last executing test programs: 1m34.956041605s ago: executing program 32 (id=1029): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00@\x00', @ANYRES16=r2, @ANYBLOB="100027bd7000ffdbdf256f00000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000500d600090000000a000600ffffffffffff00000500d600080000000a0006000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00@\x00', @ANYRES16=r2, @ANYBLOB="100027bd7000ffdbdf256f00000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000500d600090000000a000600ffffffffffff00000500d600080000000a0006000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0x7}, {0xe, 0xb}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0xfffffffc) (async) listen(r9, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000540)="d0d15c95a952e3236b8a4067db2ce7d586eb6b9e6619906f236dc905489250ab826f994625c29f6975973ea5918c51cbaae7f21199b6a8cbcc5cb3a0e58400770e0614918d9174b79d7cf2dfaf1bf035ba700dfccbd05492b32270b6920e3fe7259cc7e43d1f4c86c66fa0e2eb809f642e3df91dff17f69b876a51f879e2da22f04eb3506f151d51cede26f4fb249eb2a7f1f95bbed3cf", 0x97, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x880) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newlink={0x80, 0x10, 0x437, 0x6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x80}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 1m34.807276564s ago: executing program 2 (id=1037): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="a000ecf1965e241c", 0x8}, {0x0}], 0x2}}], 0x1, 0x8800) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes),blake2s-128-generic)\x00'}, 0x58) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @empty}], 0x3c) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e1ecaf542d08dd132900"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="184a0000070000000000000000000000c08a6d9fad553d434c699507bffaa483cdda4fce777509c3a1b9954efedfa59ae3324c835ba7da7dabaa067e8739"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f}, 0x94) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x24, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8447}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x31, &(0x7f00000002c0)=""/49, 0x41100, 0x18, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r10, r11, r12, r13], &(0x7f0000000680)=[{0x4, 0x5, 0xd, 0x5}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0x9}, 0x94) (async) sendto$inet(r4, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m34.520985784s ago: executing program 33 (id=1037): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="a000ecf1965e241c", 0x8}, {0x0}], 0x2}}], 0x1, 0x8800) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes),blake2s-128-generic)\x00'}, 0x58) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @empty}], 0x3c) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e1ecaf542d08dd132900"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="184a0000070000000000000000000000c08a6d9fad553d434c699507bffaa483cdda4fce777509c3a1b9954efedfa59ae3324c835ba7da7dabaa067e8739"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f}, 0x94) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x24, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8447}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x31, &(0x7f00000002c0)=""/49, 0x41100, 0x18, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r10, r11, r12, r13], &(0x7f0000000680)=[{0x4, 0x5, 0xd, 0x5}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0x9}, 0x94) (async) sendto$inet(r4, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m21.666967577s ago: executing program 1 (id=1127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000004c00350000000000000000000c0029"], 0x83}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) ppoll(&(0x7f0000000140)=[{r0, 0x2400}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) read$alg(r5, &(0x7f00000003c0)=""/85, 0x55) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000001c0)) 1m20.670124244s ago: executing program 1 (id=1138): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0xc8, &(0x7f0000000000)="22d52f34d2586a231c2b61f71f430e6c6586a99a3eba696c62b3f2ff3a1e662a6b4afd0bba48dc3d8b35c08290b9cf77162505b3dd885f849459dae6294c23fa75cad97ece527f641ab2921be41c82d68a5a49abed5b0581a045a1eabba483475eaa1ec090fda1a17e06bf9f59d76da0ed4c94eb54cb596bb049b055bab7692b9eb5a4c91bf25fa1522f1200bc41039046158b2735873cc0ff25a76b43f9e855f655f89914702a91368e88fdf4c4c9eab0fb3829c2e948eef293d110c8ea9bd85470a63eed87cf51", 0xb8, 0x0, &(0x7f0000000140)="3509d8feb8d3d10202fc16039b5bc2ce75d0597146dda966e1bf94eacdb361976e28cf28e168d18f9ef8f6346ae3c9992e58951bf649f0ba05d2453589b4701877ec42c5011cb35c1942665456db5d2ba0f2f9b25c4fa75a82e6291442144221d1be7c7e1059c3b5d355e7496ca6bc7b4b2c798123786f370546f529907d9300822f5cc362ca0eb4e2d5a373bfe0cd002f77976b31f63fe448ca912caab96527696146771191c652a0ceb74a7e007d0561f0a126b28a107c"}) (async) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 1m20.603160166s ago: executing program 1 (id=1140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000090) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000090) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) 1m20.193897941s ago: executing program 1 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@random="cf702e8cf675", @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "002b228078c8"}]}}}}}}, 0x0) 1m18.657319363s ago: executing program 1 (id=1157): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0xffc3}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f000001000000003800000000000000000000000700000000821066581ddb34253c0556c78617293444146773ac14143000002cb5640101020000005e000000ca110519eec2ad261c87cfe27f2b19f1bf22ceccc066ba58afb1f5020681e7e53426cf769f86d04324c471624517c7d84beee48d8454ed7b725d97b0af09c4da"], 0x58}, 0x4) 1m18.400854269s ago: executing program 1 (id=1158): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x49682, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e63, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r5, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@l2={0x1f, 0x7, @none, 0xfff8, 0x1}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x170}}], 0x1, 0xc041) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m15.094673415s ago: executing program 5 (id=1203): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c0000280002800500cf0004000000140003"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) write$cgroup_subtree(r1, &(0x7f0000001c40)=ANY=[@ANYBLOB='-cpu +'], 0x19) syz_emit_ethernet(0xad, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@x25={0x805, {0x0, 0xf6, 0xb, "1469783d3e7ffbb9e9b9b75a96cd89da9101d2a28f7b11093738c35711c2aeb5a1568fdcb697d6a7a64e2606e358ae7a517ef676a5a7049514452f41211833b480d72dab9e38935e275bc2bdf5a3c00e62458a375b16dc8df805fb91f62c88316925235b3ad848369dd8d47aaef749d7cbb665f35741d9d44ca1ab9879ce0f78c299a60e38fb9243a3a079669e3c474f7a403cb97a8ad172"}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c0000280002800500cf0004000000140003"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) write$cgroup_subtree(r1, &(0x7f0000001c40)=ANY=[@ANYBLOB='-cpu +'], 0x19) (async) syz_emit_ethernet(0xad, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@x25={0x805, {0x0, 0xf6, 0xb, "1469783d3e7ffbb9e9b9b75a96cd89da9101d2a28f7b11093738c35711c2aeb5a1568fdcb697d6a7a64e2606e358ae7a517ef676a5a7049514452f41211833b480d72dab9e38935e275bc2bdf5a3c00e62458a375b16dc8df805fb91f62c88316925235b3ad848369dd8d47aaef749d7cbb665f35741d9d44ca1ab9879ce0f78c299a60e38fb9243a3a079669e3c474f7a403cb97a8ad172"}}}}, 0x0) (async) 1m15.042588263s ago: executing program 5 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4040}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4602c2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4000010) socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd"], 0xfdef) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a320000f2ff2b000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a3100000000140000001100010000000000000000000e00000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r0) 1m14.761504995s ago: executing program 5 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="abfcd605610178b580578ed02bbfc6f401c8691a00e846a45e93229addc4d0fc53f02388818fe1b7957e939ff18b3b8301d41e47f3c31569db360a8628bd18659b2564c5ac8f1032e1427ef87df5b030bc1d75ba244ad434658f26b7c9b7c480e09ebf0803bd3d2248e6dd1951c635b3f514ad65c67fe3e5a53b79e08750e4b4f33db54ced85bda38397bc7a3f905a4beb1f33f2ccde570e26024e", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000011000000080000001cb3000000000064000100010882848b960c1218240000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 1m13.244490175s ago: executing program 5 (id=1224): socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc7539esp(cbc-cast5-avx,sha384-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000020000000000000085000000080000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="ff03aaaaaaaaaaaaaaaaaabb88f500"], 0x0) pipe(&(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}], 0x1, 0x24044088) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f16a0502b7c0", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="efcd5b00b65c03a8245a9ca60736bab29e3772dd531c724fb2bd80ec416b6dfa8de7ef0265df36c301917b36e0f626f2006cb2f89de6586fc6e4d27409d86e30d5778cc2eee1253d5ebe5c29d6ec052d49a8c8631bb07aeded571634e9acf5c4e23ed1"], 0x9) 1m13.066679611s ago: executing program 5 (id=1227): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x25, "f9eaeb263492c48b5ed5726b40fb91b6800912c989e856f24bfd6242964234fe613be00587"}, &(0x7f00000000c0)=0x2d) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x3, 0x1, [0x13]}, 0xa) 1m13.007920449s ago: executing program 5 (id=1228): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) 1m12.434324632s ago: executing program 6 (id=1232): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x644f8da3, 0xcc, &(0x7f0000000640)=""/204, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000140)=[{0x0, 0x1, 0x2, 0x7}, {0x5, 0x5, 0x0, 0x5}, {0x7ff, 0x1, 0x2, 0x6}, {0x0, 0x3, 0x3, 0x9}, {0x4, 0x4, 0x4, 0x9}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='cq_drain_complete\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}}, 0x24004000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r7}, &(0x7f0000002480), &(0x7f00000024c0)=r6}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000040)=@udp=r8, 0x1}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x124}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x777}]}}}]}, 0x40}}, 0x240080c0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 1m12.352958066s ago: executing program 0 (id=1234): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x42}, @ringbuf_query, @generic={0x5, 0x5, 0x0, 0x0, 0xc00000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000100)=""/5, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='rpcgss_unwrap_failed\x00', r1, 0x0, 0x5}, 0x18) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0)) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0xec27, @mcast1, 0x1}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0xca2, @private0, 0x1}], 0x54) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @initdev}, &(0x7f0000000440)=0xc) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={0x0, @xdp={0x2c, 0xa, r4, 0x11}, @ax25={0x3, @default, 0x1}, @rc={0x1f, @none, 0x27}, 0x4152, 0x0, 0x0, 0x0, 0x839b, &(0x7f0000000480)='macvlan0\x00', 0x40, 0x2, 0x4}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000540)) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0x10) sendto$phonet(r6, &(0x7f0000000600)="69f11531178c570851df414d587badb2afa4dedb11ce222bceeb21434bfc846feaa80108cd3b5d5db556f32de4e5a716d068e3cdb347f7cce3fce400b279f606f2d997c8c49500712ee1b57bef9e35b67798a261a46c46b87c68435d9a16014f75500fe0895e5f0f163e9fb2197ff805915074080734076d9d64223609565441b4ab43267a1c06a9b8e2ba7c6d3ec953c77b57eb3778308a8eea5f7b55b955572e2c056f4f8f680f3ef39912b757c32c00fe87d36fa8", 0xb6, 0x80, &(0x7f00000006c0)={0x23, 0x2, 0x40, 0x9}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000940)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x23}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000980)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000009c0)=0x10001, 0x4) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000a80)={0x7fc, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x7e0, 0x8, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfff, @mcast1, 0x7a4}}]}, {0x2c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10, @mcast2, 0x3}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0xc11f}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f80bf74a53f915c76ef4e839b14311fe48db74340ce29d0759aca6a55200223"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc582}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a0bf9776c7ed478114a1d0abb47955bcb4f4fd139426bc88fab6c126e307d3f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "544a62466730719fa2341cdb152af4f1313ac0f1365b8c417942649d2cd27f87"}]}, {0x328, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db6f2bd10e5e80bc1444055ed8375402706881ab0add37e1b7dd33d85234ca1a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a239845a36f9c19bf4e998fa7e04f75cd8e71a21fc926244be52682b833c886b"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcc53}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @mcast1, 0x7ff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @local, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x4004010}, 0x18000) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001300)=0x100000) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)=0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000013c0)={0x0, @nfc={0x27, r11, 0xffffffffffffffff, 0x2}, @llc={0x1a, 0x8, 0x10, 0xc, 0x40, 0xd, @remote}, @rc={0x1f, @none, 0x8}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001380)='geneve0\x00', 0x1, 0x36a, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r10, &(0x7f0000002880)={&(0x7f0000001440)=@generic={0x5, "7a0c0b5c90ee220849f6f26db2ff262fe0d7995794944c68a6f14a884eae085a2f7573dc9c6720cd128d40ded7040455082750b1da086f3bd167841fa860ca968023d8214b596cab23a2e3c26e476558d0cb4a816094fd111c7346cf5a40346614ac7f6b0776d358ffc1d0b266626e33098f27e2483c9884e08e0afc7642"}, 0x80, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="579e11c94777c578cbced4367f0a83fad0b7ad373df49f338ff6df444bcbba0e64b9ec54e3f0594e182b23a330bcc580e7427694402e012402a950a9c952f11c7c1e7e260c3b0a9f386a7ea48181b7d4db7993222d320157516414298ac007c205006765a668f75adb0e61022e41c4aecfc4d3bb5f6785f5a39b71817b98dbb7e9fa052cdfa6068376b35027db454ff3e3fef2a9ae3e0a5e3b694d2f65a2fcbed76861bc8832751a781ae204e17f0cd1671e43e98660ba5f24c0ab3fdb9398fbcb267e", 0xc3}, {&(0x7f00000025c0)="50239a7b6126b032b3ad2873303a0330f9e80d177eb6ef12052577156c95164c73275ca610c2e3ac47640a15eb331ffb1c588af9e831ba29fe29e086c3819c6c0ce942348b3654c4fa87c1d408d844b042eab968cbabfd5043e836d135f887433c3eaa61525629fd025e078afaa5c12ad655545f6f45cc1732e7ffa46ae369fa31319a59340a39fc0d8652cf8e70ed4394bb943fd37892a70ad5b6c86298b8c78bcd5f782b3d73e99fad1170bd6abd", 0xaf}, {&(0x7f0000002680)="8d4d8c3ba9651e3d85607862d67cbb8b56f91f816d68e1bdcafdabcbcfaa2f43676d9cd46186812d13eaecd4650a756f6b536268e63032fbc7a73da98644087719818ba8dddfabfcd7ef0ffd6ef880c84a3771681bb934b8fb8acc3a3936206f252843a40a61cf9f7b3ad54d2085af28d37f84c3a9d4279521b84ae6981b290a12fd6a4f732a2855524b8584c103aa12bc39415db459953e5b45ff104b7201a2d8b015c9e5367ba4d7ca303fef7dbbb66fa0e208476dcef4af9a23b5958600dc4ff9c52aa6c0a63d50", 0xc9}, {&(0x7f0000002780)="da4cb78d44255590125cb536edd42d9d7d4b1467d1423c4d89eebf64246399d5e8b3bc5f8a6976538215a2da8c63ffa08d58fb1ac43ebc77092ef70467fdc5a05a176fd1f5b0f1bdf86ee5067ffbf5b991d8a1be34a6a3e8d45e855edb4924b707da4967aee5111e55195b5da7a70d1a076661c6d47f7dec29edf2", 0x7b}], 0x5}, 0x4001) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000002ac0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x130, 0x0, 0x7, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77f6a441862d5610ba118696bdb056c9098a35579b5d7991"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd852b9d75c8551474a3c6fdd8acc25b87e3c997a57b1694"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5e1e4d72d6aba11fb9b95dea7815da3c65fee1225093fc5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0d6c89b03a8b899ca05cb482c3113b62d1f08de13dc390d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e2555e2b33b1b5ecd865510832103c049b0a66b87689d8a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51eb31150e37df0bbcc461dee127cb385fdfec5525b91e10"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x40001}, 0x1) 1m12.344058757s ago: executing program 6 (id=1235): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000012bc0)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x80}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4bfdebfa442a7271) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="9d00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0500000002"], 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000240)="f29cea7fdd3a66f2e7a6f3545a5b6da54d4f847b85e46e66cebe0e3a484b6910a78c04ef119d7f2060e5cabf8a8ec7b51e0e2e86715b94bd0f05fec39e9323bb365330e47802d94c290d98be9a0a7597ae069354f8b6e4e7b2a1e145394be172df734f018f11d9cd2f095884bcfbf7aaf7fc4a1ca2b1202d98e1a7db0359409bb4b63cac6884621bb6c111854a30f6268cf913c1f4b2ad4e4cd875154428012aa6f8518ae808ca1d2f331efb6ff50de7b3e9", &(0x7f0000000180)=""/119}, 0x20) 1m12.242156132s ago: executing program 0 (id=1236): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000300)={0x68a70, 0x200, 0x1ffffe, 0x0, 0x65}) socket$inet6_udp(0xa, 0x2, 0x0) 1m12.24066854s ago: executing program 6 (id=1237): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r12) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r2, &(0x7f0000000040)={0x2004}) (async) epoll_wait(r14, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000100)={0x0, 0xfffffffffffffe62, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30001300000500040000000000050005000a0000001400078005001500020000000800", @ANYRESOCT], 0x64}}, 0x18) 1m12.213549905s ago: executing program 0 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a00200231c040008001b00000000001800168014000180100002001000ffff"], 0x40}, 0x1, 0x0, 0x0, 0x2004c001}, 0x0) 1m12.185037501s ago: executing program 6 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x800) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x9, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) unshare(0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e", 0x19}], 0x1}, 0x0) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000b40)={r9, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0xa419848314f0343b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRESOCT=r5, @ANYRES64=r7, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) 1m12.065866672s ago: executing program 6 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfdd, 0x8f, &(0x7f0000000e00)=""/143, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x4, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000ec0)=[{0x5, 0x1, 0x7}, {0x2, 0x1, 0x7, 0xa}, {0x4, 0x3, 0x8, 0x6}, {0x0, 0x1, 0x3, 0x8}], 0x10, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x75) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80000001}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x10, 0x6}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="100001"], 0x28}}, 0x0) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r4) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004081}, 0x48000) 1m12.064147835s ago: executing program 0 (id=1241): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @default, 0x1, 0x0, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r5 = accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3c4, r7, 0x502, 0x70bd2b, 0x4, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "78d83cf9800cc29efc4915038108e5bf7a2219e7fd8cd6c6b2c8e86b5d31e8021feaa53b709fe817c60869e18eb673a4ea47aa74dc5ee6292568b9170871ae29e9841b787ea0dfbd44cb4b607747b7af6bdaed52ebcefc20d2570ad782494c7075044955eb10858af476b00997f4fb342a38284724a9f83d86f1cd8705ff079bfe22234f81df45d4ff7ed4d17f3eec51231bd509ec852daa0efa2e7d208ccc6d59d7f1064ba44c65c7ae11f56b949f167637bcff674df0a004e7ffdabd1cb52371283a036504a2b0edc2ebc39791b606a74bbea4cf0879e175e251b4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*\r,%{,(%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd9d7}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "14a644a4b977fc450a0198ada995c92c9b09506c6422f6df7f50ab05311f3b79d29b4340070092dadb63da480255f9d2169dc50c4a83fe4a41457228a913f7d697ed97131543a0d61fdb161804ba6fa5b960e4de0c871ff8a1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf69}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&[\x86^@$,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')}$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\''}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x709}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b0}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "8128e0"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x40890) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3c4, r7, 0x502, 0x70bd2b, 0x4, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "78d83cf9800cc29efc4915038108e5bf7a2219e7fd8cd6c6b2c8e86b5d31e8021feaa53b709fe817c60869e18eb673a4ea47aa74dc5ee6292568b9170871ae29e9841b787ea0dfbd44cb4b607747b7af6bdaed52ebcefc20d2570ad782494c7075044955eb10858af476b00997f4fb342a38284724a9f83d86f1cd8705ff079bfe22234f81df45d4ff7ed4d17f3eec51231bd509ec852daa0efa2e7d208ccc6d59d7f1064ba44c65c7ae11f56b949f167637bcff674df0a004e7ffdabd1cb52371283a036504a2b0edc2ebc39791b606a74bbea4cf0879e175e251b4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*\r,%{,(%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd9d7}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "14a644a4b977fc450a0198ada995c92c9b09506c6422f6df7f50ab05311f3b79d29b4340070092dadb63da480255f9d2169dc50c4a83fe4a41457228a913f7d697ed97131543a0d61fdb161804ba6fa5b960e4de0c871ff8a1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf69}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&[\x86^@$,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')}$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\''}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x709}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b0}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "8128e0"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x40890) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x17, 0xa, 0x284, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa2c6145a1fb185fe) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x17, 0xa, 0x284, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa2c6145a1fb185fe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_delrule={0x5c, 0x21, 0x4, 0x70bd26, 0x25dfdbfb, {0x2, 0x80, 0xebcbb246fd9ca836, 0x9, 0x1f, 0x0, 0x0, 0x1, 0x6}, [@FRA_DST={0x8, 0x1, @remote}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xceb}, @FRA_DST={0x8, 0x1, @remote}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000940)={0x0, 0x48, "d26bef1c58301c075a315712eaef77d825233699a89dc1e7cf51ca5fbc993def1a85c4f465aa0ef7ff023f66e463f8378cc9869d213a1f612a10532cf235d3a071fcb232ce7546d1"}, &(0x7f00000009c0)=0x50) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000940)={0x0, 0x48, "d26bef1c58301c075a315712eaef77d825233699a89dc1e7cf51ca5fbc993def1a85c4f465aa0ef7ff023f66e463f8378cc9869d213a1f612a10532cf235d3a071fcb232ce7546d1"}, &(0x7f00000009c0)=0x50) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000a00)={r9, 0x9}, &(0x7f0000000a40)=0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) bind$bt_sco(r10, &(0x7f0000000ac0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) r11 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) openat$cgroup_ro(r10, &(0x7f0000000b80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) r12 = openat$cgroup_ro(r10, &(0x7f0000000b80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r10) sendmsg$NL80211_CMD_ADD_TX_TS(r12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r13, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) setsockopt$inet_mreqsrc(r12, 0x0, 0x0, &(0x7f0000000d00)={@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) (async) setsockopt$inet_mreqsrc(r12, 0x0, 0x0, &(0x7f0000000d00)={@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) r14 = accept4$inet6(r10, 0x0, &(0x7f0000000d40), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r14, 0x29, 0x32, &(0x7f0000000dc0)={@dev={0xfe, 0x80, '\x00', 0x29}, r15}, 0x14) (async) setsockopt$inet6_IPV6_PKTINFO(r14, 0x29, 0x32, &(0x7f0000000dc0)={@dev={0xfe, 0x80, '\x00', 0x29}, r15}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000e00)={'veth0_to_batadv\x00', 0x7}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000e00)={'veth0_to_batadv\x00', 0x7}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, 0x0, 0x200, 0x3ff, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004) 1m12.019801748s ago: executing program 0 (id=1242): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xf5, 0x236, 0x3, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x3120b7e7177110c1, 0xf, 0x3a2b}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa3}, 0x6e, r0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x20}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000340)=""/232, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)={0x0, 0x12, 0x1, 0x0, 0x0, [@local, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, @private1, @remote, @local]}, 0x98) 1m11.981977103s ago: executing program 0 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) (async) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x18, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 1m11.909862783s ago: executing program 6 (id=1244): unshare(0x6a040000) (async) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) (async) close(r0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 64) listen(r3, 0x7fff) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (rerun: 32) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r7, 0x0, 0x8000) vmsplice(r7, &(0x7f00000000c0), 0x0, 0x1) (async) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x87) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1m3.324395386s ago: executing program 34 (id=1158): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x49682, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e63, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r5, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@l2={0x1f, 0x7, @none, 0xfff8, 0x1}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x170}}], 0x1, 0xc041) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 57.870708063s ago: executing program 35 (id=1228): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) 56.956253153s ago: executing program 36 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) (async) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x18, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 56.868338896s ago: executing program 37 (id=1244): unshare(0x6a040000) (async) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) (async) close(r0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 64) listen(r3, 0x7fff) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (rerun: 32) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r7, 0x0, 0x8000) vmsplice(r7, &(0x7f00000000c0), 0x0, 0x1) (async) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x87) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 49.194548964s ago: executing program 8 (id=1319): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x23, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x46020c00) (async) connect$unix(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000002a80)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 48.937453645s ago: executing program 8 (id=1383): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='8W T', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x51) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='8W T', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x51) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 33.877747913s ago: executing program 38 (id=1383): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='8W T', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x51) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='8W T', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x51) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 32.429569354s ago: executing program 9 (id=1517): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r8, &(0x7f0000001340), &(0x7f00000013c0)=@tcp6=r6, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x20, 0x4, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "985b2caedbb0368e6456037254e16531"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="79016746e435"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}]}, 0x68}, 0x1, 0x0, 0x0, 0x8801}, 0x1) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) 32.209340049s ago: executing program 9 (id=1520): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0xffffffff, 0x7ffe}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000400000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 31.820749964s ago: executing program 9 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380)="df8ba7b5e3a951a6d54bd682f6971bb33068de0d2c86140d784d1e366062a23653ebbc1fd143501ca79fe47c9cc9d560564f3be4c8a6dc9bd2f3cb00d1cee399250b285b5bb6c8540fbca12dfa5ce3164441834e39aff39beb99c5dc4c8f1aa43b3ce89f92b747db6d973c26cdd2ee3025b30a47a339b3cde8b4b1c7b93c074e9d00ff52e3da4f791a73d360165cf7122e2acee0b84750c1f751e889274e5a4770403a43494514a989fc7fe4", 0xac) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80a04000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffb945}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4a}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x2, 0x0, 0x9, 0x4]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4804}, 0x4040800) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf2502000000080002007df8ffff080004000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000440)={'mangle\x00', 0x0, [0x4, 0xffffffff, 0x401, 0x8, 0x5]}, &(0x7f00000004c0)=0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001005fff125bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1760010021200000340012800c0001006d6163766c616e002400028008000300030000000800010010000000100005806eff0400aaaaaaaaaaaa000008000500", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x93}]}, 0x64}}, 0x4000004) 31.480737565s ago: executing program 9 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x40000c0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xa}}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x9}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000500)=""/231, 0x54, 0xe7, 0x0, 0x2, 0x10000, @value=r1}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x53ae4aad692dfc42}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x4000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x40047452, &(0x7f0000001200)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x9c, r4, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x5a}}}}, [@chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "31edead71dd81297695389a7e6dd"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_SSID={0x1c, 0x34, @random="39c65b6682c355de8288046348dded36bb8b6bf3805eacd6"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "346c8a2df8"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "1b068bfe"}], @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) 31.085100912s ago: executing program 9 (id=1528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 30.970079614s ago: executing program 9 (id=1530): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509ed020073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c00014000000400000000"], 0x92fc}, 0x1, 0x0, 0x0, 0x40}, 0xc4) 29.218045598s ago: executing program 3 (id=1543): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000040701030000000a0000030900020073797a30000000004ea51ba7cb5b2efb750f66394f5428050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x25, &(0x7f0000000340), 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986173c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) writev(r3, &(0x7f0000003b00)=[{&(0x7f0000000580)="c24e", 0x2}], 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000240)='|') ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) unshare(0x2c060000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$inet(r1, 0x0, 0x10) 29.113245037s ago: executing program 3 (id=1545): getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x8ce6}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x1014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000380)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x4}, 0x9, 0x0, 0x79, 0x9, 0x2, 'syz0\x00', "869cac83bb99f02667356f0f3a9da192f44d44f713ca66af9c38822319c0a18b", "cf76c0820607c1038677b10af39c11e6c6446c3536946f6bc4563fd0716b4f12", [{0x7, 0x4000, {0x2, 0xf}}, {0xe5, 0x5, {0x3, 0xfffffff4}}, {0xb1e, 0x1}, {0x7fff, 0xc, {0x3, 0x9}}, {0x2, 0x6, {0x0, 0x3}}, {0x2, 0x1, {0x1, 0x1}}, {0x0, 0x1, {0x2, 0xffffff98}}, {0x3, 0xa, {0x2, 0xf7}}, {0xd, 0x8, {0x3, 0x2}}, {0x3, 0x3afd, {0x3, 0x6a}}, {0x3, 0x3, {0x1, 0x6}}, {0xe3, 0x8, {0x0, 0xc0}}, {0xffff, 0xffff, {0x2, 0x2}}, {0x5, 0x6, {0x1, 0xf3}}, {0x1, 0x8, {0x3, 0x8}}, {0xf800, 0x3, {0x1, 0x6}}, {0x895, 0x3, {0x3, 0x4}}, {0x3ff, 0x6, {0x3, 0xe}}, {0x5, 0xb, {0x3, 0x4}}, {0x2, 0xfffa, {0x2, 0x5}}, {0xff52, 0x4, {0x0, 0xfffffff8}}, {0x4, 0x4, {0x1, 0x3ca1}}, {0x5, 0x7, {0x3, 0x1}}, {0x2, 0x10, {0x0, 0xfe2}}, {0xfffc, 0x7, {0x2, 0x7}}, {0x4a, 0xfffb, {0x1}}, {0x3, 0xbaa, {0x3}}, {0xf, 0x3, {0x1, 0x4}}, {0x9, 0x8, {0x1}}, {0xf, 0x7, {0x0, 0x1}}, {0x1, 0x5, {0x2, 0x7}}, {0x7, 0x9, {0x1, 0x3}}, {0x0, 0x9, {0x2, 0x4}}, {0x1, 0x7, {0x1, 0x7}}, {0x0, 0x6, {0x1, 0x15a}}, {0x780, 0x6, {0x2, 0x10000000}}, {0x0, 0x627, {0x3, 0x8}}, {0xb, 0x0, {0x0, 0x50000}}, {0xc28e, 0x9, {0x3, 0x6}}, {0xd, 0x7, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x4, 0x5, 0x4, 0x6, 0x9, 'syz1\x00', "232036a01ae4bca9afb7d2424128f2aa6b52e6f4270bc2bdde254eb9a178858a", "764c5724b968b048d7064ba4c4d268a789a9ca3620e51dfa9f0458b50e4fbe93", [{0x8, 0x54e, {0x0, 0xa}}, {0x100, 0x54, {0x2, 0x3}}, {0x6, 0xfffe, {0x1, 0x8}}, {0x7ff, 0x5, {0x3, 0x4babed44}}, {0x5, 0x100, {0x2, 0x35a}}, {0x5, 0x3, {0x2, 0x1fef}}, {0x9, 0x9, {0x1, 0x2}}, {0xf4f7, 0xa96, {0x0, 0x3}}, {0x6ff5, 0x5f, {0x3, 0x8be}}, {0xf, 0x7, {0x3, 0x3}}, {0xfff6, 0xd, {0x3, 0x1000}}, {0x2, 0x2, {0x2, 0xfffffc2d}}, {0xba72, 0x1, {0x4, 0x20000}}, {0x5, 0x0, {0x3, 0x80000001}}, {0x2, 0x2, {0x2, 0x8000}}, {0x1, 0xfff8, {0x3, 0x3}}, {0x1, 0x1, {0xaa6d696a77b4b382, 0x4}}, {0x5, 0x5, {0x2, 0x3}}, {0x3, 0x2, {0x1, 0x2}}, {0xfe01, 0xc18, {0x0, 0x101}}, {0x3, 0x10, {0x0, 0x6}}, {0xdd4, 0x7, {0x0, 0x10000}}, {0x2c4, 0x6, {0x1, 0x400}}, {0x2, 0x2f00, {0x0, 0x100}}, {0x270, 0xb751, {0x2, 0x400}}, {0x2, 0xeaef, {0x1, 0x3}}, {0x3, 0xfffa, {0x2, 0x9}}, {0x4, 0x3, {0x1, 0x7}}, {0x7, 0xed, {0x1}}, {0x9, 0x9, {0x3, 0x80000000}}, {0x6, 0x10, {0x1, 0x2}}, {0x2, 0xe000, {0x0, 0x2}}, {0x5, 0x101, {0x3, 0x77}}, {0x2, 0x800, {0x0, 0x9}}, {0xfb, 0x8, {0x0, 0x80}}, {0x100, 0x1, {0x0, 0xf}}, {0xc, 0x2, {0x2, 0x3}}, {0x8, 0x7ff, {0x1, 0xf4}}, {0xba, 0x4, {0x1, 0x7fffffff}}, {0x7, 0x100, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x8, 0x1, 0x9, 0x7, 0x22, 'syz0\x00', "9ec3210b598f21c3c8b311553354cb596c2d365f99a9e6b0022fb4ee3b7f0923", "1c7de1c7ec98e83462b7a45673a876ec04e93b259876e11a60b3a9af1cb3dcb5", [{0x10, 0x100, {0x0, 0xad0f}}, {0x4, 0x8000, {0x3, 0x2}}, {0xfffa, 0xf2c4}, {0x11, 0xfeff, {0x2}}, {0x5094, 0xfff, {0x2, 0x3}}, {0x5, 0x5, {0x3, 0x200}}, {0x2, 0x40, {0x1, 0x6}}, {0x8000, 0x4, {0x3, 0x1}}, {0x5, 0xf395, {0x2, 0x400}}, {0x9, 0x9, {0x2, 0x9}}, {0x3, 0x6, {0x0, 0x2}}, {0x2, 0x9, {0x2, 0x8}}, {0x7098, 0x7, {0x6, 0xc085}}, {0xc, 0x1000, {0x3, 0x7f}}, {0x3, 0xb9, {0x0, 0x8}}, {0x33c, 0xc, {0x0, 0x6}}, {0x3, 0x6, {0x2, 0x40}}, {0x2f, 0x0, {0x1, 0xd84}}, {0x5, 0x1, {0x2, 0xffffffff}}, {0x3ded, 0x0, {0x3, 0x1}}, {0x94a, 0xb, {0x1, 0x7fff}}, {0x9, 0x7f, {0x0, 0x7}}, {0xb, 0x8, {0x3, 0x2}}, {0x1, 0x0, {0x1, 0x4}}, {0x2, 0x7f, {0x3, 0x8}}, {0xf, 0x6, {0x1, 0x9}}, {0x9, 0xf58b, {0x3, 0x7}}, {0x1912, 0x1ff, {0x1, 0x5}}, {0x0, 0x8b, {0x3, 0x3}}, {0x1ff, 0xc1, {0x1, 0x4}}, {0x5, 0x0, {0x3, 0x9}}, {0x56f9}, {0x2, 0xe, {0x1, 0x1c4c0000}}, {0x7, 0xfff2, {0x0, 0x7ff}}, {0x8, 0x8, {0x3, 0x7}}, {0x4, 0xfffe, {0x1, 0x6}}, {0x5fb3, 0x4, {0x2, 0x101}}, {0x6d, 0x5, {0x3, 0x401}}, {0x2, 0x7, {0x2, 0x400}}, {0x5, 0x7, {0x0, 0x5}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x36c, 0x0, {{0xe, 0x4, 0x0, 0x34, 0x38, 0x67, 0x0, 0x1, 0x744e49ae6e9fe5ce, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote, {[@timestamp={0x44, 0x24, 0xfb, 0x0, 0x7, [0xd892, 0xbd, 0xc, 0x8, 0x3, 0x401, 0x3, 0x2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e40)={@dev, 0x0}, &(0x7f0000000e80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0}, &(0x7f0000000f00)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd0, r5, 0x700, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0xd}}, 0x1, 0x6d5e}, &(0x7f0000001180)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000011c0)={r10, 0x7fff}, &(0x7f0000001200)=0x8) r11 = socket(0x1f, 0x3, 0xeb) ioctl$sock_netdev_private(r11, 0x89fe, &(0x7f0000001240)) socket$kcm(0x29, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000001280), &(0x7f00000012c0)=0xc) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000001300)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x26}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000854) syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r11) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, r12, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}}, 0x20000000) syz_80211_inject_frame(&(0x7f0000001600)=@broadcast, &(0x7f0000001640)=@ctrl_frame=@cts={{}, {0x9}, @device_b}, 0xa) socket$rxrpc(0x21, 0x2, 0xa) 28.899561082s ago: executing program 7 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x6, 0xff}, {0x80000006, 0x0, 0x12, 0xf6}]}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 28.853306065s ago: executing program 4 (id=1549): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 28.702071947s ago: executing program 4 (id=1550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x22020600) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@lu, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x80) 28.700481983s ago: executing program 7 (id=1551): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095", @ANYRES64=0x0, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\agroup\x00'}, 0x30) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f0000000600)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) 28.617261487s ago: executing program 7 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000000000000000000000000000000000000070000000200000000000000cbf600000000000008000000000000000800000000000000000000000000000000000000000000008632000000000000000000000000000000020000000000000002000000000000ffffff7f00000000000000000000000000000000000000008000000000000000000000000000000084166b6ba21fd6ee7543f9f9691574bf8a75f227e4c3269095ae7f468abc7bfb84e232ba3099629f903565023f1f6ebf3cf63b4e08bc851ad58b3b231088cb4791c5b76ed2a5a4e7b681261d0a9919ad255d954670ffe11a841a4830"]) 28.615269312s ago: executing program 4 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x28}}, 0x440000c4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @private0, 0xe}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x0, @private2, 0x8001}], 0x64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b8, 0x10, 0x400, 0x70bd2c, 0x25dfdbfe, {0xf}, [@typed={0xa3, 0xd9, 0x0, 0x0, @binary="1a6a6507d3cc387fa7f7ea91f3f0b64c2525b4b71f6c307ab0b5adb6e2309f1efca9be9da47e151b4cc2f6bd4a2d786e4d1954a30138458cc6d5c7f39ebb4944ac9a7c815f6bdc8af654bdd3867dc89da4c9c6eb138d381e929bae0289a4797b14f2aa69f0d1d2a139b23b0a7282363c152a556fe57a0303df7bc5f333f5e58694a31cac2c0a01e2207db04af5ac799cd79d74c1d3c5718389f5f41a18262d"}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r2}, @nested={0xe0, 0x7f, 0x0, 0x1, [@nested={0x4, 0x129}, @typed={0x8, 0x151, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xea}, @generic="689c62f67309fbb589c3e8282f553c78c4b9f10b67c575e403d5e093784ac741a89b259c931500740e899d4080659cab89e5bd72640a5d59f39d6f65c13c76999f793aebe09c0282267559633bb09864b37d126301b9378e2605a8c3bd1593d755ed183542bbf3f0691d79e11ae21f75bf17e7ce6cbfabe403333438896e5dd8fa5f57a534533b4f825a7ef5e7aa82d95634d8eafc014c141fece2fafacdbe0d81d564432432a7f7d8398e6b103e4256ef99070e10821ed40d8eb2e1", @nested={0x4, 0x133}, @nested={0x4, 0x12c}]}, @generic="0302a159ba5035dec67172d391c420200659ebe6b749"]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14, 0x80c00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) recvmsg$can_raw(r7, &(0x7f0000000940)={&(0x7f00000005c0)=@caif=@rfm, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/43, 0x2b}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/198, 0xc6}], 0x4}, 0x40000000) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000980)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f00000009c0)) pselect6(0x40, &(0x7f0000000a00)={0xffff, 0x9, 0xfffffffffffffffb, 0x200, 0x3, 0x10001, 0x2, 0x5}, &(0x7f0000000a40)={0x2f, 0x200, 0xffffffffffffff36, 0x101, 0x9e000000, 0x3, 0x9, 0x3}, &(0x7f0000000a80)={0x3, 0xd, 0x3, 0x9, 0x5, 0x7f1, 0x7fffffff, 0x66}, &(0x7f0000000ac0)={0x0, 0x989680}, &(0x7f0000000b40)={&(0x7f0000000b00)={[0x8000]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x600, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000bc0)) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x54}}, 0x4000091) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000e80)={0x0, @multicast1, @initdev}, &(0x7f0000000ec0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000001180)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x210, r11, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$inet(0x2, 0x2, 0x9) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r7) sendmsg$TIPC_CMD_SET_NETID(r13, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r14, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xc}}, ["", ""]}, 0x24}}, 0x8014) bpf$LINK_DETACH(0x22, &(0x7f0000001340), 0x4) 28.499714608s ago: executing program 7 (id=1554): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x14) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040)) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/245, 0xf5}, 0x10000) 28.358093497s ago: executing program 3 (id=1555): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.278046558s ago: executing program 4 (id=1556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050003"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b1ad353cd7f3ab2fb6787c321b166187"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000004c0)={0x9, 0x100, 0x200, 0x6b, 0x10000, 0xf82a, 0x4, 0x8001}, &(0x7f0000000500)={0x790f, 0xc, 0x8000000000000000, 0x7, 0xf43, 0xd79, 0x1054, 0x100000001}, &(0x7f0000000540)={0x6, 0x6, 0x7, 0x7, 0x29, 0xe4, 0x4, 0xa}, &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={[0x80000001]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "5d5b405df35d91860ebd78ce69147c01ed27c788172fca4c0c7d5354c05dfc1f196a8b47f5261f145e95"}]}]}, 0x60}}, 0x4040004) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x2}, {0xff, 0x6}, {0x6, 0x4}, {0x87, 0x7}, {0x3, 0x7}, {0x1}], "6120fa25158384ca"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x100000000000, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x4}, 0x0, 0x0) 28.206666369s ago: executing program 3 (id=1557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000020000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f61147c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 28.097657978s ago: executing program 7 (id=1558): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r9, 0x1, 0x8}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r9, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x7, 0x170f, 0x5, 0x82, 0xfffffffa, 0x1}, &(0x7f00000003c0)=0x9c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x44}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 28.062467264s ago: executing program 3 (id=1559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) pipe(0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$FICLONE(r1, 0x40049409, r0) sendmsg$nl_route_sched(r1, 0x0, 0x24000080) 28.00360266s ago: executing program 2 (id=1498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000040)={'macsec0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x4}}) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000080)="aa5ae3cb15c242b16f13c3762863d7319e87") sendto$x25(0xffffffffffffffff, &(0x7f00000000c0)="b5a2679bd0dbb2f8d1475563fd13a3eb1b55438b9c14f44e714d1cf66bb54a729bf5f1c05ea3794108ab35fbe64af016788770af3c2570555021a487ca1f9b9e10dc2012b11f2a01126cacc0da0a84bc869cd7b77073d45cea8c41a4966e5132d4b4d83ae525007d8103cda6da8c47c9c97d4a34b5b7a8822f48035a0d9d2236e830e8eb27b07bef3a750860023917c797a074caa8dd6c04585016057f1424c85452955e4d42e801901f758a7608cf80c90be8e5835988f0aec3599dc0d0258b", 0xc0, 0x800, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 27.609701631s ago: executing program 2 (id=1560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000001, 0xb, 0x3}}}}]}, 0x40}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket(0x10, 0x80003, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) unshare(0x2a020400) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) (async) socket(0x1d, 0x2, 0x6) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000840)={r10, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.598189882s ago: executing program 2 (id=1561): r0 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3c}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3c}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x0, 0x2, {{0x1f, 0x4, 0x3, 0x3f, 0x7c, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010102, @remote, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@local, 0x5}, {@multicast1, 0x81}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0xb, [{@loopback, 0xa1}, {@broadcast, 0x1}, {@remote, 0xfffff3e8}]}, @lsrr={0x83, 0x1f, 0x7, [@broadcast, @broadcast, @empty, @multicast1, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x7, 0x6]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x8, 0x8, 0xfff, {{0x2f, 0x4, 0x0, 0x9, 0xbc, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @empty, {[@rr={0x7, 0x23, 0x52, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @cipso={0x86, 0x56, 0x1, [{0x2, 0x12, "d8319bc921b2d4abe143c1c2856f815a"}, {0x5, 0x9, "1b7a7819648334"}, {0x5, 0xb, "0d86094bacbacccf9d"}, {0x6, 0x4, "b411"}, {0x6, 0xf, "d8a7d94967e5c85f11f8449ac0"}, {0x5, 0x10, "637ec55cf8f44a4af58eb4af0478"}, {0x6, 0x2}, {0x6, 0x5, "295cb0"}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xfa, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xffff}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x71c6}, {@remote, 0x40}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x50, 0x3, 0x21, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x7, 0x2, 0xffffffd2}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0xf8, 0x9, 0x5, 0x8, @loopback, @empty, 0x80, 0x8, 0x0, 0x9}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x7, 0xffff, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x68, 0x0, 0x2e, 0x2f, 0x0, @empty, @multicast2, {[@end, @timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0xf, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0xa}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}]}, @noop, @cipso={0x86, 0x4e, 0x3, [{0x1, 0x2}, {0x0, 0x10, "542be0495a00f3bd2f6ffac9870f"}, {0x2, 0xc, "ab3b5cf3e6c481f5c4d6"}, {0x0, 0x12, "f5d7e1d416a0cab399c7ddf2f10e533b"}, {0x6, 0x4, "de3c"}, {0x0, 0xc, "a0d5dbc1b85ea0769d7d"}, {0x7, 0x2}, {0x2, 0x3, '\"'}, {0x6, 0x3, '\a'}]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xb, 0xfb, [@remote, @broadcast]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x80, 0x40, 0x368e, 0xffffffff, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xfc, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}]}, 0xfc}}, 0x80) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) (async) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r9) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r12, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r10, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) (async) r13 = socket(0x28, 0x6, 0x1) getsockopt$PNPIPE_ENCAP(r13, 0x113, 0x1, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) (async, rerun: 64) ioctl$BTRFS_IOC_LOGICAL_INO(r11, 0xc0389424, &(0x7f0000000d80)={0xc, 0x8, '\x00', 0x1, &(0x7f0000000d40)=[0x0]}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000dc0)={0x0, 'wg0\x00', {0x3}, 0x3}) r14 = socket(0x23, 0x1, 0xfff) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r13, 0xc400941d, &(0x7f0000000e00)={0x0, 0x4, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r14, 0xca289435, &(0x7f0000001200)={0x1, 0x3, @start={r15, 0x1, "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", "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"}, [0x6, 0x3, 0x3ff, 0xd, 0x4805, 0x401, 0x5, 0x2, 0x9, 0x1, 0x1, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0x5, 0x1, 0xd, 0xfffffffffffffffe, 0xb0c, 0x52, 0x0, 0x8000000000000000, 0x5, 0x8000000000000001, 0x2, 0x3, 0x4, 0x4, 0xfffffffffffffff1, 0xc, 0xe39, 0x9, 0x80000001, 0x3ff, 0x1, 0x9, 0x8001, 0x815, 0x1ff, 0x7fffffffffffffff, 0x6e, 0x3, 0x8000000000000001, 0x6383, 0x5, 0x7fff, 0x0, 0xa, 0x194, 0x4, 0x800, 0x2, 0x3ff, 0x0, 0x1, 0x4, 0xff, 0x4, 0x6, 0x3ff, 0x9, 0x5]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001c40), 0x40c000, 0x0) setsockopt$netrom_NETROM_T2(r13, 0x103, 0x2, &(0x7f0000001c80)=0x2, 0x4) shutdown(r0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e80)={0xffffffffffffffff, &(0x7f0000001d40)="aceec246625ed5b354eb630a88944e27d1f37ac107a57bed909338e7ebca220847d1e3cb4756e0a83554f417e355f8de553df5f514efcb83a60d6afe73050a2b5bca28fbab0f1e9160df10438641c07700d7a136a7cb3583635281b0f472a08f5ce717db3c51b65a4d33ec56c577940e5b78dc4d864cb400407799ab7e6f8d90584396ffce08146cce9f55d5", &(0x7f0000001e00)=""/75, 0x4}, 0x20) 27.558736497s ago: executing program 2 (id=1562): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x21}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 27.464821367s ago: executing program 2 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1805001e9284dc2a08b1aa000000000000000000000000009500000000000000fb62111e84be349e3107a216bdc0f9e6bfce40b629e0cbc0a62ebc6f23acc94add1eb0a215869407b7ed956ee7511107b61f093d15a2cc28112664936ce3b6bf49d5f80ed5ba3279ce81b1b3a6e813f8842de9fc0340ec13b9e2a1c40d1c44c1869bc79e12046b8f2001f93878d747dbbfe3ba91ee2b434474260a787647b7b49963db1801a85859be354c5f0c156a0e64150682a858c4e48832721462af8d07c053c2cc8b32d6a31214268d49217e4a0a"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000312a084e0000000100003dbe0c9dff05c07c000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc90, 0xffffff02, 0x0, 0x0, 0xffffff24, 0xea, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) 27.266601229s ago: executing program 4 (id=1564): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="b40000001800010000000000000000000200800000010009000000000600150001000000900016808c0001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x26, 0x18}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x80108906, 0x0) 27.144774155s ago: executing program 7 (id=1565): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000a4dca54fd6ff596300", @ANYRES16=0x0, @ANYBLOB="000027bd7000fbdbdf25010000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000012800e00010067726574617000000008000280040012000800a61f000044766dcdb453f1b0721647c0f448051718d8ed2751ac139e3f032c6272dbba03c69bf1e5531f2e67fcc22ad548bd4fce9feb97e19d74b01174a8cfdb2fd2b839efeed5894fcd8623d56d87f6f715d03aced6ed1db25bbeeaf028c65c7a4811a53c826eba855d4ccba3e8765f6bf23c422e1a6ed16aef8c6fefa0045c1135a83004bd62608ed78142a6dab40845c9346ca32c013a9ab0961f2e29f532de47d0a89aa67c156ff6be2f64c2ac", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304a5bd7000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="467370616e3000000000000000000008000a0000000000000000000000000000fd4d957e33260cf5dd81d06f3c8b09b635459b282fd49fd315784f496afb0ec2ecb428d782066de6b8a937752a9cbee2d90d1eb7f9fefc79445b0de8930ff516ce4ceb33cbc6246756e631e3ea6da3c78d8d3ea8e73c655feb54e31132e096e749bcb9425e211effc75011c3495f4181b4ae2ef8310e2651e0c68d9edcc79d0cba76dfd0f0b5c5d9590111257ac23743a5b2f240d1b19075f8d400a29789b1268a3e8ae249", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r13, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f00", 0x11}, {&(0x7f00000008c0)="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", 0xfb}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 27.017932548s ago: executing program 4 (id=1566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) unshare(0x20000400) (async) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) writev(r9, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 27.017194629s ago: executing program 3 (id=1567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0x40, 0x8, 0x1000}) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', r6, 0x1, 0x7, 0x3, 0x3, {{0x6, 0x4, 0x3, 0x32, 0x18, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @broadcast, {[@noop]}}}}}) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r8, 0x89e3) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="d2fde87c59cda327f1627d100f932ab39c5bf8263566c6e6c369552de92ad3615b0bc59823f38c073c23c2bf7c1370e4ae5a7fd38d5e935de1d449a8a9962d8007d35f06540fc046ee209a785c5cd83c0a2d1bc8c6bf592d248549535876bdfaa6a746fc5f7b23ef0eec5fb1219a9438fcde41326762749d0500d0eabb2bd5c68f4bf781c523529f77b8dfb37a7986eabd5c064e5bb88353e02cd86dd8ac1e8232a1c8f03b4d416145127ecd4dfe084635b244f8312154b5a8095ae31ebf8145e197bfb9da4c0d5931c83ccbe0a99168b0d55eb3d87b8a11f838c205ebd53d26008b84195ebd8c57", 0xe8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 12.936532414s ago: executing program 39 (id=1530): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509ed020073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c00014000000400000000"], 0x92fc}, 0x1, 0x0, 0x0, 0x40}, 0xc4) 9.115267197s ago: executing program 40 (id=1565): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000a4dca54fd6ff596300", @ANYRES16=0x0, @ANYBLOB="000027bd7000fbdbdf25010000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000012800e00010067726574617000000008000280040012000800a61f000044766dcdb453f1b0721647c0f448051718d8ed2751ac139e3f032c6272dbba03c69bf1e5531f2e67fcc22ad548bd4fce9feb97e19d74b01174a8cfdb2fd2b839efeed5894fcd8623d56d87f6f715d03aced6ed1db25bbeeaf028c65c7a4811a53c826eba855d4ccba3e8765f6bf23c422e1a6ed16aef8c6fefa0045c1135a83004bd62608ed78142a6dab40845c9346ca32c013a9ab0961f2e29f532de47d0a89aa67c156ff6be2f64c2ac", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304a5bd7000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="467370616e3000000000000000000008000a0000000000000000000000000000fd4d957e33260cf5dd81d06f3c8b09b635459b282fd49fd315784f496afb0ec2ecb428d782066de6b8a937752a9cbee2d90d1eb7f9fefc79445b0de8930ff516ce4ceb33cbc6246756e631e3ea6da3c78d8d3ea8e73c655feb54e31132e096e749bcb9425e211effc75011c3495f4181b4ae2ef8310e2651e0c68d9edcc79d0cba76dfd0f0b5c5d9590111257ac23743a5b2f240d1b19075f8d400a29789b1268a3e8ae249", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r13, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f00", 0x11}, {&(0x7f00000008c0)="0600000075abcdfc0d08d1c1b27aa80afa3619073a0b757ff41a0370c6203923350c8802dc25d6a1072a93855ed48549301ef48d0ee2a4dbdfaa0800c54975653d98fb09a8a69e573936ec7ab78b8c8466c7a24e46cd85ec4d920de9221832b6528f2729baa4ad6a416f7f97d6e51dd38b410f016c909e536cce3144f24d045c5398a33a77864e124dd650483fbbbfcb04dd145f18c313d23c01fbe7eeb75c112ce5d71088d5b043ee641d9e99684a68b7eabbc6ac1f170592ef95d88ac2204e306904591f0bb0a83adb7193bc88b7342472dd98641a9f622dd37e53e1f4536b74e16cef1d9f71c21155eba86f06397f355db59e845c6261f77c06", 0xfb}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 6.19075918s ago: executing program 41 (id=1567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0x40, 0x8, 0x1000}) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', r6, 0x1, 0x7, 0x3, 0x3, {{0x6, 0x4, 0x3, 0x32, 0x18, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @broadcast, {[@noop]}}}}}) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r8, 0x89e3) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="d2fde87c59cda327f1627d100f932ab39c5bf8263566c6e6c369552de92ad3615b0bc59823f38c073c23c2bf7c1370e4ae5a7fd38d5e935de1d449a8a9962d8007d35f06540fc046ee209a785c5cd83c0a2d1bc8c6bf592d248549535876bdfaa6a746fc5f7b23ef0eec5fb1219a9438fcde41326762749d0500d0eabb2bd5c68f4bf781c523529f77b8dfb37a7986eabd5c064e5bb88353e02cd86dd8ac1e8232a1c8f03b4d416145127ecd4dfe084635b244f8312154b5a8095ae31ebf8145e197bfb9da4c0d5931c83ccbe0a99168b0d55eb3d87b8a11f838c205ebd53d26008b84195ebd8c57", 0xe8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 3.264866555s ago: executing program 42 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1805001e9284dc2a08b1aa000000000000000000000000009500000000000000fb62111e84be349e3107a216bdc0f9e6bfce40b629e0cbc0a62ebc6f23acc94add1eb0a215869407b7ed956ee7511107b61f093d15a2cc28112664936ce3b6bf49d5f80ed5ba3279ce81b1b3a6e813f8842de9fc0340ec13b9e2a1c40d1c44c1869bc79e12046b8f2001f93878d747dbbfe3ba91ee2b434474260a787647b7b49963db1801a85859be354c5f0c156a0e64150682a858c4e48832721462af8d07c053c2cc8b32d6a31214268d49217e4a0a"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000312a084e0000000100003dbe0c9dff05c07c000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc90, 0xffffff02, 0x0, 0x0, 0xffffff24, 0xea, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 43 (id=1566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) unshare(0x20000400) (async) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) writev(r9, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.3.210'. [ 109.065319][ T6801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.210'. [ 109.120311][ T6802] bond2: (slave bridge1): making interface the new active one [ 109.130300][ T6802] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 109.258425][ T6806] IPVS: Unknown mcast interface: pim6reg [ 109.303484][ T6810] IPVS: Unknown mcast interface: pim6reg [ 109.833615][ T6829] netlink: 'syz.1.220': attribute type 2 has an invalid length. [ 109.974755][ T6838] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 110.503643][ T6867] netlink: 'syz.4.230': attribute type 16 has an invalid length. [ 110.547782][ T6867] netlink: 'syz.4.230': attribute type 17 has an invalid length. [ 110.578023][ T6877] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.738055][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.746069][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.911354][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.928587][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.962846][ T6890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.324754][ T6904] sctp: [Deprecated]: syz.2.239 (pid 6904) Use of int in maxseg socket option. [ 111.324754][ T6904] Use struct sctp_assoc_value instead [ 111.517516][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.545508][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.676276][ T6896] syzkaller0: entered promiscuous mode [ 111.682207][ T6896] syzkaller0: entered allmulticast mode [ 111.905203][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.930264][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.166546][ T6948] netlink: 'syz.2.248': attribute type 16 has an invalid length. [ 113.104813][ T6951] netlink: 'syz.4.249': attribute type 17 has an invalid length. [ 113.357135][ T6982] __nla_validate_parse: 9 callbacks suppressed [ 113.357153][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 113.422542][ T6968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.474168][ T6984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 113.631149][ T6996] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.259'. [ 113.670973][ T7003] netem: incorrect ge model size [ 113.676320][ T7003] netem: change failed [ 113.918788][ T7016] lo speed is unknown, defaulting to 1000 [ 113.941249][ T7016] wg1 speed is unknown, defaulting to 1000 [ 114.199014][ T7027] netlink: 'syz.3.268': attribute type 9 has an invalid length. [ 114.207177][ T7027] netlink: 184 bytes leftover after parsing attributes in process `syz.3.268'. [ 114.222734][ T7025] lo speed is unknown, defaulting to 1000 [ 114.244222][ T7025] wg1 speed is unknown, defaulting to 1000 [ 114.387485][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'. [ 114.487803][ T7034] dummy0: entered promiscuous mode [ 114.506617][ T7034] macsec1: entered promiscuous mode [ 114.513254][ T7034] macsec1: entered allmulticast mode [ 114.518572][ T7034] dummy0: entered allmulticast mode [ 115.231928][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.279'. [ 115.466735][ T7082] lo speed is unknown, defaulting to 1000 [ 115.494194][ T7083] lo speed is unknown, defaulting to 1000 [ 115.511298][ T7082] wg1 speed is unknown, defaulting to 1000 [ 115.538937][ T7083] wg1 speed is unknown, defaulting to 1000 [ 115.798666][ T7093] lo speed is unknown, defaulting to 1000 [ 115.841082][ T7093] wg1 speed is unknown, defaulting to 1000 [ 115.874535][ T7091] lec:lec_atm_send: lec0: Unknown message type 20 [ 115.917735][ T7108] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 115.926671][ T7108] netlink: 51 bytes leftover after parsing attributes in process `syz.1.286'. [ 115.947779][ T7108] tipc: Failed to remove unknown binding: 66,1,1/0:2477382664/2477382666 [ 115.960207][ T7108] tipc: Failed to remove unknown binding: 66,1,1/0:2477382664/2477382666 [ 116.096859][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 116.107329][ T7117] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 116.108777][ T7108] openvswitch: netlink: Key type 16371 is out of range max 32 [ 116.184019][ T7117] syz_tun: entered allmulticast mode [ 116.208827][ T7117] siw: device registration error -23 [ 116.275472][ T7090] lec:lec_atm_close: lec0: Shut down! [ 116.293252][ T7117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.348892][ T7116] syz_tun: left allmulticast mode [ 116.476017][ T7133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.292'. [ 116.612501][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 116.647891][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 116.723578][ T7133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.815288][ T7153] lo speed is unknown, defaulting to 1000 [ 116.852797][ T7133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.862396][ T7159] netlink: 'syz.0.300': attribute type 3 has an invalid length. [ 116.880121][ T7159] block nbd0: not configured, cannot reconfigure [ 116.909671][ T7153] wg1 speed is unknown, defaulting to 1000 [ 116.955694][ T7167] syz_tun: entered allmulticast mode [ 116.977596][ T7167] dvmrp8: entered allmulticast mode [ 117.034817][ T7133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.116157][ T7173] netlink: 'syz.0.302': attribute type 23 has an invalid length. [ 117.166107][ T7133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.201851][ T7167] lo speed is unknown, defaulting to 1000 [ 117.248884][ T7167] wg1 speed is unknown, defaulting to 1000 [ 117.271707][ T7177] syzkaller1: entered promiscuous mode [ 117.278502][ T7177] syzkaller1: entered allmulticast mode [ 117.450646][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.484043][ T7181] bond0: (slave bond_slave_0): Releasing backup interface [ 117.499085][ T7181] bond_slave_0: left promiscuous mode [ 117.523684][ T7181] bond0: (slave bond_slave_1): Releasing backup interface [ 117.534353][ T7181] bond_slave_1: left promiscuous mode [ 117.555427][ T7181] team0: Port device team_slave_0 removed [ 117.572945][ T7181] team0: Port device team_slave_1 removed [ 117.581687][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.589403][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.602275][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.610444][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.621740][ T7181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.640025][ T7173] syz_tun: left allmulticast mode [ 117.645186][ T7173] dvmrp8: left allmulticast mode [ 117.670680][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.735154][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.775561][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.312273][ T7222] lo speed is unknown, defaulting to 1000 [ 118.323193][ T7222] wg1 speed is unknown, defaulting to 1000 [ 118.427758][ T7228] lo speed is unknown, defaulting to 1000 [ 118.442084][ T7228] wg1 speed is unknown, defaulting to 1000 [ 118.588892][ T7232] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 118.596882][ T7232] __nla_validate_parse: 5 callbacks suppressed [ 118.601148][ T7232] netlink: 148 bytes leftover after parsing attributes in process `syz.4.319'. [ 118.757289][ T7237] netlink: 64 bytes leftover after parsing attributes in process `syz.1.321'. [ 119.813725][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 120.114150][ T7304] lo speed is unknown, defaulting to 1000 [ 120.129178][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 120.162131][ T7304] wg1 speed is unknown, defaulting to 1000 [ 120.392627][ T7327] openvswitch: netlink: nsh attr 0 has unexpected len 28 expected 0 [ 120.401338][ T7327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.462040][ T7321] lo speed is unknown, defaulting to 1000 [ 120.470877][ T7321] wg1 speed is unknown, defaulting to 1000 [ 120.552906][ T7333] syzkaller1: entered promiscuous mode [ 120.560580][ T7333] syzkaller1: entered allmulticast mode [ 120.738972][ T7337] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 120.740754][ T5964] IPVS: starting estimator thread 0... [ 120.838732][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 120.854008][ T7337] ipip0: entered promiscuous mode [ 120.879831][ T7341] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.082640][ T7356] netlink: 96 bytes leftover after parsing attributes in process `syz.4.345'. [ 121.155487][ T7365] netlink: 'syz.3.346': attribute type 13 has an invalid length. [ 121.172348][ T7365] netlink: 'syz.3.346': attribute type 17 has an invalid length. [ 121.212800][ T7365] netlink: 'syz.3.346': attribute type 27 has an invalid length. [ 121.237112][ T7367] lo speed is unknown, defaulting to 1000 [ 121.250726][ T7357] xfrm0: entered promiscuous mode [ 121.255865][ T7357] xfrm0: entered allmulticast mode [ 121.291003][ T7365] lo: entered promiscuous mode [ 121.299230][ T7365] lo: entered allmulticast mode [ 121.308299][ T7365] tunl0: entered promiscuous mode [ 121.314323][ T7365] tunl0: entered allmulticast mode [ 121.374807][ T7365] gre0: entered promiscuous mode [ 121.380863][ T7365] gre0: entered allmulticast mode [ 121.389396][ T7365] gretap0: entered promiscuous mode [ 121.396917][ T7365] gretap0: entered allmulticast mode [ 121.400626][ T7379] netlink: 112 bytes leftover after parsing attributes in process `syz.0.351'. [ 121.412202][ T7365] gretap0: refused to change device tx_queue_len [ 121.419140][ T7365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.435304][ T7367] wg1 speed is unknown, defaulting to 1000 [ 121.452228][ T7379] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.529895][ T7357] lo speed is unknown, defaulting to 1000 [ 121.537552][ T7357] wg1 speed is unknown, defaulting to 1000 [ 121.629305][ T7389] netlink: 52 bytes leftover after parsing attributes in process `syz.4.355'. [ 121.757436][ T7394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.764848][ T7394] IPv6: NLM_F_CREATE should be set when creating new route [ 121.772136][ T7394] IPv6: NLM_F_CREATE should be set when creating new route [ 121.783297][ T7394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.813663][ T7390] veth2: entered allmulticast mode [ 121.835995][ T7392] tipc: Started in network mode [ 121.848641][ T7392] tipc: Node identity , cluster identity 4711 [ 121.856702][ T7392] tipc: Failed to set node id, please configure manually [ 121.864258][ T7392] tipc: Enabling of bearer rejected, failed to enable media [ 121.875572][ T7384] lo speed is unknown, defaulting to 1000 [ 121.890760][ T7397] netlink: 'syz.4.357': attribute type 3 has an invalid length. [ 121.905705][ T7397] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 121.923646][ T7397] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.357'. [ 121.924033][ T7384] wg1 speed is unknown, defaulting to 1000 [ 122.196083][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 122.510998][ T7434] tipc: Failed to remove unknown binding: 66,1,1/0:2792195812/2792195814 [ 122.766525][ T7453] !: renamed from dummy0 [ 122.913719][ T7453] lo speed is unknown, defaulting to 1000 [ 122.955450][ T7453] wg1 speed is unknown, defaulting to 1000 [ 123.369521][ T7486] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 123.820082][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 123.977647][ T7512] __nla_validate_parse: 5 callbacks suppressed [ 123.977666][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 124.073078][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 124.556521][ T7536] syzkaller1: entered promiscuous mode [ 124.609747][ T7536] syzkaller1: entered allmulticast mode [ 124.636515][ T7541] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 125.378310][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.399549][ T7589] lo speed is unknown, defaulting to 1000 [ 125.407324][ T7589] wg1 speed is unknown, defaulting to 1000 [ 125.562981][ T7609] netlink: 'syz.1.406': attribute type 15 has an invalid length. [ 125.590184][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 125.675005][ T7614] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 126.000417][ T7629] tipc: Started in network mode [ 126.016931][ T7629] tipc: Node identity 3a03ddd04669, cluster identity 4711 [ 126.038090][ T7635] sctp: [Deprecated]: syz.3.414 (pid 7635) Use of int in maxseg socket option. [ 126.038090][ T7635] Use struct sctp_assoc_value instead [ 126.048407][ T7629] tipc: Enabled bearer , priority 0 [ 126.068006][ T7636] syzkaller0: entered promiscuous mode [ 126.073975][ T7636] syzkaller0: entered allmulticast mode [ 126.085636][ T7629] syzkaller0: mtu greater than device maximum [ 126.238898][ T7628] tipc: Resetting bearer [ 126.272632][ T7628] tipc: Disabling bearer [ 126.369228][ T7647] lo speed is unknown, defaulting to 1000 [ 126.377717][ T7647] wg1 speed is unknown, defaulting to 1000 [ 126.417329][ T7654] netlink: 7 bytes leftover after parsing attributes in process `syz.2.418'. [ 126.480358][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.488425][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.643292][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 126.652572][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 126.664124][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 126.741953][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 126.805900][ T7664] lo speed is unknown, defaulting to 1000 [ 126.811889][ T5848] Bluetooth: hci4: link tx timeout [ 126.818230][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.827883][ T5840] Bluetooth: hci4: link tx timeout [ 126.834159][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.857298][ T7664] wg1 speed is unknown, defaulting to 1000 [ 127.036265][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 127.058467][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 127.991327][ T7715] trusted_key: syz.1.437 sent an empty control message without MSG_MORE. [ 128.103603][ T7715] syzkaller1: entered promiscuous mode [ 128.115801][ T7715] syzkaller1: entered allmulticast mode [ 128.403425][ T7732] netlink: 'syz.0.440': attribute type 49 has an invalid length. [ 128.515740][ T7733] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 128.863980][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 129.050142][ T7753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.192155][ T7753] bridge_slave_0: left allmulticast mode [ 129.205659][ T7753] bridge_slave_0: left promiscuous mode [ 129.235234][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.296857][ T7753] bridge_slave_1: left allmulticast mode [ 129.302787][ T7753] bridge_slave_1: left promiscuous mode [ 129.308759][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.335801][ T7753] bond0: (slave bond_slave_0): Releasing backup interface [ 129.353970][ T7753] bond0: (slave bond_slave_1): Releasing backup interface [ 129.388593][ T7753] team0: Port device team_slave_0 removed [ 129.398543][ T7753] team0: Port device team_slave_1 removed [ 129.405453][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.415239][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.428679][ T7753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.615225][ T7771] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 129.653590][ T7776] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 129.704269][ T7776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.760970][ T7776] bond3: (slave ip6gretap1): making interface the new active one [ 129.774554][ T7776] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 129.830347][ T7776] veth3: entered promiscuous mode [ 129.851499][ T7776] bond3: (slave veth3): Enslaving as an active interface with a down link [ 129.863175][ T7789] erspan0: entered allmulticast mode [ 129.909713][ T7789] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 130.066568][ T7798] __nla_validate_parse: 11 callbacks suppressed [ 130.066586][ T7798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 130.216031][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 130.271640][ T7805] geneve3: entered promiscuous mode [ 130.276894][ T7805] geneve3: entered allmulticast mode [ 130.306232][ T7806] lo speed is unknown, defaulting to 1000 [ 130.314870][ T7806] wg1 speed is unknown, defaulting to 1000 [ 130.525677][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 130.653364][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 130.711539][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 130.734404][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 130.765524][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.068741][ T7841] !: renamed from dummy0 (while UP) [ 131.110047][ T5964] IPVS: starting estimator thread 0... [ 131.210843][ T7844] IPVS: using max 33 ests per chain, 79200 per kthread [ 131.531915][ T7859] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 131.557466][ T7859] bond2 (unregistering): Released all slaves [ 131.666377][ T7862] syz_tun: entered allmulticast mode [ 131.694799][ T7863] dvmrp8: entered allmulticast mode [ 131.769937][ T7859] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 131.783966][ T7859] bond2 (unregistering): Released all slaves [ 131.798995][ T7862] netlink: 'syz.4.471': attribute type 23 has an invalid length. [ 131.857320][ T7858] lo speed is unknown, defaulting to 1000 [ 131.865467][ T7858] wg1 speed is unknown, defaulting to 1000 [ 131.936102][ T7859] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 131.968942][ T7859] bond2 (unregistering): Released all slaves [ 132.169308][ T7856] syz_tun: left allmulticast mode [ 132.200202][ T7856] dvmrp8: left allmulticast mode [ 132.388852][ T7859] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 132.442817][ T7859] bond2 (unregistering): Released all slaves [ 132.495329][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 132.545472][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 132.584572][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'. [ 132.779091][ T7905] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 132.820293][ T7905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.865677][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082693][ T7915] lo speed is unknown, defaulting to 1000 [ 133.101416][ T7915] wg1 speed is unknown, defaulting to 1000 [ 133.339008][ T7924] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 133.708401][ T7949] lo speed is unknown, defaulting to 1000 [ 133.715151][ T7951] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 133.775448][ T7949] wg1 speed is unknown, defaulting to 1000 [ 133.908241][ T7970] lec:lec_atm_send: lec0: Unknown message type 20 [ 134.041459][ T7942] lec:lec_atm_close: lec0: Shut down! [ 134.273093][ T7986] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 134.500813][ T8014] syzkaller1: entered promiscuous mode [ 134.526283][ T8014] syzkaller1: entered allmulticast mode [ 134.623957][ T8004] tipc: Failed to remove unknown binding: 66,1,1/0:1743327299/1743327301 [ 134.633249][ T8004] tipc: Failed to remove unknown binding: 66,1,1/0:1743327299/1743327301 [ 135.080081][ T8052] batadv0: entered promiscuous mode [ 135.110091][ T8052] macvtap1: entered promiscuous mode [ 135.113467][ T8055] __nla_validate_parse: 13 callbacks suppressed [ 135.113485][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 135.128046][ T8052] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 135.158758][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 135.188425][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'. [ 135.216622][ T8052] batadv0: left promiscuous mode [ 135.587886][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 135.775758][ T8100] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 135.852428][ T8103] netlink: 104 bytes leftover after parsing attributes in process `syz.4.528'. [ 135.994642][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 136.015706][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 136.062993][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 136.095139][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 186.483991][ T8206] netlink: 'syz.0.541': attribute type 16 has an invalid length. [ 186.503669][ T8206] netlink: 'syz.0.541': attribute type 17 has an invalid length. [ 186.714526][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.722329][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.781847][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.550'. [ 186.799393][ T8222] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 186.884161][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.945940][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 187.160093][ T8241] vlan4: entered allmulticast mode [ 187.180630][ T8241] bond2: entered allmulticast mode [ 187.204131][ T8248] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 187.207483][ T8241] bond2: (slave vlan4): Opening slave failed [ 188.166774][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.206641][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.230370][ T8248] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 188.230772][ T8250] batadv_slave_1: entered promiscuous mode [ 188.287041][ T8253] batadv_slave_1: left promiscuous mode [ 188.307559][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.349858][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.753797][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 188.784319][ T8286] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.847574][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 188.894360][ T8278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.560'. [ 189.127690][ T8308] syzkaller0: entered promiscuous mode [ 189.147845][ T8308] syzkaller0: entered allmulticast mode [ 189.166830][ T8304] tipc: Started in network mode [ 189.172391][ T8304] tipc: Node identity 0a6fddd7e92f, cluster identity 4711 [ 189.199794][ T8304] tipc: Enabled bearer , priority 0 [ 189.206935][ T8309] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 189.215399][ T8309] netlink: 140 bytes leftover after parsing attributes in process `syz.1.571'. [ 189.223327][ T8301] lo speed is unknown, defaulting to 1000 [ 189.234278][ T8309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.571'. [ 189.295248][ T8301] wg1 speed is unknown, defaulting to 1000 [ 189.382304][ T8293] tipc: Resetting bearer [ 189.420003][ T8293] tipc: Disabling bearer [ 189.463891][ T8311] netlink: 830 bytes leftover after parsing attributes in process `syz.1.572'. [ 189.700988][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 190.392149][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.651893][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 190.983001][ T8399] vlan0: entered promiscuous mode [ 190.988316][ T8399] bond0: entered promiscuous mode [ 191.207468][ T8407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.235009][ T8416] bridge3: entered allmulticast mode [ 191.307467][ T8419] lo speed is unknown, defaulting to 1000 [ 191.318424][ T8419] wg1 speed is unknown, defaulting to 1000 [ 191.527433][ T8426] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 191.598165][ T8430] netlink: 'syz.3.608': attribute type 2 has an invalid length. [ 191.665218][ T8426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.973452][ T8441] lo: left allmulticast mode [ 191.979414][ T8441] tunl0: left allmulticast mode [ 191.985945][ T8441] gre0: left allmulticast mode [ 192.012520][ T8441] gretap0: left allmulticast mode [ 192.312109][ T8475] __nla_validate_parse: 10 callbacks suppressed [ 192.312131][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'. [ 192.363851][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'. [ 192.378260][ T8475] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 192.404861][ T8475] netlink: 224 bytes leftover after parsing attributes in process `syz.2.616'. [ 192.422806][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 192.623183][ T8493] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 192.745867][ T8493] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 192.914114][ T8498] bond4: entered promiscuous mode [ 193.041605][ T8527] netlink: 256 bytes leftover after parsing attributes in process `syz.2.629'. [ 193.045698][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 193.060209][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 193.070323][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'. [ 193.322056][ T8536] lo speed is unknown, defaulting to 1000 [ 193.334701][ T8536] wg1 speed is unknown, defaulting to 1000 [ 194.140289][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 194.149903][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 194.308738][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417684][ T8578] lo speed is unknown, defaulting to 1000 [ 194.473595][ T8578] wg1 speed is unknown, defaulting to 1000 [ 194.671991][ T8590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.696869][ T8588] lo speed is unknown, defaulting to 1000 [ 194.925958][ T8603] digital: digital_start_poll: Unknown protocol [ 194.959715][ T8588] wg1 speed is unknown, defaulting to 1000 [ 195.593918][ T8624] syzkaller0: entered promiscuous mode [ 195.599927][ T8624] syzkaller0: entered allmulticast mode [ 195.618858][ T8628] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 197.309812][ T30] audit: type=1107 audit(1759647329.602:3): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 197.441162][ T8679] syzkaller1: entered promiscuous mode [ 197.547683][ T8679] syzkaller1: entered allmulticast mode [ 197.617437][ T8686] __nla_validate_parse: 12 callbacks suppressed [ 197.617455][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 197.869305][ T8707] netlink: 248 bytes leftover after parsing attributes in process `syz.2.680'. [ 197.915154][ T8700] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 197.946440][ T8700] macsec2: entered promiscuous mode [ 197.962938][ T8700] macsec2: entered allmulticast mode [ 197.984466][ T8700] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 198.061071][ T8709] syzkaller0: entered promiscuous mode [ 198.066579][ T8709] syzkaller0: entered allmulticast mode [ 198.091594][ T8709] netlink: 2 bytes leftover after parsing attributes in process `syz.4.681'. [ 198.174631][ T8715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.682'. [ 198.188163][ T8715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.682'. [ 198.197707][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'. [ 198.376613][ T8717] lo speed is unknown, defaulting to 1000 [ 198.400451][ T8721] netlink: 172 bytes leftover after parsing attributes in process `syz.0.685'. [ 198.419822][ T8721] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.470534][ T8717] wg1 speed is unknown, defaulting to 1000 [ 198.822899][ T8745] netlink: 'syz.0.690': attribute type 7 has an invalid length. [ 198.837711][ T8745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.690'. [ 199.264172][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 199.533232][ T8767] bridge0: port 3(erspan0) entered blocking state [ 199.540718][ T8767] bridge0: port 3(erspan0) entered disabled state [ 199.547393][ T8767] erspan0: entered allmulticast mode [ 199.555803][ T8767] erspan0: entered promiscuous mode [ 199.563713][ T8767] bridge0: port 3(erspan0) entered blocking state [ 199.570467][ T8767] bridge0: port 3(erspan0) entered forwarding state [ 199.855973][ T8779] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 200.451877][ T8808] lo speed is unknown, defaulting to 1000 [ 200.460560][ T8808] wg1 speed is unknown, defaulting to 1000 [ 201.521091][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 201.523524][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 201.527213][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 201.536746][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 201.797707][ T8854] openvswitch: netlink: Message has 5444 unknown bytes. [ 201.852475][ T8856] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.717'. [ 201.983347][ T8854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.080038][ T8861] veth0_to_hsr: mtu less than device minimum [ 202.500642][ T8878] geneve2: entered promiscuous mode [ 202.578153][ T8887] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 202.611035][ T8887] bond2: entered promiscuous mode [ 202.616494][ T8887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.798842][ T8898] lo speed is unknown, defaulting to 1000 [ 202.841570][ T8898] wg1 speed is unknown, defaulting to 1000 [ 202.878133][ T8899] lo speed is unknown, defaulting to 1000 [ 202.955687][ T8899] wg1 speed is unknown, defaulting to 1000 [ 203.211595][ T8926] __nla_validate_parse: 2 callbacks suppressed [ 203.211613][ T8926] netlink: 68 bytes leftover after parsing attributes in process `syz.4.730'. [ 203.364508][ T8936] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 203.481568][ T8949] tipc: Enabled bearer , priority 0 [ 203.497918][ T8950] netlink: 'syz.3.738': attribute type 12 has an invalid length. [ 203.513526][ T8944] tipc: Resetting bearer [ 203.519397][ T8950] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.738'. [ 203.963019][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.739'. [ 204.503190][ T1207] tipc: Node number set to 2087378384 [ 204.966507][ T8944] tipc: Disabling bearer [ 204.976409][ T8953] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 205.176879][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 205.346905][ T8982] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 205.374029][ T8982] netlink: 'syz.4.745': attribute type 4 has an invalid length. [ 205.407005][ T8982] netlink: 15558 bytes leftover after parsing attributes in process `syz.4.745'. [ 205.514590][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 205.553189][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 205.644178][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 205.735770][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 205.746451][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 205.948437][ T9012] lo speed is unknown, defaulting to 1000 [ 206.004261][ T9012] wg1 speed is unknown, defaulting to 1000 [ 206.346822][ T9037] lo speed is unknown, defaulting to 1000 [ 206.358225][ T9037] wg1 speed is unknown, defaulting to 1000 [ 206.845231][ T9061] ipvlan2: entered promiscuous mode [ 206.851446][ T9061] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 206.884919][ T9069] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 207.171448][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.199897][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.643095][ T9111] pim6reg: entered allmulticast mode [ 207.842735][ T9115] lo speed is unknown, defaulting to 1000 [ 207.864435][ T9115] wg1 speed is unknown, defaulting to 1000 [ 208.346833][ T9149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.547775][ T9167] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 208.565183][ T9154] syzkaller0: entered promiscuous mode [ 208.581152][ T9154] syzkaller0: entered allmulticast mode [ 208.660893][ T9173] __nla_validate_parse: 27 callbacks suppressed [ 208.660913][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 208.684903][ T9165] vlan2: entered allmulticast mode [ 208.690838][ T9165] bond3: entered allmulticast mode [ 208.785634][ T9176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.797'. [ 208.794904][ T9176] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 208.812752][ T9167] tipc: Enabled bearer , priority 0 [ 208.829840][ T9177] syzkaller0: entered promiscuous mode [ 208.836346][ T9177] syzkaller0: entered allmulticast mode [ 208.925135][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.800'. [ 209.036679][ T9165] tipc: Resetting bearer [ 209.052560][ T9164] tipc: Resetting bearer [ 209.071748][ T9164] tipc: Disabling bearer [ 209.325706][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.806'. [ 209.342245][ T9206] netlink: 5 bytes leftover after parsing attributes in process `syz.2.806'. [ 209.359786][ T9206] netlink: 5 bytes leftover after parsing attributes in process `syz.2.806'. [ 209.397619][ T9218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.811'. [ 209.431004][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 209.492567][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 209.502817][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 209.589209][ T9224] syzkaller0: entered promiscuous mode [ 209.598846][ T9224] syzkaller0: entered allmulticast mode [ 209.622999][ T9231] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 209.643152][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.653129][ T9231] batadv0: entered promiscuous mode [ 209.679598][ T9231] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.694472][ T9239] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 211.276017][ T9239] batadv0: entered allmulticast mode [ 211.282803][ T9239] bond0: (slave batadv0): Releasing backup interface [ 211.292387][ T9239] bridge0: port 1(batadv0) entered blocking state [ 211.299377][ T9239] bridge0: port 1(batadv0) entered disabled state [ 211.336411][ T9255] sit0: entered promiscuous mode [ 211.350275][ T9255] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 211.389409][ T9259] sctp: [Deprecated]: syz.1.820 (pid 9259) Use of int in max_burst socket option deprecated. [ 211.389409][ T9259] Use struct sctp_assoc_value instead [ 211.397605][ T9250] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 211.428957][ T9250] bond3 (unregistering): Released all slaves [ 211.501829][ T9262] bridge0: entered promiscuous mode [ 211.516284][ T9261] bridge0: left promiscuous mode [ 211.710762][ T9272] veth1_macvtap: left promiscuous mode [ 211.774591][ T3514] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 211.784565][ T3514] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 211.882773][ T9281] lo speed is unknown, defaulting to 1000 [ 211.905078][ T9281] wg1 speed is unknown, defaulting to 1000 [ 212.112054][ T9273] lec:lec_atm_close: lec0: Shut down! [ 212.265219][ T9301] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 212.265559][ T9299] openvswitch: netlink: Key type 186 is out of range max 32 [ 212.332612][ T9302] bridge0: entered promiscuous mode [ 212.393046][ T9305] Bluetooth: MGMT ver 1.23 [ 212.639014][ T9325] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 212.821174][ T9334] netlink: 'syz.0.842': attribute type 6 has an invalid length. [ 212.951929][ T9334] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 212.991169][ T9334] bond4 (unregistering): Released all slaves [ 213.352859][ T9363] lo speed is unknown, defaulting to 1000 [ 213.384920][ T9372] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 213.409299][ T9363] wg1 speed is unknown, defaulting to 1000 [ 213.415526][ T9366] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 213.430786][ T9361] syz.0.847 (9361) used greatest stack depth: 17864 bytes left [ 213.607205][ T9384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.854643][ T9404] __nla_validate_parse: 27 callbacks suppressed [ 213.854660][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 214.258072][ T9430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.866'. [ 214.273537][ T9428] xt_socket: unknown flags 0x50 [ 214.278678][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 214.293603][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 214.384036][ T9437] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 214.400443][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 215.242328][ T9473] sctp: [Deprecated]: syz.3.875 (pid 9473) Use of int in max_burst socket option deprecated. [ 215.242328][ T9473] Use struct sctp_assoc_value instead [ 215.266189][ T9481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.877'. [ 215.428628][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 215.444391][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 215.451745][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 215.455550][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 215.714219][ T9510] netlink: 'syz.2.885': attribute type 13 has an invalid length. [ 215.723363][ T9510] netlink: 'syz.2.885': attribute type 17 has an invalid length. [ 215.778054][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.785307][ T9510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.793946][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.801141][ T9510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.825998][ T9510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.186393][ T9523] bond6: entered promiscuous mode [ 216.192769][ T9523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.200506][ T9520] lo speed is unknown, defaulting to 1000 [ 216.229810][ T9520] wg1 speed is unknown, defaulting to 1000 [ 216.313799][ T9536] lo speed is unknown, defaulting to 1000 [ 216.344364][ T9536] wg1 speed is unknown, defaulting to 1000 [ 216.478253][ T9536] lec:lec_atm_send: lec0: Unknown message type 20 [ 216.564484][ T9530] lec:lec_atm_close: lec0: Shut down! [ 216.777684][ T9555] bond3: (slave macvlan2): Opening slave failed [ 216.873739][ T9573] netlink: 'syz.4.902': attribute type 4 has an invalid length. [ 217.998228][ T9602] netlink: 'syz.4.911': attribute type 13 has an invalid length. [ 218.008184][ T9602] netlink: 'syz.4.911': attribute type 17 has an invalid length. [ 218.114660][ T9602] erspan0: left allmulticast mode [ 218.161696][ T9602] bridge0: left promiscuous mode [ 218.170854][ T9610] netlink: 'syz.1.910': attribute type 39 has an invalid length. [ 218.172474][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.193294][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.236951][ T9602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.274395][ T9608] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 218.286516][ T9608] bond0: (slave gre0): Error -95 calling set_mac_address [ 218.384411][ T9609] lo speed is unknown, defaulting to 1000 [ 218.404220][ T9609] wg1 speed is unknown, defaulting to 1000 [ 218.588806][ T9604] lec:lec_atm_close: lec0: Shut down! [ 218.879175][ T9664] __nla_validate_parse: 11 callbacks suppressed [ 218.879195][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'. [ 218.902017][ T9655] sctp: [Deprecated]: syz.1.919 (pid 9655) Use of int in max_burst socket option. [ 218.902017][ T9655] Use struct sctp_assoc_value instead [ 218.907995][ T9647] netlink: 'syz.0.917': attribute type 4 has an invalid length. [ 218.951816][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'. [ 218.980502][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 219.124298][ T9675] netlink: 252 bytes leftover after parsing attributes in process `syz.2.922'. [ 219.144878][ T9673] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 219.171093][ T9673] netlink: 228 bytes leftover after parsing attributes in process `syz.3.923'. [ 219.232248][ T9680] tipc: Enabled bearer , priority 0 [ 219.250483][ T9680] syzkaller0: entered promiscuous mode [ 219.264929][ T9680] syzkaller0: entered allmulticast mode [ 219.291778][ T9679] tipc: Resetting bearer [ 219.368175][ T9679] tipc: Disabling bearer [ 219.640407][ T9697] tipc: Enabled bearer , priority 0 [ 219.653273][ T9697] syzkaller0: entered promiscuous mode [ 219.658888][ T9697] syzkaller0: entered allmulticast mode [ 219.681194][ T9697] IPv6: NLM_F_REPLACE set, but no existing node found! [ 219.719048][ T9697] tipc: Resetting bearer [ 219.733033][ T9696] tipc: Resetting bearer [ 219.761145][ T9696] tipc: Disabling bearer [ 219.845977][ T9704] lo speed is unknown, defaulting to 1000 [ 219.862310][ T9704] wg1 speed is unknown, defaulting to 1000 [ 219.948068][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 220.017198][ T9698] lec:lec_atm_close: lec0: Shut down! [ 220.033245][ T9712] lo speed is unknown, defaulting to 1000 [ 220.036404][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 220.040750][ T9712] wg1 speed is unknown, defaulting to 1000 [ 220.084625][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.932'. [ 220.258864][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 220.304690][ T9734] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 220.320085][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 220.511203][ T9744] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 220.596109][ T9756] bridge4: entered allmulticast mode [ 220.709084][ T9766] lo speed is unknown, defaulting to 1000 [ 220.722500][ T9766] wg1 speed is unknown, defaulting to 1000 [ 220.795742][ T9755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.837136][ T9770] lec:lec_atm_send: lec0: Unknown message type 20 [ 220.857593][ T9755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.987127][ T9755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.187049][ T9755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.288934][ T9760] lec:lec_atm_close: lec0: Shut down! [ 221.480996][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.564917][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.618584][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.714977][ T3014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.128817][ T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 222.163361][ T9624] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 222.172657][ T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 222.218967][ T9839] lo speed is unknown, defaulting to 1000 [ 222.263722][ T9839] wg1 speed is unknown, defaulting to 1000 [ 222.279782][ T9624] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 222.402675][ T9832] lec:lec_atm_close: lec0: Shut down! [ 222.457714][ T9858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 222.657954][ T9851] lo speed is unknown, defaulting to 1000 [ 222.667906][ T9864] lo speed is unknown, defaulting to 1000 [ 222.727698][ T9864] wg1 speed is unknown, defaulting to 1000 [ 222.795973][ T9871] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 222.901322][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.911695][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.923721][ T9870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.977711][ T9851] wg1 speed is unknown, defaulting to 1000 [ 223.103150][ T9625] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.827502][ T9923] lo speed is unknown, defaulting to 1000 [ 223.858141][ T9923] wg1 speed is unknown, defaulting to 1000 [ 224.077137][ T9918] lec:lec_atm_close: lec0: Shut down! [ 224.547165][ T9954] lo speed is unknown, defaulting to 1000 [ 224.609401][ T9954] wg1 speed is unknown, defaulting to 1000 [ 224.682461][ T9962] __nla_validate_parse: 11 callbacks suppressed [ 224.682481][ T9962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.992'. [ 224.706383][ T9962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 225.247677][ T9978] raw_sendmsg: syz.2.998 forgot to set AF_INET. Fix it! [ 225.456691][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.135134][T10020] vlan2: entered promiscuous mode [ 226.150709][T10020] vlan2: entered allmulticast mode [ 226.160455][T10020] hsr_slave_1: entered allmulticast mode [ 226.178974][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1010'. [ 226.220414][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 226.247778][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 226.286839][T10025] netlink: 'syz.3.1011': attribute type 62 has an invalid length. [ 226.435204][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 226.454605][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 226.475089][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 226.613439][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 226.642725][T10040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 226.679303][T10040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 226.711275][T10040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 227.374597][T10068] netlink: 'syz.3.1025': attribute type 8 has an invalid length. [ 228.057346][T10098] lo speed is unknown, defaulting to 1000 [ 228.069791][T10099] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 228.082706][T10098] wg1 speed is unknown, defaulting to 1000 [ 228.085204][T10099] netlink: 'syz.0.1034': attribute type 83 has an invalid length. [ 228.561026][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.572634][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.582453][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.594414][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.604818][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.688384][T10104] lo speed is unknown, defaulting to 1000 [ 228.697568][T10104] wg1 speed is unknown, defaulting to 1000 [ 228.852866][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.863999][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.873620][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.882671][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.894882][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.269753][T10108] lo speed is unknown, defaulting to 1000 [ 229.277315][T10108] wg1 speed is unknown, defaulting to 1000 [ 229.437085][T10104] chnl_net:caif_netlink_parms(): no params data found [ 229.450482][T10142] netlink: 'syz.0.1049': attribute type 5 has an invalid length. [ 229.862119][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.886963][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.896887][T10104] bridge_slave_0: entered allmulticast mode [ 229.905102][T10104] bridge_slave_0: entered promiscuous mode [ 230.026817][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.049756][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.057387][T10104] bridge_slave_1: entered allmulticast mode [ 230.114418][T10104] bridge_slave_1: entered promiscuous mode [ 230.193455][T10178] __nla_validate_parse: 162 callbacks suppressed [ 230.193475][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 230.433606][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 230.474360][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.526227][T10170] lo speed is unknown, defaulting to 1000 [ 230.534159][T10170] wg1 speed is unknown, defaulting to 1000 [ 230.543976][T10108] chnl_net:caif_netlink_parms(): no params data found [ 230.603655][T10187] netlink: 'syz.1.1058': attribute type 11 has an invalid length. [ 230.659204][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.701069][ T52] Bluetooth: hci3: command tx timeout [ 230.908709][T10104] team0: Port device team_slave_0 added [ 230.950175][ T52] Bluetooth: hci4: command tx timeout [ 230.988822][T10104] team0: Port device team_slave_1 added [ 231.290323][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.300168][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.332749][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.345539][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.355194][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.363830][T10108] bridge_slave_0: entered allmulticast mode [ 231.393892][T10108] bridge_slave_0: entered promiscuous mode [ 231.452071][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.459130][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.517699][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.531212][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.538441][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.547004][T10108] bridge_slave_1: entered allmulticast mode [ 231.557438][T10108] bridge_slave_1: entered promiscuous mode [ 231.662318][T10108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.684005][T10227] netlink: 'syz.0.1070': attribute type 7 has an invalid length. [ 231.695556][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1070'. [ 231.716680][T10108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.784921][T10104] hsr_slave_0: entered promiscuous mode [ 231.792905][T10104] hsr_slave_1: entered promiscuous mode [ 231.801437][T10104] debugfs: 'hsr0' already exists in 'hsr' [ 231.807472][T10104] Cannot create hsr debugfs directory [ 231.923290][ T3514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.936233][ T3514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.964490][T10108] team0: Port device team_slave_0 added [ 231.975557][T10108] team0: Port device team_slave_1 added [ 232.084963][T10238] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 232.094847][T10238] geneve2: left promiscuous mode [ 232.102962][T10238] bridge4: left allmulticast mode [ 232.134152][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 232.147947][ T3514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.161255][ T3514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.237715][T10237] hsr_slave_0: left promiscuous mode [ 232.327132][T10108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.335952][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.364492][T10108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.383876][T10108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.391893][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.419628][T10108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.445141][ T3514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.453765][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 232.455963][ T3514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.625459][T10266] netlink: 'syz.0.1078': attribute type 16 has an invalid length. [ 232.630576][T10108] hsr_slave_0: entered promiscuous mode [ 232.641005][T10108] hsr_slave_1: entered promiscuous mode [ 232.641056][T10266] netlink: 'syz.0.1078': attribute type 17 has an invalid length. [ 232.683233][ T3514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.694047][ T3514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.716937][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1080'. [ 232.791828][ T52] Bluetooth: hci3: command tx timeout [ 232.855261][T10266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.871426][T10266] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.882044][T10266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.944669][T10274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 232.955674][T10274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 232.977495][T10277] syz_tun: entered allmulticast mode [ 233.031349][ T52] Bluetooth: hci4: command tx timeout [ 233.057812][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 233.094224][T10275] delete_channel: no stack [ 233.135307][T10273] syz_tun: left allmulticast mode [ 233.283276][T10104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.301265][T10104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.352238][T10104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.391453][T10284] lo speed is unknown, defaulting to 1000 [ 233.393050][T10104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.049368][ T3514] bond0 (unregistering): Released all slaves [ 234.159191][ T3514] bond1 (unregistering): Released all slaves [ 234.258172][ T3514] bond2 (unregistering): Released all slaves [ 234.271218][ T3514] bond3 (unregistering): Released all slaves [ 234.318955][T10284] wg1 speed is unknown, defaulting to 1000 [ 234.381107][ T30] audit: type=1800 audit(1759647366.702:4): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1086" name="memory.events" dev="tmpfs" ino=1141 res=0 errno=0 [ 234.426779][ T30] audit: type=1804 audit(1759647366.702:5): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1086" name="memory.events" dev="tmpfs" ino=1141 res=1 errno=0 [ 234.545828][T10294] bridge0: port 3(erspan0) entered disabled state [ 234.619687][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 234.664229][T10294] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.672971][T10294] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.860151][ T52] Bluetooth: hci3: command tx timeout [ 234.903095][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.924422][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.100491][ T52] Bluetooth: hci4: command tx timeout [ 235.175999][T10294] nicvf0: left promiscuous mode [ 235.275678][T10294] bond4: left promiscuous mode [ 235.302013][ T3514] tipc: Disabling bearer [ 235.314601][ T2984] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.324586][ T3514] tipc: Left network mode [ 235.333000][ T2984] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.344010][ T2984] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.354878][ T2984] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.491439][ T2984] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.505937][ T3514] IPVS: stopping backup sync thread 7486 ... [ 235.514897][ T2984] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.526567][ T2984] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.537457][ T2984] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.596796][T10319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.688652][T10323] macvlan3: entered promiscuous mode [ 235.695261][T10323] macvlan3: entered allmulticast mode [ 235.702400][T10323] bond4: entered promiscuous mode [ 235.708011][T10323] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 235.717749][T10323] bond4: left promiscuous mode [ 235.760852][T10108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.786983][T10329] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 235.788725][T10108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.827876][T10108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.867387][T10108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.944467][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 236.166926][ T3514] mac80211_hwsim hwsim9 wlan0 (unregistering): left allmulticast mode [ 236.301898][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.349200][ T3514] hsr_slave_0: left promiscuous mode [ 236.375250][ T3514] hsr_slave_1: left promiscuous mode [ 236.435410][ T3514] dummy0: left allmulticast mode [ 236.451705][ T3514] veth1_macvtap: left promiscuous mode [ 236.457825][ T3514] veth0_macvtap: left promiscuous mode [ 236.471474][ T3514] veth1_vlan: left promiscuous mode [ 236.477150][ T3514] veth0_vlan: left promiscuous mode [ 236.944700][ T52] Bluetooth: hci3: command tx timeout [ 237.190387][ T5844] Bluetooth: hci4: command tx timeout [ 237.428835][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.523982][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.531319][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.558281][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.565727][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.603214][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.707790][T10388] syzkaller1: entered promiscuous mode [ 237.719541][T10388] syzkaller1: entered allmulticast mode [ 237.794840][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.829208][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.836789][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.850923][T10388] lo speed is unknown, defaulting to 1000 [ 237.902339][T10388] wg1 speed is unknown, defaulting to 1000 [ 237.949224][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.956446][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.101370][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1101'. [ 238.164224][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 238.344199][T10108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.603724][T10419] IPVS: Error connecting to the multicast addr [ 238.723939][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.858740][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 238.955305][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 239.007326][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 239.071844][T10108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.525891][T10104] veth0_vlan: entered promiscuous mode [ 239.575978][T10108] veth0_vlan: entered promiscuous mode [ 239.585361][T10104] veth1_vlan: entered promiscuous mode [ 239.648722][T10108] veth1_vlan: entered promiscuous mode [ 239.672200][T10450] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 239.696935][T10104] veth0_macvtap: entered promiscuous mode [ 239.706905][T10450] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1116'. [ 239.724438][T10104] veth1_macvtap: entered promiscuous mode [ 239.746057][T10108] veth0_macvtap: entered promiscuous mode [ 239.761176][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1117'. [ 239.777475][T10108] veth1_macvtap: entered promiscuous mode [ 239.826237][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.846231][T10108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.861866][T10108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.888711][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.897710][ T3514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.934791][ T3514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.958702][ T3514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.971001][ T3514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.985646][ T3514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.002264][ T3514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.049853][ T3514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.059408][ T3514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.135829][T10458] sctp: [Deprecated]: syz.1.1119 (pid 10458) Use of int in max_burst socket option. [ 240.135829][T10458] Use struct sctp_assoc_value instead [ 240.374620][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.394579][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.503987][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.519125][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.530502][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.553142][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.573224][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1120'. [ 240.617515][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.630887][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.159113][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 241.316404][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1127'. [ 241.362577][T10486] netlink: 'syz.1.1127': attribute type 41 has an invalid length. [ 241.637122][T10502] lo speed is unknown, defaulting to 1000 [ 241.675898][T10502] wg1 speed is unknown, defaulting to 1000 [ 241.733124][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1134'. [ 242.314172][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.450980][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.842984][T10547] netlink: 'syz.1.1142': attribute type 13 has an invalid length. [ 242.874480][T10546] netlink: 'syz.6.1143': attribute type 1 has an invalid length. [ 242.892973][T10547] netlink: 'syz.1.1142': attribute type 17 has an invalid length. [ 243.236061][T10547] bridge0: port 3(erspan0) entered blocking state [ 243.242715][T10547] bridge0: port 3(erspan0) entered forwarding state [ 243.296538][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.321388][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.337551][T10547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.361634][ T43] lo speed is unknown, defaulting to 1000 [ 243.362752][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.372840][ T43] syz2: Port: 1 Link ACTIVE [ 243.403464][T10552] veth3: entered promiscuous mode [ 243.591766][T10551] lo speed is unknown, defaulting to 1000 [ 243.622602][T10551] wg1 speed is unknown, defaulting to 1000 [ 243.866589][T10584] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1151'. [ 243.875870][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1151'. [ 243.885814][T10584] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1151'. [ 243.895671][T10584] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1151'. [ 243.996308][T10583] sctp: [Deprecated]: syz.6.1152 (pid 10583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.996308][T10583] Use struct sctp_sack_info instead [ 244.072457][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1152'. [ 244.302533][T10600] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 244.565665][T10612] gretap1: entered promiscuous mode [ 244.631933][T10617] tipc: Enabled bearer , priority 0 [ 244.646059][T10617] syzkaller0: entered promiscuous mode [ 244.655263][T10617] syzkaller0: entered allmulticast mode [ 244.750145][T10617] tipc: Resetting bearer [ 244.811956][T10615] tipc: Resetting bearer [ 244.882935][T10615] tipc: Disabling bearer [ 245.028876][T10634] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 245.112822][T10636] wg1 speed is unknown, defaulting to 1000 [ 245.437042][T10650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.535000][T10656] netlink: 'syz.5.1172': attribute type 10 has an invalid length. [ 245.558440][T10656] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 245.694290][T10661] bond5: (slave bond_slave_1): Device is not our slave [ 245.720154][T10661] bond5: option active_slave: invalid value (bond_slave_1) [ 245.736807][T10661] bond5 (unregistering): Released all slaves [ 246.381217][ T5844] Bluetooth: hci4: command 0x0401 tx timeout [ 246.495369][T10708] netlink: 'syz.6.1185': attribute type 1 has an invalid length. [ 246.504728][T10708] netlink: 'syz.6.1185': attribute type 4 has an invalid length. [ 246.513353][T10708] __nla_validate_parse: 26 callbacks suppressed [ 246.513371][T10708] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1185'. [ 246.573779][T10713] tipc: Enabled bearer , priority 0 [ 246.587061][T10714] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 246.606633][T10714] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 246.616854][T10714] tipc: Resetting bearer [ 246.627423][T10719] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1187'. [ 246.682559][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1188'. [ 246.727836][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 246.737706][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1189'. [ 246.781043][T10721] nbd0: detected capacity change from 0 to 63 [ 246.792320][T10726] block nbd0: NBD_DISCONNECT [ 246.799221][T10726] block nbd0: Disconnected due to user request. [ 246.808762][T10726] block nbd0: shutting down sockets [ 246.948950][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 247.011553][ T50] tipc: Resetting bearer [ 247.028010][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 247.152111][T10743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.162128][T10743] bond0: (slave bond1): Enslaving as an active interface with an up link [ 247.173509][T10747] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1194'. [ 247.206812][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 247.331935][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 247.432356][T10747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.447252][T10747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.463000][T10747] bond0 (unregistering): (slave bond1): Releasing backup interface [ 247.480442][T10747] bond0 (unregistering): Released all slaves [ 247.579737][ T24] tipc: Node number set to 3812679127 [ 247.609321][T10761] tipc: Enabled bearer , priority 0 [ 247.621497][T10761] syzkaller0: entered promiscuous mode [ 247.627014][T10761] syzkaller0: entered allmulticast mode [ 247.637338][T10761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.685366][T10761] tipc: Resetting bearer [ 247.722217][T10767] wg1 speed is unknown, defaulting to 1000 [ 247.732198][T10760] tipc: Resetting bearer [ 247.735852][T10765] can: request_module (can-proto-0) failed. [ 247.778009][T10760] tipc: Disabling bearer [ 247.813171][T10770] geneve2: entered promiscuous mode [ 247.818614][T10770] geneve2: entered allmulticast mode [ 247.896934][T10775] netlink: 'syz.6.1202': attribute type 1 has an invalid length. [ 248.289002][T10788] netlink: 'syz.5.1207': attribute type 13 has an invalid length. [ 248.300307][T10788] netlink: 'syz.5.1207': attribute type 17 has an invalid length. [ 248.446129][T10788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.541575][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.579102][T10789] wg1 speed is unknown, defaulting to 1000 [ 248.644802][T10792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.708447][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.858042][T10804] bond0 (unregistering): Released all slaves [ 249.168022][T10819] wg1 speed is unknown, defaulting to 1000 [ 249.205970][T10825] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 249.288157][T10825] bond5: (slave geneve3): making interface the new active one [ 249.298314][T10825] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 249.347005][ T2984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.358264][ T2984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.375185][T10825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.402769][ T2984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.418373][ T2984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 249.664590][T10849] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001 [ 249.999233][T10865] wg1 speed is unknown, defaulting to 1000 [ 250.738386][T10897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.986580][T10912] wg1 speed is unknown, defaulting to 1000 [ 251.028627][T10913] wg1 speed is unknown, defaulting to 1000 [ 251.051333][T10915] wg1 speed is unknown, defaulting to 1000 [ 251.177782][T10925] IPVS: Error connecting to the multicast addr [ 251.260754][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 251.581379][T10934] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.591736][T10934] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 251.738014][T10942] __nla_validate_parse: 18 callbacks suppressed [ 251.738028][T10942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1255'. [ 251.868412][T10942] bond0 (unregistering): Released all slaves [ 251.901878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 251.991367][T10945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 252.072691][T10950] tc_dump_action: action bad kind [ 252.156375][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1258'. [ 253.126131][T10957] netlink: 'syz.4.1260': attribute type 2 has an invalid length. [ 253.221183][T10961] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 254.491038][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 254.500840][T10984] bridge0: port 1(batadv0) entered disabled state [ 254.722291][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 254.739195][T10988] tipc: Enabling of bearer rejected, already enabled [ 254.879304][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.891039][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.899262][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.908812][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.743936][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855882][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 256.655839][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 256.665684][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 256.674975][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 258.792458][T11047] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 258.800713][T11047] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 258.808247][T11047] tipc: Resetting bearer [ 258.857933][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1288'. [ 259.235454][T11055] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1290'. [ 259.245247][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1290'. [ 259.890961][T11077] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 259.945189][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.958329][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.967010][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.977571][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.985957][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.037815][T11079] wg1 speed is unknown, defaulting to 1000 [ 260.119033][T11086] wg1 speed is unknown, defaulting to 1000 [ 260.307761][T11079] chnl_net:caif_netlink_parms(): no params data found [ 260.465122][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.473199][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.481010][T11079] bridge_slave_0: entered allmulticast mode [ 260.489187][T11079] bridge_slave_0: entered promiscuous mode [ 260.501511][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.510694][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.518078][T11079] bridge_slave_1: entered allmulticast mode [ 260.527549][T11079] bridge_slave_1: entered promiscuous mode [ 260.576851][T11079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.591831][T11079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.646054][T11079] team0: Port device team_slave_0 added [ 260.657086][T11079] team0: Port device team_slave_1 added [ 260.704517][T11079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.712155][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.740239][T11079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.753757][T11079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.761181][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.789101][T11079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.862355][T11079] hsr_slave_0: entered promiscuous mode [ 260.871015][T11079] hsr_slave_1: entered promiscuous mode [ 260.877737][T11079] debugfs: 'hsr0' already exists in 'hsr' [ 260.884730][T11079] Cannot create hsr debugfs directory [ 261.144536][T11079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 261.157084][T11079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 261.173458][T11079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 261.192590][T11079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 261.328296][T11079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.364613][T11079] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.386212][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.393553][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.419322][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.426913][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.644846][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 261.668923][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 261.714106][T11079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.037372][T11079] veth0_vlan: entered promiscuous mode [ 262.054681][T11079] veth1_vlan: entered promiscuous mode [ 262.070643][ T5844] Bluetooth: hci5: command tx timeout [ 262.106732][T11079] veth0_macvtap: entered promiscuous mode [ 262.120734][T11079] veth1_macvtap: entered promiscuous mode [ 262.152675][T11079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.174665][T11079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.198479][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.227208][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.266963][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.292603][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.343533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.361077][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.403510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.413025][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.800943][T11124] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1294'. [ 263.090589][T11130] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1303'. [ 263.161540][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1304'. [ 263.313540][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1306'. [ 263.578243][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1307'. [ 263.709127][T11153] netlink: 'syz.7.1309': attribute type 9 has an invalid length. [ 263.864125][T11157] wg1 speed is unknown, defaulting to 1000 [ 263.953632][T11163] wg1 speed is unknown, defaulting to 1000 [ 263.955692][T11165] __nla_validate_parse: 1 callbacks suppressed [ 263.955709][T11165] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1313'. [ 263.982055][T11165] block nbd0: not configured, cannot reconfigure [ 263.995078][T11165] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1313'. [ 264.047618][T11163] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1311'. [ 264.149832][ T5844] Bluetooth: hci5: command tx timeout [ 264.858636][T11182] wg1 speed is unknown, defaulting to 1000 [ 265.109305][T11191] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 265.243499][T11195] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1322'. [ 265.391548][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.405387][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.413880][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.440703][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.458835][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.480630][T11201] bond3: (slave erspan0): Releasing active interface [ 265.487587][T11201] ip6gretap1: entered promiscuous mode [ 265.512686][T11204] sctp: [Deprecated]: syz.4.1324 (pid 11204) Use of int in max_burst socket option. [ 265.512686][T11204] Use struct sctp_assoc_value instead [ 265.521641][T11201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.583077][T11198] wg1 speed is unknown, defaulting to 1000 [ 265.587766][T11201] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 265.874129][T11198] chnl_net:caif_netlink_parms(): no params data found [ 266.215889][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.230723][ T52] Bluetooth: hci5: command tx timeout [ 266.290837][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.298317][T11198] bridge_slave_0: entered allmulticast mode [ 266.355128][T11198] bridge_slave_0: entered promiscuous mode [ 266.391496][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.398748][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.450686][T11198] bridge_slave_1: entered allmulticast mode [ 266.490491][T11198] bridge_slave_1: entered promiscuous mode [ 266.503937][T11229] netlink: 'syz.7.1333': attribute type 5 has an invalid length. [ 266.627524][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 266.645592][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 266.660802][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 266.674625][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 266.683476][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 266.761396][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.797483][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.827866][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 266.854132][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 266.881566][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 266.891249][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 266.900189][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 266.908150][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 266.980603][T11198] team0: Port device team_slave_0 added [ 266.992260][T11198] team0: Port device team_slave_1 added [ 267.094947][T11247] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1337'. [ 267.108327][T11247] netlink: zone id is out of range [ 267.113615][T11247] netlink: zone id is out of range [ 267.118942][T11247] netlink: zone id is out of range [ 267.126144][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.133505][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.160422][T11247] netlink: zone id is out of range [ 267.166507][T11247] netlink: zone id is out of range [ 267.173124][T11247] netlink: zone id is out of range [ 267.179040][T11247] netlink: zone id is out of range [ 267.185305][T11247] netlink: zone id is out of range [ 267.191221][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.202198][T11247] netlink: zone id is out of range [ 267.208515][T11232] wg1 speed is unknown, defaulting to 1000 [ 267.227925][T11238] wg1 speed is unknown, defaulting to 1000 [ 267.236470][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.247999][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.281589][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.484294][T11198] hsr_slave_0: entered promiscuous mode [ 267.492178][T11198] hsr_slave_1: entered promiscuous mode [ 267.498729][T11198] debugfs: 'hsr0' already exists in 'hsr' [ 267.505131][T11198] Cannot create hsr debugfs directory [ 267.505344][ T52] Bluetooth: hci6: command tx timeout [ 267.558848][T11260] wg1 speed is unknown, defaulting to 1000 [ 267.579353][T11257] veth1_macvtap: left promiscuous mode [ 267.586196][T11257] macsec0: entered promiscuous mode [ 267.592782][T11257] macsec0: entered allmulticast mode [ 267.656591][T11263] veth1_macvtap: entered promiscuous mode [ 267.665392][T11263] veth1_macvtap: entered allmulticast mode [ 267.675226][T11263] macsec0: left promiscuous mode [ 267.682211][T11263] macsec0: left allmulticast mode [ 267.687280][T11263] veth1_macvtap: left allmulticast mode [ 267.753021][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 267.932015][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1344'. [ 268.161588][T11238] chnl_net:caif_netlink_parms(): no params data found [ 268.300104][ T52] Bluetooth: hci5: command tx timeout [ 268.302043][T11232] chnl_net:caif_netlink_parms(): no params data found [ 268.389030][T11286] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 268.698633][T11295] macsec1: entered promiscuous mode [ 268.708018][T11295] macsec1: entered allmulticast mode [ 268.730465][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 268.771208][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.779016][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.790494][ T52] Bluetooth: hci7: command tx timeout [ 268.797763][T11238] bridge_slave_0: entered allmulticast mode [ 268.806678][T11238] bridge_slave_0: entered promiscuous mode [ 268.847900][T11198] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 268.863149][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.872499][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.881140][T11238] bridge_slave_1: entered allmulticast mode [ 268.893055][T11238] bridge_slave_1: entered promiscuous mode [ 268.950627][ T52] Bluetooth: hci8: command tx timeout [ 268.984125][T11198] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.042491][T11238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.065539][T11238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.078283][T11232] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.089283][T11232] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.097922][T11232] bridge_slave_0: entered allmulticast mode [ 269.108430][T11232] bridge_slave_0: entered promiscuous mode [ 269.118304][T11198] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.132246][T11198] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.197477][T11232] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.208126][T11232] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.216466][T11232] bridge_slave_1: entered allmulticast mode [ 269.225650][T11232] bridge_slave_1: entered promiscuous mode [ 269.242943][T11238] team0: Port device team_slave_0 added [ 269.274954][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1354'. [ 269.287073][T11238] team0: Port device team_slave_1 added [ 269.328482][T11232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.368446][T11232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.414896][T11328] tipc: Enabling of bearer rejected, already enabled [ 269.436467][T11238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.445157][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.476375][T11238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.489675][T11238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.496824][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.526022][T11238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.550293][T11328] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 269.557863][T11328] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 269.567238][T11328] tipc: Resetting bearer [ 269.574865][T11232] team0: Port device team_slave_0 added [ 269.581035][ T52] Bluetooth: hci6: command tx timeout [ 269.615656][T11232] team0: Port device team_slave_1 added [ 269.694234][T11238] hsr_slave_0: entered promiscuous mode [ 269.702134][T11238] hsr_slave_1: entered promiscuous mode [ 269.708793][T11238] debugfs: 'hsr0' already exists in 'hsr' [ 269.715823][T11238] Cannot create hsr debugfs directory [ 269.723862][T11329] tipc: Resetting bearer [ 269.731779][T11232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.738830][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.766294][T11232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.783631][T11232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.792098][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.818719][T11232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.984260][T11232] hsr_slave_0: entered promiscuous mode [ 269.997696][T11232] hsr_slave_1: entered promiscuous mode [ 270.005341][T11232] debugfs: 'hsr0' already exists in 'hsr' [ 270.012539][T11232] Cannot create hsr debugfs directory [ 270.065461][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1362'. [ 270.377022][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.512696][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.561264][T11351] wg1 speed is unknown, defaulting to 1000 [ 270.718924][T11360] batadv_slave_1: entered promiscuous mode [ 270.739408][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.747011][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.765123][T11238] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 270.782624][T11238] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 270.792614][T11361] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1368'. [ 270.820626][T11361] block nbd0: not configured, cannot reconfigure [ 270.837285][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.844570][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.873434][ T52] Bluetooth: hci7: command tx timeout [ 270.882602][T11238] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 270.903839][T11359] batadv_slave_1: left promiscuous mode [ 270.983048][T11238] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 271.034024][ T52] Bluetooth: hci8: command tx timeout [ 271.148739][T11368] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 271.157241][T11368] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 271.166280][T11368] tipc: Resetting bearer [ 271.403225][T11238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.445787][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 271.487637][T11238] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.605500][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.612792][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.660957][ T52] Bluetooth: hci6: command tx timeout [ 271.678511][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.685698][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.697824][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1374'. [ 271.712971][T11232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.734535][T11232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.787048][T11232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.813795][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 271.828266][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.837342][T11232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.911977][T11397] netlink: 'syz.7.1376': attribute type 1 has an invalid length. [ 271.941192][T11397] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1376'. [ 271.974877][T11397] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1376'. [ 272.126907][T11232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.168025][T11232] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.187937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.195177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.235095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.242311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.492100][T11238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.512279][T11198] veth0_vlan: entered promiscuous mode [ 272.553662][T11198] veth1_vlan: entered promiscuous mode [ 272.653752][T11198] veth0_macvtap: entered promiscuous mode [ 272.674349][T11198] veth1_macvtap: entered promiscuous mode [ 272.744482][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.762270][T11428] netlink: 'syz.7.1378': attribute type 1 has an invalid length. [ 272.767145][T11232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.796567][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.873536][T11428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.936124][T11431] bond1: (slave veth3): Enslaving as an active interface with a down link [ 272.945195][ T52] Bluetooth: hci7: command tx timeout [ 272.955755][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.976549][T11433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.984905][T11433] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 273.054825][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.076450][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.099738][ T52] Bluetooth: hci8: command tx timeout [ 273.127188][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.296846][T11439] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1379'. [ 273.343551][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.380514][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.487993][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.509364][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.524168][T11232] veth0_vlan: entered promiscuous mode [ 273.553876][T11238] veth0_vlan: entered promiscuous mode [ 273.615056][T11238] veth1_vlan: entered promiscuous mode [ 273.645135][T11232] veth1_vlan: entered promiscuous mode [ 273.740111][ T52] Bluetooth: hci6: command tx timeout [ 273.775412][T11449] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 273.793485][T11238] veth0_macvtap: entered promiscuous mode [ 273.853012][T11238] veth1_macvtap: entered promiscuous mode [ 273.916651][T11232] veth0_macvtap: entered promiscuous mode [ 273.932082][T11232] veth1_macvtap: entered promiscuous mode [ 274.005559][T11458] siw: device registration error -23 [ 274.277019][T11238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.298789][T11238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.706940][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.836110][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.865884][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.876353][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 274.887284][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.898605][T11232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.962775][T11232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.983142][T11470] netlink: 666 bytes leftover after parsing attributes in process `syz.7.1385'. [ 275.018805][ T3514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.030533][ T52] Bluetooth: hci7: command tx timeout [ 275.043817][ T3514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.080027][ T3514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.121716][ T3514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.157658][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.168583][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.180493][ T52] Bluetooth: hci8: command tx timeout [ 275.245719][T11480] 8021q: VLANs not supported on syzkaller1 [ 275.264247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.273502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.314161][T11478] syzkaller0: create flow: hash 2567398027 index 1 [ 275.352830][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.373080][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.405942][T11477] syz_tun: entered promiscuous mode [ 275.478433][T11472] syzkaller0: delete flow: hash 2567398027 index 1 [ 277.023695][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.046369][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.207645][T11494] syzkaller1: entered promiscuous mode [ 277.216487][T11494] syzkaller1: entered allmulticast mode [ 277.382582][ T12] ip6gretap1: left promiscuous mode [ 277.422227][T11509] block nbd0: server does not support multiple connections per device. [ 277.433722][T11509] block nbd0: shutting down sockets [ 277.466112][T11518] net_ratelimit: 5 callbacks suppressed [ 277.466144][T11518] openvswitch: netlink: Duplicate key (type 32). [ 277.466160][T11517] wg1 speed is unknown, defaulting to 1000 [ 277.616660][ T24] IPVS: starting estimator thread 0... [ 277.722649][T11525] IPVS: using max 28 ests per chain, 67200 per kthread [ 277.967333][T11531] wg1 speed is unknown, defaulting to 1000 [ 278.198651][T11536] wg1 speed is unknown, defaulting to 1000 [ 278.215742][T11537] tipc: Started in network mode [ 278.226905][T11537] tipc: Node identity ac1414aa, cluster identity 4711 [ 278.238898][T11537] tipc: Enabled bearer , priority 10 [ 278.465990][T11544] netlink: 'syz.4.1402': attribute type 4 has an invalid length. [ 278.518637][T11544] netlink: 'syz.4.1402': attribute type 4 has an invalid length. [ 278.593765][T11544] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 279.078044][T11556] netlink: 'syz.7.1407': attribute type 19 has an invalid length. [ 279.111785][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1407'. [ 279.135225][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1407'. [ 279.154989][T11559] netlink: 'syz.3.1408': attribute type 9 has an invalid length. [ 279.170776][T11559] netlink: 'syz.3.1408': attribute type 6 has an invalid length. [ 279.181836][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.201793][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.230739][ T3014] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.245323][ T3014] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.333826][T11562] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 279.350052][ T5945] tipc: Node number set to 2886997162 [ 279.542324][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 279.611904][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1414'. [ 279.694712][T11580] netlink: 'syz.7.1413': attribute type 16 has an invalid length. [ 279.709334][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1413'. [ 279.859328][T11583] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 279.946522][T11595] netlink: 'syz.9.1419': attribute type 1 has an invalid length. [ 279.955711][T11595] netlink: 184 bytes leftover after parsing attributes in process `syz.9.1419'. [ 280.052432][T11599] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 280.071102][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 280.116895][T11598] netlink: 'syz.7.1421': attribute type 13 has an invalid length. [ 280.126472][T11598] netlink: 'syz.7.1421': attribute type 17 has an invalid length. [ 280.216848][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.428919][T11615] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1423'. [ 280.474843][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1425'. [ 280.623191][T11624] wg1 speed is unknown, defaulting to 1000 [ 280.962532][T11636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.941238][T11670] syzkaller0: entered promiscuous mode [ 281.946777][T11670] syzkaller0: entered allmulticast mode [ 281.961478][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1433'. [ 282.181711][T11685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1437'. [ 282.202825][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 282.231240][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1437'. [ 282.242815][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1437'. [ 282.356219][T11688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.397455][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1439'. [ 283.913468][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 283.987987][T11688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.084036][T11688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.205076][T11688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.350540][T11716] wg1 speed is unknown, defaulting to 1000 [ 284.561413][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.627910][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.659285][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.678161][T11734] RDS: rds_bind could not find a transport for ::ffff:172.30.1.10, load rds_tcp or rds_rdma? [ 284.698811][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.811084][T11742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.996997][T11748] __nla_validate_parse: 2 callbacks suppressed [ 284.997016][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 285.034876][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1455'. [ 285.051475][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 285.145290][T11755] syzkaller1: left promiscuous mode [ 285.152649][T11755] syzkaller1: left allmulticast mode [ 285.176661][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 285.376169][T11768] validate_nla: 1 callbacks suppressed [ 285.376188][T11768] netlink: 'syz.4.1461': attribute type 5 has an invalid length. [ 285.424934][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1462'. [ 285.438103][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1462'. [ 285.472404][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1462'. [ 285.525545][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 286.200989][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1469'. [ 286.249120][T11798] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 286.294304][T11798] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 286.581721][T11812] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1473'. [ 286.780669][ T5844] Bluetooth: hci8: command 0x0405 tx timeout [ 287.347552][T11848] netlink: 'syz.3.1484': attribute type 7 has an invalid length. [ 287.382978][T11848] netlink: 'syz.3.1484': attribute type 8 has an invalid length. [ 289.276485][T11914] block nbd0: not configured, cannot reconfigure [ 289.366899][T11917] syzkaller0: entered promiscuous mode [ 289.391075][T11917] syzkaller0: entered allmulticast mode [ 289.539169][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 289.550894][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 289.560960][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 289.587034][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 289.600653][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 289.657376][T11923] wg1 speed is unknown, defaulting to 1000 [ 289.731108][T11929] netlink: 'syz.9.1507': attribute type 21 has an invalid length. [ 289.787400][T11933] pim6reg: entered allmulticast mode [ 289.878275][T11936] netlink: 'syz.7.1510': attribute type 13 has an invalid length. [ 289.906488][T11936] netlink: 'syz.7.1510': attribute type 17 has an invalid length. [ 289.906503][T11933] pim6reg: left allmulticast mode [ 290.016230][T11936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.197223][T11955] netlink: 'syz.9.1512': attribute type 1 has an invalid length. [ 290.273273][T11923] chnl_net:caif_netlink_parms(): no params data found [ 290.689052][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.701250][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.705101][T11982] netlink: 'syz.9.1520': attribute type 1 has an invalid length. [ 290.715622][T11923] bridge_slave_0: entered allmulticast mode [ 290.725165][T11923] bridge_slave_0: entered promiscuous mode [ 290.736208][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.745057][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.753812][T11923] bridge_slave_1: entered allmulticast mode [ 290.777782][T11983] netlink: 'syz.9.1520': attribute type 1 has an invalid length. [ 290.783017][T11923] bridge_slave_1: entered promiscuous mode [ 290.886524][T11982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.953359][T11991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.961911][T11991] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.973413][T11991] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 291.017867][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.033623][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.088449][T11923] team0: Port device team_slave_0 added [ 291.097400][T11923] team0: Port device team_slave_1 added [ 291.132868][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.140933][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.168678][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.183026][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.191009][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.217883][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.260430][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 291.389330][T11923] hsr_slave_0: entered promiscuous mode [ 291.424918][T11923] hsr_slave_1: entered promiscuous mode [ 291.437138][T11923] debugfs: 'hsr0' already exists in 'hsr' [ 291.441511][T12003] __nla_validate_parse: 12 callbacks suppressed [ 291.441530][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1523'. [ 291.444010][T11923] Cannot create hsr debugfs directory [ 291.452270][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1523'. [ 291.656428][T12014] Bluetooth: MGMT ver 1.23 [ 291.671723][ T52] Bluetooth: hci9: command tx timeout [ 291.966549][T11923] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.092807][T11923] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.199850][T11923] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.240595][T12025] wg1 speed is unknown, defaulting to 1000 [ 292.344819][T11923] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.627493][T12037] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 292.638366][T12039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1536'. [ 292.688673][T11923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.725405][T11923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.734022][T12044] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 292.755731][T11923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.793532][T11923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.041411][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.072428][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.093159][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.097765][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1535'. [ 293.100492][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.117688][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.125250][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.544457][T12062] kthread_run failed with err -4 [ 293.676512][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1543'. [ 293.742461][ T52] Bluetooth: hci9: command tx timeout [ 293.864023][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.067841][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.139243][T11923] veth0_vlan: entered promiscuous mode [ 294.166612][T11923] veth1_vlan: entered promiscuous mode [ 294.234083][T11923] veth0_macvtap: entered promiscuous mode [ 294.266552][T11923] veth1_macvtap: entered promiscuous mode [ 294.310682][T11923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.336080][T11923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.376938][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.427843][ T2984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.438734][ T2984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.490685][ T2984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.564444][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.587021][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.732316][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.742957][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.986783][T12138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.015206][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 295.086927][T12145] ip6tnl2: entered promiscuous mode [ 295.095907][T12145] ip6tnl2: entered allmulticast mode [ 295.105558][T12145] team0: Device ip6tnl2 is of different type [ 295.409024][T12161] wg1 speed is unknown, defaulting to 1000 [ 295.504136][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 295.584218][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 295.820372][ T5844] Bluetooth: hci9: command tx timeout [ 295.892634][T12170] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1565'. [ 295.900421][T12172] nbd: must specify at least one socket [ 296.046174][T12169] netlink: 'syz.7.1565': attribute type 1 has an invalid length. [ 297.917703][ T5844] Bluetooth: hci9: command 0x0419 tx timeout [ 299.987978][ T52] Bluetooth: hci9: command 0x0419 tx timeout [ 300.469243][T12172] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 302.476175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 303.727688][T12172] bond1 (unregistering): Released all slaves [ 316.107486][T12169] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 317.217517][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.919370][T12176] wg1 speed is unknown, defaulting to 1000 [ 341.657021][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 341.739425][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 341.938464][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 342.578847][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 343.368945][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.226972][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.576183][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.726239][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.297785][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.639235][ T5848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 346.846858][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.987517][ T5848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 347.267765][ T5848] Bluetooth: hci10: command tx timeout [ 347.537915][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.913682][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 348.217026][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 348.398355][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.057256][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 349.108777][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.348622][ T5848] Bluetooth: hci10: command tx timeout [ 349.697444][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 350.718145][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 351.458790][ T52] Bluetooth: hci5: command tx timeout [ 351.467931][ T5840] Bluetooth: hci10: command tx timeout [ 351.857983][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 353.443960][ T52] Bluetooth: hci11: command tx timeout [ 353.528745][ T52] Bluetooth: hci10: command tx timeout [ 353.549401][ T5848] Bluetooth: hci5: command tx timeout [ 353.878238][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.027447][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.187890][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.708155][ T5848] Bluetooth: hci12: command tx timeout [ 354.958298][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.137196][ T5848] Bluetooth: hci4: command 0x0401 tx timeout [ 355.178726][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 355.386845][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.527958][ T5848] Bluetooth: hci11: command tx timeout [ 355.686317][ T5161] Bluetooth: hci5: command tx timeout [ 356.798105][ T5161] Bluetooth: hci12: command tx timeout [ 357.597857][ T5840] Bluetooth: hci11: command tx timeout [ 357.778111][ T5840] Bluetooth: hci5: command tx timeout [ 358.718166][ T5840] Bluetooth: hci7: command tx timeout [ 358.869257][ T5840] Bluetooth: hci12: command tx timeout [ 359.677749][ T5840] Bluetooth: hci11: command tx timeout [ 360.808927][ T5840] Bluetooth: hci7: command tx timeout [ 360.947504][ T5840] Bluetooth: hci12: command tx timeout [ 362.878260][ T5840] Bluetooth: hci7: command tx timeout [ 364.958435][ T5840] Bluetooth: hci7: command tx timeout [ 368.994211][T12200] wg1 speed is unknown, defaulting to 1000 [ 371.218210][T12202] wg1 speed is unknown, defaulting to 1000 [ 373.516696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.907461][T12198] wg1 speed is unknown, defaulting to 1000 [ 377.206729][T12204] wg1 speed is unknown, defaulting to 1000 [ 378.643807][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.656924][T12196] wg1 speed is unknown, defaulting to 1000 [ 390.947126][ T5161] Bluetooth: hci6: command 0x0406 tx timeout [ 400.828411][ T5161] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 400.918302][ T5161] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 401.177079][ T5161] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 401.857877][ T5161] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 402.177857][ T5161] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 402.457848][ T31] INFO: task kworker/u8:6:2961 blocked for more than 143 seconds. [ 402.728007][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.296828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.567918][ T31] task:kworker/u8:6 state:D stack:23560 pid:2961 tgid:2961 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 403.868503][ T31] Workqueue: netns cleanup_net [ 404.038179][ T31] Call Trace: [ 404.277238][ T31] [ 404.478947][ T31] __schedule+0x1798/0x4cc0 [ 404.667910][ T5844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 404.717765][ T31] ? __lock_acquire+0xab9/0xd20 [ 404.799039][ T31] ? __lock_acquire+0xab9/0xd20 [ 404.918560][ T31] ? __pfx___schedule+0x10/0x10 [ 405.108836][ T5844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 405.198756][T12213] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.257791][ T31] ? schedule+0x91/0x360 [ 405.276510][ T5844] Bluetooth: hci9: command tx timeout [ 405.299269][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 405.608022][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 405.608063][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.608086][T12213] Call Trace: [ 405.608101][T12213] [ 405.608115][T12213] dump_stack_lvl+0x189/0x250 [ 405.608146][T12213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.608170][T12213] ? __pfx__printk+0x10/0x10 [ 405.608199][T12213] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.608224][T12213] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.608252][T12213] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 405.608280][T12213] warn_alloc+0x214/0x310 [ 405.608313][T12213] ? __pfx_warn_alloc+0x10/0x10 [ 405.608349][T12213] ? __get_vm_area_node+0x28f/0x300 [ 405.608374][T12213] ? kcov_ioctl+0x55/0x640 [ 405.608407][T12213] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 405.608465][T12213] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.608498][T12213] ? __pfx_kcov_ioctl+0x10/0x10 [ 405.608527][T12213] vmalloc_user_noprof+0xad/0xf0 [ 405.608553][T12213] ? kcov_ioctl+0x55/0x640 [ 405.608581][T12213] kcov_ioctl+0x55/0x640 [ 405.608610][T12213] ? bpf_lsm_file_ioctl+0x9/0x20 [ 405.608630][T12213] ? __pfx_kcov_ioctl+0x10/0x10 [ 405.608659][T12213] __se_sys_ioctl+0xfc/0x170 [ 405.608687][T12213] do_syscall_64+0xfa/0x3b0 [ 405.608705][T12213] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.608734][T12213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.608753][T12213] ? clear_bhb_loop+0x60/0xb0 [ 405.608778][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.608796][T12213] RIP: 0033:0x7f722a78eacb [ 405.608817][T12213] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 405.608834][T12213] RSP: 002b:00007fff994476b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.608855][T12213] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f722a78eacb [ 405.608869][T12213] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 405.608882][T12213] RBP: 00007f722a9e5f40 R08: 00000000000000da R09: 0000000000000000 [ 405.608895][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.609005][T12213] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 405.609038][T12213] [ 405.609054][T12213] Mem-Info: [ 405.977881][ T31] schedule+0x165/0x360 [ 406.077523][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.169135][ T31] __mutex_lock+0x7e6/0x1350 [ 406.188217][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 406.317431][ T52] Bluetooth: hci8: command 0x0405 tx timeout [ 406.457149][ T5844] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 406.686478][ T31] ? __mutex_lock+0x5bb/0x1350 [ 407.007805][T12213] active_anon:7498 inactive_anon:0 isolated_anon:0 [ 407.007805][T12213] active_file:3398 inactive_file:40006 isolated_file:0 [ 407.007805][T12213] unevictable:768 dirty:2 writeback:0 [ 407.007805][T12213] slab_reclaimable:12715 slab_unreclaimable:194921 [ 407.007805][T12213] mapped:81007 shmem:1356 pagetables:1450 [ 407.007805][T12213] sec_pagetables:0 bounce:0 [ 407.007805][T12213] kernel_misc_reclaimable:0 [ 407.007805][T12213] free:1086298 free_pcp:14830 free_cma:0 [ 407.026584][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 407.224150][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 407.229221][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 407.248663][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.379028][ T5844] Bluetooth: hci9: command tx timeout [ 407.526703][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 407.676864][ T31] ? _raw_spin_unlock+0x28/0x50 [ 407.848346][ T31] rdma_dev_change_netns+0x39/0x300 [ 408.068105][ T31] rdma_dev_exit_net+0x203/0x340 [ 408.238361][ T31] ? __pfx___might_resched+0x10/0x10 [ 408.318531][T12213] Node 0 active_anon:28284kB inactive_anon:0kB active_file:13592kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:308516kB dirty:8kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15860kB pagetables:5644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.558703][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 408.697213][ T31] ? net_generic+0x1e/0x240 [ 408.967161][ T31] ? mutex_is_locked+0x17/0x50 [ 409.019078][T12213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.157428][ T31] ? rtnl_is_locked+0x15/0x20 [ 409.327342][ T31] ops_undo_list+0x49a/0x990 [ 409.428401][ T52] Bluetooth: hci9: command tx timeout [ 409.446827][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 409.687395][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 409.896846][ T31] cleanup_net+0x4d8/0x820 [ 409.907170][T12213] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.108390][T12213] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 410.186313][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 410.376690][T12213] Node 0 DMA32 free:448948kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26292kB inactive_anon:0kB active_file:13588kB inactive_file:159508kB unevictable:1536kB writepending:8kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:42592kB local_pcp:21092kB free_cma:0kB [ 410.596599][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.727263][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.937567][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.047388][T12213] lowmem_reserve[]: 0 0 0 0 0 [ 411.058149][ T31] process_scheduled_works+0xade/0x17b0 [ 411.186728][T12213] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 411.257166][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.465735][ T31] worker_thread+0x8a0/0xda0 [ 411.516596][ T52] Bluetooth: hci9: command tx timeout [ 411.628827][ T31] kthread+0x711/0x8a0 [ 411.647115][T12213] lowmem_reserve[]: 0 0 0 0 0 [ 411.707132][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.779366][T12213] Node 1 Normal free:3895744kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16288kB local_pcp:4832kB free_cma:0kB [ 411.947566][ T31] ? __pfx_kthread+0x10/0x10 [ 412.106833][T12213] lowmem_reserve[]: 0 0 0 0 0 [ 412.238414][T12213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.436846][T12213] Node 0 DMA32: 999*4kB (UME) 430*8kB (UME) 215*16kB (UME) 202*32kB (UME) 113*64kB (UME) 61*128kB (UME) 21*256kB (UME) 16*512kB (UME) 4*1024kB (ME) 5*2048kB (UM) 97*4096kB (M) = 457596kB