T8366] bond16 (unregistering): Released all slaves [ 925.180124][ T8366] bond17 (unregistering): Released all slaves [ 925.201719][ T8366] bond18 (unregistering): Released all slaves [ 925.320753][T28494] veth0_to_team: entered promiscuous mode [ 925.374150][T28494] veth0_to_team: entered allmulticast mode [ 925.445670][T28359] chnl_net:caif_netlink_parms(): no params data found [ 925.543142][ T8366] tipc: Disabling bearer [ 925.564430][ T8366] tipc: Left network mode [ 925.607757][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 925.764435][T28497] lo speed is unknown, defaulting to 1000 [ 925.865890][T28492] lo speed is unknown, defaulting to 1000 [ 925.873008][T28359] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.885450][T28359] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.897741][T28359] bridge_slave_0: entered allmulticast mode [ 925.907055][T28359] bridge_slave_0: entered promiscuous mode [ 925.917267][T28359] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.924555][T28359] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.932365][T28359] bridge_slave_1: entered allmulticast mode [ 925.940784][T28359] bridge_slave_1: entered promiscuous mode [ 926.073015][T28359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.176309][T28359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.331020][T28359] team0: Port device team_slave_0 added [ 926.418943][T28359] team0: Port device team_slave_1 added [ 926.465308][T28360] Bluetooth: hci6: command tx timeout [ 926.623347][T28359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.650069][T28359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.694689][T28359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.801583][T28359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.818032][T28359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.850690][T28359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.008167][ T29] audit: type=1800 audit(1772449527.803:20): pid=28541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5622" name="blkio.bfq.time_recursive" dev="tmpfs" ino=815 res=0 errno=0 [ 927.090345][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5622'. [ 927.141576][T28546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5622'. [ 927.345165][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 927.369648][T28359] hsr_slave_0: entered promiscuous mode [ 927.378237][T28359] hsr_slave_1: entered promiscuous mode [ 927.402357][T28359] debugfs: 'hsr0' already exists in 'hsr' [ 927.424474][T28359] Cannot create hsr debugfs directory [ 927.489416][T28546] bond3: entered promiscuous mode [ 927.495302][T28546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 927.537635][T28545] bridge2: entered promiscuous mode [ 927.543459][T28545] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 927.571611][T28551] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 927.585827][ T8366] hsr_slave_0: left promiscuous mode [ 927.591856][ T8366] hsr_slave_1: left promiscuous mode [ 927.599081][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.607241][ T8366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.615542][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.623005][ T8366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.642373][ T8366] veth1_macvtap: left promiscuous mode [ 927.648020][ T8366] veth0_macvtap: left promiscuous mode [ 927.653650][ T8366] veth1_vlan: left promiscuous mode [ 927.659642][ T8366] veth0_vlan: left promiscuous mode [ 927.739421][ T8366] pim6reg (unregistering): left allmulticast mode [ 927.930710][ T8366] team_slave_1 (unregistering): left allmulticast mode [ 927.945719][ T8366] team0 (unregistering): Port device team_slave_1 removed [ 927.960024][ T8366] team_slave_0 (unregistering): left allmulticast mode [ 927.968701][ T8366] team0 (unregistering): Port device team_slave_0 removed [ 928.413929][T28564] netlink: 'syz.3.5626': attribute type 1 has an invalid length. [ 928.544258][T28360] Bluetooth: hci6: command tx timeout [ 928.652169][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5628'. [ 928.677524][T28570] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 928.726176][T28573] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 928.944273][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 928.947583][ T8366] IPVS: stop unused estimator thread 0... [ 928.968339][T28587] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5630'. [ 929.681788][T28359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 929.708712][T28359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 929.768498][T28359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 929.817849][T28359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 929.878860][T28621] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5638'. [ 929.958681][T28618] lo speed is unknown, defaulting to 1000 [ 930.202680][T28359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.260220][T28359] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.296620][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.304419][T14272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.354179][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.361420][T14272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.863154][T28359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.995027][T28359] veth0_vlan: entered promiscuous mode [ 931.021598][T28359] veth1_vlan: entered promiscuous mode [ 931.123273][T28359] veth0_macvtap: entered promiscuous mode [ 931.157017][T28359] veth1_macvtap: entered promiscuous mode [ 931.203276][T28359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.219687][T28359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.234034][T14258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.248230][T14258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.279526][T14258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.302520][T14258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.469270][T28675] bond7: option arp_all_targets: invalid value (129) [ 931.478636][T28675] bond7 (unregistering): Released all slaves [ 932.070563][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.079909][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.092808][ T1303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 932.384555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 932.392682][ C0] lec:lec_tx_timeout: lec0 [ 932.398062][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 932.997938][T28639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 933.111189][ T8368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.144309][ T8368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.223267][ T8368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.248252][ T8368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.268402][T28721] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 933.286573][T28722] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 933.311780][T28721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 933.813786][T28760] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5660'. [ 933.836400][T28760] syzkaller1: entered promiscuous mode [ 933.852163][T28760] syzkaller1: entered allmulticast mode [ 933.860478][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'. [ 933.871067][T28760] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 933.935012][T28766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.949821][T28766] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.962305][T28770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5662'. [ 933.984439][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 934.001843][T28766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 934.037029][T28773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5663'. [ 934.070060][T28770] bridge_slave_1 (unregistering): left allmulticast mode [ 934.077517][T28770] bridge_slave_1 (unregistering): left promiscuous mode [ 934.084692][T28770] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.208997][T28779] netlink: 'syz.4.5664': attribute type 1 has an invalid length. [ 934.220229][T28779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5664'. [ 934.230677][T28779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5664'. [ 934.322458][T28784] tipc: Enabled bearer , priority 0 [ 934.332961][T28784] syzkaller0: entered promiscuous mode [ 934.338997][T28784] syzkaller0: entered allmulticast mode [ 934.366906][T28784] tipc: Resetting bearer [ 934.431330][T28789] lo speed is unknown, defaulting to 1000 [ 934.586356][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'. [ 934.992751][T28803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5672'. [ 935.129917][T28806] wg1: entered promiscuous mode [ 935.141569][T28806] wg1: entered allmulticast mode [ 935.176605][T28815] netlink: 4208 bytes leftover after parsing attributes in process `syz.3.5675'. [ 935.204666][T28815] openvswitch: netlink: Flow key attr not present in new flow. [ 935.262780][T28817] openvswitch: netlink: IP tunnel dst address not specified [ 935.281004][T28817] netlink: 'syz.4.5676': attribute type 9 has an invalid length. [ 935.373020][T24754] tipc: Node number set to 2481416083 [ 935.960541][T28845] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.968459][T28845] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.070865][T28845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.082586][T28845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.213327][ T8366] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.235670][ T8366] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.278664][ T8366] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.314513][ T8366] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.389483][T28871] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 936.550397][T28889] syzkaller0: entered promiscuous mode [ 936.571880][T28889] syzkaller0: entered allmulticast mode [ 936.578281][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 936.606827][T28889] 0: reclassify loop, rule prio 0, protocol 800 [ 936.624612][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 936.647980][T28892] pim6reg: entered allmulticast mode [ 936.655602][T28892] pim6reg: left allmulticast mode [ 936.698796][T28882] netlink: 'syz.1.5692': attribute type 18 has an invalid length. [ 936.842936][T28901] netlink: 'syz.4.5698': attribute type 6 has an invalid length. [ 937.164499][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 937.390828][T28925] IPv6: sit2: Disabled Multicast RS [ 937.425373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 937.433451][ C0] lec:lec_tx_timeout: lec0 [ 937.472584][T28927] wg1: entered promiscuous mode [ 937.480193][T28927] wg1: entered allmulticast mode [ 937.489466][T28931] IPv6: Can't replace route, no match found [ 937.496705][T28931] IPv6: Can't replace route, no match found [ 937.753252][T28946] IPVS: Error connecting to the multicast addr [ 938.076408][T28963] netpci0: tun_chr_ioctl cmd 1074025678 [ 938.082149][T28963] netpci0: group set to 0 [ 938.268474][T28974] xt_hashlimit: size too large, truncated to 1048576 [ 938.345970][T28975] __nla_validate_parse: 16 callbacks suppressed [ 938.345995][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5718'. [ 938.402612][T28975] nbd: must specify a size in bytes for the device [ 938.418164][T28975] bond0: option min_links: invalid value (18446744073709530014) [ 938.429561][T28975] bond0: option min_links: allowed values 0 - 2147483647 [ 938.771154][T29000] lo speed is unknown, defaulting to 1000 [ 938.802198][T29002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5725'. [ 938.824971][T12354] lec:lec_start_xmit: lec0:No lecd attached [ 939.024364][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 939.130416][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5729'. [ 939.207045][T29013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5730'. [ 939.329760][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'. [ 939.361975][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5731'. [ 939.599216][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5735'. [ 939.822086][T29037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5736'. [ 939.841298][T29040] netlink: 'syz.3.5737': attribute type 1 has an invalid length. [ 940.021402][T29040] veth9: entered promiscuous mode [ 940.234997][T29053] lo speed is unknown, defaulting to 1000 [ 940.242885][T29052] lo speed is unknown, defaulting to 1000 [ 940.378824][T29071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5744'. [ 940.401425][T29071] nbd: must specify a size in bytes for the device [ 940.813293][T29087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5749'. [ 940.846199][T29090] lo speed is unknown, defaulting to 1000 [ 940.979050][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 940.989077][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.998244][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.006554][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.018031][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.499178][T29092] lo speed is unknown, defaulting to 1000 [ 942.308777][T29092] chnl_net:caif_netlink_parms(): no params data found [ 942.396305][T29092] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.403555][T29092] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.430533][T29092] bridge_slave_0: entered allmulticast mode [ 942.440064][T29092] bridge_slave_0: entered promiscuous mode [ 942.449687][T29092] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.459568][T29092] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.469336][T29092] bridge_slave_1: entered allmulticast mode [ 942.488243][T29092] bridge_slave_1: entered promiscuous mode [ 942.606485][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 942.607199][T29109] : entered promiscuous mode [ 942.620472][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 942.630758][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 942.644881][T29092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.655084][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 942.663212][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 942.677427][T29092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.779644][T29092] team0: Port device team_slave_0 added [ 942.814819][T29092] team0: Port device team_slave_1 added [ 942.866060][T29111] lo speed is unknown, defaulting to 1000 [ 942.867298][T29092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.879446][T29092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.906346][T29122] netlink: 'syz.0.5758': attribute type 1 has an invalid length. [ 942.914487][T29122] netlink: 'syz.0.5758': attribute type 1 has an invalid length. [ 942.922311][T29092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.935584][T29092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.942551][T29092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.972667][T29092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.986109][T29124] netlink: 'syz.1.5757': attribute type 1 has an invalid length. [ 943.104833][T28360] Bluetooth: hci2: command tx timeout [ 943.165402][T29092] hsr_slave_0: entered promiscuous mode [ 943.172433][T29092] hsr_slave_1: entered promiscuous mode [ 943.241023][T29129] bond1 (unregistering): Released all slaves [ 943.284842][T29135] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 943.688585][T29092] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.700477][T29092] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.731669][T29154] siw: device registration error -23 [ 943.786437][T29092] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.796530][T29092] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.862208][T29111] chnl_net:caif_netlink_parms(): no params data found [ 943.919543][T29092] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.933625][T29092] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.991706][T29158] lo speed is unknown, defaulting to 1000 [ 944.001555][T29092] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.011863][T29092] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.064261][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 944.150983][T29111] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.176550][T29111] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.195676][T29111] bridge_slave_0: entered allmulticast mode [ 944.222918][T29111] bridge_slave_0: entered promiscuous mode [ 944.272250][T29111] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.280262][T29111] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.288314][T29111] bridge_slave_1: entered allmulticast mode [ 944.296361][T29111] bridge_slave_1: entered promiscuous mode [ 944.358115][T29111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.383673][T29111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.394387][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 944.402429][ C0] lec:lec_tx_timeout: lec0 [ 944.408134][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 944.463526][T29111] team0: Port device team_slave_0 added [ 944.473110][T29111] team0: Port device team_slave_1 added [ 944.480805][T29092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 944.574278][T29092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 944.602509][T29111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.609750][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.637603][T29111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.650675][T29092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 944.678892][T29111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.686461][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.704393][T28360] Bluetooth: hci5: command tx timeout [ 944.714600][T29111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.730896][T29092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 944.781778][T29111] hsr_slave_0: entered promiscuous mode [ 944.789995][T29111] hsr_slave_1: entered promiscuous mode [ 944.796651][T29111] debugfs: 'hsr0' already exists in 'hsr' [ 944.802409][T29111] Cannot create hsr debugfs directory [ 945.185148][T28360] Bluetooth: hci2: command tx timeout [ 945.208952][T29192] gre1: entered allmulticast mode [ 945.294522][T29092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.317677][T29111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 945.366865][T29111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 945.369362][T29198] __nla_validate_parse: 7 callbacks suppressed [ 945.369379][T29198] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5773'. [ 945.396763][T29111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 945.412436][T29111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 945.432403][T29092] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.483982][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.491233][ T8366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.513744][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.521006][T14272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.715348][T29209] syzkaller1: entered promiscuous mode [ 945.721227][T29209] syzkaller1: entered allmulticast mode [ 945.793720][T29111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.850646][T29111] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.899299][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.906520][T14272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.977873][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.985096][ T8366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.132146][T29092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.193715][T29222] SET target dimension over the limit! [ 946.282242][T29092] veth0_vlan: entered promiscuous mode [ 946.319330][T29092] veth1_vlan: entered promiscuous mode [ 946.402404][T29092] veth0_macvtap: entered promiscuous mode [ 946.418561][T29233] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5779'. [ 946.437917][T29092] veth1_macvtap: entered promiscuous mode [ 946.473788][T29092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.503823][T29092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.540238][T14258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.572416][T29111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.580363][T14258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.603187][T14258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.629935][T29236] syzkaller0: entered promiscuous mode [ 946.646696][T29236] syzkaller0: entered allmulticast mode [ 946.654007][T14258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.674831][T29236] 0: reclassify loop, rule prio 0, protocol 700 [ 946.785184][T28360] Bluetooth: hci5: command tx timeout [ 946.864998][ T8347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.872871][ T8347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.927080][ T8347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.935969][ T8347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.176777][T29256] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 947.248439][T29111] veth0_vlan: entered promiscuous mode [ 947.264499][T28360] Bluetooth: hci2: command tx timeout [ 947.309678][T29111] veth1_vlan: entered promiscuous mode [ 947.406922][T29111] veth0_macvtap: entered promiscuous mode [ 947.432692][T29111] veth1_macvtap: entered promiscuous mode [ 947.500308][T29111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.551592][T29111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.591587][ T8347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.604491][ T8347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.631832][ T8347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.656530][ T8347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.902169][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.919763][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.018025][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.027934][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.191455][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5753'. [ 948.205818][T29267] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 948.242635][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5788'. [ 948.362412][T29269] bond1: entered promiscuous mode [ 948.375299][T29269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 948.395574][T27016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 948.423601][T29269] bond1 (unregistering): Released all slaves [ 948.866152][T28360] Bluetooth: hci5: command tx timeout [ 948.948966][T29311] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5799'. [ 949.028125][T29319] netlink: 'syz.6.5799': attribute type 4 has an invalid length. [ 949.104945][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 949.224470][T29323] lo speed is unknown, defaulting to 1000 [ 949.346030][T28360] Bluetooth: hci2: command tx timeout [ 949.400442][T29332] lo speed is unknown, defaulting to 1000 [ 949.424242][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 949.432354][ C0] lec:lec_tx_timeout: lec0 [ 949.491277][T29335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5803'. [ 950.178812][T29354] netlink: 'syz.6.5808': attribute type 13 has an invalid length. [ 950.188026][T29358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5808'. [ 950.547590][T29366] tipc: Started in network mode [ 950.552562][T29366] tipc: Node identity fe8642695c02, cluster identity 4711 [ 950.574838][T29366] tipc: Enabled bearer , priority 0 [ 950.583000][T29366] syzkaller0: entered promiscuous mode [ 950.595152][T29366] syzkaller0: entered allmulticast mode [ 950.950393][T28360] Bluetooth: hci5: command tx timeout [ 951.320567][T29376] tipc: Resetting bearer [ 951.357674][T29376] tipc: Disabling bearer [ 951.484013][T29396] netlink: 'syz.0.5819': attribute type 2 has an invalid length. [ 951.532514][T29396] 9: entered promiscuous mode [ 951.560950][T29406] xt_hashlimit: size too large, truncated to 1048576 [ 951.636780][T29407] lo speed is unknown, defaulting to 1000 [ 951.803969][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5822'. [ 951.836299][T29415] macsec0: entered promiscuous mode [ 951.852687][T29415] macsec0: entered allmulticast mode [ 951.866838][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5822'. [ 951.915944][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5823'. [ 951.998229][T29420] veth1_to_hsr: entered promiscuous mode [ 952.006933][T29420] macvtap1: entered promiscuous mode [ 952.012546][T29420] macvtap1: entered allmulticast mode [ 952.018813][T29420] veth1_to_hsr: entered allmulticast mode [ 952.335049][T29438] vlan2: entered promiscuous mode [ 952.364188][T29438] geneve1: entered promiscuous mode [ 952.375343][T29438] vlan2: entered allmulticast mode [ 952.390492][T29438] geneve1: entered allmulticast mode [ 952.407921][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.439718][T29440] netlink: 336 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.451393][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.484789][T29440] netlink: 336 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.518607][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.519317][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 952.545716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 952.637856][T29431] vlan2: entered promiscuous mode [ 952.642962][T29431] bridge0: entered promiscuous mode [ 952.839150][T29454] netlink: 'syz.1.5831': attribute type 1 has an invalid length. [ 952.876043][T29454] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5831'. [ 952.912674][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 952.924004][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 952.934015][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 952.943702][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 952.964964][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 953.122448][T29455] lo speed is unknown, defaulting to 1000 [ 953.565397][T29481] x_tables: duplicate underflow at hook 1 [ 953.983586][T29490] bond1: entered promiscuous mode [ 954.095985][T29455] chnl_net:caif_netlink_parms(): no params data found [ 954.144299][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 954.247845][T29455] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.255225][T29455] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.262896][T29455] bridge_slave_0: entered allmulticast mode [ 954.271229][T29455] bridge_slave_0: entered promiscuous mode [ 954.280681][T29455] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.288110][T29455] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.295679][T29455] bridge_slave_1: entered allmulticast mode [ 954.303840][T29455] bridge_slave_1: entered promiscuous mode [ 954.353375][T29455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.367088][T29455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.416512][T29455] team0: Port device team_slave_0 added [ 954.426363][T29455] team0: Port device team_slave_1 added [ 954.487927][T29511] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 954.502893][T29455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.519962][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.602187][T29455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.666091][T29455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.675299][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.714243][T29455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.024275][T28360] Bluetooth: hci7: command tx timeout [ 955.096568][T29455] hsr_slave_0: entered promiscuous mode [ 955.118306][T29455] hsr_slave_1: entered promiscuous mode [ 955.125329][T29455] debugfs: 'hsr0' already exists in 'hsr' [ 955.131241][T29455] Cannot create hsr debugfs directory [ 955.165908][T29547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 957.104837][T28360] Bluetooth: hci7: command tx timeout [ 957.554228][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 957.562456][ C0] lec:lec_tx_timeout: lec0 [ 957.584706][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 957.664444][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 957.925101][T29537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.959199][T29455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 958.022156][T29455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 958.061545][T29455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 958.079862][T29455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 958.088076][T29564] __nla_validate_parse: 179 callbacks suppressed [ 958.088097][T29564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5855'. [ 958.129813][T29564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.167757][T29564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.214707][T29563] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 958.232811][T29563] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5856'. [ 958.251203][T29563] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5856'. [ 958.282985][T29563] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5856'. [ 958.420477][T29583] team_slave_1: Caught tx_queue_len zero misconfig [ 958.578872][T29587] netlink: 'syz.6.5863': attribute type 3 has an invalid length. [ 958.587227][T29455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.642804][T29455] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.675673][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.682822][ T8368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.821175][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.828609][ T8368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.184539][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 959.192648][T28360] Bluetooth: hci7: command tx timeout [ 959.217534][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 959.452896][T29455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.603209][ T29] audit: type=1800 audit(1772449560.373:21): pid=29607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5866" name="memory.events" dev="tmpfs" ino=122 res=0 errno=0 [ 960.194710][T29455] veth0_vlan: entered promiscuous mode [ 960.260700][T29455] veth1_vlan: entered promiscuous mode [ 960.355151][T29642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 960.381256][T29645] nbd: couldn't find a device at index 1 [ 960.416249][T29646] netlink: 'syz.6.5877': attribute type 21 has an invalid length. [ 960.424879][T29642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5874'. [ 960.513400][T29455] veth0_macvtap: entered promiscuous mode [ 960.570780][T29455] veth1_macvtap: entered promiscuous mode [ 960.643918][T29646] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 960.738227][T29455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.752572][T29649] syz.6.5877 uses old SIOCAX25GETINFO [ 960.790365][T29455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.798246][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5879'. [ 960.899832][ T8368] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.948571][ T8368] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.970882][ T8368] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.009278][ T8368] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.264624][T28360] Bluetooth: hci7: command tx timeout [ 961.284683][ T8368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.292751][ T8368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.417163][ T8368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.447679][ T8368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.693429][T29675] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5885'. [ 961.736292][T29675] veth0_to_team: entered promiscuous mode [ 961.774866][T29680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5885'. [ 961.796612][T29675] veth0_to_team: left promiscuous mode [ 961.927055][T29680] veth0_to_team: entered promiscuous mode [ 961.949952][T29680] veth0_to_team: left promiscuous mode [ 962.016961][T29695] netlink: 'syz.1.5890': attribute type 1 has an invalid length. [ 962.173291][T29705] netlink: 'syz.6.5893': attribute type 30 has an invalid length. [ 962.196749][T29707] netlink: 'syz.6.5893': attribute type 30 has an invalid length. [ 962.305866][T29705] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 962.317364][T29690] delete_channel: no stack [ 962.318375][T29705] bond1 (unregistering): Released all slaves [ 962.594213][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 962.602442][ C0] lec:lec_tx_timeout: lec0 [ 962.625345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 962.654878][T29731] pim6reg1: entered promiscuous mode [ 962.660474][T29731] pim6reg1: entered allmulticast mode [ 962.837739][T29744] netlink: 'syz.7.5904': attribute type 2 has an invalid length. [ 962.845679][T29744] netlink: 'syz.7.5904': attribute type 1 has an invalid length. [ 962.855230][T29744] netlink: 'syz.7.5904': attribute type 1 has an invalid length. [ 963.111598][T29760] netlink: 'syz.6.5905': attribute type 12 has an invalid length. [ 963.205180][T29760] netlink: 'syz.6.5905': attribute type 29 has an invalid length. [ 963.227855][T29760] __nla_validate_parse: 5 callbacks suppressed [ 963.227876][T29760] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5905'. [ 963.401038][T29774] veth1_macvtap: left promiscuous mode [ 963.406929][T29774] macsec0: entered allmulticast mode [ 963.432130][T29775] veth1_macvtap: entered promiscuous mode [ 963.446248][T29775] veth1_macvtap: entered allmulticast mode [ 963.452675][T29775] macsec0: left allmulticast mode [ 963.458622][T29775] veth1_macvtap: left allmulticast mode [ 963.470224][T29779] syz.7.5911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 963.504594][T29779] CPU: 1 UID: 0 PID: 29779 Comm: syz.7.5911 Not tainted syzkaller #0 PREEMPT(full) [ 963.504623][T29779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.504637][T29779] Call Trace: [ 963.504645][T29779] [ 963.504654][T29779] dump_stack_lvl+0xe8/0x150 [ 963.504691][T29779] warn_alloc+0x249/0x340 [ 963.504715][T29779] ? stack_trace_save+0xa9/0x100 [ 963.504740][T29779] ? __pfx_warn_alloc+0x10/0x10 [ 963.504770][T29779] ? kasan_save_track+0x4f/0x80 [ 963.504790][T29779] ? kasan_save_track+0x3e/0x80 [ 963.504818][T29779] ? __kasan_kmalloc+0x93/0xb0 [ 963.504838][T29779] ? __kmalloc_cache_noprof+0x31c/0x660 [ 963.504858][T29779] ? xskq_create+0x56/0x170 [ 963.504882][T29779] ? xsk_setsockopt+0x54c/0x990 [ 963.504903][T29779] ? do_sock_setsockopt+0x17c/0x1b0 [ 963.504929][T29779] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 963.504954][T29779] ? do_syscall_64+0x14d/0xf80 [ 963.504985][T29779] __vmalloc_node_range_noprof+0x132/0x1730 [ 963.505042][T29779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 963.505071][T29779] ? __kasan_kmalloc+0x93/0xb0 [ 963.505099][T29779] vmalloc_user_noprof+0xad/0xe0 [ 963.505120][T29779] ? xskq_create+0xbf/0x170 [ 963.505146][T29779] xskq_create+0xbf/0x170 [ 963.505174][T29779] xsk_init_queue+0x8a/0xe0 [ 963.505202][T29779] xsk_setsockopt+0x54c/0x990 [ 963.505229][T29779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 963.505253][T29779] ? __pfx_aa_sk_perm+0x10/0x10 [ 963.505280][T29779] ? aa_sock_opt_perm+0xff/0x1a0 [ 963.505308][T29779] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 963.505329][T29779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 963.505355][T29779] do_sock_setsockopt+0x17c/0x1b0 [ 963.505390][T29779] __x64_sys_setsockopt+0x13d/0x1b0 [ 963.505424][T29779] do_syscall_64+0x14d/0xf80 [ 963.505450][T29779] ? trace_irq_disable+0x3b/0x150 [ 963.505477][T29779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.505498][T29779] ? clear_bhb_loop+0x40/0x90 [ 963.505524][T29779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.505544][T29779] RIP: 0033:0x7f5a3359c799 [ 963.505567][T29779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.505584][T29779] RSP: 002b:00007f5a34502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 963.505608][T29779] RAX: ffffffffffffffda RBX: 00007f5a33816180 RCX: 00007f5a3359c799 [ 963.505624][T29779] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000f [ 963.505637][T29779] RBP: 00007f5a33632bd9 R08: 0000000000000004 R09: 0000000000000000 [ 963.505651][T29779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.505664][T29779] R13: 00007f5a33816218 R14: 00007f5a33816180 R15: 00007ffd449aee18 [ 963.505700][T29779] [ 963.505709][T29779] Mem-Info: [ 963.648325][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5914'. [ 963.675079][T29779] active_anon:7714 inactive_anon:5 isolated_anon:0 [ 963.675079][T29779] active_file:3021 inactive_file:40634 isolated_file:0 [ 963.675079][T29779] unevictable:768 dirty:167 writeback:0 [ 963.675079][T29779] slab_reclaimable:14188 slab_unreclaimable:141684 [ 963.675079][T29779] mapped:47191 shmem:1515 pagetables:1527 [ 963.675079][T29779] sec_pagetables:0 bounce:0 [ 963.675079][T29779] kernel_misc_reclaimable:0 [ 963.675079][T29779] free:1216709 free_pcp:30793 free_cma:0 [ 963.851912][T29779] Node 0 active_anon:30756kB inactive_anon:20kB active_file:12084kB inactive_file:162344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143708kB dirty:668kB writeback:0kB shmem:4524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16388kB pagetables:5972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 963.903853][T29779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:45056kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 963.952151][T29779] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 963.997603][T29779] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 964.016347][T29779] Node 0 DMA32 free:1088684kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30856kB inactive_anon:20kB active_file:12084kB inactive_file:162344kB unevictable:1536kB writepending:668kB zspages:0kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:59520kB local_pcp:34776kB free_cma:0kB [ 964.093460][T29801] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 964.118006][T29801] openvswitch: netlink: Message has 16 unknown bytes. [ 964.142650][T29779] lowmem_reserve[]: 0 0 0 0 0 [ 964.188762][T29779] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 964.221198][T29779] lowmem_reserve[]: 0 0 0 0 0 [ 964.227154][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.245587][T29779] Node 1 Normal free:3766776kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63992kB local_pcp:32664kB free_cma:0kB [ 964.321160][T29779] lowmem_reserve[]: 0 0 0 0 0 [ 964.367334][T29809] bond1: Removing last ns target with arp_interval on [ 964.374490][T29779] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 964.444236][T29779] Node 0 DMA32: 8128*4kB (UME) 6535*8kB (UM) 3514*16kB (UME) 126*32kB (UME) 230*64kB (U) 338*128kB (UM) 462*256kB (UME) 438*512kB (UM) 307*1024kB (UME) 114*2048kB (U) 0*4096kB = 1093400kB [ 964.520957][T29779] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 964.539948][T29825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5925'. [ 964.554333][T29779] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 16*16kB (UME) 11*32kB (UME) 8*64kB (UM) 5*128kB (UME) 5*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 916*4096kB (UM) = 3766828kB [ 964.592878][T29779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.602760][T29779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 964.604241][T29823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5924'. [ 964.613003][T29779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.633168][T29779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 964.644166][T29823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5924'. [ 964.656577][T29779] 45166 total pagecache pages [ 964.661518][T29779] 0 pages in swap cache [ 964.672116][T29779] Free swap = 124996kB [ 964.679558][T29779] Total swap = 124996kB [ 964.686625][T29779] 2097051 pages RAM [ 964.762962][T29779] 0 pages HighMem/MovableOnly [ 964.768060][T29779] 427004 pages reserved [ 964.772379][T29779] 0 pages cma reserved [ 964.920576][T29842] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.964940][T29836] lo speed is unknown, defaulting to 1000 [ 965.137414][T29849] lo speed is unknown, defaulting to 1000 [ 965.159348][T29855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5933'. [ 965.196326][T29851] netlink: 'syz.1.5932': attribute type 1 has an invalid length. [ 965.341916][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5932'. [ 965.442397][T29861] bond7: (slave geneve2): making interface the new active one [ 965.451638][T29861] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 965.527962][T29865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 965.566828][T14272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 965.580008][T14272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 965.616844][T14272] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 965.633436][T14272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 966.094638][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5938'. [ 966.110540][T29893] nbd: socks must be embedded in a SOCK_ITEM attr [ 966.149243][T29887] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 966.610861][T29906] sctp: [Deprecated]: syz.6.5944 (pid 29906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.610861][T29906] Use struct sctp_sack_info instead [ 966.632298][T29906] sctp: [Deprecated]: syz.6.5944 (pid 29906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.632298][T29906] Use struct sctp_sack_info instead [ 967.059302][T29896] infiniband !yz!: set active [ 967.078206][T29896] infiniband !yz!: added team_slave_0 [ 967.092702][T29896] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 967.106424][T29896] infiniband !yz!: Couldn't open port 1 [ 967.203480][T29936] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 967.226978][T29896] RDS/IB: !yz!: added [ 967.236416][T29896] smc: adding ib device !yz! with port count 1 [ 967.255673][T29896] smc: ib device !yz! port 1 has no pnetid [ 967.310433][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'. [ 968.544188][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5920 ms [ 968.552251][ C0] lec:lec_tx_timeout: lec0 [ 968.557351][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 968.679307][T29966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5959'. [ 968.841351][T25917] udevd[25917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 968.869112][T29972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5960'. [ 969.274288][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 970.260953][T29973] lo speed is unknown, defaulting to 1000 [ 970.280710][T29929] lo speed is unknown, defaulting to 1000 [ 970.310733][T29947] lo speed is unknown, defaulting to 1000 [ 970.334732][T29975] lo speed is unknown, defaulting to 1000 [ 970.394846][T29980] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 970.402249][T29980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.414037][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5962'. [ 970.587528][T29984] lo speed is unknown, defaulting to 1000 [ 971.465585][T29993] netlink: 'syz.1.5966': attribute type 1 has an invalid length. [ 971.505213][T29993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 971.582660][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'. [ 971.593511][T29996] netlink: 'syz.1.5967': attribute type 12 has an invalid length. [ 971.602860][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'. [ 971.612680][T29996] netlink: 'syz.1.5967': attribute type 12 has an invalid length. [ 971.819088][T30001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5969'. [ 971.936311][T30003] netlink: 'syz.1.5970': attribute type 1 has an invalid length. [ 971.944767][T30003] netlink: 'syz.1.5970': attribute type 11 has an invalid length. [ 971.952670][T30003] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5970'. [ 973.068583][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 973.079630][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 973.098819][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 973.110031][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 973.124900][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 973.515826][T30016] lo speed is unknown, defaulting to 1000 [ 973.564160][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 973.572201][ C0] lec:lec_tx_timeout: lec0 [ 974.070852][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5976'. [ 974.306088][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 974.353557][T30023] gtp0: entered promiscuous mode [ 974.363706][T30023] gtp0: entered allmulticast mode [ 974.688734][T30036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.009064][T29534] IPVS: starting estimator thread 0... [ 975.104446][T30042] IPVS: using max 29 ests per chain, 69600 per kthread [ 975.184312][T28360] Bluetooth: hci8: command tx timeout [ 975.700931][T30016] chnl_net:caif_netlink_parms(): no params data found [ 975.832456][T30016] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.840403][T30016] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.848493][T30016] bridge_slave_0: entered allmulticast mode [ 975.858595][T30016] bridge_slave_0: entered promiscuous mode [ 975.869213][T30016] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.877014][T30016] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.895088][T30016] bridge_slave_1: entered allmulticast mode [ 975.912881][T30016] bridge_slave_1: entered promiscuous mode [ 975.991012][T30016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.025982][T30016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.107630][T30016] team0: Port device team_slave_0 added [ 976.128285][T30016] team0: Port device team_slave_1 added [ 976.136867][T29532] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 976.221096][T30069] netlink: 'syz.0.5986': attribute type 5 has an invalid length. [ 976.260162][T30069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5986'. [ 976.271412][T30016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.286351][T30016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.376156][T30016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.426812][T30016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.433819][T30016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.546632][T30016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.590506][ T8369] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 976.681568][T30016] hsr_slave_0: entered promiscuous mode [ 976.699490][T30016] hsr_slave_1: entered promiscuous mode [ 976.713647][T30016] debugfs: 'hsr0' already exists in 'hsr' [ 976.720167][T30016] Cannot create hsr debugfs directory [ 976.865965][T29534] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.169016][T30016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.264291][T28360] Bluetooth: hci8: command tx timeout [ 977.373305][T30016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.460304][T30088] lo speed is unknown, defaulting to 1000 [ 977.499309][T30016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.578055][T30098] macsec1: entered promiscuous mode [ 977.627450][T30016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.688993][T14272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.725741][T14272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.744785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 978.222487][T30016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 978.338750][T30016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 978.363632][T30016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 978.396933][T30016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 978.460753][T30124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6000'. [ 978.470361][T24752] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 978.796345][T30016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.857682][T30016] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.890295][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.897774][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.976865][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.984034][ T8347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.344616][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 979.357152][T28360] Bluetooth: hci8: command tx timeout [ 979.939810][T30016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.988166][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6008'. [ 980.152162][T30016] veth0_vlan: entered promiscuous mode [ 980.195036][T30016] veth1_vlan: entered promiscuous mode [ 980.327106][T30016] veth0_macvtap: entered promiscuous mode [ 980.362730][T30016] veth1_macvtap: entered promiscuous mode [ 980.429161][T30016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.453290][T30169] netlink: 'syz.0.6011': attribute type 31 has an invalid length. [ 980.481717][T30016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.515480][ T8369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.553730][ T8369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.619795][T14258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.666787][T14258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.729401][T30176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6013'. [ 980.810520][ T8370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.821336][ T8370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.907446][ T8370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.917846][ T8370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.011970][T30182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6017'. [ 981.379275][T30198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 981.424556][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 981.432631][T28360] Bluetooth: hci8: command tx timeout [ 981.657450][T30204] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 981.861793][T30219] tipc: Enabling of bearer rejected, failed to enable media [ 981.881845][T30211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6023'. [ 981.928028][T30218] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.6025'. [ 982.301585][T30233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6027'. [ 982.381803][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6031'. [ 982.420389][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6031'. [ 982.436033][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6031'. [ 982.609476][T30254] ipvlan2: entered promiscuous mode [ 982.655850][T30255] ipvlan3: entered promiscuous mode [ 982.841247][T30261] vlan0: entered promiscuous mode [ 983.115527][T30270] siw: device registration error -23 [ 983.424180][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 983.432271][ C0] lec:lec_tx_timeout: lec0 [ 983.437124][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 983.470585][T30292] netlink: 'syz.6.6045': attribute type 4 has an invalid length. [ 983.709123][T30295] lo speed is unknown, defaulting to 1000 [ 983.717186][T30299] netlink: 'syz.3.6049': attribute type 1 has an invalid length. [ 983.898667][T30305] bond1: (slave geneve2): making interface the new active one [ 983.911812][T30305] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 983.928860][ T8347] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 983.969208][ T8347] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.024992][T30305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 984.058454][ T8347] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.096333][ T8347] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.380529][T30320] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.388294][T30320] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.396296][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 984.597018][T30325] : entered promiscuous mode [ 985.125888][T30336] __nla_validate_parse: 12 callbacks suppressed [ 985.125913][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6063'. [ 985.159541][T30336] netlink: 'syz.0.6063': attribute type 1 has an invalid length. [ 985.186149][T30339] netlink: 'syz.3.6062': attribute type 21 has an invalid length. [ 985.194023][T30339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6062'. [ 985.281467][T30344] IPv6: Can't replace route, no match found [ 985.293330][T30344] IPv6: Can't replace route, no match found [ 985.388271][T30336] bond2: entered promiscuous mode [ 985.416150][T30336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 985.483647][T30342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 985.542934][T30342] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 985.595938][T30342] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 985.675675][T30342] bond2: (slave wireguard0): making interface the new active one [ 985.689152][T30342] wireguard0: entered promiscuous mode [ 985.705464][T30342] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 985.714913][T30339] netlink: 'syz.3.6062': attribute type 4 has an invalid length. [ 985.722712][T30339] netlink: 'syz.3.6062': attribute type 3 has an invalid length. [ 985.731903][T30339] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6062'. [ 985.758631][T30344] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 985.783805][T30344] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 986.003719][T30371] syzkaller0: entered promiscuous mode [ 986.018652][T30371] syzkaller0: entered allmulticast mode [ 986.231890][T30379] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6073'. [ 986.243697][T30379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6073'. [ 986.276607][T30385] netlink: 'syz.6.6077': attribute type 25 has an invalid length. [ 986.295183][T30385] netlink: 'syz.6.6077': attribute type 1 has an invalid length. [ 986.315243][T30385] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.412925][T30387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6078'. [ 986.518961][T30392] netlink: 'syz.6.6080': attribute type 1 has an invalid length. [ 986.525602][T30396] Cannot find del_set index 1 as target [ 986.578504][T30400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6080'. [ 986.611760][T30395] lo speed is unknown, defaulting to 1000 [ 986.702850][T30392] bond2: entered promiscuous mode [ 986.727020][T30411] netlink: 212 bytes leftover after parsing attributes in process `syz.7.6079'. [ 986.742851][T30412] netlink: 'syz.1.6083': attribute type 1 has an invalid length. [ 986.751374][T30410] netlink: 'syz.1.6083': attribute type 1 has an invalid length. [ 986.793161][T30392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 986.812470][T30400] bond2: entered allmulticast mode [ 986.861465][T30415] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6080'. [ 986.905444][T30412] IPv6: Can't replace route, no match found [ 986.913177][T30412] IPv6: Can't replace route, no match found [ 986.921862][T30412] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 986.980204][T30400] bond2: (slave bridge2): making interface the new active one [ 987.049406][T30400] bridge2: entered promiscuous mode [ 987.069857][T30400] bridge2: entered allmulticast mode [ 987.097123][T30400] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 987.126685][T30392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6080'. [ 987.733768][T30435] geneve2: entered promiscuous mode [ 987.740523][T30435] geneve2: entered allmulticast mode [ 987.786821][T30441] bond0: entered promiscuous mode [ 987.802269][T30441] bond_slave_0: entered promiscuous mode [ 987.818942][T30441] bond_slave_1: entered promiscuous mode [ 987.896647][T30441] bond0: left promiscuous mode [ 987.901686][T30441] bond_slave_0: left promiscuous mode [ 987.909318][T30441] bond_slave_1: left promiscuous mode [ 987.970005][T14258] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 987.979253][T14258] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 988.004301][T14258] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 988.034914][T14258] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 988.444141][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 988.452227][ C0] lec:lec_tx_timeout: lec0 [ 988.850452][T30472] tipc: Enabling of bearer rejected, failed to enable media [ 988.893932][T30483] netlink: 'syz.0.6098': attribute type 16 has an invalid length. [ 989.024290][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 989.045637][T30475] syzkaller0: entered promiscuous mode [ 989.065622][T30475] syzkaller0: entered allmulticast mode [ 989.424407][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 991.898243][T30495] lo speed is unknown, defaulting to 1000 [ 991.904843][T30500] __nla_validate_parse: 5 callbacks suppressed [ 991.904864][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'. [ 992.146860][T30513] syzkaller0: entered promiscuous mode [ 992.152394][T30513] syzkaller0: entered allmulticast mode [ 992.197510][T30519] netlink: 'syz.0.6110': attribute type 1 has an invalid length. [ 992.214279][T30519] netlink: 'syz.0.6110': attribute type 2 has an invalid length. [ 992.237821][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 992.302105][T30522] netlink: 'syz.7.6112': attribute type 3 has an invalid length. [ 992.416851][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6112'. [ 992.959526][T30546] lo speed is unknown, defaulting to 1000 [ 993.519896][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.529936][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.542537][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 993.552057][ T1303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 994.385442][ T8368] wlan1: Trigger new scan to find an IBSS to join [ 995.561210][T30569] FAULT_INJECTION: forcing a failure. [ 995.561210][T30569] name failslab, interval 1, probability 0, space 0, times 0 [ 995.577617][T30569] CPU: 0 UID: 0 PID: 30569 Comm: syz.7.6122 Not tainted syzkaller #0 PREEMPT(full) [ 995.577647][T30569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 995.577668][T30569] Call Trace: [ 995.577677][T30569] [ 995.577687][T30569] dump_stack_lvl+0xe8/0x150 [ 995.577722][T30569] should_fail_ex+0x412/0x560 [ 995.577752][T30569] should_failslab+0xa8/0x100 [ 995.577778][T30569] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 995.577809][T30569] ? __alloc_skb+0x186/0x7d0 [ 995.577834][T30569] ? __alloc_skb+0x1d0/0x7d0 [ 995.577856][T30569] ? __local_bh_enable_ip+0xd0/0x130 [ 995.577895][T30569] __alloc_skb+0x1d0/0x7d0 [ 995.577927][T30569] netlink_sendmsg+0x5d4/0xb40 [ 995.577964][T30569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.577994][T30569] ? aa_sock_msg_perm+0xf1/0x1b0 [ 995.578017][T30569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 995.578037][T30569] sock_write_iter+0x503/0x550 [ 995.578056][T30569] ? __pfx_sock_write_iter+0x10/0x10 [ 995.578091][T30569] do_iter_readv_writev+0x619/0x8c0 [ 995.578112][T30569] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 995.578134][T30569] ? bpf_lsm_file_permission+0x9/0x20 [ 995.578152][T30569] ? security_file_permission+0x75/0x260 [ 995.578179][T30569] ? rw_verify_area+0x255/0x4d0 [ 995.578198][T30569] vfs_writev+0x33c/0x990 [ 995.578226][T30569] ? __pfx_vfs_writev+0x10/0x10 [ 995.578260][T30569] ? __fget_files+0x2a/0x420 [ 995.578285][T30569] ? __fget_files+0x3a0/0x420 [ 995.578306][T30569] ? __fget_files+0x2a/0x420 [ 995.578335][T30569] do_writev+0x154/0x2e0 [ 995.578358][T30569] ? __pfx_do_writev+0x10/0x10 [ 995.578388][T30569] do_syscall_64+0x14d/0xf80 [ 995.578410][T30569] ? trace_irq_disable+0x3b/0x150 [ 995.578433][T30569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.578449][T30569] ? clear_bhb_loop+0x40/0x90 [ 995.578469][T30569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.578485][T30569] RIP: 0033:0x7f5a3359c799 [ 995.578502][T30569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.578516][T30569] RSP: 002b:00007f5a34544028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 995.578535][T30569] RAX: ffffffffffffffda RBX: 00007f5a33815fa0 RCX: 00007f5a3359c799 [ 995.578547][T30569] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 995.578558][T30569] RBP: 00007f5a34544090 R08: 0000000000000000 R09: 0000000000000000 [ 995.578568][T30569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.578578][T30569] R13: 00007f5a33816038 R14: 00007f5a33815fa0 R15: 00007ffd449aee18 [ 995.578604][T30569] [ 995.839514][T30538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.958321][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'. [ 995.974239][T30572] syz_tun: entered allmulticast mode [ 996.012056][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'. [ 996.099199][T30571] syz_tun: left allmulticast mode [ 996.333741][T30591] bond0: (slave gre0): Error: Device type is different from other slaves [ 996.341832][T30597] xt_l2tp: wrong L2TP version: 0 [ 996.358944][T30591] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6129'. [ 996.389213][T30597] x_tables: duplicate underflow at hook 3 [ 996.397145][T30591] bond0: (slave gre0): Error: Device type is different from other slaves [ 996.456328][T30604] lo speed is unknown, defaulting to 1000 [ 996.528589][T30609] FAULT_INJECTION: forcing a failure. [ 996.528589][T30609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.564339][T30609] CPU: 0 UID: 0 PID: 30609 Comm: syz.1.6133 Not tainted syzkaller #0 PREEMPT(full) [ 996.564369][T30609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.564382][T30609] Call Trace: [ 996.564391][T30609] [ 996.564401][T30609] dump_stack_lvl+0xe8/0x150 [ 996.564435][T30609] should_fail_ex+0x412/0x560 [ 996.564476][T30609] _copy_from_iter+0x1d3/0x1670 [ 996.564506][T30609] ? rcu_is_watching+0x15/0xb0 [ 996.564542][T30609] ? __pfx__copy_from_iter+0x10/0x10 [ 996.564577][T30609] ? netlink_sendmsg+0x650/0xb40 [ 996.564602][T30609] ? skb_put+0x11b/0x210 [ 996.564633][T30609] netlink_sendmsg+0x6c0/0xb40 [ 996.564678][T30609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.564708][T30609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 996.564735][T30609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 996.564761][T30609] sock_write_iter+0x503/0x550 [ 996.564786][T30609] ? __pfx_sock_write_iter+0x10/0x10 [ 996.564831][T30609] do_iter_readv_writev+0x619/0x8c0 [ 996.564858][T30609] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 996.564885][T30609] ? bpf_lsm_file_permission+0x9/0x20 [ 996.564908][T30609] ? security_file_permission+0x75/0x260 [ 996.564940][T30609] ? rw_verify_area+0x255/0x4d0 [ 996.564965][T30609] vfs_writev+0x33c/0x990 [ 996.565001][T30609] ? __pfx_vfs_writev+0x10/0x10 [ 996.565050][T30609] ? __fget_files+0x2a/0x420 [ 996.565083][T30609] ? __fget_files+0x3a0/0x420 [ 996.565110][T30609] ? __fget_files+0x2a/0x420 [ 996.565148][T30609] do_writev+0x154/0x2e0 [ 996.565177][T30609] ? __pfx_do_writev+0x10/0x10 [ 996.565216][T30609] do_syscall_64+0x14d/0xf80 [ 996.565244][T30609] ? trace_irq_disable+0x3b/0x150 [ 996.565272][T30609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.565293][T30609] ? clear_bhb_loop+0x40/0x90 [ 996.565319][T30609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.565339][T30609] RIP: 0033:0x7fa0a699c799 [ 996.565360][T30609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.565378][T30609] RSP: 002b:00007fa0a7770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 996.565401][T30609] RAX: ffffffffffffffda RBX: 00007fa0a6c15fa0 RCX: 00007fa0a699c799 [ 996.565416][T30609] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 996.565429][T30609] RBP: 00007fa0a7770090 R08: 0000000000000000 R09: 0000000000000000 [ 996.565443][T30609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.565456][T30609] R13: 00007fa0a6c16038 R14: 00007fa0a6c15fa0 R15: 00007fffbfa7b6b8 [ 996.565491][T30609] [ 996.599512][T30611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.997210][T30616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6136'. [ 997.037044][T30620] netlink: 'syz.3.6138': attribute type 3 has an invalid length. [ 997.152570][T30623] netlink: 'syz.6.6139': attribute type 32 has an invalid length. [ 997.288355][T30627] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 997.666553][T30651] FAULT_INJECTION: forcing a failure. [ 997.666553][T30651] name failslab, interval 1, probability 0, space 0, times 0 [ 997.727434][T30651] CPU: 0 UID: 0 PID: 30651 Comm: syz.6.6146 Not tainted syzkaller #0 PREEMPT(full) [ 997.727465][T30651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 997.727478][T30651] Call Trace: [ 997.727487][T30651] [ 997.727496][T30651] dump_stack_lvl+0xe8/0x150 [ 997.727531][T30651] should_fail_ex+0x412/0x560 [ 997.727562][T30651] should_failslab+0xa8/0x100 [ 997.727595][T30651] ? skb_clone+0x212/0x3a0 [ 997.727626][T30651] kmem_cache_alloc_noprof+0x87/0x650 [ 997.727656][T30651] ? __netlink_lookup+0xc6/0x8b0 [ 997.727692][T30651] skb_clone+0x212/0x3a0 [ 997.727726][T30651] __netlink_deliver_tap+0x404/0x850 [ 997.727766][T30651] ? netlink_deliver_tap+0x2e/0x1b0 [ 997.727794][T30651] netlink_deliver_tap+0x19c/0x1b0 [ 997.727820][T30651] netlink_unicast+0x7e3/0x9b0 [ 997.727854][T30651] ? __pfx_netlink_unicast+0x10/0x10 [ 997.727879][T30651] ? netlink_sendmsg+0x650/0xb40 [ 997.727902][T30651] ? skb_put+0x11b/0x210 [ 997.727934][T30651] netlink_sendmsg+0x813/0xb40 [ 997.727970][T30651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.728000][T30651] ? aa_sock_msg_perm+0xf1/0x1b0 [ 997.728026][T30651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 997.728053][T30651] sock_write_iter+0x503/0x550 [ 997.728079][T30651] ? __pfx_sock_write_iter+0x10/0x10 [ 997.728127][T30651] do_iter_readv_writev+0x619/0x8c0 [ 997.728155][T30651] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 997.728183][T30651] ? bpf_lsm_file_permission+0x9/0x20 [ 997.728206][T30651] ? security_file_permission+0x75/0x260 [ 997.728238][T30651] ? rw_verify_area+0x255/0x4d0 [ 997.728264][T30651] vfs_writev+0x33c/0x990 [ 997.728301][T30651] ? __pfx_vfs_writev+0x10/0x10 [ 997.728342][T30651] ? __fget_files+0x2a/0x420 [ 997.728375][T30651] ? __fget_files+0x3a0/0x420 [ 997.728402][T30651] ? __fget_files+0x2a/0x420 [ 997.728438][T30651] do_writev+0x154/0x2e0 [ 997.728473][T30651] ? __pfx_do_writev+0x10/0x10 [ 997.728513][T30651] do_syscall_64+0x14d/0xf80 [ 997.728541][T30651] ? trace_irq_disable+0x3b/0x150 [ 997.728569][T30651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.728599][T30651] ? clear_bhb_loop+0x40/0x90 [ 997.728625][T30651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.728644][T30651] RIP: 0033:0x7f60c4d9c799 [ 997.728665][T30651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.728682][T30651] RSP: 002b:00007f60c5c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 997.728705][T30651] RAX: ffffffffffffffda RBX: 00007f60c5015fa0 RCX: 00007f60c4d9c799 [ 997.728720][T30651] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 997.728734][T30651] RBP: 00007f60c5c78090 R08: 0000000000000000 R09: 0000000000000000 [ 997.728746][T30651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.728758][T30651] R13: 00007f60c5016038 R14: 00007f60c5015fa0 R15: 00007ffc26e2d4a8 [ 997.728793][T30651] [ 998.025609][T30659] netlink: 'syz.0.6148': attribute type 10 has an invalid length. [ 998.100811][T30664] netlink: 'syz.0.6148': attribute type 10 has an invalid length. [ 998.112980][T30659] team0: Port device dummy0 added [ 998.118259][T30661] netlink: 'syz.3.6147': attribute type 12 has an invalid length. [ 998.126413][T30661] netlink: 'syz.3.6147': attribute type 29 has an invalid length. [ 998.138246][T30661] netlink: 'syz.3.6147': attribute type 1 has an invalid length. [ 998.148852][T30661] netlink: 'syz.3.6147': attribute type 37 has an invalid length. [ 998.157402][T30661] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6147'. [ 998.166692][T30661] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.239909][T30664] team0: Port device dummy0 removed [ 998.301408][T30664] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 998.332037][T30663] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 998.383161][T30671] FAULT_INJECTION: forcing a failure. [ 998.383161][T30671] name failslab, interval 1, probability 0, space 0, times 0 [ 998.434433][T30671] CPU: 0 UID: 0 PID: 30671 Comm: syz.6.6150 Not tainted syzkaller #0 PREEMPT(full) [ 998.434463][T30671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 998.434477][T30671] Call Trace: [ 998.434486][T30671] [ 998.434506][T30671] dump_stack_lvl+0xe8/0x150 [ 998.434542][T30671] should_fail_ex+0x412/0x560 [ 998.434573][T30671] should_failslab+0xa8/0x100 [ 998.434602][T30671] __kmalloc_cache_noprof+0x88/0x660 [ 998.434634][T30671] ? __kasan_kmalloc+0x93/0xb0 [ 998.434657][T30671] ? ieee80211_set_qos_map+0x5c/0x1d0 [ 998.434692][T30671] ieee80211_set_qos_map+0x5c/0x1d0 [ 998.434723][T30671] nl80211_set_qos_map+0x4b1/0x6e0 [ 998.434762][T30671] genl_family_rcv_msg_doit+0x22a/0x330 [ 998.434802][T30671] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 998.434849][T30671] ? bpf_lsm_capable+0x9/0x20 [ 998.434875][T30671] ? security_capable+0x7e/0x2c0 [ 998.434907][T30671] genl_rcv_msg+0x61c/0x7a0 [ 998.434946][T30671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.434975][T30671] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 998.435003][T30671] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 998.435036][T30671] ? __pfx_nl80211_post_doit+0x10/0x10 [ 998.435065][T30671] ? __lock_acquire+0x6b5/0x2cf0 [ 998.435106][T30671] netlink_rcv_skb+0x232/0x4b0 [ 998.435133][T30671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 998.435166][T30671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 998.435213][T30671] ? down_read+0x272/0x2e0 [ 998.435231][T30671] ? genl_rcv+0xd/0x40 [ 998.435263][T30671] genl_rcv+0x28/0x40 [ 998.435291][T30671] netlink_unicast+0x80f/0x9b0 [ 998.435325][T30671] ? __pfx_netlink_unicast+0x10/0x10 [ 998.435352][T30671] ? netlink_sendmsg+0x650/0xb40 [ 998.435375][T30671] ? skb_put+0x11b/0x210 [ 998.435407][T30671] netlink_sendmsg+0x813/0xb40 [ 998.435444][T30671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.435481][T30671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 998.435510][T30671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 998.435535][T30671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.435560][T30671] ____sys_sendmsg+0xa68/0xad0 [ 998.435601][T30671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.435651][T30671] ? import_iovec+0x73/0xa0 [ 998.435685][T30671] ___sys_sendmsg+0x2a5/0x360 [ 998.435722][T30671] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.435795][T30671] ? __fget_files+0x2a/0x420 [ 998.435823][T30671] ? __fget_files+0x3a0/0x420 [ 998.435864][T30671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 998.435897][T30671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.435939][T30671] ? __pfx_ksys_write+0x10/0x10 [ 998.435974][T30671] do_syscall_64+0x14d/0xf80 [ 998.436002][T30671] ? trace_irq_disable+0x3b/0x150 [ 998.436030][T30671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.436052][T30671] ? clear_bhb_loop+0x40/0x90 [ 998.436079][T30671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.436099][T30671] RIP: 0033:0x7f60c4d9c799 [ 998.436120][T30671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.436137][T30671] RSP: 002b:00007f60c5c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.436160][T30671] RAX: ffffffffffffffda RBX: 00007f60c5015fa0 RCX: 00007f60c4d9c799 [ 998.436176][T30671] RDX: 0000000000048004 RSI: 0000200000000200 RDI: 0000000000000005 [ 998.436190][T30671] RBP: 00007f60c5c78090 R08: 0000000000000000 R09: 0000000000000000 [ 998.436202][T30671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.436224][T30671] R13: 00007f60c5016038 R14: 00007f60c5015fa0 R15: 00007ffc26e2d4a8 [ 998.436275][T30671] [ 998.787039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 998.795101][ C0] lec:lec_tx_timeout: lec0 [ 998.854359][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6151'. [ 999.311538][T30678] IPv6: NLM_F_REPLACE set, but no existing node found! [ 999.425983][ T8369] wlan1: Trigger new scan to find an IBSS to join [ 999.521602][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6155'. [ 999.590742][T30687] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6156'. [ 1000.193327][T30707] bond3: entered allmulticast mode [ 1000.235487][T30711] FAULT_INJECTION: forcing a failure. [ 1000.235487][T30711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.249739][T30711] CPU: 1 UID: 0 PID: 30711 Comm: syz.1.6163 Not tainted syzkaller #0 PREEMPT(full) [ 1000.249769][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1000.249782][T30711] Call Trace: [ 1000.249791][T30711] [ 1000.249800][T30711] dump_stack_lvl+0xe8/0x150 [ 1000.249837][T30711] should_fail_ex+0x412/0x560 [ 1000.249868][T30711] _copy_to_user+0x31/0xb0 [ 1000.249900][T30711] simple_read_from_buffer+0xe1/0x170 [ 1000.249934][T30711] proc_fail_nth_read+0x1bb/0x230 [ 1000.249966][T30711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1000.249998][T30711] ? rw_verify_area+0x2a6/0x4d0 [ 1000.250018][T30711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1000.250048][T30711] vfs_read+0x20c/0xa70 [ 1000.250067][T30711] ? fdget_pos+0x246/0x320 [ 1000.250101][T30711] ? __pfx___mutex_lock+0x10/0x10 [ 1000.250131][T30711] ? __pfx_vfs_read+0x10/0x10 [ 1000.250155][T30711] ? __fget_files+0x2a/0x420 [ 1000.250187][T30711] ? __fget_files+0x3a0/0x420 [ 1000.250212][T30711] ? __fget_files+0x2a/0x420 [ 1000.250249][T30711] ksys_read+0x150/0x270 [ 1000.250274][T30711] ? __pfx_ksys_read+0x10/0x10 [ 1000.250309][T30711] do_syscall_64+0x14d/0xf80 [ 1000.250346][T30711] ? trace_irq_disable+0x3b/0x150 [ 1000.250374][T30711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.250396][T30711] ? clear_bhb_loop+0x40/0x90 [ 1000.250422][T30711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.250442][T30711] RIP: 0033:0x7fa0a695cfce [ 1000.250463][T30711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1000.250481][T30711] RSP: 002b:00007fa0a776ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1000.250504][T30711] RAX: ffffffffffffffda RBX: 00007fa0a77706c0 RCX: 00007fa0a695cfce [ 1000.250518][T30711] RDX: 000000000000000f RSI: 00007fa0a77700a0 RDI: 0000000000000006 [ 1000.250532][T30711] RBP: 00007fa0a7770090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.250545][T30711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.250558][T30711] R13: 00007fa0a6c16038 R14: 00007fa0a6c15fa0 R15: 00007fffbfa7b6b8 [ 1000.250593][T30711] [ 1000.551752][T30716] netlink: 'syz.0.6164': attribute type 3 has an invalid length. [ 1000.576969][T30716] netlink: 'syz.0.6164': attribute type 3 has an invalid length. [ 1000.587218][T14258] wlan1: Creating new IBSS network, BSSID 42:8a:21:48:c0:ad [ 1000.701443][T30722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1000.711036][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 1000.711062][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6167'. [ 1000.711086][T30726] netlink: 'syz.3.6167': attribute type 13 has an invalid length. [ 1000.742627][T30726] netlink: 'syz.3.6167': attribute type 12 has an invalid length. [ 1000.797912][T30727] Cannot find del_set index 4 as target [ 1000.835993][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6169'. [ 1000.899887][T30733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6171'. [ 1000.963407][T30737] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1000.989701][T30737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1001.576276][T30759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.589823][T30759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.624816][T30760] tipc: Enabling of bearer rejected, failed to enable media [ 1002.051407][T30782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.286816][T30795] __nla_validate_parse: 5 callbacks suppressed [ 1002.286838][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1002.433119][T30801] x_tables: duplicate entry at hook 1 [ 1002.522786][T30803] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6188'. [ 1002.601132][T30795] ip6gretap0: entered promiscuous mode [ 1002.612583][T30795] ip6gretap0: left promiscuous mode [ 1002.882918][T30815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6192'. [ 1002.949992][T30783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6183'. [ 1003.165659][T30824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1003.198051][T30826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1003.218789][T30822] netlink: 566 bytes leftover after parsing attributes in process `syz.7.6194'. [ 1003.394510][T30840] lo speed is unknown, defaulting to 1000 [ 1003.933882][T12354] lec:lec_start_xmit: lec0:No lecd attached [ 1004.187184][T30873] validate_nla: 1 callbacks suppressed [ 1004.187206][T30873] netlink: 'syz.7.6208': attribute type 8 has an invalid length. [ 1004.384578][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1009.424245][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 1009.432596][ C0] lec:lec_tx_timeout: lec0 [ 1012.096804][T27016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1030.637068][ T8369] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1034.464699][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1046.794294][T28360] Bluetooth: hci6: command 0x0406 tx timeout [ 1052.030813][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6210'. [ 1052.069220][T30896] bond2: entered promiscuous mode [ 1052.102980][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'. [ 1052.232349][T30913] netlink: 'syz.6.6216': attribute type 15 has an invalid length. [ 1052.282257][T30919] openvswitch: netlink: Duplicate key (type 21). [ 1052.367746][T30919] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1052.608446][T30931] lo speed is unknown, defaulting to 1000 [ 1052.695275][T30932] lo speed is unknown, defaulting to 1000 [ 1052.756946][T30938] sctp: [Deprecated]: syz.0.6222 (pid 30938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1052.756946][T30938] Use struct sctp_sack_info instead [ 1053.511129][T30957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1053.977934][T30970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1054.590889][T30981] netlink: 'syz.1.6235': attribute type 5 has an invalid length. [ 1054.631586][T30981] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1054.754007][T30981] team0: Port device team_slave_0 removed [ 1054.860016][T30989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6236'. [ 1054.952793][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.961560][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.975192][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1054.982026][ T1303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1055.099221][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1055.120318][T30991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1055.138243][T30985] tipc: Failed to remove unknown binding: 66,0,0/0:1375391604/1375391605 [ 1055.159274][T30985] tipc: Failed to remove unknown binding: 66,0,0/0:1375391604/1375391605 [ 1055.553925][T31001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1055.583515][T30999] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1055.605121][T30999] bond2 (unregistering): Released all slaves [ 1055.682380][T31009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1055.979422][T31020] team1: entered promiscuous mode [ 1055.991698][T31020] team1: entered allmulticast mode [ 1056.002344][T31020] 8021q: adding VLAN 0 to HW filter on device team1 [ 1056.016669][T31025] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1056.080693][T31025] team2: entered promiscuous mode [ 1056.085963][T31025] team2: entered allmulticast mode [ 1056.091839][T31025] 8021q: adding VLAN 0 to HW filter on device team2 [ 1056.104678][T31028] netlink: 'syz.1.6249': attribute type 1 has an invalid length. [ 1056.305198][T31036] netlink: 'syz.1.6252': attribute type 15 has an invalid length. [ 1056.737522][T31051] lo speed is unknown, defaulting to 1000 [ 1057.604433][T31079] __nla_validate_parse: 4 callbacks suppressed [ 1057.604454][T31079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1057.678517][T31079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1057.696555][T31081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1057.699987][T31078] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1057.717225][T31079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1057.724174][T29532] IPVS: starting estimator thread 0... [ 1057.824309][T31084] IPVS: using max 26 ests per chain, 62400 per kthread [ 1058.009453][T31089] xt_hashlimit: size too large, truncated to 1048576 [ 1058.249081][T31093] bond2: entered promiscuous mode [ 1058.607494][T31103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6270'. [ 1058.822596][T31110] tap0: tun_chr_ioctl cmd 35111 [ 1058.858161][T31112] dummy0: entered promiscuous mode [ 1058.863447][T31112] vlan2: entered promiscuous mode [ 1058.884625][T31110] netlink: 'syz.3.6274': attribute type 28 has an invalid length. [ 1058.919972][T31110] netlink: 'syz.3.6274': attribute type 3 has an invalid length. [ 1058.968797][T31110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1059.281486][T31135] sctp: [Deprecated]: syz.0.6280 (pid 31135) Use of int in maxseg socket option. [ 1059.281486][T31135] Use struct sctp_assoc_value instead [ 1059.372554][T31138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1059.662162][T31151] netlink: 'syz.7.6286': attribute type 1 has an invalid length. [ 1059.683962][T31151] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6286'. [ 1059.729781][T31149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.858632][T31158] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1059.898921][T31149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.038360][T31149] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1060.199031][T31169] netlink: 'syz.0.6290': attribute type 6 has an invalid length. [ 1060.232473][T31149] bond2: left promiscuous mode [ 1060.250018][T31149] bridge2: left promiscuous mode [ 1060.273778][T31149] bond2: left allmulticast mode [ 1060.286238][T31149] bridge2: left allmulticast mode [ 1060.305797][ T8366] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.325698][ T8366] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.356136][ T8366] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.384076][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1060.392165][ C0] lec:lec_tx_timeout: lec0 [ 1060.414296][T31182] tipc: Started in network mode [ 1060.419231][T31182] tipc: Node identity 6ad0adb882b6, cluster identity 4711 [ 1060.484633][T31182] tipc: Enabled bearer , priority 0 [ 1060.518982][ T8366] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.556812][T31185] syzkaller0: entered promiscuous mode [ 1060.579888][T31185] syzkaller0: entered allmulticast mode [ 1060.664529][T31170] tipc: Resetting bearer [ 1060.687872][T31168] tipc: Resetting bearer [ 1060.837400][T31168] tipc: Disabling bearer [ 1060.923599][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1060.975756][T31207] lo speed is unknown, defaulting to 1000 [ 1060.985200][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1061.220311][T31217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1061.427860][T31221] lo speed is unknown, defaulting to 1000 [ 1061.561926][T14272] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1061.580331][T31230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.061966][T31236] ieee802154 phy0 wpan0: encryption failed: -90 [ 1062.135827][T31238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.272225][T31266] bridge2: entered promiscuous mode [ 1063.493355][T31276] __nla_validate_parse: 2 callbacks suppressed [ 1063.493377][T31276] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6319'. [ 1063.876650][T31291] syzkaller1: entered promiscuous mode [ 1063.918812][T31291] syzkaller1: entered allmulticast mode [ 1063.940594][T31291] rdma_rxe: rxe_newlink: failed to add wg1 [ 1064.815554][T31331] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6336'. [ 1064.826940][T31331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6336'. [ 1064.928470][T31336] ipvlan2: entered promiscuous mode [ 1064.950997][T31331] netlink: 'syz.6.6336': attribute type 1 has an invalid length. [ 1065.002152][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6336'. [ 1065.034237][T31331] netlink: 'syz.6.6336': attribute type 1 has an invalid length. [ 1065.207730][T31353] IPv6: Can't replace route, no match found [ 1065.213934][T31353] IPv6: Can't replace route, no match found [ 1065.233139][T31345] lo speed is unknown, defaulting to 1000 [ 1065.277846][T31358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1065.359310][T31361] netlink: 'syz.1.6346': attribute type 1 has an invalid length. [ 1065.373240][T31363] lo: entered allmulticast mode [ 1065.378607][T31363] lo: left allmulticast mode [ 1065.422591][T31361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.436711][T31361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1065.488062][T31361] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1065.531278][T31361] bond3: (slave batadv1): making interface the new active one [ 1065.566142][T31361] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1066.733894][T31417] netlink: 'syz.1.6360': attribute type 10 has an invalid length. [ 1066.754675][T31417] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6360'. [ 1066.820994][T31420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6362'. [ 1066.838935][T12354] lec:lec_start_xmit: lec0:No lecd attached [ 1067.040921][T31417] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1067.267312][T31352] Bluetooth: hci5: command 0x0406 tx timeout [ 1067.274906][T31352] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.499687][T31447] netlink: 220 bytes leftover after parsing attributes in process `syz.7.6366'. [ 1067.592419][T31457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1067.653701][T31457] netlink: 'syz.0.6367': attribute type 3 has an invalid length. [ 1068.407632][T31484] lo speed is unknown, defaulting to 1000 [ 1068.515995][T31485] lo speed is unknown, defaulting to 1000 [ 1068.691269][T31505] netlink: 'syz.1.6374': attribute type 13 has an invalid length. [ 1068.700649][T31505] __nla_validate_parse: 1 callbacks suppressed [ 1068.700670][T31505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1068.791271][T31500] lo speed is unknown, defaulting to 1000 [ 1068.848511][T31502] lo speed is unknown, defaulting to 1000 [ 1069.798712][T31547] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1070.150247][T31556] lo speed is unknown, defaulting to 1000 [ 1070.835232][T31565] team_slave_0: entered promiscuous mode [ 1070.840943][T31565] team_slave_0: entered allmulticast mode [ 1072.384222][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 1072.392462][ C0] lec:lec_tx_timeout: lec0 [ 1075.871576][T31580] tipc: Enabled bearer , priority 0 [ 1075.934893][T31578] syzkaller0: entered promiscuous mode [ 1075.940762][T31578] syzkaller0: entered allmulticast mode [ 1075.961159][T27016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1075.967387][T31578] tipc: Resetting bearer [ 1076.054287][T31577] tipc: Resetting bearer [ 1076.137309][T31577] tipc: Disabling bearer [ 1077.302743][T31614] siw: device registration error -23 [ 1077.351214][T31616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1077.508297][T28360] Bluetooth: hci7: command 0x0406 tx timeout [ 1077.710441][T31630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1077.979235][T14259] bridge_slave_1: left allmulticast mode [ 1078.004097][T14259] bridge_slave_1: left promiscuous mode [ 1078.009985][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.081212][T31642] netlink: 'syz.7.6412': attribute type 1 has an invalid length. [ 1078.128443][T14259] bridge_slave_0: left allmulticast mode [ 1078.164234][T14259] bridge_slave_0: left promiscuous mode [ 1078.176164][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.179327][T31574] udevd[31574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1078.231881][T14259] veth5: left allmulticast mode [ 1078.244220][T14259] veth5: left promiscuous mode [ 1078.249252][T14259] bridge4: port 3(veth5) entered disabled state [ 1078.276971][T14259] veth0_to_bond: left allmulticast mode [ 1078.282972][T14259] veth0_to_bond: left promiscuous mode [ 1078.304681][T14259] bridge4: port 2(veth0_to_bond) entered disabled state [ 1078.328167][T14259] veth3: left allmulticast mode [ 1078.336534][T14259] veth3: left promiscuous mode [ 1078.348338][T14259] bridge4: port 1(veth3) entered disabled state [ 1078.563284][T14259] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 1079.021288][T14259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.039283][T14259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.049143][T14259] bond0 (unregistering): Released all slaves [ 1079.061720][T14259] bond1 (unregistering): Released all slaves [ 1079.076860][T14259] bond2 (unregistering): Released all slaves [ 1079.090318][T14259] bond3 (unregistering): Released all slaves [ 1079.103734][T14259] bond4 (unregistering): Released all slaves [ 1079.121327][T14259] bond5 (unregistering): (slave veth7): Releasing backup interface [ 1079.131184][T14259] bond5 (unregistering): Released all slaves [ 1079.153112][T14259] bond6 (unregistering): Released all slaves [ 1079.282360][T31642] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1079.352809][T14259] l24): left promiscuous mode [ 1079.418725][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1079.448638][T31673] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6417'. [ 1079.516109][T31665] syzkaller0: entered promiscuous mode [ 1079.521641][T31665] syzkaller0: entered allmulticast mode [ 1079.550395][T31623] lo speed is unknown, defaulting to 1000 [ 1079.679129][T31678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1079.691286][T31678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1079.707507][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1079.827590][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1080.008418][T14258] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.027505][ T8369] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.045540][T31686] netlink: 572 bytes leftover after parsing attributes in process `syz.6.6422'. [ 1080.048027][ T8369] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.084941][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6422'. [ 1080.120563][ T8369] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.655393][T31717] vlan2: entered promiscuous mode [ 1080.677976][T31717] macvtap0: entered promiscuous mode [ 1081.191627][ T30] INFO: task syz.4.5705:28921 blocked for more than 143 seconds. [ 1081.204161][ T30] Not tainted syzkaller #0 [ 1081.209200][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1081.225059][ T30] task:syz.4.5705 state:D stack:25128 pid:28921 tgid:28920 ppid:18966 task_flags:0x400040 flags:0x00080002 [ 1081.238688][ T30] Call Trace: [ 1081.242007][ T30] [ 1081.245999][ T30] __schedule+0x1585/0x5340 [ 1081.250653][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 1081.255832][ T30] ? nfsd_nl_version_get_doit+0x92/0xc40 [ 1081.261580][ T30] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 1081.268649][ T30] ? genl_rcv_msg+0x61c/0x7a0 [ 1081.273475][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 1081.281674][ T30] ? __pfx___schedule+0x10/0x10 [ 1081.289472][ T30] ? schedule+0x90/0x360 [ 1081.293775][ T30] schedule+0x164/0x360 [ 1081.301210][ T30] schedule_preempt_disabled+0x13/0x30 [ 1081.307747][ T30] __mutex_lock+0x7fe/0x1300 [ 1081.312466][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1081.327592][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1081.333460][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1081.341477][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1081.349782][ T30] ? genlmsg_put+0x137/0x2e0 [ 1081.354928][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1081.360844][ T30] ? kmem_cache_free+0x187/0x630 [ 1081.367881][ T30] ? nlmon_xmit+0xb0/0x100 [ 1081.372439][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1081.379224][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 1081.387198][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1081.392807][ T30] ? __asan_memcpy+0x40/0x70 [ 1081.400549][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1081.408602][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1081.413237][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.418831][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1081.428628][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1081.433635][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1081.439779][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.446047][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1081.451519][ T30] ? down_read+0x272/0x2e0 [ 1081.457577][ T30] ? genl_rcv+0xd/0x40 [ 1081.461777][ T30] genl_rcv+0x28/0x40 [ 1081.466278][ T30] netlink_unicast+0x80f/0x9b0 [ 1081.471108][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1081.479607][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1081.485566][ T30] ? skb_put+0x11b/0x210 [ 1081.489927][ T30] netlink_sendmsg+0x813/0xb40 [ 1081.496987][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.502768][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1081.522075][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1081.527853][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.534577][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1081.539503][ T30] ? futex_unqueue+0x211/0x240 [ 1081.545474][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.550953][ T30] ? import_iovec+0x73/0xa0 [ 1081.557115][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1081.561957][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.567728][ T30] ? futex_wait+0x29a/0x380 [ 1081.572439][ T30] ? __fget_files+0x2a/0x420 [ 1081.582343][ T30] ? __fget_files+0x3a0/0x420 [ 1081.590305][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1081.596037][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.601666][ T30] ? rcu_is_watching+0x15/0xb0 [ 1081.610521][ T30] do_syscall_64+0x14d/0xf80 [ 1081.616088][ T30] ? trace_irq_disable+0x3b/0x150 [ 1081.621127][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.628431][ T30] ? clear_bhb_loop+0x40/0x90 [ 1081.633885][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.640828][ T30] RIP: 0033:0x7f47b1f9c799 [ 1081.645300][ T30] RSP: 002b:00007f47b01ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.653741][ T30] RAX: ffffffffffffffda RBX: 00007f47b2215fa0 RCX: 00007f47b1f9c799 [ 1081.661894][ T30] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000003 [ 1081.671280][ T30] RBP: 00007f47b2032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1081.679563][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.687607][ T30] R13: 00007f47b2216038 R14: 00007f47b2215fa0 R15: 00007ffea49dc9e8 [ 1081.696421][ T30] [ 1081.711428][ T30] [ 1081.711428][ T30] Showing all locks held in the system: [ 1081.728671][ T30] 1 lock held by ksoftirqd/0/15: [ 1081.736370][ T30] 1 lock held by khungtaskd/30: [ 1081.741378][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1081.753492][ T30] 1 lock held by dhcpcd/5490: [ 1081.759168][ T30] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1081.769010][ T30] 2 locks held by getty/5584: [ 1081.781464][ T30] #0: ffff8880320c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1081.796739][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1081.808554][ T30] 1 lock held by syz-executor/5810: [ 1081.813844][ T30] 3 locks held by kworker/u8:18/6737: [ 1081.820271][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1081.838514][ T30] #1: ffffc90004c6fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1081.851097][ T30] #2: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1081.863563][ T30] 3 locks held by kworker/u8:29/8366: [ 1081.869306][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1081.881874][ T30] #1: ffffc90003757c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1081.893859][ T30] #2: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1081.903996][ T30] 3 locks held by kworker/u8:32/8369: [ 1081.910190][ T30] #0: ffff88801d355948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1081.922166][ T30] #1: ffffc900034a7c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1081.937264][ T30] #2: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 1081.948952][ T30] 4 locks held by kworker/u8:37/14259: [ 1081.954735][ T30] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1081.966473][ T30] #1: ffffc90005fe7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1081.977237][ T30] #2: ffffffff8fbbe170 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1081.986991][ T30] #3: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1081.997267][ T30] 3 locks held by kworker/u8:49/14272: [ 1082.002724][ T30] #0: ffff888031792148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1082.014475][ T30] #1: ffffc90004897c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1082.028016][ T30] #2: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1082.037725][ T30] 2 locks held by syz.5.5622/28541: [ 1082.043528][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.051936][ T30] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1082.062506][ T30] 2 locks held by syz.4.5705/28921: [ 1082.069892][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.078688][ T30] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1082.089195][ T30] 4 locks held by kworker/0:9/29532: [ 1082.094769][ T30] #0: ffff88813fe0d148 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1082.106146][ T30] #1: ffffc90000b97c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1082.119895][ T30] #2: ffffffff8e7611b8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220 [ 1082.131066][ T30] #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1082.142530][ T30] 2 locks held by syz.3.6407/31623: [ 1082.152173][ T30] #0: ffffffff8fbbe170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1082.162311][ T30] #1: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 1082.172008][ T30] 1 lock held by syz.7.6432/31732: [ 1082.182133][ T30] #0: ffff88807e2e8d88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1082.192673][ T30] 4 locks held by syz.7.6432/31733: [ 1082.197996][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.206293][ T30] #1: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1082.215865][ T30] #2: ffff888043e58788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 1082.226344][ T30] #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1082.237381][ T30] 1 lock held by syz.0.6436/31745: [ 1082.242510][ T30] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1082.252265][ T30] 1 lock held by syz.0.6436/31746: [ 1082.257632][ T30] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1082.267508][ T30] [ 1082.269931][ T30] ============================================= [ 1082.269931][ T30] [ 1082.281783][ T30] NMI backtrace for cpu 0 [ 1082.281805][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1082.281828][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.281841][ T30] Call Trace: [ 1082.281849][ T30] [ 1082.281858][ T30] dump_stack_lvl+0xe8/0x150 [ 1082.281881][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1082.281896][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1082.281914][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1082.281929][ T30] sys_info+0x135/0x170 [ 1082.281940][ T30] watchdog+0xfd9/0x1030 [ 1082.281961][ T30] ? watchdog+0x21a/0x1030 [ 1082.281982][ T30] kthread+0x388/0x470 [ 1082.281994][ T30] ? __pfx_watchdog+0x10/0x10 [ 1082.282010][ T30] ? __pfx_kthread+0x10/0x10 [ 1082.282022][ T30] ret_from_fork+0x51e/0xb90 [ 1082.282040][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.282055][ T30] ? __switch_to+0xc7d/0x1450 [ 1082.282070][ T30] ? __pfx_kthread+0x10/0x10 [ 1082.282083][ T30] ret_from_fork_asm+0x1a/0x30 [ 1082.282108][ T30] [ 1082.282115][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1082.393272][ C1] NMI backtrace for cpu 1 [ 1082.393294][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1082.393312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.393322][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1082.393352][ C1] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1082.393366][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1082.393382][ C1] RAX: 0000000000352875 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1082.393395][ C1] RDX: 0000000000000001 RSI: ffffffff8def1b15 RDI: ffffffff8c27aa00 [ 1082.393407][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1082.393419][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901181b0 [ 1082.393431][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 1082.393442][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 1082.393456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.393468][ C1] CR2: 00007fa0a6be82f8 CR3: 0000000078370000 CR4: 00000000003526f0 [ 1082.393485][ C1] Call Trace: [ 1082.393493][ C1] [ 1082.393500][ C1] default_idle+0x9/0x20 [ 1082.393516][ C1] default_idle_call+0x72/0xb0 [ 1082.393532][ C1] do_idle+0x1bd/0x500 [ 1082.393553][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1082.393585][ C1] ? __pfx_do_idle+0x10/0x10 [ 1082.393611][ C1] cpu_startup_entry+0x43/0x60 [ 1082.393631][ C1] start_secondary+0x101/0x110 [ 1082.393652][ C1] common_startup_64+0x13e/0x147 [ 1082.393676][ C1] [ 1082.394424][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1082.394441][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1082.394463][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.394475][ T30] Call Trace: [ 1082.394484][ T30] [ 1082.394493][ T30] vpanic+0x56c/0xa60 [ 1082.394523][ T30] ? __pfx___schedule+0x10/0x10 [ 1082.394547][ T30] ? __pfx_vpanic+0x10/0x10 [ 1082.394581][ T30] panic+0xc5/0xd0 [ 1082.394605][ T30] ? __pfx_panic+0x10/0x10 [ 1082.394632][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1082.394660][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1082.394687][ T30] watchdog+0x1023/0x1030 [ 1082.394720][ T30] ? watchdog+0x21a/0x1030 [ 1082.394754][ T30] kthread+0x388/0x470 [ 1082.394774][ T30] ? __pfx_watchdog+0x10/0x10 [ 1082.394798][ T30] ? __pfx_kthread+0x10/0x10 [ 1082.394819][ T30] ret_from_fork+0x51e/0xb90 [ 1082.394846][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.394868][ T30] ? __switch_to+0xc7d/0x1450 [ 1082.394894][ T30] ? __pfx_kthread+0x10/0x10 [ 1082.394914][ T30] ret_from_fork_asm+0x1a/0x30 [ 1082.394956][ T30] [ 1082.673504][ T30] Kernel Offset: disabled [ 1082.677823][ T30] Rebooting in 86400 seconds..