last executing test programs: 4m45.645599005s ago: executing program 3 (id=3948): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000140)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000580)={0x3, @null}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) ppoll(&(0x7f0000000080)=[{r0, 0x110}, {r0, 0x2010}, {r0, 0x1080}], 0x3, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x9]}, 0x8) 4m45.319419534s ago: executing program 3 (id=3950): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x0) 4m45.175849078s ago: executing program 3 (id=3953): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000280)=0xfded) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a0010006810000240012800b000100627269646765000034000280050024000100000005001600010000000a000100aa"], 0x50}}, 0x20000000) r3 = socket(0x21, 0x4, 0x1) ioctl$IMGETCOUNT(r3, 0x400261f3, &(0x7f0000000000)) 4m42.7990845s ago: executing program 3 (id=3974): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016200500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x34, r0, 0x2, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x18, 0x4, 0x9, &(0x7f0000000400)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x9, 0x10000b4, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb4, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 4m42.342446631s ago: executing program 3 (id=3977): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x2, 0x800, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x80, 0x8, 0x7fffffff, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0x2, 0x7ff, 0x2a, @mcast1, @remote, 0x20, 0x8000, 0x9, 0x683b9a1e}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0x2, 0x7ff, 0x2a, @mcast1, @remote, 0x20, 0x8000, 0x9, 0x683b9a1e}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x94, 0x3, 0xb, 0x10, @private2, @private2, 0x10, 0x7, 0xf, 0x3}}) socket$inet6_sctp(0xa, 0xe597f22e43500e33, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0xe597f22e43500e33, 0x84) r7 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r9}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000600)={r9, 0x7fffffff}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xff, 0x5, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x7, 0x5, 0x7}}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r13, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r13, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vlan1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) r17 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r19, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffe9a, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0x9, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x34, 0x1, 0x2d3b, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x34, 0x1, 0x2d3b, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0]}, 0x40) sendmsg$nl_route_sched(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r19, {0x0, 0x11}, {0xffe8, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140400a4}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf2511000000880001801400020069703665727370616e3000000000000008000300020000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=r3, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000fb26fe7272d2f62ce0511c7c43ca571400020076657468315f746f5f6261746164760014008e9f895705564b379e0200776c616e3100000000000000000052d95a7b018008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000300010000008000018014000200776c616e30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020070696d7265673000000000000000000014000200626f6e645f736c6176655f30000000001400020074756e6c300000000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="20000180140002006970366772657461703000000000000008000300010000009000018008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020067656e657665300000000000000000001400020076657468315f766972745f77696669001400020076657468315f746f5f6873720000000014000200776c616e30000000000000000000000014000200736974300000000000000000000000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0400018020000180140002007369743000000000000000000000000008000100", @ANYRES32=r19, @ANYBLOB="180001801400020067656e657665310000000000000000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="14000200697036746e6c300000000000000000001400020074756e6c30000000000000000000000008000300010000000800030002000000"], 0x278}}, 0x40040) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf2511000000880001801400020069703665727370616e3000000000000008000300020000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=r3, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000fb26fe7272d2f62ce0511c7c43ca571400020076657468315f746f5f6261746164760014008e9f895705564b379e0200776c616e3100000000000000000052d95a7b018008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000300010000008000018014000200776c616e30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020070696d7265673000000000000000000014000200626f6e645f736c6176655f30000000001400020074756e6c300000000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="20000180140002006970366772657461703000000000000008000300010000009000018008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020067656e657665300000000000000000001400020076657468315f766972745f77696669001400020076657468315f746f5f6873720000000014000200776c616e30000000000000000000000014000200736974300000000000000000000000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0400018020000180140002007369743000000000000000000000000008000100", @ANYRES32=r19, @ANYBLOB="180001801400020067656e657665310000000000000000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="14000200697036746e6c300000000000000000001400020074756e6c30000000000000000000000008000300010000000800030002000000"], 0x278}}, 0x40040) 4m41.900836424s ago: executing program 3 (id=3981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, r5, 0x1, 0x70bd2d, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x44}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5fcd79139bc898a78bda07519e88669c4f921cf6c89f17373", @ANYRES16=r7, @ANYBLOB="020025bd7000fddbdf25250000000c0005000201aaaaaaaaaaaa0a0001007770616e30000000060004004fca00000600040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) 4m41.54484325s ago: executing program 32 (id=3981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, r5, 0x1, 0x70bd2d, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x44}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5fcd79139bc898a78bda07519e88669c4f921cf6c89f17373", @ANYRES16=r7, @ANYBLOB="020025bd7000fddbdf25250000000c0005000201aaaaaaaaaaaa0a0001007770616e30000000060004004fca00000600040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) 3m49.253374567s ago: executing program 5 (id=4379): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x45) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="846ba26c298b", 0x6}], 0x1}}], 0x1, 0x4604c880) sendto$inet6(r0, &(0x7f0000000440)="ed6d", 0x2, 0x20003bc4, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)) 3m49.231949599s ago: executing program 5 (id=4380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000060000002f4900007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r5, 0x0, 0x0}, 0x10) 3m49.168771972s ago: executing program 5 (id=4381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0xc000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x1168, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xb5, 0x19, "b8cc79161cad32e30cacab0d6616af0e20192443e5cb2a872c78137833740e6873fff25bd0d017581e62591c9cd8f93db5a5ca77736464ef82e92cd1b4694b4e3ca965d4502fc3a9b6f1fa2cfac3ef73e6b4b3bcaf763e0c044c70897cd391f0e867a75cce7547b4956b308dca31d6ee8156ea4b9060413b4f423934165ec43c97dfc91674a3b29697b37e1b4e6b2a439fd378768c51d8986c40e42f0d04857ddbad3557baf561fe958e0eb5b54837e5cd"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x70, 0x19, "d7195354d8a3ae0e7e05755f7f57b526718f0ab27dbfdbd5054658f52efd0dc359bf2970ddd4ccb1f374c0135542f9da77c495a6beb11a34cb2ee2a52d667c81cc940995743fab94a3c291777f96c82a02a2777f075272d3b47f5535a97e9cada96254ec5fa089ee76afeb0d"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1168}, 0x1, 0x0, 0x0, 0x894}, 0x80) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="23002dbd7000fbdbdf252800000006000400feff00000a0001007770616e31000000060006000200000005002b"], 0x38}}, 0x20000000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x3, [@datasec={0xb, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x3, 0x2}, {0x2, 0x100, 0x7ff}, {0x2, 0x8, 0x400}, {0x4, 0x80000000, 0x1f88}], "753706"}]}, {0x0, [0x5f]}}, &(0x7f00000000c0)=""/127, 0x5b, 0x7f, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x797, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r10}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0xc000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (async) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x1168, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xb5, 0x19, "b8cc79161cad32e30cacab0d6616af0e20192443e5cb2a872c78137833740e6873fff25bd0d017581e62591c9cd8f93db5a5ca77736464ef82e92cd1b4694b4e3ca965d4502fc3a9b6f1fa2cfac3ef73e6b4b3bcaf763e0c044c70897cd391f0e867a75cce7547b4956b308dca31d6ee8156ea4b9060413b4f423934165ec43c97dfc91674a3b29697b37e1b4e6b2a439fd378768c51d8986c40e42f0d04857ddbad3557baf561fe958e0eb5b54837e5cd"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x70, 0x19, "d7195354d8a3ae0e7e05755f7f57b526718f0ab27dbfdbd5054658f52efd0dc359bf2970ddd4ccb1f374c0135542f9da77c495a6beb11a34cb2ee2a52d667c81cc940995743fab94a3c291777f96c82a02a2777f075272d3b47f5535a97e9cada96254ec5fa089ee76afeb0d"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1168}, 0x1, 0x0, 0x0, 0x894}, 0x80) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="23002dbd7000fbdbdf252800000006000400feff00000a0001007770616e31000000060006000200000005002b"], 0x38}}, 0x20000000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x3, [@datasec={0xb, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x3, 0x2}, {0x2, 0x100, 0x7ff}, {0x2, 0x8, 0x400}, {0x4, 0x80000000, 0x1f88}], "753706"}]}, {0x0, [0x5f]}}, &(0x7f00000000c0)=""/127, 0x5b, 0x7f, 0x1, 0x7}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x797, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r10}, 0x94) (async) 3m48.910859924s ago: executing program 5 (id=4383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f"], 0xb0}}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'virt_wifi0\x00', 'geneve1\x00', {}, {}, 0x3a, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000001200010021bd5000ffdbdf25180000000c003700000000000000000008004300", @ANYRES32=0x0, @ANYBLOB="1affbd3ebace33abd7958e8cf123df70e59cf02f0342b65c7fbdba03"], 0x28}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000002e00090027bd709d000000000400000058da07cdf10122088cc4c4957e08c6e7c37ce01bff26e8723a122c7dbe8d56bf2cbd6dd427110cd45a8a17104dc961b82f5a8211d264f2a02cb9c2bc44f7d451a11dbe4374663568284f92badc3a1ebd5963f5c1df63232d0767ffd4fbccab56a1e58232cfebfc06ffd6d5f5b500801036c608167e44c8276b2bdc823b4bc4d93dd62f53118ade8048d5e7"], 0x6c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) (async) socket(0x11, 0xa, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}, 0x36) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000680)=""/105) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 3m46.633248925s ago: executing program 5 (id=4393): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_emit_ethernet(0x5e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private0, @mcast2, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x3, 0xffffffff}]}}}}}}}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x400007) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='@\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x20000, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206001100ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 3m46.387663964s ago: executing program 5 (id=4400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}}, 0x24000840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000038c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7c}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000400)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xe0801020}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x30b, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) syz_emit_ethernet(0xca, &(0x7f0000001dc0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x5, "df6116"}, {0x5, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}, @end, @cipso={0x86, 0x33, 0x0, [{0x2, 0xe, "e16ef60f68c35d463511ccdb"}, {0x6, 0xe, "bc76652e8db847a0677b6199"}, {0x1, 0x11, "504cf7fd22ac597b8b72b483084633"}]}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x4, [{@multicast2, 0x3e2a9f08}, {@multicast1, 0x4}, {@loopback, 0x1ff}]}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000001080)) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/mnt\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 3m31.306516053s ago: executing program 33 (id=4400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}}, 0x24000840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000038c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7c}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000400)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xe0801020}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x30b, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) syz_emit_ethernet(0xca, &(0x7f0000001dc0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x5, "df6116"}, {0x5, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}, @end, @cipso={0x86, 0x33, 0x0, [{0x2, 0xe, "e16ef60f68c35d463511ccdb"}, {0x6, 0xe, "bc76652e8db847a0677b6199"}, {0x1, 0x11, "504cf7fd22ac597b8b72b483084633"}]}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x4, [{@multicast2, 0x3e2a9f08}, {@multicast1, 0x4}, {@loopback, 0x1ff}]}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000001080)) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/mnt\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1m9.172164247s ago: executing program 4 (id=5709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@getroute={0x14, 0x1a, 0x911, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9924}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x9, &(0x7f0000000400)=""/9, 0x41000, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9924}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x9, &(0x7f0000000400)=""/9, 0x41000, 0x4}, 0x94) write$tun(r2, &(0x7f0000000500)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@icmp={{0x12, 0x4, 0x2, 0x8, 0x50, 0x67, 0x0, 0x71, 0x1, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x20, 0xca, 0x0, 0x7, [0x5, 0x4, 0xfffffffc, 0x6, 0x2, 0x4, 0xff]}, @ssrr={0x89, 0x13, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101, @remote]}]}}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}, 0x5e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a080001002800001e"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m8.815546106s ago: executing program 4 (id=5716): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xf9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfa, &(0x7f0000000580)=""/250, 0x41000, 0x1a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) 1m8.589187677s ago: executing program 4 (id=5719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x4, 0x4, 0xfca2}) sendfile(r1, r0, 0x0, 0xf03a0005) 1m8.552023663s ago: executing program 1 (id=5721): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac4003f7639fd518b2e544c9dc4f50000060a0b0400000000000000000200000098000480240001800b00be00736f636b657400001400028008000240000000030800014000000001700001800b00010074617267657400006000028045000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f0000000a000100484d41524b00005252000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) (async) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={r3, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x1, 0xff, 0xc, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012804280ed001362d1100b8c0500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 1m8.530783441s ago: executing program 0 (id=5722): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180), 0x4) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) close(r2) (async, rerun: 32) write(r0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async, rerun: 64) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async, rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x80000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0xd, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 1m8.320789701s ago: executing program 0 (id=5725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @union={0x9, 0x6, 0x0, 0x5, 0x1, 0x7, [{0x7, 0x3, 0x5}, {0x8, 0x3, 0x6b81}, {0x8, 0x1, 0x8f}, {0x4, 0x0, 0x37c}, {0xd, 0x2, 0x1000}, {0xd, 0x2, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0x1}, 0x28) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1m8.309732671s ago: executing program 1 (id=5726): r0 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x3, 'fo\x00', 0x1, 0x3, 0x72}, 0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f0000000080)=@generic={0x6, "fe61c12448283798f5988f2ba06774d8720ee9c5b3c5f58de5b8da128a451b47c2e15b026c31cd32959e5096e7d4bbb5bf2d72cf0c07f500750742179fa6979e09f4df98723168a6aae20a29b76ee54a76380fc2b06ea9f18fb50c11ddc7a20683890b082d3c6497c8effd7c56911322b0174f6347bc30178283804673b0"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="e9eff71ff1fb93d5085a92246a2816f9eba474fec55fc9ebb6b92b5ca89a0deda7dc97f076494715f2fb581e989fa7dbda0347d0af59365084b06b142cf2568df39a75df1b0e571e3f94e08ee446ab2ed67395ef73b6109883e94a6981b1be80135c550af85bc72aff6f9e25f77e7bf651e89aae2d0e", 0x76}, {&(0x7f0000000180)="d00bf2709348f037673e48bfd502741e420ad163f4e6c45958a68fb4f1afabcb3bd92e81eb6e61c7f0913d371b92ca31ef49a7a364f0d832b8b40dbae6d5e5e2646915d12d6af85b1f3e7038888cce7c2af3cf2ba2ad66388c2b9673093bffc732cf471dbcd279fff624c6b58de0aba446323a29ed0f3020b9b0da9e39818547fd7a355864a556003332948d223c846fa63a542bc83886c2ce3da69cf9a09ce0802678b5f461a2303aeb547555d8db8b47767044e4ee91db8ebcada465488e6d79e4ab6c68690af0a2886ccc20b421ad779cc0", 0xd3}, {&(0x7f0000000280)="8c51cdcaf580a2ef0fc430c555e35aa23f188f1ee89a74a94b7231d85305c8cca449935cd63f0f7b3185092a4defd493b2bfd86940202736b33fad164f8d1b61a13a8e348a80d078cefd7c575700f6e95699a407a6f1f28979e8ff358876576ff291ab44bfebcc48ce710c29a56d85f754fcd611b17faf47576216d5092d3c39a35dd0d29a8a307e1c3d1b33a5ce8d64d2af60c3c48b0c9867a02fa6a8b92ca5972cc5ebb2ab6d68f236e96179fd0a49119c5187e3703c8a186d1bb930f586d774620828320a94655323153ed95d1fa7d1f8f337e4517e03c9534e6570eeee0424539ee4dce32b61e9b953e97cf4cdf0f7be17f353759362c4e4ff8d065b84b8cd52add2a0ee50a0fb955db26bfc595c5b7b49ecbcf11477f76957552f7dfa548ee38d8ee348646060059e8e80ed13b57481e183d31f86256e2ddd27c2ed96b06db606a9189a5677ba63aac24241e3a9543bb06d5099d7efb863de0a3c9dab25c0c92e937a5c028b0c633368b73934d8824fe7b63d1ab3f6473e10312123e87c483d96843ebffe591b286e08459c762d700b9b19916f8ca59d5e48ed9699b452be2b56f078b53bb763a3795d2794288e6d87be0222cd3e3899e17f9005ddeee37bc9505e42ca45216c7cd7318a5e5f7e3293a17961bb9663e27d16e56a7c0a86e05d2489aaed8c7ecbfc2395832cc167031a7765996ac3d7052feb8e126a03fd10b06ff2918df719aac25f34e66b00dbb80084415fc32bd410a1d0b1de3334df1e29b9ef88b591b057788fcf0a23df9c84c9cee204392140eca77b0fd265dba490033d8e2839671592e71189942b56a1a0103f7375394e782532006a0228b370fb2206a5edf289e7b4e92833ee973feb3e50e8172eef064efe3e3b866e8006d82116acbdf54d96e47c50685d21f5b79a3b21a6d7a566f6b198c83ebd9661fe1768fe3f269962e85ba21ab69fee8d830beb6232fce26b3eb5a063d901d37f031b1f18cc7deeef160da9a60b24fe8ad442df51db01def1119c848252e05ec79703dc02663b03923ab3a1fdb0bcb4f7e0dd354121e815b686f41efba2cc4fafd25894c806291007d2b60def91648b1cb3159961385262cd170f86c57b8f296c42753ec129b74bf4297ef726e0a90ffeda05d812619e4007b95b03a6dd00bef82803f022adabc62f9a0af93f90f803a055d263a8f69104bc9c2cfa927518e419e323f34ee2df62c5d9490d83e56b665c840eec440ec297026a81510b3e58b1e8ebcececcdfcc60935066539cccbc7481357b5a039a80dc7c72041259782b4bb7a6245042cabf71fbddb115428b81fe790b5352186b8fbf7152a0be8125f33c9ab344d519f6ad59e4f64b18d4cb903b0757866a06cf0998a1e55d4bbad72c48e6061d8076d61ac1dd4b2dc4f28a987dd5f4080e781cf8aa9037d711e9eb475669499e088b319a9d516eea979858ca60773d3fe052cb29f74f3f6c978d8096427a002fdfeac07a1ca7ef838b5df606ee89eb7408df3b8a72e2580bfb0e0b4a251985ba63fc9b0b8bcd858458273c612d7f602b1e688747168907a03ae4cda362079d6583d29a881efbd546ee59c65b83e5f49c24788f42a28d99eaebde35c39e9b3ba338a533977829b2c1f9e1db497c90856f979daee30581d33c0dcfab9f215026c67e9791c2b9449205ec23e30d56a159463590b63ff8c07403e316ad8daab2ea077558be598148590689e7b4138a7c85f195bd30249c5f33f48a545a3a1142e0799d17c3c4562e8661adb318f8220081413e274e7b80b78fe3f503b021fa7cec5d074d9eb55a92ebdaf2c889d9d4d97434013b881305dc060f4d709a2c4964925c58accfb9180e5ce912a2b17e2016bde081baec9e6c2e447405de3e55cd868cc7776e1a3e1dac95f909accac04106f7bbfb85e4b1c212c1a47ffaf38b10ffd8f4f42492984ee9401590cc4959bf161d37c7bb25fc55360b5b0b6ae9f0c8c55a325e4d2fdb37cc0c9110cb8744c179a014b59944749f3185b668d7e19942a494759245487413a08ccc7b9ec8af3f7722896f7429967e55718c97623bc7263ac54c94176f1905d20a8286c88113e92fc0d64b841b565bebcaaa12c83f66fc754b54bd748990b8edc587915710cfbb47bd3b7c3798a041c93399bb26de63b0c825d28408e6bf775e69a4268085af9a06cf3f7673dd5e27ad33aa5b17bbc573871e494ef7e8e1f8fc281fe31901d534a1eafd6327b6675bfe6ba7a4eacffa6527343d5658d5ad7cb75c09669076bc2ac28e9b409367c5ce5484a7e2f4f421298ba5ff472d1f820231fc593cd8c453034e3fb946bf4d8ae78e56d7a210628bd3c046fc21883642a445b997b90271d879b43a631199d8a2bd8fd708a01c16ad5e4734041051a5cf4124b6dddda4380f19a2cfb2dd198c5ffe1a41c6b149412ab7dddca65c09fd4891549c60e55ebebfad1ad6e9c5245a12a69fbdf660bb8c20ae25d2f87c7f1c937f0eadc38ced11bbf681e5e3f16b578e128b29d3563df6321fe10d3bd30efa52e5d3ce20bc9e333505090f5a623a48df80ec614cbad30e3061850d449735cc5fa781b4bd91102a4542f879b3067e1c85412bf1b2743e531217151a881527ec0d96e260195abce3f1fae6687264a4d455650b9b510d16b17038161f96e9de49c158ba2f766f6bcdc9fb9dbfa63acf41255e094049c9d6050db896ab9766167966984477687a548f83a291a0c7b70d27a271e8b9bf75f7583e5e067bb1d22cd7f54e5388e0b56bdc58b45502308af40268e103c836d7d130490ff296c3d66fb2db483e30d193fba30141d414a4628206537e9cb0a8cbcf4f8685084d3436f4ff91deb331cdc1e8004e9a4f398792c0f4bbc404c4169a6d87545f8bf777283ae06b2f9e58a5711eed36a9426b7db0fca479a7575f6682f8665a6fca56a472d1534eb28a6ee7153ce7f85f215b59c9b28b284b712bc685d17727bb8e4c3728900fd47207b28309840d0f59d45097c0adc72dd7c97b1c3f392094ba20b9ed7b4b644cb3ceb0c1d292c54c7608559509c63d716f8c658b8e2a31405119e70e9d23b13a2187292462caac39afa2940ebf1d7dd46403eb1b53494ef4aad7cef61f8cbba359cdf1204febb48201eda1bb4539f2a64ad3fb6ad4a98c06e35954495ea976059ade5c050e9c2534974eacdd8324fa9a699e16d2e1f68776c188d1352c98c4aa98383369aa3ca7c83abf6b5ece0f96bd21b5bbd1ead8965e95ce5449d9379036e07be1a2bad37da1f62f3dd591b599de8570650aeeb349a41386e8c787ad4535ce43b745c541b8147445b31bc9cce4faed7080cfa3a15c951d321ad7d9e5450a37f934b7b4978c6ea8a1713ea37f1f215f9cda09c100b62cf1671023a6baffad01a6ea38bb736e259ec97a1b28c42be438141b6a94e1c327d1844dedcad626e4f22349f79cb9707439cacdee8cb9a9f36513399d62b5ddc34eca2baa35ab2b14b6c51c46d8373b49db134a339bf4e121aef41ffe37015bed9920838a9a8efb4b617a4a6bd6a27287a4a3ff8f189fcfd50fda2726db13aaddcb42e612f3fc8a92dee1079026707a2a07614f8843533a369252f7a961027b06ceb6713d8ba504e511a996703cc6304ab397ffde3edba07239a9b1b973eb1c8c948df213444491e21cb541f80591b48b78272a4a498d00c3d27eeb821514c83d1cc17aea10c85ec2ae1e3d42b7a3eff6e557baac97cda00a0efb0fcf253cebebf9a0189a7883ea4ec0b8414c28ae37606e5ce4c0204a34a704610c6d3122cdddf0f46deced7c12de6ea6fc30a77cd923482ddd16a055ff71551ee9cec813e02c028601f57e9b8e1cfa189643226fc537989e61eb58fdd902de31e15c7ff8cbf56a9401c57eff4095ef5eb6f291fd4ed2f5efb68c51d7006ad7c605d89608e2c3a08bb19db3cad9f15c38fe89f0874d597f5f50a52f71d1ef95c9fd5bda75652501d6586f15fef794048372479415857cf37072b6777d4c4fb90d146a1ac9cd14a308e05d88b5e13a5096aec055981fb3db406a76383fdefa81338823ef8d087613495d57e30e3898fc06e796bfbddc03fd872048f9a6867f7869f0281a4d0284c539a193e428048085f09ecaa3a3dee21a3675aa50126170bf25c22fff72524ae657236c6e658002ebbba6d1aee9364223a31036b8d277ff4eef75a0d20411f7556304b6fbe660366b8ad69e65548189cd73c4a4759dbdeeb8d4225744d99cb69ea9c208a658aadaa8c86a9dd0ee1d69bfe4b02989aae478a90bc94bd35424205642dd816377bcf28d20bea191067c1c8e6e793e575dbd3f0496d5613fce4b9b23ab0a86505a8587b4b210d59216bf40384b09f363f71fa5882482a949f0021e9d76fa0d4572c8aec90378eb0d8c5071b7a397f8fd588bf01577bc8ad4ff75eaf6c1535e73c3d1bddc89c4ae9469b810d863d2a1ab1d44caebf3af48993ac3abba6ec5aceefe8c98280eda2cef4b98b51bc418e06f859a3d2937a912b5bf2f726f0d4abaeee1f57e26011ec8c1b4fdcb7211a26df96e285380d73ebce5762652049d8e21ff1794251e8c312d44c1fbf74f100f9c849bf06e327a5afcdb51407a29e50e3d285fec7da6f9214a067b390b128369e252db00af3bb5359bbf9ecb0d5e2dd09ea59b88531fa63c70c7ad786d4d33587dd762e9121077ee86b572327ea29063f8dae579b7589bd9f8d00405e43a85966283295d63b9960f90cd5e0c29d53a1188f3a38c0f043f1613a697c2f80e54034ce545dc9f74cfdb0ef3ef50f1fc69404bc3d649e7281401ad112158f54a466683cf44b26687d9e49f23f98eb9e730d3e8a0a2b1484e5d3b445e1eb7b71b2c253c2a3a4e45a53d79f4f6bc5f3bbdfb22a19550bfead4d7f8feabd4730ab3da8482f9cddc76b1ae240d56ca2b1115d068857b32072459686efd79c27a23da25e688c886960d8f0eb44c7b4646c031f0a3f4c4881c765fd044fe9fb9335bb19e905e4f89d0aba3692921bc58c51f6236f0d847d2ddeb6be286e484f5e0efb16f6489701c9bd74295460e74d8a4cdd052ea54633798559de61654db36fb00f26634d89597d4328c7af31dd16dbba48dfd8d3cba2e04052b2433e07eebc7cb0d85639b32d81c361bce8aea67cbb7193aebd566c4a2386ac033706d146f0cde5f76a798a880164e7dfe75417b5dbd7ca054cdb6de54cc671997ae77b5e23ac705f12437dfc0483a6dd0078434613d542d163a6aaef3e818481d288681462d16df55f41ff92041d5629061ccfd21bf69cc0639f745ca8bb800755db9760edb0375e77114a2bffcf21809b107383d6e3491a0d1d487541fbf1b693ba39713fb61854ad113795fc645ae08e3fabecf2ca369fb587f3f4508f7acc232ebd6ba24383104a3e94670255ec3a99e6c5baa48e58d409064a10541b96374c28ad06fd0f3dee0ee6ff054a6cbd0f7e3f1a51cb124e600a35c3882157a2cadc4f9990a78cd28f7dfe017bade3fba61bff27e4af926f9de240837bb2b3bdc573f5197df38054d9368adc8aeb448e1aeb926df47eeae6ec36e817e22386ee957f746468142f80137b651e03bb786fe28277cd5c20c0f01177918db6cd04d7983e3ae1cf7594ca9316320b08b925de7242b1b76d138297f20a1b7f642086ae9633d73ee561609b0328a083cf8301291e41480b305c8c23448cf11b754084b50534e1026eff48a60b7ddfb0fd59ac4fc955e315ff64fb95da8eb666439499b1da6068ece31d9e07ded7e514c1bbcb9a5d1d088b501cb3908998a1e", 0x1000}], 0x3}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 1m8.083272539s ago: executing program 1 (id=5727): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r4], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0x25) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r2}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r4], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0x25) (async) 1m8.078586149s ago: executing program 2 (id=5728): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd, 0x10010, 0xffffffffffffffff, 0x7a432000) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101, 0x2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001d90000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) 1m8.066284264s ago: executing program 4 (id=5729): unshare(0x26020680) unshare(0x4000d00) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-ce\x00'}, 0x58) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d00fe31cdc8d18f7bfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096f964f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x6, 0xfffa}, @timestamp, @window={0x3, 0x91ec, 0xdbb}, @mss={0x2, 0x2}, @timestamp], 0x6) socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xf}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x6c, 0x2, [@TCA_CGROUP_EMATCHES={0x68, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x7fff, 0x9, 0xf}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x72ad}, {0x1, 0x3, 0x1, "e8fcc9"}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}]}}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x40810) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@empty, @empty, 0x14, 0x11}}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18e2ff0000050000080000000900000085000000110000009500000000000000", @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) 1m7.996951286s ago: executing program 0 (id=5730): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x80, 0x80, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0x5c}}, 0x0) (async) write$tun(r3, &(0x7f00000041c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff02000000000000000000000000000187"], 0xfce) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r2], 0x30}}, 0x40000) 1m7.934162598s ago: executing program 1 (id=5731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd20"], 0xffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000000000)="c1188e99007d02ff4284860186dddbf379e572db1dff47e050d9f76ad7f9a2464c886566e8029514", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1m7.861352857s ago: executing program 2 (id=5732): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0b, &(0x7f0000000480)=[{}], 0x1}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "cd6ebca9896460bc", "4e99720b911eeef30ee59da1a7f73167", "08807f00", "995a7a62d920b62a"}, 0x28) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) 1m7.616173028s ago: executing program 2 (id=5733): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x9}) r2 = epoll_create(0x242d) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet(r3, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c61ff9e8f34000000000000000000000007000000860cffffffff0204be9007"], 0x20}}], 0x1, 0x20008080) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x18}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x9}) (async) epoll_create(0x242d) (async) socket$igmp(0x2, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmmsg$inet(r3, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c61ff9e8f34000000000000000000000007000000860cffffffff0204be9007"], 0x20}}], 0x1, 0x20008080) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x18}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0xc) (async) 1m7.113356105s ago: executing program 2 (id=5734): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x22020600) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x112, 0x2, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) accept(r0, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000006c0)="11d85f821ad871be0d0c23e69238e171f2ba32a59f271a1dccd03f9150753f9edcf0c1220651b8b5d279d71da8b3d3d80250a980115b8278cfc9cdfb885c52fbe1a78bf7b5eef9733174bc4feda787b7c1130d9226005755a7315c48109c88282751e972f171028b5193a333c09e74468a8bd0e1270d177338618bfe0605dbb7f6e0562bc9fe7cf3c4e6431bf35540c8ed380787e214d4d80836a01807cbd82a1493f3b7a2c92b08ffe5b40a8787148182ba2e7b9cb8da2e6da18243", 0xbc}, {&(0x7f00000008c0)="33c21eeeac32340ddfeb8439f4c15c2a5bd4812f45ec88c9eda9268d9c3f999191be90a9a2535dcc0e6223d91fa207c5cc339c3b28e5ea46cfc9c5289026e022e62d1cc3d7e4cae24fef876d9f9cfd3b2354953f30c58b4b9a6820b5b5899b3cbdf18ce472bc95e197cd0558507148044f4867d721cb4dc8e4042abb6b902219b6a137e455a228398118c95157eec6c437525c80e55fbda090bb958f585b05c8c88464936e", 0xa5}], 0x3, 0x0, 0x7) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x80, 0x3, 0x8d77, {{0x30, 0x4, 0x0, 0x10, 0xc0, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x8, [{@loopback, 0xfffffffa}, {@loopback, 0x2}, {@private=0xa010102, 0x2}, {@loopback, 0x80}]}, @lsrr={0x83, 0xf, 0x8b, [@rand_addr=0x64010102, @loopback, @rand_addr=0x64010101]}, @generic={0x82, 0x2}, @lsrr={0x83, 0x3, 0xf1}, @lsrr={0x83, 0x17, 0x28, [@rand_addr=0x64010101, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @noop, @lsrr={0x83, 0x13, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3}, @empty, @local]}, @lsrr={0x83, 0xf, 0xcb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x5d, [@multicast2, @broadcast, @broadcast, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @noop, @timestamp_addr={0x44, 0x14, 0xec, 0x1, 0x7, [{@rand_addr=0x64010102}, {@remote, 0x1}]}]}}}}}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES32], 0x98}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0xc7, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x50) (async) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) 1m7.037046799s ago: executing program 4 (id=5736): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r1, 0x0, 0xffffffff004) accept$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000041800007e0000006dfe2e5b01400000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000000000200"/28], 0x50) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x8}, 0x2) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000180)=""/202, &(0x7f0000000040)=0xca) socket$inet6_sctp(0xa, 0x1, 0x84) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) 1m6.994548352s ago: executing program 0 (id=5737): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockname(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1af, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x48885}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r2, 0x7a0c7000) epoll_pwait(r2, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) 1m6.993669432s ago: executing program 2 (id=5738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRES32, @ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000000000000000000007"], 0x28}}, 0x802) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r4, &(0x7f00000009c0)="4feff2", 0x3, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='< \x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf252e00000005002e00030000000a0001007770616e310000000c0005000201aaaaaaaaaaaa05002b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xfffff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1m6.916366997s ago: executing program 1 (id=5739): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r3 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e1"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x401}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x54, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m6.844230652s ago: executing program 0 (id=5740): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/206, &(0x7f0000000100)=0xce) r1 = accept(r0, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d4}, 0x8000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000380)={{r1}, 0x0, 0x4, @unused=[0x6, 0x401, 0x2, 0x8000000000000001], @subvolid=0xf}) (async) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001380)={'filter\x00', 0x8e, "4f466a152399c2557f02fa4ff2c7aa86dac4e961e5e4540d81ab651efe1fceb6320e7730e7544221be3d09efa1983c8db392b9805e710d30dfa0d54b55f330923dda0c71a93f398138b29e2a5a8998867612870b759a29bd00745f5378e4e01bd9e93aefffff85dc4efd642f2df67384272fcabb0e64be73267fd7e665b929f79547e724e513b88ca105b110afcc"}, &(0x7f0000001440)=0xb2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000001480), 0x4) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000014c0)=0x20000000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001900)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001540)={0x364, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60eda397}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69f28860}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee944c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f26497}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb0324b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3577fb2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37992c74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21860dfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34223943}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdefa05a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e28b05}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d516936}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4212c6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2714bcc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42662de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d62af9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24bced4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d47e82d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f78388d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bf3522c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xafa7338}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ffb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55faf88b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x131c66b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41e4e74b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79a504b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x500c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x756e0287}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b0b42b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2edd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53c44349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf17f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3503a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77849622}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ce4382b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f2f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7689}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fee0492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f202945}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dc56b18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d52d2a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8996}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8795}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453ae0cc}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x211}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x687b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659d8c2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c44486}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b56972}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a146ada}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d2e2db3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4840b07f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e5fd26}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x700e7bab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ee0b8d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27e0ba27}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222fc436}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e92fa0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6438b3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x383a9d85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa54b}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4011}, 0x48804) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r1) (async, rerun: 32) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7758b56bce"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000085) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x48}}, 0x4c000) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000003200)={&(0x7f0000001c40), 0xc, &(0x7f00000031c0)={&(0x7f0000001c80)={0x1540, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x78}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "a53a5287ea02c1a5d7ec77729025a86189bc9e169f76f0cb37159099f9eb3319568b8f65359f4c13f1e545eb24f320f3c3782770d70765923a107702a683fcc837e1d0d9d6c8dafc204a29dcc2737e6e6d335df613d1a5d4cef7d5cd1f482cb6f93a751c4837b7abc5022b95444226c18c3567fbaf1ecf47546afe91da98508b814088465352115907e824481223454d21c20c79d035ed0086bb4465f87ba58b386167a9919210fade4fc10deb4134b00d3006cbd1365a33f0fb74190132d64570734c6a98feed86e2686bb3a54eda22c8187fbfb75def54c08b2215aef37e6d28e230d58a73d8ae9953293df18790efa75be99034973505544bdf6d58777ff33a31cf58df5a1c327747bf9af5490e4e9c9eb01ee873c53f01d7e2047d30ad8f8e6ff401acb160bb7250348035d8eb6db865d1650efda5a5a247ff1506ee52c6b7484496674e601afd0837017df39737cc7c6bb83a99204b29b7dbbc3e6f64ea6f8d5d7c0ebe72ae5b1e15ffc437d9511e17128d4d0ede36e06908a75ccf5a96b7ab6956c33113722427cfbf783dc404f245e073b8f9239c948e7298bc6034db408d6f919717704ff96a69cf10b8d2fec1cefbd72e77ac9edcea00db7c5bb3aa8a512ae73c92232224b5c0ba5bc03afc717cf10742ee8bfef8619cea54029894f3cce732a042080e134f81ab53134c6c1e4aaf9ffb581f34041bf139d9e92b75264c8e00bc33eb6e1d342e1d7838027b52bcdffbc253863c3774b81289f7969b866a2b764376c8261382e716f938c42b8f85eb6f950bb12fc7a5d7d78f9f4bb9781f35d0aa4421427ca7e7473e6127f0cf8965ea008e3734d0c1031086020a3d711e0455bafc3ef738a02a6ce1e6d1eea70ea3fcf2fe8aa9c4ecb80feaf8512fdcad7d472d9a21cf1b25552c9a7cc21d0fde1c405e28c34d839c2a75437406fbe6c31fb73c93f643e7bd6a340c3bcea20e9d8482623ceb3e47cf3889173d6fcc3936ea440fe52272a1077f451ea21c3fdff24cd9060bd9778c22479b52ac4bbc3cf9c34559544792e61da9af0d9a50ba570045b7688d428fca58b47a27f99f85ce85f340310c52fe83c529dd7b0d9938a52d185f361766db69924d304f4f7e73ee9f2678fab0da69a4a3285e6063195eb30529e3d432cb89b13697950a78a6ec0dbf5b76e36dba4a83f0e2c85f208ff31562b06a67e04a758d5c143fbebd5562219ee145441cc0af7c8f5bf8599550a6db223cedc8803b40cf1aa4a79d8f765f5e9b104fae53b9fcf9f86dede7d5650a95ae128c44d23fc4161b3a5b1bec437a665374848ebe43c056ba9da768daacd278517b59515ddf1ffbc379a8a471253e2f6c199340d4eb465d5ccefcc1f18e8de44bc43852ed1b02dca9aedb147938d4eb4848100a1a7efe9e5be1bfd816b13d021d6d7c3f7df1db2158b5660f41759048c792ddced8dd3bf93428c533faf76153c95d21b7deaa2ee883a1a5382eb7248acf1554f259398a902a4ca9f0894befefe0a6696685aed2ca408d7c60f9f80d2a9b37ca25dd41dfd833e2eba957e5c437bd5e56ce02a1be667529bbb28a95b63fa3626c9d534e67a9bc798d78c139a71e019aa498cb59f82334a1e5f0f030d71006997f6391a64fc2b6319de061ba06e44a0ba55b5f8380a1d1d0fd8d338fde29ca7ebdd06514bc6cfe6278bd43dc1203cc3e7412c6f3148259cb24a972171ef17ca73656905517bf252f5b8f755fcd4dd3690c92ca7db033156bb8f512206b3b6192f2d274bd372731d64958d79648b20889a739ce68019ac9d02434df11970121d5a90f35c0d8998b8dc1a1dee4842ecd49f519b917240b31bd4002a2c730973d0d6c07da504b3668c8c047556d9716d7a81b5fccd0c5add8c59e563c4688e9b32500bdae1895ef74ef9b16b1b3500e70529f57686c0c378dad09e449dcb3492afd9062200125848f52a4c94cc33ae357039884042fb8faf6ecc8dcf6342747457a95547234fd9c4b920148094ee4dc3ae96db22e1a5885594c3b16864ec8c640c0ee1315a906718499301d1c26a440d934e69e1adba218803e203612a5feb1e5118391d3756fa3dd5125b9fa19f3412e696fb691d0243263cdcceb06d5be685d2317604cc777a9a003538e5a1cb5194eeed7c41138d352628df1359c51fc9b278c17667c8ebebc387039ffe0b189e97c7b2606ee54bc9b13343133c61d14f148608aca05007480d92e7e319130ab7c5c75605922dc2cf5e544dd39802959e05fe7b336deca6f218e979eb5077a48a6572f657dae8a39eea5daffdd8c42fc17a04d217835a366405f52e004dcaa307da74cb56e0c4feaa825358ad281704e09f9abf5f2bd8fc0e346a0dd5228e62408edaee01b0345ff3e2ac8f3fa4017797f14040f4af30df38b6845f592fb4a858525968ef1b4d30f7b9a404cbbb2d36648a246d239ed82845e910eb6e16fbac3004b89a94feacb99a445c24115ead12af9daadcd015de192db6301ad2ea50cba0873037e76e3cd6948799d90861d394680980cbe3dd9cda4d2b5da4a3412af55c9da9c9ede59911017875c1aac17ffa30690b3d1b65b0614e2cb6ec4a693936be75a54f25548b6348aec91239151fc6c0d0e4e48d4175a045ecb2e9db4d0c8dc61690621819ee06538f2b3cb7dc69f7b697b013e9a3d8723c57b677cdec11170c9619567db8f5aaf97fd9f5583cb0d426d8b13538fbe58865271e57ddf40188625b2140bc1c3833c98a8e5f61998b1d0d72eed6c8f339935742ec5dea4ae9025ead2b45c77b7ff45803972293f6faf94b083b5f8aff2d9579fcd3f09987fecb6bd4b3bcad768a67c7b4b5aebad169701097ae0de1c83e868e537470b4b63ceae64e34860fc1cb567ec279f17347c6dd2fac861169320ea3eeee2aabaadadc17920b57eaad9187ce62510d5105dd910603ada5d2d7254c934ee68ac1615c50a40d17000696386803878af975aca7c51fcc90a71b53e1cbf5fd48d3f1f7eae0616bafbe613590debad67ebbd633906cd6403ee816c9d105c9c9da92bb2ac2f5088f7e5a2082deffa2336f9ac9a42fcd502b829eb5f6ddc04da88c67cd0e6b377899ee3eb6d766ceb4d6b964e1ffd099af9e50d654bea8c32a4cb2f479afe93e1582706936a1b196d87db4f2ea26be6aaa8c637f42c911b1d40a4d31a7606e99f2c3bfc382305ffdc827dd458128b08cdf6b069412d88672989c31c28ac14943a9fefb75bfbe262832692ad2a424c63dd4ec269f393540a0f41cf311d32137f02f3f7905752cb672f65d92e2e656d80130a1c6688b8985b9ddb7834c7b780189d11abc384ad183ded6d7ab1aac200e6ef041a7f3e01c644195b9c7a5dc5ffd636596fcc88e8980b8607d9721dc53db7f586aec6ba23ec27b2bd624135f176e85b963ea08c60c52f217324fac3d7caabd25718aab658643403dceea5bd532dd667bd5d0d1c41a723108ec61ae90e21e31f8597ed2cc084d0714919993403efc6e5fc62eb2ee7e9caf26b967efac4619d0e4ad328452da8a23d320242cb0c637c5774095c9fcfbceccab53d44289d42132b0db74f50c8e25e852ff463513753a38ff3a8c47503f00ba4c132a9124145c66411cddc23ea2f7b98f854578ccff0dd88c82177c66a4a5450907a415b5ca1c213b376ac890745a5bfcf331938c7e45a37d15558315f213ed81926d22075cd1719a68b8ca2a13000a5d2a5c1bdf626cf9554e863df3b1d7cab05833c9291426da93022d1e31c08824a74ea832dca72ff31153c2c71933c690dd8ce385293cb864895709ccefeb48f630fdcd110d89dd5eba3c719141adee46d7c8b86ff87cf7ed330c7cec25a5e6782e51c053967bd28f9da817e0085ce6f7ed835d6fd6d09bd2ae9eae458ccf745669015c231a6f3b22506307631731da2c6742cafdd0e09397f0f9df5bb0dabc0c6527bba140f51ba9cc9f0a3bdc634cdabf1c542834f41ed9c74000e0f5f9023af6ff0794310d5261e8c1860473f039c03734782f9f7b69b854fff15a358856894f46395b8614540ee4fafaed08e0621283ca38b2bc3cfb150e73a9785b9c74ac89c354e7f340907b6095de6878503b4263880cf030959031d58bedbf633452dbe7a37a16ea5104460a1c07a24ae8338e823a318e89a4b85094d7bc4e509efd944850c95f0d3ab6897f459f549e63ca1fddec1879311bf8cda0623061bdb5ff84009f6e84cff5e05d842fd50b75a66e46f5c573acb771fb2afa7a13ba1edad802de01a6bc773566453698976441efb18b98a8ad999fb52c6093eb1e7ce95a7207fb51aea030be571f7dc1db9366330bc4f8d6c65c836f2713f34b71c634197a617c58afa46721526e9ff602ef5f929828f46edeb3ea5ade371f2b55d8eefe241cf05b6138f5d740d0f8eab9fe460444f1dd2398c32fa74714da69fff76b2ec8c501ca0f5c37f675fa4f8acaf9b76c46b0bfa454790c4fa6e1984e681d0b7009bad7b8f0c9ff4e6e2cb3ecf8445408795bd38bc93fe0f6724f7d74e49816a5342071b3cdbe0cdf482575fa5ad240648c7f26a582c0bbdeac50e2380fb967ae7e274a2a07e7db9e055e1c269024138580afdc446887a8e6c0835fb14e06cc0ddb05859df84053e7650c7ebd412cede56bb58fb196dfe93fa9ff9c4065775f8ad5f28965c9bb136d03d6ad157c501ad79149d0a3b1972d28ab8a2bfabdf1494cab3a16b93a6cc855fec4bc0b2b7a231b1157e4d9b88674f2f400fd3e4b8fbed3e8f12a4081f923257d3eaa168e6d0ab92a8b5fbb593219897f31dad8366ac90200ba2998c4e9c83b4113a3e495cc6ab80987d165f2345046c04d3a507bb0e2b9a74dafc74895866eb19fb31e42dc0d453040ff4fe890356906b31cb5373dccba81b8a21cd74f544505674a7851ed8888c7b7faba7689fb07e446991f62b67eb50106327b9d76115c5a0ce6c0908809a2f0e1af472a487d7bdfdad9f9e5f36876616853565b42e8ad3cda9f675398ef0f8c6d4fc72c81e50c47f9d43b0b91cbdb79a4165910940aafb929353b9503db29aaa3de91defad71c3ab438dd772a160a5ba1e93f38719d0d862fb9f0f623a7b79390ff9a55f1eeb370e93edfb54a550b2dff699b863fcbeb383aa994a28d6f605f81a9d7da21ae4f860119b88367b78cc115dcfe5b89e060a8fcf3a67b9cadd4d6f990ffe55848ff5f445f25bad9e5d51985d0811a5965b2b560434d4fcb538ae29bac8e7b22e064a5c0bb08e721da2162309c5078de777639ffadd6b38d3211bc6edc3ae006f6ab59dfd13a7fcd1c414dc9720a06be7070f233d154192a22b565c0ba96f4a9c5c83de24b4eedabf8136dc89aa0111986eba893c7d24e49fbd1d234f41c964c495afcaa4f740f7a3e233ffe211d7529513d21bdf43f0d4bf6585a90599919cc72a6f0ab5144e50cb25940f4cde689ba98dc6a56ead9019abf96ba37e641c6d1686d90e5e0f807c22182cd293ef7eaa9d943bfffa67ffca32fb0b0bdb0f07b7f6f65dad47b1f0c02184562e8e76392fd9eb22633269618ae4f58c691c99e9578b28bfac4e7a1a7b4e9590efda2cb6cbdbe47b41b5f7a9fedf5073d0e5f99178f5c69b3b2ae8edcfe9f4c8c1cec3e77ae585d934fe74975f1eaf4bcb1ebf5929267f6a814d7e4418c9f42cbd5f7a114a84237bf0dc46706ea8515d92f3f743e570540be3c844d150be3ca031587f32c7b087757f1009e2afae138545d18733046728daeb5590f101af48d9a7441db6bea814ec23722a16187f2f5eb2aa8979770214573bacd6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "bf71f3b18dcb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "33af04be"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xf4, 0xfa, "d8e4194af8e9538205d3480f6d1bde00ce05b89dfa6214d942ab211c88e9964c706c194761f289f00001022e72bc2e9318ab66e6a19c9665f10adc02eb89afabfd0f210228648bba4c5ddd54f7c7cea0e8808cd4b713f30e2eb04c4e4e922f6a6a9d5d8d37a94946d47510c3c6efece25f4c65025edee6ebcf87ab12d7eac1a99b0478f830300e3abcb4380ef51663c5cc5dcf96d97918c0e237f40eccfae9bb9b059cda409bab10179d4086886c665bfa403261cdfae3812f9e7cff52c5368f0bd9151b7ccbc8d4c8c0c8c422ca0ec76bf21d25285eb2e9371a27e7dd940cf5d34bf5607f11389451ee681183166d81"}, @NL80211_ATTR_FILS_ERP_REALM={0x39, 0xfa, "6bf0f36599dc5120d7bd5905d01a5e2df0c7f269f1ac84bd355f32a248dde0a7b4f87a45cbebf1a01ac011a6584db0cd7df31c337f"}], @NL80211_ATTR_IE={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x43, 0xfa, "044f51cd5307cb7b7180470f7368420512812388fc562c2d0f197d37880173eac9ccdaff6c23996190662a2a68f312ed762e7b7e4a599d0a7a715454849456"}, @NL80211_ATTR_FILS_ERP_REALM={0x4b, 0xfa, "1c1e7a59987b3eee8041195430118f076453de43855c0321efdd5cb4d63086a385053ef28229ab7a54bbcdb88c35d35e3fcaceb42c7e91a0dcd6d5f8046c2a7a502d351ee1ba18"}, @NL80211_ATTR_FILS_ERP_REALM={0xca, 0xfa, "fe9aaf9d91554e64033b9ae74d16520dd891b84f886e417d3da249a44e8e30a788cf383b2700ed173165b58bf501d9223e264e2448c601c508b994c5b47bfad51448efd766a9458d0a384339184557e36aa1f45d657a7ce860f1f2ccca2622905e4b1a4f53c54a8b1d5a6207092ac98c8a3ff1f8f6655b57f5ba6d3d0f74fe211f3bc987b7d039f470ba76fedc87111f47c4990c47051128647520dc8478bd12db471a4a2467674803258c7dcc5599974a0368e1a60d7793b9b6460d845792faf2a8ee76b036"}], @NL80211_ATTR_IE={0x20, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@random="18b61050ee64"}}]}, @NL80211_ATTR_IE={0x81, 0x2a, [@supported_rates={0x1, 0x6, [{0x1b}, {0x1, 0x1}, {}, {0xc, 0x1}, {0x3}, {0x9, 0x1}]}, @ibss={0x6, 0x2, 0xff}, @channel_switch={0x25, 0x3, {0x1, 0xb6, 0x24}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x1, 0x8}}, @tim={0x5, 0x54, {0xf1, 0x67, 0x7, "d16d990d894fa4b602414a783bdf264526113fec9d6c9a9c5a18319d0e565f7989a6646445efd92e02da98fd715ca14510d50a0ecfe766c6cff003cbcb82cf6b7aa75906441cd4d4ffbe89fecde8350b36"}}, @ibss={0x6, 0x2, 0x101}, @ibss={0x6, 0x2, 0x8}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x2f, 0xfc, "87444c89a7e3c846afbaf122b76ecff3851d8af9b347b9305345e41f6a6b9b1187db9773f59491974be8d4"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "5cd917f98326dd039924"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x90, 0xfa, "25fdc2d29a38e7e62f7a30e13bd84f8ab2b6ca7e234904d6dffb11bf54ad5a07d7f5bd8f6bd72f1dbefbf8149494f1abef831b914ed63593110a452317c0ea9e24c14b0d7de3593dab181083049e7ab5d68596426e512260eedfb261dcf471664eaa3c562d9e32e6a9c919b1770726323d42a5a128619b767c5658eb329e257a4eae1ef80aa45528d7efe1ec"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "a4c029e749e763084bf811e7fbf7901cd4181d3bfb55c12b1af8bbfc333a7512586ac40861d9e3053ae26997b84babc71f91ce668a2b16282846f262a49c18fb0c533c9b4bf548cee1bced0c535486d1dcace26f4f3bff580f35"}, @NL80211_ATTR_FILS_ERP_REALM={0x66, 0xfa, "fdeb08841010b85f77ad4ccde90d1561282a86006f084ca51a9d58806a0b17637748984b283dee3a3c322bcd72be670a2260317a9b19862ed57cfdcec0ad22997f5ea23ec95dbda938577b7281809dd93e5f8a4a4d6b2308db42db0fe1c2de84ef95"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "03eb905aedeb0aad5a7df1493e7862c0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "1ee2d36dca2bbc2eb4a501"}]]}, 0x1540}, 0x1, 0x0, 0x0, 0x20000002}, 0x850) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000032c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000003380)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x34, r8, 0xcd7a0497f2c4bd95, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x48440}, 0x50) (async) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003440)={r5, 0x2, 0x99c4, 0x8}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000034c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000035c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x7}]}, &(0x7f0000003400)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003480)={0x4, 0xc, 0x7, 0x1}, 0x10, 0x2a4c8, 0xffffffffffffffff, 0x2, &(0x7f0000003540)=[0x1, r11], &(0x7f0000003580)=[{0x0, 0x1, 0x8, 0x6}, {0x0, 0x5, 0x8, 0xc}], 0x10, 0x7fffffff}, 0x94) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000003680)={@multicast2, @private=0xa010102, 0x0, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, 0x20) (async) sendmsg$nl_xfrm(r1, &(0x7f0000004a80)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a40)={&(0x7f0000003880)=@acquire={0x11c0, 0x17, 0x8, 0x70bd28, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', 0x4d2}, @in6=@loopback, {@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0x4, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x1}, {{@in=@multicast1, @in6=@local, 0x4e21, 0x0, 0x4e23, 0x2, 0x2, 0x0, 0x80, 0x32, r7}, {0x3, 0x5, 0x4, 0x10, 0x6, 0xb9, 0x4, 0x2}, {0x6, 0xe, 0x2c5, 0x12}, 0x6, 0x6e6bb3, 0x2, 0x1, 0x6, 0x1}, 0x8, 0x164a, 0x7, 0x70bd2c}, [@lifetime_val={0x24, 0x9, {0x3, 0x0, 0xffffffff, 0x8}}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@private0, 0x0, 0x2}}, @algo_auth={0x1048, 0x1, {{'sha512-neon\x00'}, 0x8000, "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"}}]}, 0x11c0}, 0x1, 0x0, 0x0, 0x44050}, 0x4) 1m6.841676501s ago: executing program 6 (id=5741): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r0, r1}, 0xc) 1m6.748661683s ago: executing program 1 (id=5742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680000082cbd7000fcdbdf250a00030002000000350007000200000014000c80060001001400100006000100340000004000000004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES8=r8, @ANYRESHEX=r4, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRESOCT=r5], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040000fa4c1a00", @ANYRES16=r6, @ANYBLOB="200000200000020000000200000005003d000300000008003f00ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x14) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x20040040) (async) recvmmsg(r12, 0x0, 0x0, 0x20, 0x0) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r13, &(0x7f0000000400)="49c39209ce49a45b1f8323d7a93effb858fdd2f1460b2f9cc36625e8ed4f91f8e3d073e4df43c4e1", 0x28, 0x180c4, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @local, 0xbe63}, 0x1c) 1m6.743064554s ago: executing program 2 (id=5743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async) r5 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0}, 0x18) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0xfffeffff, 0x4) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m5.642332319s ago: executing program 6 (id=5744): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x8}, 0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000100", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25310000000a0001007770616e300000000500350009000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00], [], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x87}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200007, 0x2000000, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) r10 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m1.174708461s ago: executing program 0 (id=5745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000002d020100000000000040000008000c00", @ANYRES32=r13, @ANYBLOB="0b000080976b640868603000180001801400f6801000468008004a00b300000004004d80"], 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@local, 0x4e22, 0xff, 0x4e24, 0xfffc, 0xa, 0x80, 0x80, 0x0, r10, r13}, {0x4, 0x5a46, 0xb8, 0x80, 0x200, 0x800, 0x6, 0x400}, {0x7, 0x8, 0x5, 0x3}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x4, 0x3, 0x2, 0x79, 0xf}}, 0xe8) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r17 = socket(0x10, 0x3, 0x0) sendmmsg(r17, &(0x7f0000000000), 0x4000000000001f2, 0x0) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002cbd7000ffdbdf250400000007f6f6ffab1414aa080002000310000008000700ac1414bb0800040203000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m0.273430806s ago: executing program 4 (id=5746): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) (async) close(0x4) (async) unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32658) read(r6, 0x0, 0x0) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000000)=0xfffffc01, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 52.321838755s ago: executing program 6 (id=5747): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0x0, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x31, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 48.580776785s ago: executing program 34 (id=5742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680000082cbd7000fcdbdf250a00030002000000350007000200000014000c80060001001400100006000100340000004000000004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES8=r8, @ANYRESHEX=r4, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRESOCT=r5], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040000fa4c1a00", @ANYRES16=r6, @ANYBLOB="200000200000020000000200000005003d000300000008003f00ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x14) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x20040040) (async) recvmmsg(r12, 0x0, 0x0, 0x20, 0x0) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r13, &(0x7f0000000400)="49c39209ce49a45b1f8323d7a93effb858fdd2f1460b2f9cc36625e8ed4f91f8e3d073e4df43c4e1", 0x28, 0x180c4, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @local, 0xbe63}, 0x1c) 45.160092969s ago: executing program 35 (id=5743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async) r5 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0}, 0x18) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0xfffeffff, 0x4) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 42.157048035s ago: executing program 36 (id=5745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000002d020100000000000040000008000c00", @ANYRES32=r13, @ANYBLOB="0b000080976b640868603000180001801400f6801000468008004a00b300000004004d80"], 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@local, 0x4e22, 0xff, 0x4e24, 0xfffc, 0xa, 0x80, 0x80, 0x0, r10, r13}, {0x4, 0x5a46, 0xb8, 0x80, 0x200, 0x800, 0x6, 0x400}, {0x7, 0x8, 0x5, 0x3}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x4, 0x3, 0x2, 0x79, 0xf}}, 0xe8) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r17 = socket(0x10, 0x3, 0x0) sendmmsg(r17, &(0x7f0000000000), 0x4000000000001f2, 0x0) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002cbd7000ffdbdf250400000007f6f6ffab1414aa080002000310000008000700ac1414bb0800040203000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 40.209622583s ago: executing program 37 (id=5746): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) (async) close(0x4) (async) unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32658) read(r6, 0x0, 0x0) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000000)=0xfffffc01, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 39.472795732s ago: executing program 6 (id=5752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r3, &(0x7f0000005c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/39, 0x27}], 0x1}, 0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf25210000000c0005000202aaaaaaaaaaaa0c0005000200aaaaaaaaaaaa0500200001000000230001007770616e340000000a0001007770616e30000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0x1, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 27.442831569s ago: executing program 6 (id=5753): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x45) write(r0, &(0x7f00000000c0)="ed97668756a18a0ff5000767f82eeeb9139147bf1eb906229581f8dd1efd338924c90f0ba60e0452e34c04c63724bf302188d3df8f1de9df6d3926cad59c68adafa8cddc205535d1e80551ff95763772b3fc", 0x52) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 17.920470073s ago: executing program 6 (id=5754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0700010021000100", @ANYRES32=r0, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 38 (id=5754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0700010021000100", @ANYRES32=r0, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 578.216055][T22526] tipc: Disabling bearer [ 578.244818][T22533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4333'. [ 578.417423][T22539] tipc: Enabling of bearer rejected, failed to enable media [ 578.428072][T22539] syzkaller0: entered promiscuous mode [ 578.433592][T22539] syzkaller0: entered allmulticast mode [ 578.636283][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'. [ 578.652909][T22541] syzkaller0: entered promiscuous mode [ 578.658659][T22541] syzkaller0: entered allmulticast mode [ 578.659341][T22550] netlink: 'syz.2.4338': attribute type 3 has an invalid length. [ 578.672899][T22550] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 581.332141][T22555] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 581.439684][T22580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4345'. [ 581.602539][T22594] netlink: 'syz.2.4351': attribute type 5 has an invalid length. [ 581.617325][T22593] netlink: 'syz.2.4351': attribute type 5 has an invalid length. [ 581.640703][T22594] batman_adv: batadv0: Adding interface: vxlan1 [ 581.647872][T22594] batman_adv: batadv0: The MTU of interface vxlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.676823][T22594] batman_adv: batadv0: Interface activated: vxlan1 [ 581.706088][ T8570] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.724157][ T8570] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.770173][ T8570] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.794108][ T8570] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.345481][T22622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4358'. [ 582.529604][T22633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.592014][T22643] netlink: 'syz.5.4364': attribute type 21 has an invalid length. [ 582.599186][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'. [ 582.622119][T22641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4363'. [ 582.648948][T22641] netlink: 'syz.4.4363': attribute type 23 has an invalid length. [ 582.656992][T22641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4363'. [ 582.746074][T22649] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 582.772851][T22649] netlink: 'syz.1.4366': attribute type 5 has an invalid length. [ 582.901533][T22650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4365'. [ 583.511550][T22676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 583.525460][T22647] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.566979][T22677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4374'. [ 583.814182][T22684] netlink: 'syz.4.4375': attribute type 16 has an invalid length. [ 583.835018][T22684] netlink: 'syz.4.4375': attribute type 17 has an invalid length. [ 583.896782][T22687] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4375'. [ 584.716313][T22705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.897973][T22713] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4382'. [ 584.943037][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4382'. [ 585.929685][T22726] xt_CT: No such helper "snmp" [ 586.711540][T22683] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.774455][T22684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.814774][T22713] 1ªX¹¦À: renamed from 60ªX¹¦À [ 586.825134][T22713] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 587.339071][T22782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.795660][T22808] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.838234][T22811] netlink: 'syz.4.4406': attribute type 1 has an invalid length. [ 587.904340][T22811] bond6: entered promiscuous mode [ 587.910063][T22811] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.953523][T22817] bond6: (slave veth5): making interface the new active one [ 587.983617][T22817] veth5: entered promiscuous mode [ 587.997136][T22817] bond6: (slave veth5): Enslaving as an active interface with an up link [ 588.026489][T22818] syzkaller0: entered allmulticast mode [ 588.046153][T22815] tipc: Enabled bearer , priority 0 [ 588.113434][T22814] tipc: Disabling bearer [ 588.296408][T22825] netlink: 'syz.0.4410': attribute type 1 has an invalid length. [ 588.347876][T22828] __nla_validate_parse: 4 callbacks suppressed [ 588.347894][T22828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4410'. [ 588.468013][T22825] 8021q: adding VLAN 0 to HW filter on device bond11 [ 588.504717][T22825] bond11: (slave ip6gretap3): making interface the new active one [ 588.517505][T22825] bond11: (slave ip6gretap3): Enslaving as an active interface with an up link [ 588.669088][T22835] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4412'. [ 588.725724][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4413'. [ 589.010870][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.068298][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.093968][T22850] tipc: Enabling of bearer rejected, failed to enable media [ 589.098620][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.133307][T22850] syzkaller0: entered promiscuous mode [ 589.155539][T22850] syzkaller0: entered allmulticast mode [ 589.162971][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.203131][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.220964][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.251703][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.301805][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.344043][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.360856][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.387179][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.396783][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.452455][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.551881][T22861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 589.698135][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.706341][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.716356][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.730253][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.755281][T22861] wg1 speed is unknown, defaulting to 1000 [ 589.767859][T22871] netlink: 'syz.0.4420': attribute type 13 has an invalid length. [ 589.779850][T22861] wg1 speed is unknown, defaulting to 1000 [ 590.415658][T22861] wg1 speed is unknown, defaulting to 1000 [ 590.930621][T22905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4428'. [ 591.512844][T22943] ip6_vti0 speed is unknown, defaulting to 1000 [ 591.616037][T22951] pim6reg: entered allmulticast mode [ 591.653297][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 591.685818][T22948] pim6reg: left allmulticast mode [ 592.183138][T22943] wg1 speed is unknown, defaulting to 1000 [ 592.521999][T22985] syzkaller0: entered promiscuous mode [ 592.565326][T22985] syzkaller0: entered allmulticast mode [ 592.668839][T22985] tipc: Enabled bearer , priority 0 [ 592.696960][T22985] tipc: Resetting bearer [ 592.775910][T22984] tipc: Resetting bearer [ 592.892224][T22984] tipc: Disabling bearer [ 593.054342][T23005] netlink: 'syz.1.4453': attribute type 11 has an invalid length. [ 593.078996][T23005] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4453'. [ 593.106128][T23007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4454'. [ 593.145036][T23007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4454'. [ 593.154149][T23007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4454'. [ 593.203566][T23007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4454'. [ 593.299190][T23012] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.337602][T23017] nbd6: detected capacity change from 0 to 127 [ 593.404784][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4456'. [ 593.414687][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4456'. [ 593.442007][T23017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4456'. [ 593.499152][ T5832] block nbd6: Receive control failed (result -32) [ 593.914299][T23012] wg1 speed is unknown, defaulting to 1000 [ 594.256470][T23056] ip6_vti0 speed is unknown, defaulting to 1000 [ 595.211999][T23064] ip6_vti0 speed is unknown, defaulting to 1000 [ 595.218969][T23066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4469'. [ 595.240714][T23062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4468'. [ 595.319149][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 595.353476][T23062] mac80211_hwsim hwsim0 wlan0: Caught tx_queue_len zero misconfig [ 595.433813][T23056] wg1 speed is unknown, defaulting to 1000 [ 595.983083][T23064] wg1 speed is unknown, defaulting to 1000 [ 596.088136][T23087] batman_adv: batadv0: Interface deactivated: vxlan1 [ 596.102416][T18950] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.161827][T23087] batadv_slave_1: entered promiscuous mode [ 596.169446][T18950] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.179760][T18950] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.193381][T18950] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.203070][T23086] batadv_slave_1: left promiscuous mode [ 596.322469][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4475'. [ 596.331740][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4475'. [ 596.439925][T23090] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 596.451621][T23090] erspan1: entered allmulticast mode [ 597.257550][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4482'. [ 597.278830][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 597.408009][T23114] batadv0: entered allmulticast mode [ 597.414826][T23114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.461081][T23127] net_ratelimit: 26 callbacks suppressed [ 597.461103][T23127] openvswitch: netlink: Flow actions attr not present in new flow. [ 597.532393][T23131] geneve2: entered promiscuous mode [ 597.543904][T18952] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 597.554107][T23133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.564301][T18952] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 597.564369][T18952] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 597.564402][T18952] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 597.614408][T23135] bond4: entered allmulticast mode [ 597.637528][T23135] ip6gretap1: entered allmulticast mode [ 597.643689][T23135] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 597.764435][T23144] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 598.324503][T23163] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.468028][T23172] netlink: 'syz.2.4502': attribute type 4 has an invalid length. [ 598.499682][T23171] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.805662][T23163] wg1 speed is unknown, defaulting to 1000 [ 599.014148][T23188] warn_alloc: 1 callbacks suppressed [ 599.014167][T23188] syz.1.4506: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 599.038429][T23188] CPU: 1 UID: 0 PID: 23188 Comm: syz.1.4506 Not tainted syzkaller #0 PREEMPT(full) [ 599.038456][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.038472][T23188] Call Trace: [ 599.038480][T23188] [ 599.038488][T23188] dump_stack_lvl+0x189/0x250 [ 599.038523][T23188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.038551][T23188] ? __pfx__printk+0x10/0x10 [ 599.038572][T23188] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 599.038600][T23188] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 599.038635][T23188] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 599.038666][T23188] warn_alloc+0x214/0x310 [ 599.038702][T23188] ? __pfx_warn_alloc+0x10/0x10 [ 599.038741][T23188] ? __get_vm_area_node+0x28f/0x300 [ 599.038770][T23188] ? htable_create+0x101/0x7a0 [ 599.038794][T23188] __vmalloc_node_range_noprof+0x690/0x12d0 [ 599.038857][T23188] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.038890][T23188] ? rcu_is_watching+0x15/0xb0 [ 599.038913][T23188] ? htable_create+0x101/0x7a0 [ 599.038932][T23188] __kvmalloc_node_noprof+0x674/0x910 [ 599.038963][T23188] ? htable_create+0x101/0x7a0 [ 599.038980][T23188] ? hashlimit_pernet+0x23/0x240 [ 599.038999][T23188] ? hashlimit_pernet+0x23/0x240 [ 599.039016][T23188] ? hashlimit_pernet+0x23/0x240 [ 599.039041][T23188] htable_create+0x101/0x7a0 [ 599.039068][T23188] hashlimit_mt_check_common+0x719/0xa10 [ 599.039097][T23188] hashlimit_mt_check_v1+0x221/0x360 [ 599.039131][T23188] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 599.039169][T23188] ? xt_find_match+0x1f7/0x250 [ 599.039204][T23188] xt_check_match+0x3d1/0xab0 [ 599.039239][T23188] ? __pfx_xt_check_match+0x10/0x10 [ 599.039271][T23188] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 599.039311][T23188] ? xt_find_match+0x1f7/0x250 [ 599.039347][T23188] translate_table+0x150b/0x2000 [ 599.039399][T23188] ? __pfx_translate_table+0x10/0x10 [ 599.039430][T23188] ? __might_fault+0xb0/0x130 [ 599.039478][T23188] ? _copy_from_user+0x94/0xb0 [ 599.039510][T23188] do_ipt_set_ctl+0x967/0xcd0 [ 599.039541][T23188] ? rcu_is_watching+0x15/0xb0 [ 599.039563][T23188] ? trace_contention_end+0x39/0x120 [ 599.039585][T23188] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 599.039639][T23188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 599.039675][T23188] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.039706][T23188] nf_setsockopt+0x26f/0x290 [ 599.039737][T23188] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 599.039769][T23188] do_sock_setsockopt+0x17c/0x1b0 [ 599.039797][T23188] __x64_sys_setsockopt+0x13f/0x1b0 [ 599.039826][T23188] do_syscall_64+0xfa/0xfa0 [ 599.039847][T23188] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.039869][T23188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.039888][T23188] ? clear_bhb_loop+0x60/0xb0 [ 599.039912][T23188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.039936][T23188] RIP: 0033:0x7fbec3f8f749 [ 599.039954][T23188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.039972][T23188] RSP: 002b:00007fbec4e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 599.039993][T23188] RAX: ffffffffffffffda RBX: 00007fbec41e5fa0 RCX: 00007fbec3f8f749 [ 599.040008][T23188] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 599.040022][T23188] RBP: 00007fbec4013f91 R08: 0000000000000448 R09: 0000000000000000 [ 599.040035][T23188] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 599.040047][T23188] R13: 00007fbec41e6038 R14: 00007fbec41e5fa0 R15: 00007ffc87ec4ae8 [ 599.040081][T23188] [ 599.040202][T23188] Mem-Info: [ 599.202500][T23195] __nla_validate_parse: 3 callbacks suppressed [ 599.202519][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4507'. [ 599.206573][T23188] active_anon:3914 inactive_anon:0 isolated_anon:0 [ 599.206573][T23188] active_file:3543 inactive_file:40098 isolated_file:0 [ 599.206573][T23188] unevictable:768 dirty:172 writeback:0 [ 599.206573][T23188] slab_reclaimable:13143 slab_unreclaimable:239140 [ 599.206573][T23188] mapped:29343 shmem:1358 pagetables:984 [ 599.206573][T23188] sec_pagetables:0 bounce:0 [ 599.206573][T23188] kernel_misc_reclaimable:0 [ 599.206573][T23188] free:1185225 free_pcp:14633 free_cma:0 [ 599.471304][T23188] Node 0 active_anon:15656kB inactive_anon:0kB active_file:14172kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125572kB dirty:688kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14972kB pagetables:3804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.503860][T23188] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.541359][T23188] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.576647][T23171] wg1 speed is unknown, defaulting to 1000 [ 599.589756][T23188] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 599.599289][T23188] Node 0 DMA32 free:833284kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15656kB inactive_anon:0kB active_file:14172kB inactive_file:160188kB unevictable:1536kB writepending:688kB zspages:0kB present:3129332kB managed:2565068kB mlocked:0kB bounce:0kB free_pcp:40940kB local_pcp:22748kB free_cma:0kB [ 599.634553][T23188] lowmem_reserve[]: 0 0 0 0 0 [ 599.661461][T23188] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.695673][T23188] lowmem_reserve[]: 0 0 0 0 0 [ 599.700633][T23188] Node 1 Normal free:3892000kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17868kB local_pcp:7820kB free_cma:0kB [ 599.738470][T23188] lowmem_reserve[]: 0 0 0 0 0 [ 599.743370][T23188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.763238][T23188] Node 0 DMA32: 811*4kB (UME) 966*8kB (UM) 485*16kB (UME) 399*32kB (UM) 83*64kB (UME) 64*128kB (UME) 105*256kB (UM) 65*512kB (UME) 43*1024kB (UME) 16*2048kB (UME) 159*4096kB (M) = 833228kB [ 599.782425][T23188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.808377][T23188] Node 1 Normal: 190*4kB (UE) 61*8kB (UME) 36*16kB (UME) 102*32kB (UME) 31*64kB (UME) 5*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3892000kB [ 599.850664][T23188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.864748][T23188] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.875152][T23188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.884853][T23188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.894678][T23188] 44999 total pagecache pages [ 599.900208][T23188] 0 pages in swap cache [ 599.904469][T23188] Free swap = 124996kB [ 599.911262][T23188] Total swap = 124996kB [ 599.916921][T23188] 2097051 pages RAM [ 599.920921][T23188] 0 pages HighMem/MovableOnly [ 599.926945][T23188] 424142 pages reserved [ 599.931303][T23188] 0 pages cma reserved [ 600.026003][T23203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4508'. [ 600.127068][T23199] batadv0: entered promiscuous mode [ 600.336605][T23217] syzkaller0: entered promiscuous mode [ 600.372990][T23217] syzkaller0: entered allmulticast mode [ 600.504031][T23214] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.703964][T23229] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4513'. [ 600.788942][ T5833] Bluetooth: hci2: command 0x0419 tx timeout [ 601.081806][T23223] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.091125][T23239] netlink: 'syz.4.4517': attribute type 1 has an invalid length. [ 601.330907][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4518'. [ 601.490188][T23214] wg1 speed is unknown, defaulting to 1000 [ 601.768270][T23263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4523'. [ 601.819394][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4525'. [ 601.861114][T23265] syzkaller0: entered promiscuous mode [ 601.905127][T23265] syzkaller0: entered allmulticast mode [ 602.044274][T23281] SET target dimension over the limit! [ 602.080087][T23281] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 602.087396][T23281] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 602.094826][T23223] wg1 speed is unknown, defaulting to 1000 [ 602.305810][T23287] vlan3: entered allmulticast mode [ 602.311263][T23287] bridge0: port 2(vlan3) entered blocking state [ 602.356189][T23287] bridge0: port 2(vlan3) entered disabled state [ 602.432259][T23287] vlan3: entered promiscuous mode [ 602.437937][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4531'. [ 602.631196][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4531'. [ 602.723804][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4531'. [ 602.739291][T23294] pim6reg1: entered promiscuous mode [ 602.744680][T23294] pim6reg1: entered allmulticast mode [ 602.970653][T23302] netlink: 'syz.2.4533': attribute type 21 has an invalid length. [ 602.996710][T23302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4533'. [ 603.241066][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.251262][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.265343][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.272831][T23315] netlink: 'syz.0.4537': attribute type 1 has an invalid length. [ 603.284854][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.296306][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.522683][T23309] ip6_vti0 speed is unknown, defaulting to 1000 [ 603.760335][T23335] syzkaller0: entered promiscuous mode [ 603.765973][T23335] syzkaller0: entered allmulticast mode [ 603.972261][T23343] netlink: 'syz.1.4543': attribute type 12 has an invalid length. [ 604.147244][T23355] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 604.253852][T23361] syzkaller0: entered promiscuous mode [ 604.259707][T23361] syzkaller0: entered allmulticast mode [ 604.279425][T23361] tipc: Enabling of bearer rejected, failed to enable media [ 604.361415][T23366] __nla_validate_parse: 3 callbacks suppressed [ 604.361434][T23366] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4550'. [ 604.426653][T23309] wg1 speed is unknown, defaulting to 1000 [ 604.507722][T23372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 604.528174][T23372] batman_adv: batadv0: Adding interface: gretap2 [ 604.536293][T23372] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.565390][T23372] batman_adv: batadv0: Interface activated: gretap2 [ 604.601406][T23375] syzkaller0: entered promiscuous mode [ 604.607537][T23375] syzkaller0: entered allmulticast mode [ 604.792302][T23383] syzkaller0: entered promiscuous mode [ 604.800634][T23383] syzkaller0: entered allmulticast mode [ 604.884209][T23391] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4557'. [ 604.897293][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4557'. [ 604.923950][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.031341][T23309] chnl_net:caif_netlink_parms(): no params data found [ 605.280040][T23404] netlink: 'syz.4.4560': attribute type 4 has an invalid length. [ 605.336032][ T5832] Bluetooth: hci4: command tx timeout [ 605.377556][T23309] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.384811][T23309] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.392377][T23309] bridge_slave_0: entered allmulticast mode [ 605.400547][T23309] bridge_slave_0: entered promiscuous mode [ 605.409913][T23309] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.417211][T23309] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.424531][T23309] bridge_slave_1: entered allmulticast mode [ 605.433429][T23309] bridge_slave_1: entered promiscuous mode [ 605.577141][T23405] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.592851][T23309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.626174][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4562'. [ 605.635632][T23309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.741918][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4562'. [ 605.955452][T23413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.063061][T23415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.077996][T23415] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 606.097149][T23415] bond5: (slave sit2): Error -95 calling set_mac_address [ 606.155567][T23426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4563'. [ 606.192591][T23309] team0: Port device team_slave_0 added [ 606.217423][T23421] macvlan0: left promiscuous mode [ 606.222597][T23421] bond0: left promiscuous mode [ 606.287435][T23309] team0: Port device team_slave_1 added [ 606.430523][T23389] wg1 speed is unknown, defaulting to 1000 [ 606.437861][T23309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.444831][T23309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.477751][T23309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.481859][T23433] netlink: 'syz.1.4567': attribute type 23 has an invalid length. [ 606.497419][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 606.508698][T23309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.521880][T23309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.549043][T23309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.641757][T23431] syzkaller0: entered promiscuous mode [ 606.649427][T23431] syzkaller0: entered allmulticast mode [ 606.864464][T23309] hsr_slave_0: entered promiscuous mode [ 606.871590][T23309] hsr_slave_1: entered promiscuous mode [ 606.878794][T23309] debugfs: 'hsr0' already exists in 'hsr' [ 606.884570][T23309] Cannot create hsr debugfs directory [ 606.901099][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4566'. [ 606.943870][T23405] wg1 speed is unknown, defaulting to 1000 [ 606.988552][T23447] ip6_vti0 speed is unknown, defaulting to 1000 [ 607.420632][ T5832] Bluetooth: hci4: command tx timeout [ 607.535069][T23309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.606545][T23309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 607.651415][T23309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 607.700944][T23309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 607.973091][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4575'. [ 608.038519][T23309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.070518][T23309] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.082073][T23486] netlink: 'syz.4.4575': attribute type 2 has an invalid length. [ 608.091839][T23485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4576'. [ 608.109805][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.117034][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.203350][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.210911][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.240250][T23447] wg1 speed is unknown, defaulting to 1000 [ 608.488144][T23497] netlink: 'syz.2.4580': attribute type 21 has an invalid length. [ 608.554096][T23498] netlink: 'syz.2.4580': attribute type 21 has an invalid length. [ 608.648232][T23501] netlink: 'syz.4.4581': attribute type 1 has an invalid length. [ 609.104616][T23309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.167550][T23521] netlink: 'syz.4.4585': attribute type 1 has an invalid length. [ 609.262054][T23522] batman_adv: batadv0: Interface deactivated: gretap2 [ 609.383297][T23521] bond7: entered promiscuous mode [ 609.391979][T23521] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.499727][ T5832] Bluetooth: hci4: command tx timeout [ 609.712592][T23545] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.800196][T23309] veth0_vlan: entered promiscuous mode [ 609.841720][T23309] veth1_vlan: entered promiscuous mode [ 609.899764][T23309] veth0_macvtap: entered promiscuous mode [ 609.919466][T23309] veth1_macvtap: entered promiscuous mode [ 609.961042][T23558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.067644][T23309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.082223][T23560] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.110403][T23309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.146255][ T8562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.166597][ T8562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.220840][ T8562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.262848][ T8562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.383422][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.397922][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.406516][T23568] vlan4: entered promiscuous mode [ 610.437332][T23568] bridge0: entered promiscuous mode [ 610.452340][T23570] __nla_validate_parse: 4 callbacks suppressed [ 610.452358][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 610.468849][T23545] wg1 speed is unknown, defaulting to 1000 [ 610.713327][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.734987][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.107330][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 611.165663][T23591] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4532'. [ 611.252364][T23560] wg1 speed is unknown, defaulting to 1000 [ 611.354836][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4605'. [ 611.576301][ T5832] Bluetooth: hci4: command tx timeout [ 611.842840][T23611] syzkaller0: entered promiscuous mode [ 611.875556][T23611] syzkaller0: entered allmulticast mode [ 611.930876][T23614] netlink: 'syz.6.4608': attribute type 33 has an invalid length. [ 611.939967][T23614] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4608'. [ 611.956871][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.989631][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.016941][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.026837][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.034649][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.071763][T23614] `: renamed from team0 (while UP) [ 612.190122][T23615] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.336887][T23620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4610'. [ 612.589109][T23632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4612'. [ 612.598345][T23632] block nbd0: reconnected socket [ 612.905723][T23648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4616'. [ 612.926775][T23648] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002 [ 613.055941][T23656] netlink: 'syz.2.4619': attribute type 1 has an invalid length. [ 613.159380][T23656] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 613.192972][T23662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4620'. [ 613.308460][T23669] syz_tun: entered allmulticast mode [ 613.344504][ T5833] block nbd0: Receive control failed (result -32) [ 613.354563][T23615] wg1 speed is unknown, defaulting to 1000 [ 613.481713][T23675] tipc: Enabled bearer , priority 0 [ 613.565912][T23675] syzkaller0: entered promiscuous mode [ 613.571521][T23675] syzkaller0: entered allmulticast mode [ 613.578330][T23675] tipc: Resetting bearer [ 613.637837][T23675] tipc: Resetting bearer [ 613.722408][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4625'. [ 613.866536][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060da3c00: rx timeout, send abort [ 613.877280][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880567dac00: rx timeout, send abort [ 613.885736][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060da3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 613.901519][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880567dac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 614.064033][ T5833] Bluetooth: hci3: command tx timeout [ 616.145738][ T5833] Bluetooth: hci3: command tx timeout [ 616.216559][T23675] tipc: Disabling bearer [ 616.276920][T23691] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.595286][T23697] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4628'. [ 616.693206][T23615] chnl_net:caif_netlink_parms(): no params data found [ 617.117438][T23691] wg1 speed is unknown, defaulting to 1000 [ 617.506707][T23670] syz_tun: left allmulticast mode [ 617.535233][T23615] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.561068][T23720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4633'. [ 617.564842][T23615] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.586710][T23615] bridge_slave_0: entered allmulticast mode [ 617.598907][T23615] bridge_slave_0: entered promiscuous mode [ 617.650002][T23615] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.661134][T23615] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.680777][T23615] bridge_slave_1: entered allmulticast mode [ 617.694520][T23615] bridge_slave_1: entered promiscuous mode [ 617.862526][T23736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4637'. [ 617.898048][T23728] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.906803][T23731] tipc: Enabled bearer , priority 0 [ 617.913748][T23736] vlan3: left promiscuous mode [ 617.926618][T23736] bridge0: port 2(vlan3) entered disabled state [ 617.937503][T23736] bridge_slave_0: left promiscuous mode [ 617.943851][T23736] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.136734][T23615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.172158][T23737] tipc: Resetting bearer [ 618.192167][T23615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.216218][ T5833] Bluetooth: hci3: command tx timeout [ 618.272934][T23730] tipc: Disabling bearer [ 618.312921][T23615] team0: Port device team_slave_0 added [ 618.322548][T23615] team0: Port device team_slave_1 added [ 618.463418][T23615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.485852][T23615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.521446][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 618.532444][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 618.546236][T23749] netlink: 'syz.4.4641': attribute type 5 has an invalid length. [ 618.554376][T23615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.554403][T23749] netlink: 'syz.4.4641': attribute type 6 has an invalid length. [ 618.595269][T23747] tipc: Enabled bearer , priority 0 [ 618.603534][T23615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.615570][T23615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.658301][T23615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.682115][T23747] tipc: Disabling bearer [ 618.794262][T23728] wg1 speed is unknown, defaulting to 1000 [ 618.889547][T23615] hsr_slave_0: entered promiscuous mode [ 618.897093][T23615] hsr_slave_1: entered promiscuous mode [ 618.903804][T23615] debugfs: 'hsr0' already exists in 'hsr' [ 618.910313][T23615] Cannot create hsr debugfs directory [ 619.082917][T23759] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.498079][T23615] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 619.610688][T23615] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 619.777028][T23615] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 619.831264][T23615] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 619.921758][T23759] wg1 speed is unknown, defaulting to 1000 [ 620.249602][T23615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.296025][ T5832] Bluetooth: hci3: command tx timeout [ 620.444784][T23615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.467710][T23615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.492197][T23615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.623407][T23794] tipc: Started in network mode [ 620.666182][T23794] tipc: Node identity 328f05111d69, cluster identity 4711 [ 620.677284][T23794] tipc: Enabled bearer , priority 0 [ 620.709488][T23794] tipc: Resetting bearer [ 620.768390][T23793] tipc: Disabling bearer [ 620.893022][T23799] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.945695][T23615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.127876][T23615] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.164099][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.171315][ T9259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.219054][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.226338][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.466325][T23615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.529805][T23615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.604539][T23799] wg1 speed is unknown, defaulting to 1000 [ 621.617775][T23818] netlink: 'syz.1.4655': attribute type 30 has an invalid length. [ 621.662522][T23815] No such timeout policy "syz1" [ 622.023769][T23835] bridge0: entered allmulticast mode [ 622.042076][T23837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 622.165039][T23615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.171103][T23841] netlink: 'syz.6.4661': attribute type 10 has an invalid length. [ 622.203351][T23843] tipc: Enabled bearer , priority 0 [ 622.213893][T23843] syzkaller0: entered promiscuous mode [ 622.224241][T23843] syzkaller0: entered allmulticast mode [ 622.332822][T23842] tipc: Resetting bearer [ 622.375719][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 622.416204][T23842] tipc: Disabling bearer [ 622.550606][T23615] veth0_vlan: entered promiscuous mode [ 622.619249][T23615] veth1_vlan: entered promiscuous mode [ 622.717354][T23615] veth0_macvtap: entered promiscuous mode [ 622.744646][T23615] veth1_macvtap: entered promiscuous mode [ 622.787018][T23861] tc_dump_action: action bad kind [ 622.818263][T23615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.854833][T23615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.930998][ T9259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.991778][ T9259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.011651][ T9259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.043296][ T9259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.128000][T23868] netlink: 'syz.2.4670': attribute type 2 has an invalid length. [ 623.279065][ T8566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.287159][ T8566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.410960][ T8562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.422947][T23877] tipc: Enabled bearer , priority 0 [ 623.445243][ T8562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.464049][T23882] netlink: 'syz.4.4675': attribute type 4 has an invalid length. [ 623.474140][T23877] syzkaller0: entered promiscuous mode [ 623.490979][T23882] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4675'. [ 623.498598][T23877] syzkaller0: entered allmulticast mode [ 623.616523][T23888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4675'. [ 623.627062][T23876] tipc: Resetting bearer [ 623.638849][T23888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4675'. [ 623.729455][T23876] tipc: Disabling bearer [ 623.757476][T23892] tipc: Enabled bearer , priority 0 [ 623.775370][T23892] syzkaller0: entered promiscuous mode [ 623.780883][T23892] syzkaller0: entered allmulticast mode [ 623.878702][T23892] tipc: Resetting bearer [ 623.922549][T23891] tipc: Resetting bearer [ 623.992304][T23891] tipc: Disabling bearer [ 624.302563][T22789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 624.646792][T23935] ip6_vti0 speed is unknown, defaulting to 1000 [ 624.899946][T23942] tipc: Enabled bearer , priority 0 [ 624.973812][T23940] tipc: Disabling bearer [ 625.289081][T23935] wg1 speed is unknown, defaulting to 1000 [ 625.630445][T23964] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4696'. [ 626.352879][T23987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4702'. [ 626.402216][T23985] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4701'. [ 626.585473][ T8575] bridge_slave_1: left allmulticast mode [ 626.591173][ T8575] bridge_slave_1: left promiscuous mode [ 626.623536][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.671121][ T8575] bridge_slave_0: left allmulticast mode [ 626.678362][ T8575] bridge_slave_0: left promiscuous mode [ 626.684267][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.075204][T24002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4706'. [ 627.512949][ T8575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.524720][ T8575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.535720][ T8575] bond0 (unregistering): Released all slaves [ 627.633826][ T8575] : left promiscuous mode [ 627.666686][T24006] ip6_vti0 speed is unknown, defaulting to 1000 [ 627.719940][T24010] netlink: 'syz.6.4709': attribute type 4 has an invalid length. [ 627.775555][T24010] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4709'. [ 627.790820][T24011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4708'. [ 627.828498][T24011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4708'. [ 627.879216][T24010] .`: renamed from bond0 (while UP) [ 628.441625][T24006] wg1 speed is unknown, defaulting to 1000 [ 628.525051][T24041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.594300][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4716'. [ 628.920174][ T10] wg1 speed is unknown, defaulting to 1000 [ 628.920433][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4719'. [ 629.098957][T24055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4720'. [ 629.171883][ T8575] hsr_slave_0: left promiscuous mode [ 629.205132][ T8575] hsr_slave_1: left promiscuous mode [ 629.224190][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.262226][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.299824][T24069] netlink: 'syz.0.4723': attribute type 1 has an invalid length. [ 629.339140][T24071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4722'. [ 629.543457][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4724'. [ 629.998409][ T8575] team0 (unregistering): Port device team_slave_1 removed [ 630.050191][ T8575] team0 (unregistering): Port device team_slave_0 removed [ 630.600104][ T9259] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.663592][ T9259] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.682946][ T9259] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.713979][ T9259] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.117610][T24103] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 631.232754][T24111] veth3: entered promiscuous mode [ 631.362847][T24128] netlink: 'syz.4.4736': attribute type 1 has an invalid length. [ 631.385041][T24128] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 631.464518][T24133] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4739'. [ 631.556787][T24133] batadv1: entered promiscuous mode [ 631.691810][T24141] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002 [ 631.694717][T24142] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.712140][T24144] syzkaller1: entered promiscuous mode [ 631.728445][T24144] syzkaller1: entered allmulticast mode [ 632.562011][T24169] ip6_vti0 speed is unknown, defaulting to 1000 [ 632.700629][T24180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4747'. [ 632.719561][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4747'. [ 632.736800][T24180] macvlan0: entered allmulticast mode [ 632.742491][T24180] veth1_vlan: entered allmulticast mode [ 632.854279][T24142] wg1 speed is unknown, defaulting to 1000 [ 633.020316][T24193] netlink: 'syz.1.4751': attribute type 39 has an invalid length. [ 633.039600][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 633.122922][T24194] hsr_slave_1 (unregistering): left promiscuous mode [ 633.427758][T24203] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4753'. [ 633.676471][T24169] wg1 speed is unknown, defaulting to 1000 [ 633.868296][T24217] netlink: 'syz.1.4758': attribute type 1 has an invalid length. [ 634.312761][T24221] vxcan5: entered allmulticast mode [ 634.759875][T24221] Cannot find add_set index 2 as target [ 634.854211][T24240] ip6_vti0 speed is unknown, defaulting to 1000 [ 635.250670][T24251] syz_tun: entered allmulticast mode [ 635.327644][T24251] syz_tun: left allmulticast mode [ 635.501124][T24255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4766'. [ 635.606169][T24243] ip6_vti0 speed is unknown, defaulting to 1000 [ 635.686716][T24258] Bluetooth: MGMT ver 1.23 [ 635.710227][T24258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4767'. [ 635.747710][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4767'. [ 635.758786][T24261] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4768'. [ 635.851416][T24263] tipc: Enabled bearer , priority 0 [ 635.866096][T24263] syzkaller0: entered promiscuous mode [ 635.888441][T24263] syzkaller0: entered allmulticast mode [ 635.939313][T24263] tipc: Resetting bearer [ 635.958063][T24262] tipc: Resetting bearer [ 635.984603][T24272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4772'. [ 635.995209][T24272] x_tables: unsorted entry at hook 1 [ 636.002466][T24272] netlink: 'syz.4.4772': attribute type 10 has an invalid length. [ 636.013793][T24262] tipc: Disabling bearer [ 636.058611][T24270] netlink: 'syz.1.4771': attribute type 10 has an invalid length. [ 636.162707][T24275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4774'. [ 636.239728][T24279] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 636.334819][T24259] ip6_vti0 speed is unknown, defaulting to 1000 [ 636.345973][T24283] xt_TCPMSS: Only works on TCP SYN packets [ 636.541305][T24240] wg1 speed is unknown, defaulting to 1000 [ 636.700962][T24300] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4783'. [ 636.710953][T24301] gretap3: entered promiscuous mode [ 636.719100][T24301] batman_adv: batadv0: Adding interface: gretap3 [ 636.735275][T24301] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 636.777598][T24301] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 636.955261][T24264] ip6_vti0 speed is unknown, defaulting to 1000 [ 637.216616][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4779'. [ 637.421157][T24321] tipc: Enabled bearer , priority 0 [ 637.429792][T24321] syzkaller0: entered promiscuous mode [ 637.436293][T24321] syzkaller0: entered allmulticast mode [ 637.451832][T24321] tipc: Resetting bearer [ 637.461557][T24320] tipc: Resetting bearer [ 637.489472][T24320] tipc: Disabling bearer [ 637.606347][T24306] ip6_vti0 speed is unknown, defaulting to 1000 [ 637.615179][T24259] wg1 speed is unknown, defaulting to 1000 [ 637.746504][T24243] wg1 speed is unknown, defaulting to 1000 [ 638.797922][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4793'. [ 638.807282][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4793'. [ 639.001450][T24264] wg1 speed is unknown, defaulting to 1000 [ 639.093894][T24306] wg1 speed is unknown, defaulting to 1000 [ 640.565747][T24370] netlink: 'syz.1.4802': attribute type 13 has an invalid length. [ 640.573684][T24370] netlink: 'syz.1.4802': attribute type 17 has an invalid length. [ 640.754238][T24370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.350949][T24405] __nla_validate_parse: 1 callbacks suppressed [ 641.350969][T24405] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4812'. [ 641.366297][T24407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4813'. [ 641.437846][T24407] gtp0: entered promiscuous mode [ 641.442848][T24407] gtp0: entered allmulticast mode [ 641.488264][T24412] tipc: Enabled bearer , priority 0 [ 641.499599][T24417] syzkaller0: entered promiscuous mode [ 641.508916][T24417] syzkaller0: entered allmulticast mode [ 641.529431][T24412] syzkaller0: entered promiscuous mode [ 641.537859][T24412] syzkaller0: entered allmulticast mode [ 641.561928][T24412] siw: device registration error -23 [ 641.590703][T24412] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 641.606985][T24411] tipc: Resetting bearer [ 641.642377][T24411] tipc: Disabling bearer [ 641.771386][T24428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'. [ 642.020784][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'. [ 642.086332][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'. [ 642.100200][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'. [ 642.359907][T24469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4833'. [ 642.392338][T24469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4833'. [ 642.413356][T24470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4833'. [ 642.435890][T24470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4833'. [ 642.488282][T24476] netlink: 'syz.1.4835': attribute type 1 has an invalid length. [ 642.541278][T24476] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 642.666383][T24491] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 642.829904][T24498] SET target dimension over the limit! [ 642.840631][T24498] syzkaller0: entered promiscuous mode [ 642.846654][T24498] syzkaller0: entered allmulticast mode [ 642.888986][T24501] tipc: Started in network mode [ 642.894592][T24501] tipc: Node identity b2d85762ea26, cluster identity 4711 [ 642.903430][T24501] tipc: Enabled bearer , priority 0 [ 642.950487][T24501] syzkaller0: entered promiscuous mode [ 642.956531][T24501] syzkaller0: entered allmulticast mode [ 642.974725][T24501] tipc: Resetting bearer [ 642.984202][T24500] tipc: Resetting bearer [ 643.045622][T24500] tipc: Disabling bearer [ 643.680470][T24540] syzkaller1: entered promiscuous mode [ 643.687232][T24540] syzkaller1: entered allmulticast mode [ 644.067283][T24561] netlink: 'syz.1.4853': attribute type 10 has an invalid length. [ 644.410698][T24571] ip6_vti0 speed is unknown, defaulting to 1000 [ 644.816363][T24571] wg1 speed is unknown, defaulting to 1000 [ 645.563227][T24634] ip6_vti0 speed is unknown, defaulting to 1000 [ 645.752732][T24636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.844697][T24648] bridge_slave_1: entered allmulticast mode [ 645.851657][T24647] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 645.875423][T24647] netlink: 'syz.2.4875': attribute type 8 has an invalid length. [ 645.899281][T24647] netlink: 'syz.2.4875': attribute type 16 has an invalid length. [ 645.916253][T24647] netlink: 'syz.2.4875': attribute type 17 has an invalid length. [ 645.937251][T24647] veth1_vlan: left allmulticast mode [ 645.985577][T24647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 646.217461][T24639] netlink: 'syz.6.4871': attribute type 6 has an invalid length. [ 646.612160][T24672] __nla_validate_parse: 6 callbacks suppressed [ 646.612180][T24672] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4882'. [ 646.973052][T24700] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4891'. [ 647.112140][T24634] wg1 speed is unknown, defaulting to 1000 [ 647.147823][T24712] ip6gre0: entered promiscuous mode [ 647.157135][T24712] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 647.161983][T24715] netlink: 'syz.2.4896': attribute type 1 has an invalid length. [ 647.192080][T24712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 647.211531][T24715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4896'. [ 647.230510][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4896'. [ 647.289563][T24719] bpq0: entered promiscuous mode [ 647.711180][T24740] netlink: 'syz.1.4903': attribute type 64 has an invalid length. [ 647.960340][T24748] netlink: 'syz.2.4905': attribute type 15 has an invalid length. [ 648.376921][T24773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4912'. [ 648.407118][T24773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4912'. [ 648.421571][T24774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.435293][T24773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4912'. [ 648.496453][T24776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.484855][T24805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4919'. [ 649.893297][T24819] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.975123][T24832] ip6t_srh: unknown srh invflags 4000 [ 649.983815][T24832] sctp: [Deprecated]: syz.1.4927 (pid 24832) Use of int in maxseg socket option. [ 649.983815][T24832] Use struct sctp_assoc_value instead [ 650.365329][T24831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4924'. [ 650.521244][T24821] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.067384][T24843] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.138600][T24819] wg1 speed is unknown, defaulting to 1000 [ 651.546246][T24860] syzkaller1: entered promiscuous mode [ 651.565371][T24860] syzkaller1: entered allmulticast mode [ 651.721681][T24821] wg1 speed is unknown, defaulting to 1000 [ 652.042788][T24870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4935'. [ 652.053397][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4935'. [ 652.369284][T24874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4936'. [ 652.389716][T24874] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 652.443403][T24878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4936'. [ 652.512844][T24879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4936'. [ 652.576387][T24843] wg1 speed is unknown, defaulting to 1000 [ 652.774603][T24888] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4940'. [ 652.967215][T24890] 8021q: adding VLAN 0 to HW filter on device .` [ 653.005264][T24890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.469620][T24899] IPVS: persistence engine module ip_vs_pe_ not found [ 653.994529][T24916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4948'. [ 654.016211][T24916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4948'. [ 654.288337][T24936] pimreg: entered allmulticast mode [ 654.317157][T24936] pimreg: left allmulticast mode [ 654.659705][T24953] netlink: 'syz.2.4959': attribute type 11 has an invalid length. [ 654.667764][T24953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4959'. [ 654.752874][T24951] bond2: (slave veth5): Enslaving as an active interface with a down link [ 654.757609][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4961'. [ 654.787694][T24951] netlink: 'syz.0.4958': attribute type 32 has an invalid length. [ 654.851648][T24955] bond2: (slave ip6gretap1): making interface the new active one [ 654.863990][T24955] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 654.906093][T24966] syzkaller1: entered promiscuous mode [ 654.915188][T24966] syzkaller1: entered allmulticast mode [ 654.935037][T24967] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 657.829127][T24969] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.896844][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 658.321263][T25001] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.690788][T25036] tipc: Enabled bearer , priority 0 [ 658.740597][T25034] tipc: Resetting bearer [ 658.788006][T25037] syzkaller0: entered promiscuous mode [ 658.793685][T25037] syzkaller0: entered allmulticast mode [ 658.828224][T24969] wg1 speed is unknown, defaulting to 1000 [ 658.866394][T25033] tipc: Resetting bearer [ 658.890058][T25033] tipc: Disabling bearer [ 659.019557][T25045] __nla_validate_parse: 1 callbacks suppressed [ 659.019575][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 659.042926][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4982'. [ 659.226411][T25001] wg1 speed is unknown, defaulting to 1000 [ 659.302017][T25047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.448944][T25047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.619854][T25047] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.693308][T25047] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.743432][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'. [ 659.856176][ T9007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.889749][ T9007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.957347][ T8575] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.993007][ T8575] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.753518][T25092] bond3: (slave tunl0): Device is not bonding slave [ 660.790299][T25092] bond3: option active_slave: invalid value (tunl0) [ 660.808512][T25092] bond3 (unregistering): Released all slaves [ 661.043974][T25103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4996'. [ 661.122891][T25104] IPVS: length: 223 != 73752 [ 661.136649][T25106] IPVS: length: 223 != 73752 [ 661.389525][T25113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4999'. [ 661.422108][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4998'. [ 661.646858][T25110] vxcan5: entered promiscuous mode [ 661.733746][T25137] syzkaller1: entered promiscuous mode [ 661.740181][T25137] syzkaller1: entered allmulticast mode [ 662.040036][T25157] syzkaller0: entered promiscuous mode [ 662.052680][T25157] syzkaller0: entered allmulticast mode [ 662.326896][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5015'. [ 662.366898][T25183] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5017'. [ 662.392632][T25184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5017'. [ 662.471832][T25189] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.556817][T25193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.660971][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5022'. [ 662.867138][T25191] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.970189][T25209] sctp: [Deprecated]: syz.1.5024 (pid 25209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.970189][T25209] Use struct sctp_sack_info instead [ 663.022063][T25209] netlink: 'syz.1.5024': attribute type 48 has an invalid length. [ 663.476230][T25189] wg1 speed is unknown, defaulting to 1000 [ 664.046092][T25243] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.599949][T25191] wg1 speed is unknown, defaulting to 1000 [ 664.628707][T25243] wg1 speed is unknown, defaulting to 1000 [ 664.710959][T25253] __nla_validate_parse: 1 callbacks suppressed [ 664.710982][T25253] netlink: 3672 bytes leftover after parsing attributes in process `syz.1.5037'. [ 664.785740][T25254] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5037'. [ 665.638333][T25269] netlink: 'syz.2.5040': attribute type 9 has an invalid length. [ 666.057134][T25277] ip6gre1: entered promiscuous mode [ 666.427670][T25298] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5047'. [ 666.445244][T25298] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 666.505346][T25301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5047'. [ 666.651446][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5051'. [ 666.768867][T25306] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5051'. [ 667.389501][T25313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.593257][T25341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.929167][T25357] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 668.055460][T25364] tipc: Enabled bearer , priority 10 [ 668.081772][T25363] ip6_vti0 speed is unknown, defaulting to 1000 [ 668.411622][T25381] pim6reg1: entered promiscuous mode [ 668.418143][T25381] pim6reg1: entered allmulticast mode [ 668.948673][T25363] wg1 speed is unknown, defaulting to 1000 [ 669.055832][ T7269] tipc: Node number set to 803603729 [ 669.215934][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5078'. [ 669.823213][T25414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 669.935779][T25419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5081'. [ 669.946795][T25419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5081'. [ 670.442445][T25430] bond6 (unregistering): Released all slaves [ 670.502924][T25437] geneve0: entered allmulticast mode [ 671.503465][T25478] macsec2: entered promiscuous mode [ 671.519721][T25478] hsr0: entered promiscuous mode [ 671.530049][T25478] macsec2: entered allmulticast mode [ 671.539956][T25478] hsr0: entered allmulticast mode [ 671.547392][T25478] hsr_slave_0: entered allmulticast mode [ 671.566904][T25481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'. [ 671.586411][T25478] hsr0: left allmulticast mode [ 671.591943][T25478] hsr_slave_0: left allmulticast mode [ 671.599949][T25478] hsr0: left promiscuous mode [ 671.738719][T25480] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5097'. [ 671.752180][T25480] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5097'. [ 672.013485][T25490] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.659931][T25505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5102'. [ 672.704560][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5103'. [ 672.713782][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5103'. [ 672.725765][T25508] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 672.876822][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5104'. [ 672.974364][T25490] wg1 speed is unknown, defaulting to 1000 [ 672.981592][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.090775][T25329] Set syz1 is full, maxelem 65536 reached [ 673.160570][T25518] netlink: 'syz.0.5106': attribute type 2 has an invalid length. [ 673.169743][T25518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5106'. [ 673.223472][T25519] netlink: 'syz.0.5106': attribute type 2 has an invalid length. [ 673.339518][T25521] nbd: nbd0 already in use [ 673.345302][T25521] block nbd0: NBD_DISCONNECT [ 673.351197][T25521] block nbd0: Send disconnect failed -32 [ 673.357143][T25515] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.359352][T25521] block nbd0: shutting down sockets [ 673.393639][T25521] vlan3: entered allmulticast mode [ 673.533960][T25523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.808871][T25515] wg1 speed is unknown, defaulting to 1000 [ 673.900787][T25530] ip6_vti0 speed is unknown, defaulting to 1000 [ 674.592197][T25541] block nbd0: Unsupported socket: should be TCP or UNIX. [ 674.713402][T25544] netlink: 'syz.1.5115': attribute type 1 has an invalid length. [ 674.850068][T25544] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.918634][T25546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.937412][T25546] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 674.954238][T25546] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 674.964572][T25551] __nla_validate_parse: 2 callbacks suppressed [ 674.964595][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5117'. [ 675.049430][T25548] veth1: entered promiscuous mode [ 675.143734][T25548] bond6: (slave veth1): Enslaving as an active interface with a down link [ 675.299008][T25530] wg1 speed is unknown, defaulting to 1000 [ 675.342937][T25511] wg1 speed is unknown, defaulting to 1000 [ 675.850766][T25573] tipc: Enabled bearer , priority 0 [ 675.868591][T25573] syzkaller0: entered promiscuous mode [ 675.898143][T25573] syzkaller0: entered allmulticast mode [ 675.976114][T25573] tipc: Resetting bearer [ 676.042662][T25572] tipc: Resetting bearer [ 676.178058][T25572] tipc: Disabling bearer [ 676.497697][T25585] team0: Device ipvlan1 failed to register rx_handler [ 676.709264][T25592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5129'. [ 677.005803][T25597] x_tables: duplicate underflow at hook 2 [ 677.621468][T25626] vlan0: entered promiscuous mode [ 677.740194][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'. [ 677.913787][T25638] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.260512][T25650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.272160][T25650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.292118][ T9007] nci: nci_rx_work: unknown MT 0x7 [ 678.432608][T25650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.460349][T25650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.589399][T25650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.608726][T25650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.616960][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'. [ 678.629575][T25668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 678.645937][T25668] geneve2: entered promiscuous mode [ 678.651948][T25668] geneve2: entered allmulticast mode [ 678.696363][T25638] wg1 speed is unknown, defaulting to 1000 [ 678.744636][T25650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.757849][T25650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.903091][ T8575] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.926316][ T8575] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.970490][ T8575] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.980293][ T8575] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.142670][ T8582] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.155678][ T8582] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.197950][ T8582] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.207377][ T8582] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.273852][T25678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5152'. [ 679.316034][T25681] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5151'. [ 679.330553][T25678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5152'. [ 679.720392][T25695] ip6_vti0 speed is unknown, defaulting to 1000 [ 679.860947][T25706] tipc: Enabled bearer , priority 0 [ 679.877413][T25706] syzkaller0: entered promiscuous mode [ 679.921743][T25706] syzkaller0: entered allmulticast mode [ 679.951971][T25706] tipc: Resetting bearer [ 679.965208][T25705] tipc: Resetting bearer [ 680.020764][T25705] tipc: Disabling bearer [ 680.399686][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 680.410006][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 680.557431][T25726] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.566945][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5167'. [ 680.659420][T25737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5168'. [ 680.726725][T25709] netlink: 'syz.2.5156': attribute type 6 has an invalid length. [ 680.903294][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 680.967763][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 680.993335][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 681.022289][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 681.042950][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 681.058401][T25744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5169'. [ 681.163925][T25695] wg1 speed is unknown, defaulting to 1000 [ 681.519281][T25726] wg1 speed is unknown, defaulting to 1000 [ 682.641756][T25808] netlink: 'syz.6.5186': attribute type 13 has an invalid length. [ 682.676326][T25808] netlink: 'syz.6.5186': attribute type 17 has an invalid length. [ 682.940983][T25808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.025200][T25814] unsupported nla_type 52263 [ 683.128679][T25821] tipc: Enabled bearer , priority 0 [ 683.157527][T25821] syzkaller0: entered promiscuous mode [ 683.164264][T25821] syzkaller0: entered allmulticast mode [ 683.197976][T25821] tipc: Resetting bearer [ 683.246978][T25820] tipc: Resetting bearer [ 683.465948][T25820] tipc: Disabling bearer [ 683.753802][T25849] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 683.875133][T25850] xt_hashlimit: size too large, truncated to 1048576 [ 684.570246][T25867] ip6_vti0 speed is unknown, defaulting to 1000 [ 685.319220][T25867] wg1 speed is unknown, defaulting to 1000 [ 685.653329][T25902] netlink: 'syz.6.5213': attribute type 32 has an invalid length. [ 686.484871][T25930] netlink: 'syz.1.5222': attribute type 13 has an invalid length. [ 686.505529][T25941] __nla_validate_parse: 35 callbacks suppressed [ 686.505550][T25941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5223'. [ 686.523827][T25930] netlink: 'syz.1.5222': attribute type 17 has an invalid length. [ 686.557758][T25930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.632624][T25944] tipc: Enabled bearer , priority 0 [ 686.641687][T25944] syzkaller0: entered promiscuous mode [ 686.654405][T25944] syzkaller0: entered allmulticast mode [ 686.671682][T25944] tipc: Enabling of bearer rejected, already enabled [ 686.702938][T25944] tipc: Resetting bearer [ 686.718781][T25943] tipc: Resetting bearer [ 686.741648][T25943] tipc: Disabling bearer [ 686.793583][T25948] ip6_vti0 speed is unknown, defaulting to 1000 [ 686.866547][T25955] x_tables: duplicate underflow at hook 2 [ 686.965120][T25960] gre0: entered promiscuous mode [ 686.979907][T25960] gre0: entered allmulticast mode [ 687.023191][T25964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5232'. [ 687.128441][T25967] netlink: 'syz.4.5232': attribute type 13 has an invalid length. [ 687.169513][T25967] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5232'. [ 687.268721][T25962] ip6_vti0 speed is unknown, defaulting to 1000 [ 687.321632][T25977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5236'. [ 687.392256][T25977] veth7: entered promiscuous mode [ 687.686766][T25993] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 687.726806][T25992] openvswitch: netlink: Actions may not be safe on all matching packets [ 687.769791][T25992] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5240'. [ 687.810680][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5240'. [ 687.816332][T25948] wg1 speed is unknown, defaulting to 1000 [ 687.884574][T25992] ip6gre0: Master is either lo or non-ether device [ 687.906735][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5241'. [ 687.916719][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5241'. [ 688.228943][T25962] wg1 speed is unknown, defaulting to 1000 [ 688.631734][T26009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5245'. [ 688.689102][T26009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5245'. [ 688.971433][T26021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.419215][T26035] ip6_vti0 speed is unknown, defaulting to 1000 [ 689.581802][T26048] tipc: Enabled bearer , priority 0 [ 689.590368][T26048] syzkaller0: entered promiscuous mode [ 689.597425][T26048] syzkaller0: entered allmulticast mode [ 689.655248][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 689.713613][T26048] tipc: Resetting bearer [ 689.836293][T26048] tipc: Resetting bearer [ 689.870193][T26048] tipc: Disabling bearer [ 689.918124][T26063] netlink: 'syz.0.5260': attribute type 4 has an invalid length. [ 690.119037][T26035] wg1 speed is unknown, defaulting to 1000 [ 690.250305][T26074] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.638662][T26083] ip6_vti0 speed is unknown, defaulting to 1000 [ 691.694017][T26074] wg1 speed is unknown, defaulting to 1000 [ 691.719525][T26083] wg1 speed is unknown, defaulting to 1000 [ 691.935188][T26118] __nla_validate_parse: 38 callbacks suppressed [ 691.935207][T26118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5274'. [ 691.956749][T26118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5274'. [ 692.163122][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'. [ 692.181428][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'. [ 692.194821][T26121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.470101][T26129] netlink: 'syz.1.5276': attribute type 2 has an invalid length. [ 692.495526][T26129] netlink: 'syz.1.5276': attribute type 11 has an invalid length. [ 692.542451][T26129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5276'. [ 693.054362][T26150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5283'. [ 693.232231][T26159] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5286'. [ 693.439289][T26171] tipc: Enabled bearer , priority 0 [ 693.458616][T26171] syzkaller0: entered promiscuous mode [ 693.475390][T26171] syzkaller0: entered allmulticast mode [ 693.520080][T26170] tipc: Resetting bearer [ 693.556074][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5291'. [ 693.569822][T26170] tipc: Disabling bearer [ 693.610403][T26177] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.052296][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5298'. [ 694.109076][T26195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 694.271652][T26211] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 694.333922][T26207] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.472157][T26177] wg1 speed is unknown, defaulting to 1000 [ 695.290531][T26229] tipc: Enabled bearer , priority 0 [ 695.309704][T26229] syzkaller0: entered promiscuous mode [ 695.329036][T26229] syzkaller0: entered allmulticast mode [ 695.381085][T26228] tipc: Resetting bearer [ 695.413938][T26228] tipc: Disabling bearer [ 695.440713][T26233] syzkaller1: entered promiscuous mode [ 695.446721][T26233] syzkaller1: entered allmulticast mode [ 695.540535][T26207] wg1 speed is unknown, defaulting to 1000 [ 695.695676][T26237] netlink: 'syz.2.5310': attribute type 1 has an invalid length. [ 695.739632][T26239] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 695.827742][T26237] bond6: entered promiscuous mode [ 695.833334][T26237] 8021q: adding VLAN 0 to HW filter on device bond6 [ 695.854173][T26240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 695.862195][T26240] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 695.873576][T26240] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 695.896695][T26240] bond6: (slave wireguard0): making interface the new active one [ 695.904768][T26240] wireguard0: entered promiscuous mode [ 695.911676][T26240] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 696.764621][T26273] tipc: Enabled bearer , priority 0 [ 696.785401][T26273] syzkaller0: entered promiscuous mode [ 696.791137][T26273] syzkaller0: entered allmulticast mode [ 696.825265][T26271] tipc: Resetting bearer [ 696.849557][T26271] tipc: Disabling bearer [ 696.894174][T26276] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 697.200545][T26293] ip6_vti0 speed is unknown, defaulting to 1000 [ 697.492709][T26307] IPVS: set_ctl: invalid protocol: 55210 172.30.1.7:20000 [ 697.689071][T26311] __nla_validate_parse: 7 callbacks suppressed [ 697.689092][T26311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5330'. [ 697.819234][T26314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5330'. [ 698.019552][T26293] wg1 speed is unknown, defaulting to 1000 [ 698.245360][T26325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5334'. [ 698.268882][T26322] tipc: Enabled bearer , priority 0 [ 698.278224][T26322] syzkaller0: entered promiscuous mode [ 698.283854][T26322] syzkaller0: entered allmulticast mode [ 698.356932][T26322] tipc: Resetting bearer [ 698.382746][T26319] tipc: Resetting bearer [ 698.443182][T26319] tipc: Disabling bearer [ 698.550900][T26338] x_tables: duplicate underflow at hook 3 [ 699.240787][T26362] geneve0: entered promiscuous mode [ 699.567180][T26375] tipc: Enabled bearer , priority 0 [ 699.579258][T26375] syzkaller0: entered promiscuous mode [ 699.589722][T26375] syzkaller0: entered allmulticast mode [ 699.796938][T26374] tipc: Resetting bearer [ 699.841774][T26374] tipc: Disabling bearer [ 700.169375][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.178228][T26405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5358'. [ 700.195695][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.203493][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.211956][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.220096][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.227600][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.234914][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.242345][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.250149][T26406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.287331][T26405] ip6_vti0 speed is unknown, defaulting to 1000 [ 700.813754][T26430] tap0: tun_chr_ioctl cmd 1074025677 [ 700.833332][T26430] tap0: linktype set to 0 [ 701.556974][T26449] can: request_module (can-proto-0) failed. [ 701.581500][T26454] netlink: 'syz.6.5373': attribute type 3 has an invalid length. [ 701.603216][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5374'. [ 701.622536][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5373'. [ 701.645352][T26405] wg1 speed is unknown, defaulting to 1000 [ 701.657403][T26454] netlink: 'syz.6.5373': attribute type 3 has an invalid length. [ 701.669127][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5371'. [ 701.713874][T26457] 8021q: adding VLAN 0 to HW filter on device bond7 [ 701.887649][T26473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'. [ 701.910532][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'. [ 701.945363][T26473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5376'. [ 705.689113][T26482] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 705.699163][T26482] bridge5: entered allmulticast mode [ 705.981370][T26514] __nla_validate_parse: 1 callbacks suppressed [ 705.981397][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5385'. [ 706.342089][T26529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5390'. [ 706.376832][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 706.376853][ T30] audit: type=1800 audit(1764263704.000:42): pid=26533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5391" name="blkio.bfq.time_recursive" dev="tmpfs" ino=618 res=0 errno=0 [ 706.532729][T26541] netlink: 'syz.4.5395': attribute type 10 has an invalid length. [ 706.555573][T26541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5395'. [ 706.575517][T26541] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 706.589438][T26541] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 706.616993][T26541] net_ratelimit: 3321 callbacks suppressed [ 706.617019][T26541] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 706.757895][T26556] netlink: 'syz.6.5396': attribute type 1 has an invalid length. [ 706.784402][T26557] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.835462][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5397'. [ 707.048746][T26565] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 707.100176][T26557] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.151606][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 707.203434][T26559] veth0_to_bond: entered allmulticast mode [ 707.203434][T26563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 707.239508][T26557] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.293820][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 707.397571][T26576] netlink: 'syz.4.5400': attribute type 4 has an invalid length. [ 707.429577][T26557] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.477182][T26574] netlink: 'syz.4.5400': attribute type 4 has an invalid length. [ 707.637491][ T9007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.713333][ T8566] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.747304][ T8566] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.797624][ T8575] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.915512][T26587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5403'. [ 707.955504][T26587] netlink: 'syz.0.5403': attribute type 1 has an invalid length. [ 708.524621][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5413'. [ 708.542819][T26614] bond3: option min_links: invalid value (18446744073709551612) [ 708.552295][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5413'. [ 708.565218][T26614] bond3: option min_links: allowed values 0 - 2147483647 [ 708.578406][T26614] bond3 (unregistering): Released all slaves [ 708.861723][T26632] x_tables: duplicate underflow at hook 3 [ 709.009300][T26638] ip6_vti0 speed is unknown, defaulting to 1000 [ 709.970479][T26638] wg1 speed is unknown, defaulting to 1000 [ 710.394060][T26670] bridge_slave_0: default FDB implementation only supports local addresses [ 710.577395][T26680] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.079399][T26696] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.093197][T26699] pim6reg1: entered promiscuous mode [ 711.102218][T26699] pim6reg1: entered allmulticast mode [ 711.223848][T26680] wg1 speed is unknown, defaulting to 1000 [ 711.316273][T26709] __nla_validate_parse: 2 callbacks suppressed [ 711.316292][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 711.661601][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 711.706805][T26726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5440'. [ 711.748334][T26728] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5441'. [ 712.103886][T26696] wg1 speed is unknown, defaulting to 1000 [ 712.112035][T26732] siw: device registration error -23 [ 712.329653][T26740] ip6_vti0 speed is unknown, defaulting to 1000 [ 712.664696][T26761] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 713.178487][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5455'. [ 713.438250][T26786] ip6_vti0 speed is unknown, defaulting to 1000 [ 713.445154][T19301] IPVS: starting estimator thread 0... [ 713.536683][T26795] IPVS: using max 27 ests per chain, 64800 per kthread [ 713.945442][T26740] wg1 speed is unknown, defaulting to 1000 [ 713.978552][T26801] ip6_vti0 speed is unknown, defaulting to 1000 [ 714.374690][T26806] netlink: 'syz.2.5462': attribute type 1 has an invalid length. [ 714.501832][T26806] 8021q: adding VLAN 0 to HW filter on device bond8 [ 714.536961][T26808] bond8: (slave dummy0): making interface the new active one [ 714.556914][T26808] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 714.868368][T26809] bond8 (unregistering): (slave dummy0): Releasing active interface [ 714.883320][T26809] bond8 (unregistering): Released all slaves [ 714.900403][T26786] wg1 speed is unknown, defaulting to 1000 [ 715.264041][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5464'. [ 715.543691][T26801] wg1 speed is unknown, defaulting to 1000 [ 715.564794][T26817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5465'. [ 715.903989][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5468'. [ 715.948935][T26822] openvswitch: netlink: Flow actions attr not present in new flow. [ 716.113807][T26828] netlink: 47 bytes leftover after parsing attributes in process `syz.2.5470'. [ 716.358037][T26833] netlink: 'syz.2.5471': attribute type 1 has an invalid length. [ 716.399440][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5471'. [ 716.919491][T26844] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5474'. [ 717.272715][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5478'. [ 717.294001][T26863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5480'. [ 717.415668][ T7247] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 717.589678][T26871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5483'. [ 717.647103][T26857] sctp: [Deprecated]: syz.2.5479 (pid 26857) Use of int in maxseg socket option. [ 717.647103][T26857] Use struct sctp_assoc_value instead [ 717.715373][ T7247] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 718.201964][T26891] netlink: 'syz.1.5487': attribute type 11 has an invalid length. [ 718.215259][T26891] netlink: 'syz.1.5487': attribute type 11 has an invalid length. [ 718.262980][T26891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5487'. [ 718.371594][T26902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5490'. [ 718.456681][T26903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5488'. [ 718.541771][T26900] can: request_module (can-proto-5) failed. [ 718.588200][T26883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.091636][T26920] syzkaller0: entered promiscuous mode [ 719.115138][T26920] syzkaller0: entered allmulticast mode [ 719.143632][T26922] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 719.147968][T26920] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5495'. [ 719.504661][T26928] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.041514][T26931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5499'. [ 720.193665][T26936] IPv6: Can't replace route, no match found [ 720.305846][T26940] netlink: 'syz.0.5502': attribute type 1 has an invalid length. [ 720.601049][T26944] netlink: 'syz.6.5504': attribute type 1 has an invalid length. [ 720.925230][T26944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.010797][T26948] vlan0: entered allmulticast mode [ 721.025177][T26948] veth1: entered allmulticast mode [ 721.046616][T26948] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 721.075741][T26950] bpq0: left promiscuous mode [ 721.177610][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.192638][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.203695][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.219770][T26928] wg1 speed is unknown, defaulting to 1000 [ 721.241009][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.255437][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.416518][T26954] ip6_vti0 speed is unknown, defaulting to 1000 [ 721.858552][T26965] bond1: option all_slaves_active: invalid value (13) [ 721.900723][T26965] bond1 (unregistering): Released all slaves [ 722.396422][T26954] wg1 speed is unknown, defaulting to 1000 [ 722.519464][T26975] __nla_validate_parse: 3 callbacks suppressed [ 722.519485][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5511'. [ 722.561960][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5511'. [ 722.776996][T26981] netlink: 'syz.6.5513': attribute type 1 has an invalid length. [ 722.814521][T26981] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5513'. [ 722.985245][T26993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5515'. [ 723.140142][T26954] chnl_net:caif_netlink_parms(): no params data found [ 723.335352][ T5832] Bluetooth: hci0: command tx timeout [ 723.490891][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5521'. [ 723.513058][T26954] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.521625][T26954] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.530109][T26954] bridge_slave_0: entered allmulticast mode [ 723.539708][T26954] bridge_slave_0: entered promiscuous mode [ 723.593519][T26954] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.602169][T26954] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.625474][T26954] bridge_slave_1: entered allmulticast mode [ 723.642711][T26954] bridge_slave_1: entered promiscuous mode [ 723.712408][T27020] siw: device registration error -23 [ 723.746960][T27020] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 723.797150][T26954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.846859][T26954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.006808][T26954] team0: Port device team_slave_0 added [ 724.048687][T26954] team0: Port device team_slave_1 added [ 724.242546][T26954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.280906][T26954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.317055][T26954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.356708][T26954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.366443][T26954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.397805][T26954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.437853][T27047] syzkaller0: entered promiscuous mode [ 724.446863][T27047] syzkaller0: entered allmulticast mode [ 724.831198][T26954] hsr_slave_0: entered promiscuous mode [ 724.840706][T26954] hsr_slave_1: entered promiscuous mode [ 724.849353][T26954] debugfs: 'hsr0' already exists in 'hsr' [ 724.856965][T26954] Cannot create hsr debugfs directory [ 724.925980][T27074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5532'. [ 725.053964][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 725.120634][T26954] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.212429][T26954] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.283925][T26954] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.367988][T26954] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.425032][ T5832] Bluetooth: hci0: command tx timeout [ 725.706955][T26954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.716449][T27103] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5539'. [ 725.746148][T26954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.797592][T26954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 725.832731][T27111] netlink: 'syz.2.5541': attribute type 32 has an invalid length. [ 725.847840][T26954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.999803][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 726.064456][T27123] tipc: Enabled bearer , priority 0 [ 726.085694][T27123] syzkaller0: entered promiscuous mode [ 726.093509][T27123] syzkaller0: entered allmulticast mode [ 726.168013][T27122] tipc: Resetting bearer [ 726.197298][T27122] tipc: Disabling bearer [ 726.269246][T26954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.335194][T26954] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.356548][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.365378][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.444718][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.452830][ T9008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.462063][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5547'. [ 726.462766][T27137] netlink: 'syz.4.5547': attribute type 29 has an invalid length. [ 726.473937][T27139] netlink: 'syz.4.5547': attribute type 29 has an invalid length. [ 726.488632][T27141] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 726.500516][T27141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.534155][T27143] Bluetooth: MGMT ver 1.23 [ 726.843973][T27156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.894703][T26954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.981049][T26954] veth0_vlan: entered promiscuous mode [ 727.009866][T26954] veth1_vlan: entered promiscuous mode [ 727.030280][T27163] netlink: 'syz.6.5554': attribute type 3 has an invalid length. [ 727.073375][T26954] veth0_macvtap: entered promiscuous mode [ 727.087884][T26954] veth1_macvtap: entered promiscuous mode [ 727.115560][T26954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.139484][T26954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.163020][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.174153][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.201033][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.211967][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.371655][ T9262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.385473][ T9262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.489706][ T9262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.499660][ T5832] Bluetooth: hci0: command tx timeout [ 727.519582][ T9262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.668035][T27185] __nla_validate_parse: 7 callbacks suppressed [ 727.668057][T27185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5561'. [ 727.798544][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5561'. [ 727.818605][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 728.407464][T27224] netlink: 'syz.0.5571': attribute type 1 has an invalid length. [ 728.480808][T27224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.498910][T27226] erspan0: entered allmulticast mode [ 728.543806][T27228] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5572'. [ 728.550323][T27226] bond3: (slave erspan0): making interface the new active one [ 728.554964][T27228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5572'. [ 728.567427][T27226] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 728.709484][T27224] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 728.803616][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 729.299274][T27272] bridge0: entered promiscuous mode [ 729.320229][T27272] macsec1: entered promiscuous mode [ 729.342957][T27272] bridge0: port 3(macsec1) entered blocking state [ 729.369123][T27272] bridge0: port 3(macsec1) entered disabled state [ 729.402554][T27272] macsec1: entered allmulticast mode [ 729.410556][T27272] bridge0: entered allmulticast mode [ 729.432756][T27272] macsec1: left allmulticast mode [ 729.442616][T27272] bridge0: left allmulticast mode [ 729.456709][T27272] bridge0: left promiscuous mode [ 729.503839][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5581'. [ 729.579927][ T5832] Bluetooth: hci0: command tx timeout [ 729.846098][T27291] ip6_vti0 speed is unknown, defaulting to 1000 [ 730.541840][T27291] wg1 speed is unknown, defaulting to 1000 [ 730.740833][T27297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5590'. [ 731.069516][T27311] netlink: 'syz.0.5594': attribute type 11 has an invalid length. [ 731.095831][T27311] netlink: 'syz.0.5594': attribute type 11 has an invalid length. [ 731.135955][T27311] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5594'. [ 731.273258][T27322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5597'. [ 731.425561][T27326] veth0: mtu less than device minimum [ 731.699862][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5602'. [ 731.718218][T27339] tipc: Enabling of bearer rejected, failed to enable media [ 732.081311][T27355] nbd0: detected capacity change from 0 to 127 [ 732.101541][ T5832] block nbd0: Receive control failed (result -32) [ 732.231894][T27360] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.805756][T27398] ip6t_rpfilter: unknown options [ 733.204654][T27398] ip6_vti0 speed is unknown, defaulting to 1000 [ 733.425781][T27412] __nla_validate_parse: 1 callbacks suppressed [ 733.425804][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 733.457587][T27412] IPVS: length: 141 != 8 [ 733.632572][T27360] wg1 speed is unknown, defaulting to 1000 [ 733.972485][T27420] bridge0: port 3(hsr0) entered blocking state [ 733.981629][T27420] bridge0: port 3(hsr0) entered disabled state [ 733.992808][T27420] hsr0: entered allmulticast mode [ 734.008866][T27420] hsr_slave_0: entered allmulticast mode [ 734.057161][T27420] hsr_slave_1: entered allmulticast mode [ 734.117776][T27420] hsr0: entered promiscuous mode [ 734.139507][T27420] bridge0: port 3(hsr0) entered blocking state [ 734.147870][T27420] bridge0: port 3(hsr0) entered forwarding state [ 734.217594][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5617'. [ 734.228313][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5617'. [ 734.255601][T27430] tipc: Enabled bearer , priority 0 [ 734.267770][T27430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 734.309752][T27426] ip6_vti0 speed is unknown, defaulting to 1000 [ 734.319947][T27398] wg1 speed is unknown, defaulting to 1000 [ 734.343290][T27430] syzkaller0: entered promiscuous mode [ 734.368500][T27430] syzkaller0: entered allmulticast mode [ 734.421466][T27429] tipc: Resetting bearer [ 734.491071][T27429] tipc: Disabling bearer [ 734.535642][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5621'. [ 734.710042][T27435] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 734.729023][T27435] bond4 (unregistering): Released all slaves [ 735.262008][T27438] vxcan1: entered allmulticast mode [ 735.489217][T27457] netlink: 'syz.4.5625': attribute type 1 has an invalid length. [ 735.851824][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5627'. [ 736.393316][T27465] team_slave_0: left promiscuous mode [ 736.415797][T27465] team_slave_1: left promiscuous mode [ 736.431912][T27465] batadv1: left promiscuous mode [ 736.582416][T27465] wg1: left promiscuous mode [ 736.587317][T27465] wg1: left allmulticast mode [ 736.685842][T27465] bridge_slave_1: left allmulticast mode [ 736.799256][T27465] batadv_slave_0: left promiscuous mode [ 736.871883][T27465] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 736.881654][T27465] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 736.924827][T27465] geneve0: left promiscuous mode [ 736.947447][T27465] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 736.954824][T27465] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 736.970002][T27465] ip6gre1: left promiscuous mode [ 737.103586][T27465] bond6: left promiscuous mode [ 737.109965][T27465] veth5: left promiscuous mode [ 737.126544][T27465] batadv0: left allmulticast mode [ 737.136754][T27465] vlan3: left allmulticast mode [ 737.142158][T27465] bridge_slave_0: left allmulticast mode [ 737.149954][T27465] bond7: left promiscuous mode [ 737.213733][T27426] wg1 speed is unknown, defaulting to 1000 [ 737.246304][T27471] hsr_slave_0: left promiscuous mode [ 737.266671][T27471] hsr_slave_1: left promiscuous mode [ 737.330076][T27488] netlink: 'syz.0.5631': attribute type 1 has an invalid length. [ 737.344582][ T5900] wg1 speed is unknown, defaulting to 1000 [ 737.349271][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5631'. [ 737.356794][ T9262] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.371198][ T9262] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.392979][ T5900] syz0: Port: 1 Link DOWN [ 737.423961][ T9262] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.481185][ T9262] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.534452][T27492] netlink: 'syz.0.5633': attribute type 1 has an invalid length. [ 737.684633][T27497] netlink: 'syz.0.5634': attribute type 26 has an invalid length. [ 737.928125][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5637'. [ 737.947378][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5637'. [ 737.975212][T27507] x_tables: unsorted underflow at hook 3 [ 739.136846][T27545] netlink: 'syz.0.5644': attribute type 13 has an invalid length. [ 739.144718][T27545] netlink: 'syz.0.5644': attribute type 17 has an invalid length. [ 739.148128][T27543] syzkaller0: entered promiscuous mode [ 739.159399][T27543] syzkaller0: entered allmulticast mode [ 739.218987][T27545] gre0: left promiscuous mode [ 739.224342][T27545] gre0: left allmulticast mode [ 739.252154][T27545] erspan0: left allmulticast mode [ 739.320533][T27545] ip6gre0: left promiscuous mode [ 739.331857][T27553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5647'. [ 739.386608][T27555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.519243][T27555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.583098][T27545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 739.737607][T27547] ip6_vti0 speed is unknown, defaulting to 1000 [ 739.784839][T27568] netlink: 'syz.4.5650': attribute type 1 has an invalid length. [ 739.797001][T27568] netlink: 'syz.4.5650': attribute type 2 has an invalid length. [ 739.899132][T27570] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 739.901196][T27568] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 740.154787][T27586] IPv6: Can't replace route, no match found [ 740.572327][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'. [ 740.601988][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'. [ 740.686865][T27547] wg1 speed is unknown, defaulting to 1000 [ 740.700690][T27601] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5660'. [ 741.000171][T27615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5664'. [ 741.198262][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5665'. [ 741.222294][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5665'. [ 741.250408][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5666'. [ 741.343463][T27625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.543252][T27625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.618067][T27633] netlink: 'syz.4.5668': attribute type 1 has an invalid length. [ 741.709341][T27633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 741.756613][T27632] bond8: (slave gretap1): making interface the new active one [ 741.766556][T27632] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 742.090713][T27652] syzkaller1: entered promiscuous mode [ 742.096640][T27657] x_tables: duplicate underflow at hook 2 [ 742.115183][T27652] syzkaller1: entered allmulticast mode [ 742.168528][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5675'. [ 742.170185][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5675'. [ 742.371088][T27668] netlink: 'syz.0.5676': attribute type 3 has an invalid length. [ 742.512283][T27677] netlink: 'syz.2.5679': attribute type 13 has an invalid length. [ 742.522546][T27677] gretap0: refused to change device tx_queue_len [ 742.558312][T27677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 742.896655][T27695] netlink: 'syz.6.5683': attribute type 1 has an invalid length. [ 742.930291][T27695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.317548][T27710] tipc: Enabled bearer , priority 0 [ 743.346365][T27710] tipc: Resetting bearer [ 743.404731][T27709] tipc: Disabling bearer [ 743.428639][T27715] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 743.442906][T27713] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 743.783379][T27747] pimreg: entered allmulticast mode [ 743.882175][T27761] : renamed from bond_slave_0 [ 743.970022][T27765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 744.161773][T27768] bond1: option arp_validate: invalid value (18446744073491447809) [ 744.204679][T27768] bond1 (unregistering): Released all slaves [ 744.269368][T27780] tipc: Enabled bearer , priority 0 [ 744.282816][T27780] syzkaller0: entered promiscuous mode [ 744.288589][T27780] syzkaller0: entered allmulticast mode [ 744.427293][T27780] tipc: Resetting bearer [ 744.462605][T27779] tipc: Resetting bearer [ 744.528164][T27779] tipc: Disabling bearer [ 744.960794][T27811] __nla_validate_parse: 3 callbacks suppressed [ 744.960816][T27811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5715'. [ 745.030231][T27811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5715'. [ 745.272228][T27834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5721'. [ 745.504180][ T7254] IPVS: starting estimator thread 0... [ 745.605213][T27854] IPVS: using max 25 ests per chain, 60000 per kthread [ 745.726787][T27868] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 745.753722][T27867] bond0: option arp_validate: invalid value (55553) [ 746.820146][T27908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5738'. [ 748.864369][ T5832] Bluetooth: hci0: command tx timeout [ 754.422026][T27925] ip6_vti0 speed is unknown, defaulting to 1000 [ 799.263798][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 799.443435][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 799.773610][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.514760][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 801.202750][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 801.413758][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.693970][T27959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.101937][T27959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 802.282229][T27959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.034559][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.062726][T27956] Bluetooth: hci5: command tx timeout [ 806.152151][T27956] Bluetooth: hci0: command tx timeout [ 807.652837][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.003032][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.162152][ T5832] Bluetooth: hci5: command tx timeout [ 808.232390][ T5832] Bluetooth: hci0: command tx timeout [ 808.894233][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.153579][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.254826][ T5832] Bluetooth: hci5: command tx timeout [ 810.312389][ T5829] Bluetooth: hci0: command tx timeout [ 810.783755][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 812.063053][T27956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.144195][T27956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.309366][T27956] Bluetooth: hci5: command tx timeout [ 812.393312][T27956] Bluetooth: hci0: command tx timeout [ 812.724348][T27956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.333041][T27956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.582361][T27956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.613637][T27956] Bluetooth: hci1: command tx timeout [ 815.663049][ T5832] Bluetooth: hci1: command tx timeout [ 816.913833][ T5832] Bluetooth: hci3: command tx timeout [ 817.752706][ T5832] Bluetooth: hci1: command tx timeout [ 819.032427][ T5832] Bluetooth: hci3: command tx timeout [ 819.833489][ T5832] Bluetooth: hci1: command tx timeout [ 821.102456][ T5832] Bluetooth: hci3: command tx timeout [ 823.203174][ T5832] Bluetooth: hci3: command tx timeout [ 823.673867][ T8575] vlan0: left promiscuous mode [ 823.923470][ T8575] bridge_slave_0: left promiscuous mode [ 824.284189][ T8575] bridge0: port 1(vlan0) entered disabled state [ 842.644310][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.133823][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.371099][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.652877][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.884059][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 846.543571][ T5829] Bluetooth: hci4: command tx timeout [ 848.623577][ T5829] Bluetooth: hci4: command tx timeout [ 850.734318][ T5829] Bluetooth: hci4: command tx timeout [ 852.794234][ T5829] Bluetooth: hci4: command tx timeout [ 853.403589][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 853.652811][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 853.762706][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 854.173946][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 854.564156][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 857.342199][ T5832] Bluetooth: hci6: command tx timeout [ 859.423878][ T5829] Bluetooth: hci6: command tx timeout [ 859.532772][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 859.733879][T27956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 859.744000][T27959] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 860.064538][T27956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 860.318758][T27956] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 860.431574][T27956] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 860.722969][T27956] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 860.984084][T27959] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 861.033836][T27956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 861.543941][ T5832] Bluetooth: hci6: command tx timeout [ 861.752848][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 862.552908][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 862.682800][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 862.843878][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 863.133571][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 863.394216][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 863.594351][ T5832] Bluetooth: hci6: command tx timeout [ 863.904328][ T5832] Bluetooth: hci7: command tx timeout [ 864.472677][ T5829] Bluetooth: hci8: command tx timeout [ 865.982155][T27959] Bluetooth: hci7: command tx timeout [ 866.542842][T27959] Bluetooth: hci8: command tx timeout [ 866.551907][ T5832] Bluetooth: hci9: command tx timeout [ 868.064863][ T5832] Bluetooth: hci7: command tx timeout [ 868.622901][ T5832] Bluetooth: hci8: command tx timeout [ 868.623027][T27959] Bluetooth: hci9: command tx timeout [ 870.144794][T27959] Bluetooth: hci7: command tx timeout [ 870.710069][T27959] Bluetooth: hci8: command tx timeout [ 870.714056][ T5832] Bluetooth: hci9: command tx timeout [ 872.791903][T27959] Bluetooth: hci9: command tx timeout [ 883.483129][ T8575] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 883.914012][ T8575] ip6gretap1 (unregistering): left allmulticast mode [ 902.623316][ T5832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 902.911847][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 903.044196][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 903.404165][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 903.562751][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 906.644655][ T5829] Bluetooth: hci10: command tx timeout [ 908.788645][ T5829] Bluetooth: hci10: command tx timeout [ 910.694009][ T8575] batman_adv: batadv0: Removing interface: gretap3 [ 910.873989][ T5829] Bluetooth: hci10: command tx timeout [ 912.963108][ T5829] Bluetooth: hci10: command tx timeout [ 920.433878][T27959] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 920.642189][T27959] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 920.781533][T27959] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 921.584860][T27959] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 921.903844][T27959] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 924.872801][ T5829] Bluetooth: hci11: command tx timeout [ 926.973025][T27956] Bluetooth: hci11: command tx timeout [ 928.143097][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 928.302748][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 928.453273][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 928.583240][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 928.623290][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 928.963726][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 929.022676][ T5832] Bluetooth: hci11: command tx timeout [ 929.741285][T27959] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 930.382205][T27956] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 930.763310][T27956] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 930.853397][T27956] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 931.113367][T27956] Bluetooth: hci11: command tx timeout [ 931.603520][ T5829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 931.804100][ T5829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 932.712360][T27959] Bluetooth: hci12: command tx timeout [ 934.354040][T27959] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 934.472392][T27959] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 934.763871][T27959] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 934.781972][T27959] Bluetooth: hci12: command tx timeout [ 934.803347][T27959] Bluetooth: hci13: command tx timeout [ 935.344774][T27959] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 935.623197][T27959] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 936.862542][T27956] Bluetooth: hci13: command tx timeout [ 936.864219][ T5832] Bluetooth: hci12: command tx timeout [ 938.723690][T27956] Bluetooth: hci3: command 0x0406 tx timeout [ 938.863041][T27956] Bluetooth: hci1: command 0x0406 tx timeout [ 938.941919][T27956] Bluetooth: hci13: command tx timeout [ 938.962486][ T5832] Bluetooth: hci12: command tx timeout [ 939.263516][ T5832] Bluetooth: hci14: command tx timeout [ 941.034132][T27959] Bluetooth: hci13: command tx timeout [ 941.344733][T27959] Bluetooth: hci14: command tx timeout [ 943.433151][T27959] Bluetooth: hci14: command tx timeout [ 945.512776][T27959] Bluetooth: hci14: command tx timeout [ 955.884847][ T8575] bond0 (unregistering): Released all slaves [ 958.103927][ T8575] bond1 (unregistering): Released all slaves [ 966.463509][ T5829] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 966.532611][ T5829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 966.643559][ T5829] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 967.054775][ T5829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 967.622486][ T5829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 969.423875][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 970.404843][ T5829] Bluetooth: hci15: command tx timeout [ 972.484172][ T5829] Bluetooth: hci15: command tx timeout [ 974.422561][ T31] INFO: task kworker/0:20:9871 blocked for more than 143 seconds. [ 974.592356][ T5829] Bluetooth: hci15: command tx timeout [ 974.653269][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 974.851880][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 975.072599][ T31] task:kworker/0:20 state:D stack:23160 pid:9871 tgid:9871 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 975.462811][ T31] Workqueue: events switchdev_deferred_process_work [ 975.623100][ T31] Call Trace: [ 975.754242][ T31] [ 975.902231][ T31] __schedule+0x1798/0x4cc0 [ 976.072834][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 976.242391][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 976.293359][T27999] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 976.564822][ T31] ? __pfx___schedule+0x10/0x10 [ 976.704297][ T5829] Bluetooth: hci15: command tx timeout [ 976.802343][ T31] ? schedule+0x91/0x360 [ 976.933838][ T31] schedule+0x165/0x360 [ 977.014627][T27999] CPU: 0 UID: 0 PID: 27999 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 977.014680][T27999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 977.014704][T27999] Call Trace: [ 977.014721][T27999] [ 977.014739][T27999] dump_stack_lvl+0x189/0x250 [ 977.014805][T27999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.014860][T27999] ? __pfx__printk+0x10/0x10 [ 977.014898][T27999] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 977.014926][T27999] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 977.014955][T27999] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 977.014986][T27999] warn_alloc+0x214/0x310 [ 977.015024][T27999] ? __pfx_warn_alloc+0x10/0x10 [ 977.015063][T27999] ? __get_vm_area_node+0x28f/0x300 [ 977.015092][T27999] ? kcov_ioctl+0x55/0x640 [ 977.015115][T27999] __vmalloc_node_range_noprof+0x690/0x12d0 [ 977.015169][T27999] ? preempt_schedule_irq+0xde/0x150 [ 977.015194][T27999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 977.015227][T27999] ? irqentry_exit+0x74/0x90 [ 977.015249][T27999] ? lockdep_hardirqs_on+0x9c/0x150 [ 977.015272][T27999] ? __pfx_kcov_ioctl+0x10/0x10 [ 977.015292][T27999] vmalloc_user_noprof+0xad/0xf0 [ 977.015322][T27999] ? kcov_ioctl+0x55/0x640 [ 977.015342][T27999] kcov_ioctl+0x55/0x640 [ 977.015360][T27999] ? __se_sys_ioctl+0x52/0x170 [ 977.015388][T27999] ? __pfx_kcov_ioctl+0x10/0x10 [ 977.015408][T27999] __se_sys_ioctl+0xfc/0x170 [ 977.015436][T27999] do_syscall_64+0xfa/0xfa0 [ 977.015459][T27999] ? lockdep_hardirqs_on+0x9c/0x150 [ 977.015481][T27999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.015507][T27999] ? clear_bhb_loop+0x60/0xb0 [ 977.015532][T27999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.015552][T27999] RIP: 0033:0x7fbb5878f34b [ 977.015572][T27999] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 977.015590][T27999] RSP: 002b:00007ffd49f1f7b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.015613][T27999] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbb5878f34b [ 977.015628][T27999] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 977.015642][T27999] RBP: 00007fbb589e63f8 R08: 00000000000000da R09: 0000000000000000 [ 977.015655][T27999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.015668][T27999] R13: 0000000000000003 R14: 00007ffd49f1faf8 R15: 0000000000000000 [ 977.015700][T27999] [ 977.414486][ T31] schedule_preempt_disabled+0x13/0x30 [ 977.682311][ T31] __mutex_lock+0x7e6/0x1350 [ 977.834874][T27999] Mem-Info: [ 977.923937][ T31] ? look_up_lock_class+0x74/0x170 [ 977.972257][T27999] active_anon:7216 inactive_anon:0 isolated_anon:0 [ 977.972257][T27999] active_file:3608 inactive_file:40243 isolated_file:0 [ 977.972257][T27999] unevictable:768 dirty:17 writeback:0 [ 977.972257][T27999] slab_reclaimable:13562 slab_unreclaimable:266680 [ 977.972257][T27999] mapped:89911 shmem:1357 pagetables:1381 [ 977.972257][T27999] sec_pagetables:0 bounce:0 [ 977.972257][T27999] kernel_misc_reclaimable:0 [ 977.972257][T27999] free:1002026 free_pcp:13338 free_cma:0 [ 978.164285][ T31] ? __mutex_lock+0x5bb/0x1350 [ 978.281613][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 978.404267][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 978.553421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.732244][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 978.872883][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 978.892601][T27999] Node 0 active_anon:26696kB inactive_anon:0kB active_file:14424kB inactive_file:160768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:351948kB dirty:68kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15216kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 979.033699][ T31] switchdev_deferred_process_work+0xe/0x20 [ 979.153189][ T31] process_scheduled_works+0xae1/0x17b0 [ 979.314060][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 979.583660][T27999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 979.653921][ T31] worker_thread+0x8a0/0xda0 [ 979.772575][ T31] kthread+0x711/0x8a0 [ 979.922432][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 980.183055][T27999] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.252158][ T31] ? __pfx_worker_thread+0x10/0x10 [ 980.404300][ T31] ? __pfx_kthread+0x10/0x10 [ 980.511425][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 980.661113][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.724565][T27999] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 980.803449][ T31] ? __pfx_kthread+0x10/0x10 [ 980.934394][ T31] ret_from_fork+0x4bc/0x870 [ 981.002896][T27999] Node 0 DMA32 free:108864kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25492kB inactive_anon:0kB active_file:14424kB inactive_file:160768kB unevictable:1536kB writepending:68kB zspages:0kB present:3129332kB managed:2565068kB mlocked:0kB bounce:0kB free_pcp:40416kB local_pcp:19816kB free_cma:0kB [ 981.034141][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 981.303341][ T31] ? __switch_to_asm+0x39/0x70 [ 981.414699][ T31] ? __switch_to_asm+0x33/0x70 [ 981.612016][ T31] ? __pfx_kthread+0x10/0x10 [ 981.673047][T27999] lowmem_reserve[]: 0 0 0 0 0 [ 981.762878][ T31] ret_from_fork_asm+0x1a/0x30 [ 981.893661][T27999] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.943709][ T31] [ 982.092746][ T31] INFO: task syz.2.5743:27925 blocked for more than 150 seconds. [ 982.491465][ T31] Not tainted syzkaller #0 [ 982.513168][T27999] lowmem_reserve[]: 0 0 0 0 0 [ 982.692245][T27999] Node 1 Normal free:3892000kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18064kB local_pcp:10148kB free_cma:0kB [ 982.744087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.093191][ T31] task:syz.2.5743 state:D stack:24288 pid:27925 tgid:27917 ppid:17919 task_flags:0x400140 flags:0x00080003 [ 983.191690][T27999] lowmem_reserve[]: 0 0 0 0 0 [ 983.334509][T27999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 983.423395][ T31] Call Trace: [ 983.562088][ T31] [ 983.642032][ T31] __schedule+0x1798/0x4cc0 [ 983.722204][T27999] Node 0 DMA32: 219*4kB (UE) 153*8kB (UME) 464*16kB (UM) 291*32kB (UME) 191*64kB (UM) 127*128kB (UME) 68*256kB (UM) 23*512kB (UME) 4*1024kB (UME) 4*2048kB (UM) 8*4096kB (M) = 121556kB [ 983.804126][ T31] ? __lock_acquire+0xab9/0xd20 [ 984.043174][ T31] ? __lock_acquire+0xab9/0xd20 [ 984.203539][ T31] ? __pfx___schedule+0x10/0x10 [ 984.282456][T27999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 984.381798][ T31] ? schedule+0x91/0x360