last executing test programs: 15m5.143894657s ago: executing program 2 (id=4416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140), &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x9, "cf4416027a67afece6"}, &(0x7f00000002c0)=0x11) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x4, @remote, 0x1}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400004}, @in6={0xa, 0x4e22, 0x4, @remote, 0x1}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="82000100170e44ec2de81693e21555b419424209da786584c79bbcba24c1047031e2b1685008cc"], 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x200, 0x215, 0xa, 0xc, 0xe, 0x1, 0x40}, 0xc) close(r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200", @ANYRES32=r8], 0x20, 0x6044}, 0x6) 15m4.391802037s ago: executing program 1 (id=4427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a320000000018000380140000800400018008000340000000019a930b800900010073797a3000"], 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x20008044) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r3 = socket(0x23, 0x9dfca0417c35d466, 0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) listen(r0, 0x5) 15m4.309886692s ago: executing program 1 (id=4429): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff01"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2) 15m4.168250393s ago: executing program 2 (id=4432): socket$netlink(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r2, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x2c, 0x0, 0x36) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGUNIT(r9, 0x80047456, &(0x7f00000000c0)) 15m4.111778859s ago: executing program 1 (id=4433): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840), 0x1c}, 0x802) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000480)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000200)=""/68, 0x44}], 0x2}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000000380)="81b641f1f3843704b6", 0x9}], 0x1f}, 0x48005) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000020000000000000004410f961a000003004800010b000000000000000000000003000000070040000100"/71], 0x0, 0x46, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r8) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01000000000000"], 0x14}}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818f10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0xffffffffffffffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) pipe(&(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x450100, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x450100, 0x0) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000840)=0x10000) 15m3.695667288s ago: executing program 2 (id=4435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x348, 0x228, 0x348, 0x470, 0x348, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@remote, 0x6, 0xd, 0x200}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xffffffff, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'nicvf0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x2c, 0x0, 0x6, 0x1b}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@empty, 0x19, 0xa, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x4}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [0x0, 0xff0000ff, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'gretap0\x00', 'geneve1\x00', {0xff}, {}, 0xb202238078c1d29d, 0x0, 0x6, 0x2f}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x0, 0xfe5beaee32a43f91}, {0x1, 0x6, 0x1}, {0x0, 0x1, 0x2}, 0x7, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local, 0x38, 0xa, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000500), 0x0}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="300200001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000007f0000010000000000000000000000000104000000000000000000000000000008000000000000000000000000000000ffffffff00000000030000000000000000000000000000ffff0000000000000000fdffffffffffffff01000080000000000000000001000000fcffffff02000000000000000a000401400000000000000040010100726d6431363000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0070000d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52adfbdc312b5aeab8894c493c358ef75d4775e5384de91cac1e473fc9d56ec179b21865e3b6f29b2da7d564f2bcd96ec67ffcba725b86698cdf6feaa39b2349840fe7d8529c5418a08a77a548060487d8d648e8d31dd7f65d67c2bd1d59d42e8514e26a0c78d035476d621c1bc914d6f8df79bdd1d1d8edb1ae821d5ee68653346b168b345430703bd4bfb119c663150db33b9ac688746b8f6f75dd2584566d011b6f97b884a2c0dba5ba885b39341f14d109de6029a222b929100031b1944a690fd135a68f339a21013bd10f84228211dbe3901a6a391865bf9f2b7fab5cdba593bbbe080035dbfceb61044ded63056d4a3c5a716f48b9f05b3a8d25289ffc2e0792afd7b5bdf65494dc9d718f0e05dc93381d9c9133ba2e73e049a37d48672a2357aa685b6ab5821c9e3983b7b49a3bbdf9ab006b7e9644f9908dc3b7a92073085f3fc8abfcd0e8c08ec888bc491a0b3af4e2c1df71724f89565e54450a740a29d2f05f3adf4c5dde7ebd91f5908d8df9b6cfbbe0b601d2a0f1c40200"/649], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x80400) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x700, 0x7, 0x61, 0x7ff, {{0x28, 0x4, 0x3, 0x26, 0xa0, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x7, 0xce, [@loopback]}, @ssrr={0x89, 0x7, 0x4b, [@dev={0xac, 0x14, 0x14, 0xf}]}, @noop, @generic={0x89, 0x9, "b2f10efede71e5"}, @timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xa, [{@multicast1, 0xfffffff9}, {@loopback, 0x6}, {@broadcast, 0x5}, {@private=0xa010100, 0x401}]}, @timestamp_addr={0x44, 0x34, 0x23, 0x1, 0x2, [{@multicast1}, {@empty}, {@local, 0x4}, {@broadcast, 0xeeeb}, {@multicast1}, {@remote, 0xfffffff6}]}, @ssrr={0x89, 0x1b, 0x83, [@private=0xa010100, @multicast2, @remote, @broadcast, @broadcast, @multicast2]}]}}}}}) sendto$packet(r4, &(0x7f0000000380)="83d7782e24ae6d3553022999e8aa0e7c2afcfb0058e2a0b71d2dd0f6059d3785a0c9e8f70d75b3e2cb73841e9fdcc80c943b0e90cc2f", 0x36, 0x20004084, &(0x7f00000004c0)={0x11, 0x1c, r5, 0x1, 0x11, 0x6, @local}, 0x14) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000980)) (async) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000580)={0x1, 0x7fff, 0x1000, 0x3, 0x9, 0x11, 0x24, "0253d6a80beb023c5eb70b660387952fda6be079", "26691839d655c0f382f14f859de92d0a7acfd220"}) 15m3.695234388s ago: executing program 2 (id=4436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) unshare(0x8000400) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a0001002abd700000000000818000000010"], 0x1c}}, 0x0) 15m3.667057499s ago: executing program 2 (id=4437): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) syz_emit_ethernet(0x8a, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500007c00000000000150f4a1c4113590780a010101ac1414aa040000110000ffffffffac1e00010186480000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fdeefc2c000591ec9200080683fa0000000000000000000000000000069e86fbe5b09698fa1c191f3d"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000010", @ANYRES16=r8, @ANYBLOB="070607bd7002fddbdf252d00000008002f00000000000a0001007770616e31000000"], 0x28}}, 0x4008400) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', r9, 0x4, 0x7, 0xfb, 0x9, 0x11, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x40, 0x1, 0x1, 0x8}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x10b0, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x9}, {0xfff2}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x1080, 0x2, [@TCA_BASIC_POLICE={0x1074, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xf279, 0xfffffff7, 0x10000, 0x7, 0x3, 0x1, 0x352d, 0x7, 0x2, 0x7, 0x8, 0xfffffffc, 0x80, 0x80000, 0x7fff, 0x9, 0x58cd, 0x3, 0x7f00, 0x80000001, 0x800, 0x200, 0x8, 0x6, 0x5bd, 0x2, 0xe80, 0xaaa, 0x2, 0xfffffffc, 0x5, 0x46cd, 0xa, 0x5, 0x0, 0xa315, 0x4, 0x4, 0x3, 0x0, 0x0, 0x6f, 0x4, 0x0, 0x10, 0x3, 0x7, 0x8, 0x1, 0x5, 0x5, 0xe, 0x40, 0x6, 0x100, 0xe39, 0x2, 0x5, 0x7, 0x3, 0x40, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0xfffff68f, 0x6, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0xb, 0x9, 0xa34a, 0x62, 0x2, 0xfffffff7, 0x8, 0xf, 0x3, 0x5, 0xfffffff7, 0x7, 0x3, 0x6, 0x3ff, 0x8, 0x81, 0x2, 0x828e, 0xf600, 0x9, 0x9, 0xffff, 0x2, 0x7, 0x200, 0x80000000, 0x200, 0x1, 0x8, 0x4, 0xfff, 0x9, 0x400, 0x9, 0x6, 0x1, 0xffffffad, 0x4, 0x4, 0x8c4, 0x0, 0x1, 0x3, 0x7ff, 0x9, 0x4, 0x1, 0x61b, 0x917, 0x9, 0x6, 0x3, 0x3, 0x4, 0x0, 0x0, 0x6, 0x5, 0xe00, 0x40, 0x8, 0x8001, 0xff, 0xc16, 0x7e6, 0x5, 0x4, 0x35, 0x5, 0x3, 0xfffffffc, 0xffff, 0xe4, 0x4, 0x7, 0x0, 0x8, 0x3, 0xf0, 0x5, 0xd, 0x2, 0x9, 0x8, 0x9, 0x0, 0x8b99, 0x1, 0xfffeffff, 0x89b, 0xc400, 0x10000, 0x9, 0x5, 0xf12e, 0x2, 0x5, 0x80000001, 0x7, 0x4, 0x5, 0x10000, 0x4, 0x5fad, 0x7, 0x6, 0x400, 0x8, 0x4bb7, 0x0, 0x7ff, 0x9, 0xfffffffb, 0x6, 0x72, 0x90f, 0x88, 0x1, 0x5, 0x8, 0x9, 0x401, 0x7fffffff, 0x0, 0xfffffffb, 0x9, 0x77793d08, 0x9, 0x75, 0xf0, 0x7, 0x200, 0x46ed, 0x4, 0x4, 0x49cb, 0x9, 0x3, 0xce, 0xd0cc, 0x7fff, 0xfff, 0x7, 0xc8c8, 0x7, 0x547, 0x3, 0xffffffff, 0xfff, 0x7ff, 0xb, 0x5e2, 0xffffff04, 0x7, 0x4, 0x8, 0x2, 0x6, 0x8, 0x39, 0xe1, 0x5, 0xc9, 0x8, 0x5, 0x0, 0xffffff0b, 0x1, 0x41, 0x8, 0x5, 0x9, 0x0, 0x4, 0xff, 0x9, 0x7, 0x80000001, 0x6, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd45a, 0x12, 0x0, 0xfffffff8, 0xc, 0x9, 0xe, 0x7, 0xc, 0x2, 0xfffffc01, 0x0, 0x0, 0x9, 0x1, 0x0, 0x5, 0x5, 0x10000, 0x400, 0x80, 0x2, 0x827, 0x4, 0x6, 0x3ff, 0xfffffffa, 0x6833, 0xffffff01, 0x101, 0x877, 0x87c, 0x0, 0x1, 0x10000, 0x6, 0x1, 0xa80, 0xffffff00, 0x80000000, 0x211, 0xc, 0x80000001, 0x4, 0x3ff, 0x8000, 0x0, 0x9, 0x29, 0x1000, 0x8, 0x8000, 0x2, 0x1, 0x963, 0x2, 0x3, 0xe, 0x1, 0x6, 0xd57, 0x2, 0x7ff, 0x10001, 0x4, 0xe, 0x0, 0x9, 0x0, 0x8, 0xffffff00, 0x9, 0xffffffff, 0x8, 0x7fff, 0x9, 0x0, 0x0, 0xfff, 0x6, 0x8, 0xc, 0x8, 0x4, 0x9, 0x2, 0x8, 0x3, 0xdd, 0x8, 0x8, 0x5, 0x8001, 0x5, 0x5e, 0x8, 0x800, 0x7, 0xfffffc9b, 0x4, 0x1, 0x8000, 0x10001, 0x3, 0x4, 0x7a9, 0x1ff, 0x6, 0x2, 0x6e, 0x8, 0x6, 0x7, 0x7, 0x0, 0x2, 0x6000, 0x3ff, 0x1000, 0xd6, 0x5, 0x10001, 0x6, 0x7a, 0x0, 0x0, 0x8, 0x3, 0x6, 0xe, 0x2, 0x5, 0x2, 0x9, 0x7, 0x2, 0x2, 0x6, 0x3, 0x1000, 0xf3b, 0x40, 0x0, 0x4b, 0x80000001, 0x8, 0x2, 0x7, 0x3, 0x5, 0x4, 0xf, 0x5, 0x7, 0x5c9f, 0x5, 0x8, 0x7, 0x6, 0xf2, 0x0, 0x5, 0xf18, 0xfff, 0x74, 0x8, 0x6, 0x59e, 0x9, 0x2, 0x101, 0x8, 0x9, 0xffffffc0, 0x5, 0xfffff333, 0xe, 0x6, 0x6, 0x7ff, 0x8, 0x5, 0x5e, 0x1d1a643b, 0x10000, 0x10, 0x5, 0x5, 0xadc5, 0xfffffffe, 0x1ff, 0x73, 0x7, 0x7fff, 0x3b, 0x2, 0x8, 0x7ff80, 0x30000000, 0x621e4238, 0x8, 0x7f, 0xed99, 0x4, 0x6, 0x100, 0x19, 0x8, 0x4, 0xfffffffe, 0x200, 0x0, 0xb907, 0x10, 0x29b987d7, 0x7a9, 0x1, 0x6, 0x40, 0x0, 0x9, 0xfffffffb, 0xcea, 0x6, 0x7, 0xf, 0x1, 0x8, 0x3, 0x6, 0x2, 0xfffffffc, 0x62c, 0x0, 0x3, 0x7, 0x800, 0x3, 0x81d, 0x5, 0x100, 0x721, 0x32, 0x2a, 0x7, 0x0, 0x6, 0x4, 0xffffffff, 0xb, 0x7, 0xcf52, 0x3, 0x8001, 0xfffffffa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xd, 0x10, 0x40, 0xfffffffe, {0x9, 0x1, 0x81, 0x0, 0x9, 0xffffffff}, {0x7, 0x0, 0x5, 0x46, 0xfb8, 0x1000}, 0x4, 0x1ff, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x4, 0x1000, 0x3, 0x80000001, 0x114f29a8, 0x1, 0x401, 0xb, 0x7, 0x3, 0x0, 0x7, 0x7, 0x4, 0x6, 0x1, 0x78000000, 0xb90, 0x3, 0xb, 0x8001, 0x3, 0xda, 0x3, 0xbfd, 0x4, 0x10001, 0x44ae, 0x5, 0x7fffffff, 0x8, 0x4, 0x4563, 0x3, 0x6, 0x1, 0x8, 0xc83a, 0x5, 0x80000000, 0x3, 0x9, 0x0, 0x90, 0xfff, 0x43b, 0x9, 0x0, 0x9, 0x2, 0x81, 0x7, 0x4, 0x7, 0x0, 0x5, 0x6, 0x4, 0x8, 0xfffffff9, 0xfffffffb, 0x0, 0x0, 0x3, 0x5, 0x4, 0x4, 0xffffffff, 0x5f50, 0x6, 0x5, 0x1, 0x4, 0xffffffff, 0x4, 0xd3a, 0x10, 0x7, 0xffffeb53, 0x5, 0x9, 0x501d9ce3, 0x55b, 0x2, 0x0, 0x3, 0x40, 0x3, 0xfff, 0xca6, 0xfffffd95, 0xb35, 0x3, 0x4, 0x2, 0x10000, 0x8, 0x7fff, 0x3, 0x6, 0x17, 0x8, 0x8001, 0x9, 0x4, 0xff, 0x99, 0x0, 0x3, 0x10f, 0x9fe, 0x0, 0x6, 0x9, 0x59c7, 0x8f7, 0xfff, 0x401, 0x5, 0x72a5, 0x0, 0x4, 0x0, 0x6, 0x5, 0x5, 0xcc0b, 0x1, 0x0, 0x7, 0xb73, 0x10001, 0xfe, 0x0, 0x2, 0x8, 0xc, 0x4, 0x2000, 0x2, 0x2, 0x8, 0x2, 0x7fffffff, 0xd1, 0x8b, 0xc5c8, 0x10, 0x4000, 0xe7, 0x2, 0xb9, 0x5, 0xffff, 0x2, 0x1, 0x60c, 0x9, 0x8, 0x0, 0x401, 0x8, 0xc000000, 0x9, 0x7, 0x81, 0x7c07, 0x9, 0xffffffff, 0xafb0, 0x3, 0x0, 0xd36d, 0x4, 0xd, 0x1, 0xd4, 0x9, 0x4, 0x80000001, 0x53, 0x2, 0x77473987, 0x9, 0x100, 0x5, 0x4, 0x4, 0x80000000, 0x7fff, 0x3, 0xf06e, 0xf1, 0xfffffffd, 0x5, 0x80000000, 0x7, 0x1, 0x7c7, 0x3f, 0xc, 0x9, 0x3, 0xd02, 0x7, 0xb71, 0x8, 0x81, 0x9, 0x0, 0x3, 0x162b, 0x40, 0xb, 0xffffff7f, 0x7, 0xe, 0xffff, 0x2, 0x7fffffff, 0x9, 0x4724, 0x1, 0x0, 0x8, 0x1, 0x8000, 0x2, 0x10001, 0x80000001, 0x4, 0xc, 0x0, 0xc, 0x8, 0x1, 0xc, 0x0, 0x0, 0xc, 0x200, 0x5, 0x4, 0x9, 0xfffffffa, 0x800, 0x8, 0x7, 0x80000000, 0xf8d, 0x10001, 0x80000000, 0x1, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x2, 0x5, 0x400, 0x80000000, 0x0, 0x5, 0x3, 0x8, 0x1000, 0x0, 0x7ff, 0x9, 0x8, 0x0, 0x0, 0x8, 0x8, 0xa, 0x101, 0x4, 0xffffff10, 0xfffffc00, 0x5, 0xd1, 0x10001, 0x5, 0xd, 0x10, 0x8, 0x7, 0x4, 0x3, 0x33, 0x5, 0xd, 0x77, 0x5, 0xfa, 0x9f4, 0x72da8834, 0x4, 0x6, 0x2, 0x3, 0x9, 0x274b, 0xdf, 0x24643b4c, 0xea, 0x9ab, 0x0, 0x8, 0x3, 0x7, 0x4b32, 0x5, 0x0, 0x1, 0x4, 0x9, 0x3, 0x2, 0x4, 0x9, 0x5, 0x4, 0x5, 0x0, 0x5, 0x1, 0x0, 0x7, 0xfb1, 0x4, 0x1, 0x1f04a317, 0x10001, 0x512, 0xfff, 0x101, 0x80000000, 0xfffffff9, 0x7, 0x5, 0x5, 0x1, 0x8, 0x6, 0x6, 0x81, 0x4, 0xfffffff9, 0xbed536e0, 0x6, 0x6a3fab67, 0x7ff, 0x400, 0x4, 0x8, 0x1, 0x2, 0x81a7, 0x3, 0xc, 0x7f, 0x40, 0xfc, 0x4, 0x4, 0x4, 0xdb, 0x10001, 0x200, 0x200, 0x6, 0x81, 0x10, 0x8, 0x0, 0xd966, 0x9, 0x1, 0x7, 0x7ff, 0x469, 0x7ff, 0x82, 0x1da4000, 0x0, 0x200, 0x5, 0x3, 0x0, 0x0, 0x4, 0xffffffff, 0x6, 0x2, 0x1, 0x0, 0x1, 0xb1a5, 0x81, 0x4, 0xfff, 0xb, 0x80, 0x7, 0x8001, 0x2, 0xffffffff, 0x0, 0x6, 0x2, 0x9, 0xfffffff8, 0xffff6164, 0x5, 0x0, 0x1, 0x2, 0x10001, 0x2, 0x3c4, 0xffff, 0x7, 0x0, 0x3, 0x40, 0x7, 0x9, 0x100, 0xfffffff9, 0xfffffffc, 0x5, 0x10, 0xce31, 0x10000, 0x7, 0x8, 0x401, 0x1a1f00, 0x6, 0x2, 0x1, 0x400, 0x7fff, 0x0, 0x7, 0x8, 0xfffffffa, 0x40000000, 0x3, 0x0, 0x80, 0x6, 0x2, 0xfffffffd, 0x0, 0x3, 0xa, 0xf9, 0x4, 0x8a6, 0xfffffffe, 0xffffffff, 0x1, 0x7fdf, 0x7f, 0x1ff, 0x21ea, 0x5, 0x8, 0x1, 0x43, 0xfffffff7, 0xd, 0x1c00000, 0x8, 0x5, 0x81, 0x0, 0x2, 0x18, 0x1, 0x61, 0xfff, 0x5, 0x0, 0x8, 0x9, 0x65, 0x498, 0x9, 0x8f16, 0x4, 0xfffffff7, 0x9, 0x101, 0x80, 0x5, 0x1000, 0x4, 0x7, 0x7, 0x4, 0x8, 0x7, 0x7, 0x1, 0x1, 0xa, 0x6, 0x6, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}]}, 0x10b0}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c02000002000000080001003a35b5df236199d7a1b7481333765300b2dda06b0ff1250423b6ea7d6b037f5ff2b6fd9404aef406beafc6d2e34e8d27250c4523ef9671792b813d0a83d0acab3854e672ad214ba06941638613d637712a1572cc5bcf314d5dc034eb62c3a399b609e2bc2ded150e9c3e5ffa72c349a59b456c77734abd062896d97bea448fe50a604c29e6fd", @ANYRESOCT=r9], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5}, 0x80008001}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12140, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc010) 15m3.395060012s ago: executing program 1 (id=4442): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x8000, @remote, 0x1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000740"], 0x1c}}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x18}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 15m3.320374083s ago: executing program 2 (id=4443): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) r9 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) (async) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffd, 0x4) 15m3.3172889s ago: executing program 4 (id=4444): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000006040)=""/4072, 0xfe8}, {0x0}], 0x2}, 0x7ffd}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 14m56.215915732s ago: executing program 4 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x62, @loopback, 0x4e22, 0x4, 'wrr\x00', 0x13, 0x3, 0x39}, {@multicast2, 0x4e20, 0x3, 0x1, 0xe304, 0x6}}, 0x44) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xe8}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x6, 0x7, 0x68}, 0x2c) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000180)=0x5, 0x4) 14m46.507150352s ago: executing program 32 (id=4442): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x8000, @remote, 0x1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000740"], 0x1c}}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x18}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 14m44.125337312s ago: executing program 33 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r7, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0xa6, &(0x7f00000002c0)=""/166, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f0000ffffffa1000007000000", @ANYRES32=r12, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 14m41.994884842s ago: executing program 34 (id=4443): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) r9 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) (async) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffd, 0x4) 14m41.474734371s ago: executing program 4 (id=4452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x20de}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 14m34.672760806s ago: executing program 4 (id=4454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xb, 0xe18, 0x172b, 0x3, 0x7, 0x6, 0x3]}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x2, '\x00', 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x7, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRESDEC=r7, @ANYRESDEC=r5, @ANYRES64=r7], 0x54}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 14m25.892123486s ago: executing program 4 (id=4456): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) socket$isdn(0x22, 0x3, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 14m17.317038346s ago: executing program 4 (id=4459): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000280)=""/207, &(0x7f0000000200)=0xcf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400e2021200010a00000c00080008000000000000000400de8091b4f8c6e0c54a49cd34a1be546f5b655acb7aa8712880de3f0e60d042617188b70ff1321c21aea5028014bc10a91c3d472da3f406a78722cc1d5faecc9f6ea6ceca769b62b35f48a2462a84ce6ae4969ce9349d559a702c89282079f7600450791bc181eab07947c31e4cd132c909f08ed3a19c1c01a4bf400dc5bf2e91ee5e26d4665f45edd9f4e368bf04f8ff7c488f67eb52d333014cba5c417b40bf0dc8e41a13c596d8e15a0d2654bbfa8ca7c21604446e992d47a1838ff9966727c78635221cc461333261788c44d5732509d24d01b35b82f884034192a72c3e3d3222f79e"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x22) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c000100"], 0x114}], 0x1}, 0x40000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000089780000000c0000000c000000020000000000000000000004000000000000d8c8e58988f199cf401db443e5fb4718dd6838d182c8065404fd650f0d14bc7a5a6596b0b5dccbdcac30621a1d47162bbef3417c0ca08de5ac93533d6b558a907678d0dd"], 0x0, 0x26}, 0x20) close(r9) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001180)={{0x0, 0x8, 0xc, 0xf, 0x2, 0x9, 0x5, 0x7, 0x3, 0x1, 0x0, 0x61, 0x6, 0x7000000, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={0x0, r10, "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", "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"}) 14m1.498239367s ago: executing program 35 (id=4459): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000280)=""/207, &(0x7f0000000200)=0xcf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400e2021200010a00000c00080008000000000000000400de8091b4f8c6e0c54a49cd34a1be546f5b655acb7aa8712880de3f0e60d042617188b70ff1321c21aea5028014bc10a91c3d472da3f406a78722cc1d5faecc9f6ea6ceca769b62b35f48a2462a84ce6ae4969ce9349d559a702c89282079f7600450791bc181eab07947c31e4cd132c909f08ed3a19c1c01a4bf400dc5bf2e91ee5e26d4665f45edd9f4e368bf04f8ff7c488f67eb52d333014cba5c417b40bf0dc8e41a13c596d8e15a0d2654bbfa8ca7c21604446e992d47a1838ff9966727c78635221cc461333261788c44d5732509d24d01b35b82f884034192a72c3e3d3222f79e"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x22) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c000100"], 0x114}], 0x1}, 0x40000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000089780000000c0000000c000000020000000000000000000004000000000000d8c8e58988f199cf401db443e5fb4718dd6838d182c8065404fd650f0d14bc7a5a6596b0b5dccbdcac30621a1d47162bbef3417c0ca08de5ac93533d6b558a907678d0dd"], 0x0, 0x26}, 0x20) close(r9) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001180)={{0x0, 0x8, 0xc, 0xf, 0x2, 0x9, 0x5, 0x7, 0x3, 0x1, 0x0, 0x61, 0x6, 0x7000000, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={0x0, r10, "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", "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"}) 10m43.110166806s ago: executing program 5 (id=6274): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000240)="24ac45d5", 0x4}], 0x2}}], 0x1, 0xc845) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5202) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}}, 0x18) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="2de875676519ed0f821d853e75736574201ff559c3620df480328099c36c7223fcad"], 0x11) r9 = socket(0x2b, 0x1, 0x0) listen(r9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, 0x0) sendmmsg(r2, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)="7cc3eb8da5", 0x5}], 0x1}}, {{&(0x7f0000000a00)=@caif=@dgm={0x25, 0x400, 0x8}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="69c61c", 0x3}], 0x1}}], 0x2, 0x4000010) 10m43.01747299s ago: executing program 5 (id=6276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000500), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x298, r8, 0x1, 0x70bd27, 0x4, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18000}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc64}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0867da0ea676ffe95b2027dbe18c2259c4d935fb2a76598fc1b9d3f8e566d4020a"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "edf26a344713603c543500b987e06ccad8e32218f4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "da0c595de3d6bf8b14fc72d9d4bf81eaebba809f05417db76ea0693a0d7ca5e7ec2d79a2aac283c5529d042d3b92df4cd373cc67b6c17bbd2756231bcc3b986843c5aaa0371075c9165d126a99e3d345b467f9ab323017919f1d8d"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4eec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x53}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x84b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc449}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 10m42.715177949s ago: executing program 5 (id=6279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0xfdb6f702c11cd9a5, 0x5f]}}, &(0x7f0000000400)=""/4096, 0x2c, 0x1000, 0x0, 0xb3f1, 0x10000}, 0x28) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xc2, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0xda, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async, rerun: 64) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async, rerun: 32) sendto$inet(r4, &(0x7f00000003c0)="d33dd4edc9ee576541234edcd9c29e0ee1279915798e9582c47ff13db3480d1d12e0c612b6a118659521a5d8a3bc97124d4de8142d460882eda76c06e5de9ec5f07384", 0x43, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4602b046}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffcfb3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x0, 0xa, 0xb, 0xa, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xa, r2, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x2, &(0x7f0000001600)=[r1], &(0x7f0000001640)=[{0x1, 0x3, 0xd, 0xc}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x1}, 0x94) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) pipe(&(0x7f0000000480)) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) listen(r5, 0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b80120001800b0001006f626a72656600000c00044000000000000007"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r9 = socket(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001740)={0x0, 0x7}, &(0x7f0000001780)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f00000017c0)=r10, 0x4) 10m42.501064982s ago: executing program 5 (id=6281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r5}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @datasec={0xa, 0x3, 0x0, 0xf, 0x1, [{0x2, 0x456f, 0x2}, {0x2, 0x6, 0xffffff6f}, {0x1, 0x9, 0x6}], "e5"}, @fwd={0x5}, @fwd={0x6}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x7}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0xfffffff9, [{0xc, 0x2, 0x3}, {0x3, 0x5, 0x8}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000d40)=""/4096, 0xc2, 0x1000, 0x0, 0x800, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000280), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x4, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x7f, 0x0, 0x1}, [@RTA_DST={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 10m42.279678698s ago: executing program 5 (id=6284): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0xe22, 0x6, @private2={0xfc, 0x2, '\x00', 0x10}}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0xff, @private0, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x31e3}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 10m42.027487463s ago: executing program 5 (id=6289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x8ab, 0x328, 0x1, 0x7a, 0x1, 0x4}}, {0xc, 0x2, [0x3f41, 0x6, 0x756e, 0x5]}}, {{0x1c, 0x1, {0x0, 0x6, 0xf000, 0x866, 0x1, 0x8, 0x8000, 0x3}}, {0xa, 0x2, [0x3, 0xff, 0xa]}}, {{0x1c, 0x1, {0x7, 0x8, 0x1, 0x7, 0x1, 0x10000, 0x5, 0x4}}, {0xc, 0x2, [0x80, 0x8, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x4, 0x7, 0x7fffffff, 0x1, 0xcb6, 0x4, 0x5}}, {0xe, 0x2, [0x81, 0x0, 0x100, 0x800, 0x81]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x3, 0x0, 0x5, 0x9, 0x7}}, {0x12, 0x2, [0x4, 0x5917, 0x3, 0x80, 0x7, 0x5, 0x7f]}}, {{0x1c, 0x1, {0x8, 0x8, 0x4, 0x35, 0x1, 0x2, 0x97, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x140}}, 0x20048005) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40090) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x8941, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x4, 0x80) setsockopt$inet6_int(r11, 0x29, 0x38, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) socket$alg(0x26, 0x5, 0x0) 10m25.853034802s ago: executing program 36 (id=6289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x8ab, 0x328, 0x1, 0x7a, 0x1, 0x4}}, {0xc, 0x2, [0x3f41, 0x6, 0x756e, 0x5]}}, {{0x1c, 0x1, {0x0, 0x6, 0xf000, 0x866, 0x1, 0x8, 0x8000, 0x3}}, {0xa, 0x2, [0x3, 0xff, 0xa]}}, {{0x1c, 0x1, {0x7, 0x8, 0x1, 0x7, 0x1, 0x10000, 0x5, 0x4}}, {0xc, 0x2, [0x80, 0x8, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x4, 0x7, 0x7fffffff, 0x1, 0xcb6, 0x4, 0x5}}, {0xe, 0x2, [0x81, 0x0, 0x100, 0x800, 0x81]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x3, 0x0, 0x5, 0x9, 0x7}}, {0x12, 0x2, [0x4, 0x5917, 0x3, 0x80, 0x7, 0x5, 0x7f]}}, {{0x1c, 0x1, {0x8, 0x8, 0x4, 0x35, 0x1, 0x2, 0x97, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x140}}, 0x20048005) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40090) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x8941, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x4, 0x80) setsockopt$inet6_int(r11, 0x29, 0x38, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) socket$alg(0x26, 0x5, 0x0) 3m3.208310013s ago: executing program 8 (id=9686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x1000) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x25, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r4) 3m3.039775123s ago: executing program 8 (id=9688): socket(0x10, 0x3, 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x60000000, 0x52}, {@broadcast, 0x4e26, 0x2000, 0x202, 0x8001, 0x20000001}}, 0x44) 3m2.258168529s ago: executing program 8 (id=9697): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001811000052ad626c1565e276cb26b0d3d33920a31201c65e56b59c20144987f914ec53cbe1a62d978bdc7a1c17e1ba29d8f0eea25a56a7446f07004c4635c7722f62df85bf297744122d471c9378461312a7d4c5f9bc4c85559d4c8490176c9a240741e09d535e169f86e0b341f55e8cdb57b082ebc002c4a64599e8cbad4a912d9eb84b16b941f844e5016c3a6af3ef5984575c82c71b0d3389f7c2b1fdfe896d3d43a4c2ca37afb74431a4716c1e75f042dc8cc3ecf58f3c252e3d301b0efcaa77947f64ef94593c4cb3d7086f88ef2cc12735a465d68f1486c2e4d2d37185c69fc89b53d4f9b0b12f0c4e5b910740ca67e009d3aef10d90d45df1db6682108b91b3540af3a4a49f39cced64e5594c94d8d59d8b576ca7ed4e3c47", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYBLOB="ca9d952613582fd106fc08cf42fd48c3e649734c30b6e6c9aa0d3282bcfa428b60fed2a6126ecefa44f0d242e1c973c7cb9a131d9fa257b86e91555a0938d3c18741fd692cfc", @ANYRESDEC=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e21, 0x8, @mcast1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859197e9471", 0x8}], 0x1}, 0x8050) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) listen(r3, 0x401) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f0000000200), 0x14, &(0x7f00000002c0)={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m1.864780501s ago: executing program 8 (id=9699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) (async) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xffffffffffffffe2, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m1.594149444s ago: executing program 8 (id=9700): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x800a, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000004000000006b0802ab937933344942e28d736e0f0a962c6a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000340)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r6, &(0x7f0000002240)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000840)="e6a88e", 0x3}], 0x1}}], 0x3, 0x40) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="04001200080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20004804}, 0x24000080) 3m1.420598919s ago: executing program 8 (id=9703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd2b, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4008010) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x5, 0x0, 0x7, 0x4cf, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x6e, &(0x7f0000000180)=""/110, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x38, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x2, 0x3, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r4, r5, r6], &(0x7f0000000680)=[{0x1, 0x4, 0x5, 0x1}], 0x10, 0x7}, 0x94) 2m46.272174124s ago: executing program 37 (id=9703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd2b, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4008010) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x5, 0x0, 0x7, 0x4cf, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x6e, &(0x7f0000000180)=""/110, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x38, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x2, 0x3, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r4, r5, r6], &(0x7f0000000680)=[{0x1, 0x4, 0x5, 0x1}], 0x10, 0x7}, 0x94) 2m38.94741883s ago: executing program 1 (id=9858): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/20, 0x14}], 0x1}, 0x1021) 2m38.005961867s ago: executing program 1 (id=9918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000f080000b005431c00008500000050000000000000000000b300000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="efd3ef92889abe53c0ca18775088916b85007881920ff7049f3e76a89bfc7441193185c8d22c9832a7371cd7a859c99073fd42697473a0e41f7e7295192e2f52079d89a3ab76a191784922912f70e2455891b75184b389d06b2cd72f1f8cc6ec5488bc93efd397cf9d8f623550041194412ea621d92e8d114031f91b7dbe8da4f6cc89df5f0c8a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m22.897732821s ago: executing program 38 (id=9918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000f080000b005431c00008500000050000000000000000000b300000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="efd3ef92889abe53c0ca18775088916b85007881920ff7049f3e76a89bfc7441193185c8d22c9832a7371cd7a859c99073fd42697473a0e41f7e7295192e2f52079d89a3ab76a191784922912f70e2455891b75184b389d06b2cd72f1f8cc6ec5488bc93efd397cf9d8f623550041194412ea621d92e8d114031f91b7dbe8da4f6cc89df5f0c8a"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.11680183s ago: executing program 7 (id=11093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500008b0000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005000300"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2e00}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x800}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x7}}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x59}]}, 0x84}}, 0x28010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) 5.03641159s ago: executing program 7 (id=11094): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f00000001c0)=0x30) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) pread64(r2, 0x0, 0x0, 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) readv(r9, &(0x7f0000000840)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f00000000c0)}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000980)=""/185, 0xb9}], 0x5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r3, &(0x7f0000000380)="dcbff04db41806fef18536e818337d601376cd017f85b87c5dd881065b915024d29d40e8c524dc7e16479eef78f2d85ee567a573ae643920083f858b6e2a", &(0x7f0000000a40)=""/113}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x5, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f000f01001003ebf578b700"], 0x10) 4.753561696s ago: executing program 3 (id=11095): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000400)=0x6be, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$can_raw(0x1d, 0x3, 0x1) 4.692207607s ago: executing program 0 (id=11097): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) epoll_create1(0x80000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = epoll_create1(0x80000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0xe8, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x44, 0x10, "4eea3889d16f183aa23127146461588d36b6dfe37bf72542fc03429b6876"}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xffffff00, 0x0, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'batadv_slave_1\x00', 'team_slave_1\x00', {}, {}, 0x3c, 0x39, 0x0, 0x3a}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x200, 'system_u:object_r:policy_config_t:s0\x00'}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'bridge0\x00', {}, {}, 0x3c, 0x2, 0x0, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x7}}, @common=@mh={{0x28}, {"1314"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x81, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$SIOCSIFMTU(r4, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xc000201e}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x7b7306ca40510a6}) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0xffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000)=r5, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffc, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x2493, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000200)=""/73, &(0x7f0000000280)=0x49) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private, @in6=@mcast1}}, {{@in6=@loopback}}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x27, 0xfffc}, 0x6) 3.377842962s ago: executing program 0 (id=11099): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000300)={0xa, 0x4623, 0x1, @loopback, 0xfffffffe}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4004000) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad000000000000000000", 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], 0x0}, 0x94) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xce33, 0x12) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) getsockopt$inet6_udp_int(r6, 0x11, 0x67, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, 0x0, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) 3.284242959s ago: executing program 3 (id=11100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000089}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20048844) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f00000004c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf, 0x2, 0x0, 0x5, 0x5, "ae4fedfa4f26b0d966151d085d4c9a208fb616117f74e3351362bc9b4cbb0162fb2738cd0716ad03dd8c28e338373a68a089bcecd44a781d24ff00ba7b7ea839fc574a0b1f1cb4bf3b0f7a467a937f338823573467be99991275dca25a4eea5143c4d6ff765f58242a414e14a55fdf0788ed8cb4ffcdb30ae506a6519e86bdde"}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x2, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x6c, 0x0, r10}, {0x90ef, 0xba3f, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffa, 0xb, 0x1fd, 0x2}, {0x67aa, 0x8001, 0x0, 0x2}, 0x2, 0x6e6bbf, 0x1, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x1, 0x1, 0x8, 0xd, 0x8, 0x7f}}, 0xe8) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r12, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2c8, r13, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21a70e35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c56fd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45f6a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa4a07b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x85957b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38152df3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692033d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fdfa7ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2421ba}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e527614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ac03378}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe30b9a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce67132}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57341946}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69706810}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5452fa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4598e82b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e051ed1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2aa8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41232a97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7534d963}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc62a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213e294d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa1420d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44739c07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c30cac5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe019}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ceb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3377bd8e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433a396}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8d9e073}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d0d1695}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28bfa37f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31e44bac}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x416c1131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32437b28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c29ff1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c38a1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4a70e0}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ca1011c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17a06814}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d94492e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x296b2d84}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a1b2da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x800c001}, 0x10) ioctl$BTRFS_IOC_SYNC(r11, 0x9408, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r14, &(0x7f0000000d80)={&(0x7f0000000c40), 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb0, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x2e, 0x14, 'blkio.throttle.io_service_bytes_recursive\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\'/'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '\xaa\xaa\xaa\xaa\xaa'}, @NFC_ATTR_FIRMWARE_NAME={0x2e, 0x14, 'blkio.throttle.io_service_bytes_recursive\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x8) recvmsg$can_raw(r9, &(0x7f0000002100)={&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/176, 0xb0}, {&(0x7f0000001f00)=""/228, 0xe4}], 0x3, &(0x7f0000002040)=""/184, 0xb8}, 0x2) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r15, &(0x7f0000002140)=@hci={0x1f, 0x0, 0x5}, 0x80) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80020043}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000002300), r14) sendmsg$NBD_CMD_CONNECT(r14, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x20, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) socket$inet6_udplite(0xa, 0x2, 0x88) 3.188129947s ago: executing program 7 (id=11102): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="ffffc2ffffffffff00"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000200001000"/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='GPL\x00', 0x7fff, 0xf9, &(0x7f0000000600)=""/249, 0x61680, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0xde, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfa00}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe800000000000000000000000f2001dfe8000000000000000010000800000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780002"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0xc3a, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) syz_emit_ethernet(0xbe, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3.10439051s ago: executing program 3 (id=11103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4010) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e21, 0x3, 'sh\x00', 0x0, 0x83, 0x18}, {@rand_addr=0x64010500, 0x6e26, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4) close(r4) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) writev(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 3.10009077s ago: executing program 6 (id=11104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000600)="82037611", 0x4}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4011) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000001800010008000000df250200f129e3b1290900000000"], 0x1c}}, 0x0) 3.048430687s ago: executing program 3 (id=11105): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x620b}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000180)=[{r0, 0x104}, {r1, 0x50}, {r2, 0x5202}, {r3, 0x6008}, {r5, 0x10000}, {r6, 0x5020}, {0xffffffffffffffff, 0x102}, {r7, 0x2}], 0x8, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2, 0x8000}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}]}]}]}, 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(0x3) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x200003a}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000000003000008000100", @ANYRESDEC=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$SIOCAX25DELUID(r11, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.871703761s ago: executing program 9 (id=11106): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004740)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.87086101s ago: executing program 6 (id=11107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast]}, 0x48) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x65a0d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40805) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000140)={0x5, 0xb, 0x7, 0x3, 0x3, [0x7, 0x8, 0x3, 0x7]}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b1600000000000000000200d0084cee048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000001208000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9, 0x0, 0x3}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r11, 0x303, 0x70bd28, 0xffffffff, {0xa}}, 0x14}}, 0x0) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0x2, 0x6, @random="e307597b2d03"}, 0x14) socket$kcm(0x10, 0x2, 0x0) 2.8400442s ago: executing program 3 (id=11108): r0 = socket(0x1e, 0x4, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x8, 0x6, 0x5, @vifc_lcl_addr=@empty, @empty}, 0x10) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x13}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r5, 0x220, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fbdbdf25370000000c0099000b0080004800000008009f000600000008002700030000000800a00008000000080057000200000008005700fdffffff0800a1000f00000008009f0000000000080026006c090000050019010b0000000500180120000000080057000400000008002201a8000000080027000000000005001901060000000800570009000000670ac2b8807804dbfeaf95b9457132834da7db6c7c94e3ec74f228012c450a81ae3f76d70380cb924885dfe67f4fb98f81"], 0x98}, 0x1, 0x0, 0x0, 0x40851}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x7, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2.628134424s ago: executing program 0 (id=11109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x4, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x4}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @rand_addr=0x64010102, 0x5d}, @sack={0x5, 0xa, [0x4, 0x5ca6]}]}}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x8, [{0xe, 0x1, 0x3ff}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x2e, 0x0, 0x30]}}, &(0x7f0000000080)=""/122, 0x45, 0x7a, 0x0, 0x3, 0x10000, @value=r1}, 0x28) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 2.447968905s ago: executing program 3 (id=11110): recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}], 0x1, 0x40010001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) r7 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180862206c1b0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) unshare(0x62040200) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000500), &(0x7f0000000540)=r10}, 0x20) 2.432955387s ago: executing program 9 (id=11111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x45, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0xae, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x1, 0x7, 0x605, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xae2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffffffeb0000000004000000850000002000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.349768588s ago: executing program 9 (id=11112): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000c00ffffff73013600000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x4, 0x2, 0x2}, &(0x7f0000000180)=0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='+pe\vf_event '], 0xc) 2.211970919s ago: executing program 7 (id=11113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x101) 2.206810263s ago: executing program 9 (id=11114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020027bd7000fedbdf250200000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x40000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r12) 2.03614234s ago: executing program 0 (id=11115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007740)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)=r12}, 0x20) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) sendto$inet6(r2, &(0x7f0000000840)="2096a38f34a6fa37e4e7f9d95c0e8a84d0811e70030a696f22eb8935daa9399468bc687630f939aa9584c7859abbd160d12e34006e67ba610fb23ec80d84ecb2d7c5e2d74202b6e78f9efc5110c1ece21d07b452192eda7a012c251f5ecc801eed021b27be0de71fb617a948c6be0f36ea", 0x71, 0x5, &(0x7f0000000900)={0xa, 0x4e22, 0x2, @private1, 0x1}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r13, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRESOCT=r14, @ANYBLOB="0000000000000000b702000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x62}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x4, 0x6, 0x18, 0x4}, @jmp={0x5, 0x0, 0xc, 0x5, 0x1, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x2, 0x3, 0x8, 0x50, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0x79}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x3, 0x2, 0xa}, 0x10, r15, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, r16], &(0x7f0000000700)=[{0x5, 0x3, 0xe, 0xb}, {0x2, 0x4, 0x5, 0x6}, {0x1, 0x3, 0xe, 0x7}, {0x3, 0x4, 0x1, 0xc}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x5, 0x4, 0xb}, {0x5, 0x1, 0x6, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0xa0b}, 0x94) sendmmsg$inet6(r9, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044080) 1.955231006s ago: executing program 6 (id=11116): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000180)={@local, @rand_addr=0x64010101}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x800, @empty, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="24c963d3ff906c55cec7fcd4872783bd09942a4f0e81a6b382067491ee34ae18a1289273c350d915693710671c99df865a3dadb3", 0x34}, {0x0}, {&(0x7f0000000400)}], 0x3}, 0x8011) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@gre_packet={0xa, 0x6, "191736", 0x46, 0x2f, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x4]}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x5, 0x1, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x9943}}}, {0x8, 0x22eb, 0x3, {{0xf, 0x2, 0x5, 0x2, 0x1, 0x0, 0x5, 0x13}, 0x2, {0x18000, 0x4, 0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r9, 0x101, 0xb, &(0x7f0000002200)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1.856185757s ago: executing program 7 (id=11117): r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a010400000000000000000a0000010900010073797a3100000000440004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014140001800a0001007265646972000000040002800900020073797a3200"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001740)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xa4, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8}]}, {0x7, 0x6, "2b6de5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa7}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x4}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$l2tp(r0, &(0x7f0000000680)="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", 0x1000, 0x20000805, &(0x7f0000000040)={0x2, 0x0, @remote, 0x4}, 0x10) unshare(0x22020400) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e96f05c1c9960760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x3a}, 0x60) (async, rerun: 64) listen(r9, 0x0) (async, rerun: 64) ppoll(&(0x7f00000000c0)=[{r9}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r11, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "153d3272e203ee05cbec5c2ff187aef9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 1.779047771s ago: executing program 7 (id=11118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = accept4(r0, &(0x7f0000000440)=@generic, &(0x7f0000000200)=0x80, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x2, 0x8, 0x8, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xed08, 0xe8f, 0x4, 0x8, 0x2, 0x0, 0x2, 0x40, 0x94f, 0x9, 0x5, 0x4, 0x4, 0xffff, 0x1000, 0x0, 0x9, 0xfffffff9, 0x300, 0x84, 0x1, 0x5, 0x0, 0x1ff, 0x65d, 0x4, 0x4, 0xa9c3, 0x4, 0x80000001, 0x9, 0x7, 0x2, 0x401, 0x2c440000, 0xc, 0x0, 0x7, 0x3, 0x8, 0x0, 0x2, 0x0, 0xfffffff7, 0x3, 0x5, 0x7, 0xfffff170, 0x7, 0x0, 0x0, 0x5, 0x2, 0x2, 0x7b, 0x1, 0x3, 0x401, 0x9, 0x80000001, 0x1aef, 0x6, 0xffff, 0x3, 0x9, 0x0, 0x8, 0xffffff80, 0x4000000, 0x10, 0x4, 0x1, 0x4, 0x8, 0x6, 0x68f0, 0x3, 0x9, 0x1, 0xf11, 0x7, 0x0, 0x8, 0x9237, 0x7, 0x7fffffff, 0xffffffa4, 0x2, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x8, 0x10000, 0x1, 0xfffffff7, 0x8, 0x800, 0x5, 0x0, 0x3b57, 0x2, 0x6, 0x2, 0x2fa4, 0x8, 0x80000000, 0x9, 0x45, 0x8, 0x0, 0x240c554f, 0xdf42, 0x7fffffff, 0x80, 0x10, 0x6, 0x5, 0xb9a, 0xc, 0x8001, 0x7, 0xff, 0x5, 0x10001, 0x38f9, 0x1, 0x10, 0xffff, 0x1c8, 0x5, 0x8000, 0x702ce68, 0x1, 0x8001, 0x0, 0x5, 0x200000, 0xff, 0x6, 0x8, 0x0, 0x4, 0x6, 0x61d, 0x2, 0xf, 0x1, 0x3, 0x1, 0x2, 0x80000000, 0x6, 0x7, 0x10c, 0xffffffff, 0xc, 0x9, 0x10, 0x7, 0xffffffdb, 0x1, 0x0, 0x1, 0x5, 0xff, 0x3, 0x7f, 0x80000001, 0x2, 0x4, 0x3, 0xd5, 0x8, 0xffffffcd, 0xd, 0x8, 0x3, 0x4, 0x5, 0x400, 0x7501, 0x4, 0xfffffffd, 0x7, 0x10000, 0x4, 0xf66, 0x406, 0x8, 0x8000, 0x7fffffff, 0xfd, 0x7, 0x7, 0x3ff, 0x1, 0x5bb92b8f, 0x9, 0x6, 0x6, 0x8, 0x0, 0x0, 0x6, 0x1, 0x1d, 0x2, 0x1bb4, 0x6, 0x7ad, 0x50, 0x0, 0x5, 0xffffffff, 0x3, 0x4e2, 0x7, 0x2, 0x6, 0x4, 0x10001, 0xff, 0xd3, 0x7f, 0x8, 0x9, 0x10, 0xffffffff, 0x200, 0x1, 0xf, 0x6, 0xfffff58b, 0x202, 0x4, 0x120, 0x9, 0x0, 0x3, 0xa, 0x4, 0x4, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6f, 0x5, 0x8, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xf, 0x7f, 0xc1fc, 0x3, 0x3, 0x200, 0x77c0, 0x50c71046, 0x6, 0x4, 0x8, 0x67, 0xfffffffa, 0x39a, 0x4, 0xffffffef, 0x3, 0x8, 0xfffffffc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x7ff, 0x7, 0x8001, 0x5364, 0x6ec, 0x401, 0x1, 0x8001, 0x3, 0xc0, 0x117, 0x200, 0x4, 0x5, 0x6, 0x5, 0x4, 0x4040000, 0xffffffbc, 0x5, 0x10, 0xffff, 0xb65, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x9, 0x4, 0x6, 0xe800, 0x9, 0x80000001, 0x80000000, 0xa, 0x0, 0x2, 0x80000001, 0x8001, 0x8, 0x29d1, 0x0, 0x200, 0xfff, 0x0, 0x3, 0x3a1, 0x0, 0x1, 0x7ff, 0x5, 0x4, 0x800, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x100, 0xef9e, 0x4, 0x5, 0x6fbb, 0x7, 0x8001, 0x9, 0x7e, 0x8, 0xe3c, 0x0, 0x4, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0x101, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x9, 0x4, 0x7, 0x9, 0xee, 0x8ee1, 0x9, 0x1, 0x9, 0x0, 0x60cd7584, 0x6, 0x553, 0x58ff, 0x9, 0xffffff80, 0xffff91c6, 0x8d, 0x9, 0x2, 0x6, 0x3, 0x4, 0x7f, 0x1, 0x800, 0x100, 0x71ef, 0xffffff9d, 0x6, 0x9, 0xebae, 0xfffffb39, 0xff, 0x2, 0x6, 0xfff, 0x4, 0x7, 0x200, 0x7ff, 0x7, 0x80000000, 0xfffffffa, 0x8, 0x8, 0x8001, 0x80, 0x3, 0xe70, 0x5, 0x9, 0x8, 0x5, 0x6, 0x9, 0xff0, 0x8, 0x7, 0x3, 0x102, 0x101, 0x424, 0x6, 0xffff208f, 0x4, 0x1, 0x81, 0x11c, 0x6, 0xfffff9e2, 0x3, 0x8, 0x400, 0x7fff, 0x6, 0x2, 0x80, 0xece, 0x8, 0xc, 0x0, 0x6842a920, 0xd3, 0x7, 0x7, 0x2, 0x7, 0x2, 0x2, 0x9, 0x1, 0x2, 0xc, 0x7, 0x7f, 0x0, 0xffffffff, 0xfff, 0x10000, 0x7, 0x1, 0x7e84, 0x0, 0x1, 0xb, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x5, 0x40, 0x8, 0xffffffff, 0xfffffff9, 0xfffffffb, 0xd, 0xfffffffe, 0x9, 0x1000, 0x8001, 0x7fffffff, 0x3, 0xff, 0x200, 0x5, 0xd894, 0x3, 0x3, 0x8, 0x7, 0x8, 0xe1, 0x81, 0x9, 0x6]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x2, 0x8, 0x8, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xed08, 0xe8f, 0x4, 0x8, 0x2, 0x0, 0x2, 0x40, 0x94f, 0x9, 0x5, 0x4, 0x4, 0xffff, 0x1000, 0x0, 0x9, 0xfffffff9, 0x300, 0x84, 0x1, 0x5, 0x0, 0x1ff, 0x65d, 0x4, 0x4, 0xa9c3, 0x4, 0x80000001, 0x9, 0x7, 0x2, 0x401, 0x2c440000, 0xc, 0x0, 0x7, 0x3, 0x8, 0x0, 0x2, 0x0, 0xfffffff7, 0x3, 0x5, 0x7, 0xfffff170, 0x7, 0x0, 0x0, 0x5, 0x2, 0x2, 0x7b, 0x1, 0x3, 0x401, 0x9, 0x80000001, 0x1aef, 0x6, 0xffff, 0x3, 0x9, 0x0, 0x8, 0xffffff80, 0x4000000, 0x10, 0x4, 0x1, 0x4, 0x8, 0x6, 0x68f0, 0x3, 0x9, 0x1, 0xf11, 0x7, 0x0, 0x8, 0x9237, 0x7, 0x7fffffff, 0xffffffa4, 0x2, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x8, 0x10000, 0x1, 0xfffffff7, 0x8, 0x800, 0x5, 0x0, 0x3b57, 0x2, 0x6, 0x2, 0x2fa4, 0x8, 0x80000000, 0x9, 0x45, 0x8, 0x0, 0x240c554f, 0xdf42, 0x7fffffff, 0x80, 0x10, 0x6, 0x5, 0xb9a, 0xc, 0x8001, 0x7, 0xff, 0x5, 0x10001, 0x38f9, 0x1, 0x10, 0xffff, 0x1c8, 0x5, 0x8000, 0x702ce68, 0x1, 0x8001, 0x0, 0x5, 0x200000, 0xff, 0x6, 0x8, 0x0, 0x4, 0x6, 0x61d, 0x2, 0xf, 0x1, 0x3, 0x1, 0x2, 0x80000000, 0x6, 0x7, 0x10c, 0xffffffff, 0xc, 0x9, 0x10, 0x7, 0xffffffdb, 0x1, 0x0, 0x1, 0x5, 0xff, 0x3, 0x7f, 0x80000001, 0x2, 0x4, 0x3, 0xd5, 0x8, 0xffffffcd, 0xd, 0x8, 0x3, 0x4, 0x5, 0x400, 0x7501, 0x4, 0xfffffffd, 0x7, 0x10000, 0x4, 0xf66, 0x406, 0x8, 0x8000, 0x7fffffff, 0xfd, 0x7, 0x7, 0x3ff, 0x1, 0x5bb92b8f, 0x9, 0x6, 0x6, 0x8, 0x0, 0x0, 0x6, 0x1, 0x1d, 0x2, 0x1bb4, 0x6, 0x7ad, 0x50, 0x0, 0x5, 0xffffffff, 0x3, 0x4e2, 0x7, 0x2, 0x6, 0x4, 0x10001, 0xff, 0xd3, 0x7f, 0x8, 0x9, 0x10, 0xffffffff, 0x200, 0x1, 0xf, 0x6, 0xfffff58b, 0x202, 0x4, 0x120, 0x9, 0x0, 0x3, 0xa, 0x4, 0x4, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6f, 0x5, 0x8, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xf, 0x7f, 0xc1fc, 0x3, 0x3, 0x200, 0x77c0, 0x50c71046, 0x6, 0x4, 0x8, 0x67, 0xfffffffa, 0x39a, 0x4, 0xffffffef, 0x3, 0x8, 0xfffffffc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x7ff, 0x7, 0x8001, 0x5364, 0x6ec, 0x401, 0x1, 0x8001, 0x3, 0xc0, 0x117, 0x200, 0x4, 0x5, 0x6, 0x5, 0x4, 0x4040000, 0xffffffbc, 0x5, 0x10, 0xffff, 0xb65, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x9, 0x4, 0x6, 0xe800, 0x9, 0x80000001, 0x80000000, 0xa, 0x0, 0x2, 0x80000001, 0x8001, 0x8, 0x29d1, 0x0, 0x200, 0xfff, 0x0, 0x3, 0x3a1, 0x0, 0x1, 0x7ff, 0x5, 0x4, 0x800, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x100, 0xef9e, 0x4, 0x5, 0x6fbb, 0x7, 0x8001, 0x9, 0x7e, 0x8, 0xe3c, 0x0, 0x4, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0x101, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x9, 0x4, 0x7, 0x9, 0xee, 0x8ee1, 0x9, 0x1, 0x9, 0x0, 0x60cd7584, 0x6, 0x553, 0x58ff, 0x9, 0xffffff80, 0xffff91c6, 0x8d, 0x9, 0x2, 0x6, 0x3, 0x4, 0x7f, 0x1, 0x800, 0x100, 0x71ef, 0xffffff9d, 0x6, 0x9, 0xebae, 0xfffffb39, 0xff, 0x2, 0x6, 0xfff, 0x4, 0x7, 0x200, 0x7ff, 0x7, 0x80000000, 0xfffffffa, 0x8, 0x8, 0x8001, 0x80, 0x3, 0xe70, 0x5, 0x9, 0x8, 0x5, 0x6, 0x9, 0xff0, 0x8, 0x7, 0x3, 0x102, 0x101, 0x424, 0x6, 0xffff208f, 0x4, 0x1, 0x81, 0x11c, 0x6, 0xfffff9e2, 0x3, 0x8, 0x400, 0x7fff, 0x6, 0x2, 0x80, 0xece, 0x8, 0xc, 0x0, 0x6842a920, 0xd3, 0x7, 0x7, 0x2, 0x7, 0x2, 0x2, 0x9, 0x1, 0x2, 0xc, 0x7, 0x7f, 0x0, 0xffffffff, 0xfff, 0x10000, 0x7, 0x1, 0x7e84, 0x0, 0x1, 0xb, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x5, 0x40, 0x8, 0xffffffff, 0xfffffff9, 0xfffffffb, 0xd, 0xfffffffe, 0x9, 0x1000, 0x8001, 0x7fffffff, 0x3, 0xff, 0x200, 0x5, 0xd894, 0x3, 0x3, 0x8, 0x7, 0x8, 0xe1, 0x81, 0x9, 0x6]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) (async) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000a0a01010000000000000a10001180090001006d6574610000000008000c400000447af6400e36a2cc3598e0c557d3f1742e8c35b87b98933c70cf8430872053f2b2ff6bf4e50028129f7d68f4ce773723b60ed92911889aa20ba5cebf2b96a53956eae4bd75416fd35cb8ae67af6d5b6d0b1708ed78d0c99f3db52b8b08d02d1e854cf3f0cdf12e610af0de4b74722d32da16ed488f27312e0da447fe0a37a3e63c0dc66536ddf97ffec0911dd0d16d95601ecf3e12b539bf110f03001891d3d3d6f9bcc94cb4d06f798641159a53e5b3bacd0c7c2b13340400000076d1c790183fffe482ca603d842d685010a52f380000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040404}, 0x80) setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f00000002c0)={0xd, 0x6, 0x5, 0x1000}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10, 0x24}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10, 0x24}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x0) close(0x4) 1.647038383s ago: executing program 6 (id=11119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x26}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x4, 0x7fffffff}, 0x10, 0x1e184, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x4, 0x6, 0x5}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x3, 0x4}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r1}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x1, 0x9}) 1.192453601s ago: executing program 0 (id=11120): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000000002) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0x2, 0x100000000000003) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x2, '\x00', 0x0, r3, 0x4, 0x2}, 0x50) 1.128088038s ago: executing program 0 (id=11121): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 1.037057271s ago: executing program 6 (id=11122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) unshare(0x2c020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x40040e1) 992.430735ms ago: executing program 9 (id=11123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x0, 0x20048000) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/177, 0xb1}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x67, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="d99ce5f6f7166815ecd8707dd1f8a2b199edb75a186cee583713514a0d4aa8584a20e96c60aa5af8ae3169de48075bb7ca01b5c6e4acb09b7ac036a9a8788800aed0015df86ef25f2fded0b3a1640f12f415a0906821cbdd8842a6147a3a9175c4e4bb173b7ab13e7c5ac9c08a16e57c428b282b3de67b57"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095", @ANYRES64=r5, @ANYRES64=r2, @ANYRESHEX=r2, @ANYBLOB="e95d04627ed103c5459eebb0f30dcad7189c5b72448c98af72fc5dc4569d4fc1e673b1d08c7f5b7de2cba4cf85c05be31a28f68964b896be91837f230a125823780845e18b16847793bfc7f0e4e5db7c7cecb4c21899043fc263e5263789e545772def10e13efb5353e1b1fb4bf5e6a78b256b07421c098b92c0114614afd8e12d446a1c2a49df17c843668e1496dc3b6440388c830ab9698e79062df14883061b58", @ANYRES16=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c00a8575403000000000000009e619dac864acd30d1c7886d36e0d8b3517d230199a77af368f22c7b40d454bbccfc201b914ac28c4d9600000071135b0cbc9c13456fb883e90a83f5f746ca6d8418ce4b10b281", @ANYRES16=r1, @ANYBLOB="089201165fce04100b69d2000200000008000100", @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040088}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf2515000000050014002c000000110014004e4c424c5f434950534f76340000000008000100", @ANYRES32=r9, @ANYBLOB="1efb37da", @ANYRES32=r10, @ANYBLOB="08001400244e1556"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 930.752661ms ago: executing program 6 (id=11124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xaf}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x434}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x1) 0s ago: executing program 9 (id=11125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="176b0db5d25446463f74d3740a70f6e0249ca79eab579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e39", 0x61}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9b859dc1b8a2ecca66132bd68a90f03f10f1fb3b2d7c3ef20dc1074a4ab268b17ab3ea31489aead9ab69a3b779e83c259279904a6ef330e637c994178ffc1922e966353b6a48225198e98ae3e88940c", 0xbe}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000000)=""/203, 0xcb}], 0x2}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x48, 0x1407, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) kernel console output (not intermixed with test programs): `syz.3.9947'. [ 1527.512110][T12062] netlink: 'syz.7.9948': attribute type 4 has an invalid length. [ 1527.562614][T12059] netlink: 'syz.7.9948': attribute type 4 has an invalid length. [ 1527.637515][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9948'. [ 1527.925180][T12077] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1527.931296][T12077] pimreg1: linktype set to 804 [ 1528.025463][T12085] ip6_vti0 speed is unknown, defaulting to 1000 [ 1528.218890][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9957'. [ 1528.232316][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9957'. [ 1528.363176][T12085] wg1 speed is unknown, defaulting to 1000 [ 1528.914484][ T9505] net_ratelimit: 25 callbacks suppressed [ 1528.914505][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1529.043807][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1529.169556][T12118] tipc: Resetting bearer [ 1529.177667][T12118] syzkaller0: left promiscuous mode [ 1529.183095][T12118] syzkaller0: left allmulticast mode [ 1529.205703][T12118] veth5: left promiscuous mode [ 1529.246875][ T9505] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.274310][T12120] IPv6: Can't replace route, no match found [ 1529.280861][ T9505] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.310044][ T9505] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.326500][ T9505] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.345324][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1529.399359][T12130] syzkaller0: Caught tx_queue_len zero misconfig [ 1529.461253][T12130] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1529.470664][ T5457] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1529.491349][ T5457] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1529.505394][T12130] bond6 (unregistering): (slave geneve4): Releasing backup interface [ 1529.530809][T12130] bond6 (unregistering): Released all slaves [ 1529.562895][ T5457] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1529.592055][ T5457] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1529.612570][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1529.690825][T12140] nbd: device at index 64 is going down [ 1529.770441][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1529.914020][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1530.014172][T12163] IPVS: set_ctl: invalid protocol: 1 172.30.1.7:20002 [ 1530.052489][T12162] ip6_vti0 speed is unknown, defaulting to 1000 [ 1530.066477][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1530.194780][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1530.276868][T12162] wg1 speed is unknown, defaulting to 1000 [ 1530.447750][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1530.571911][T25648] bond7: (slave macvlan4): failed to get link speed/duplex [ 1531.146171][T12187] __nla_validate_parse: 4 callbacks suppressed [ 1531.146189][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9978'. [ 1531.161291][T12182] bond1: option arp_validate: invalid value (18446744073491447809) [ 1531.175320][T12182] bond1 (unregistering): Released all slaves [ 1531.182132][T12183] netlink: 64 bytes leftover after parsing attributes in process `syz.9.9977'. [ 1531.292143][T12194] netlink: 34 bytes leftover after parsing attributes in process `syz.6.9979'. [ 1531.726533][T12211] netlink: 'syz.3.9985': attribute type 1 has an invalid length. [ 1532.055992][T12216] ip6gre1: entered promiscuous mode [ 1532.076130][T12216] ip6gre1: entered allmulticast mode [ 1532.224046][T12229] xt_hashlimit: overflow, try lower: 3/0 [ 1532.369729][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9992'. [ 1532.554799][T12250] ip6_vti0 speed is unknown, defaulting to 1000 [ 1532.618379][T12242] nbd: socks must be embedded in a SOCK_ITEM attr [ 1532.937955][T12260] netlink: 'syz.3.9996': attribute type 12 has an invalid length. [ 1532.960027][T12260] netlink: 'syz.3.9996': attribute type 15 has an invalid length. [ 1533.016130][T12250] wg1 speed is unknown, defaulting to 1000 [ 1533.731723][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10000'. [ 1533.860921][T12279] netlink: 'syz.6.10003': attribute type 10 has an invalid length. [ 1533.981154][T12284] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10002'. [ 1534.073762][ T5450] net_ratelimit: 25 callbacks suppressed [ 1534.073789][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.224317][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.338533][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.453982][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.530790][T12303] syzkaller0: entered promiscuous mode [ 1534.536532][T12303] syzkaller0: entered allmulticast mode [ 1534.555403][T12303] vlan2: entered allmulticast mode [ 1534.560857][T12303] bridge_slave_0: entered allmulticast mode [ 1534.624036][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.774790][T12315] tipc: Enabled bearer , priority 0 [ 1534.781617][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1534.790582][T12313] syzkaller0: entered promiscuous mode [ 1534.798099][T12313] syzkaller0: entered allmulticast mode [ 1534.816823][T12313] tipc: Resetting bearer [ 1534.827361][T12312] tipc: Resetting bearer [ 1534.856083][T12317] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10014'. [ 1534.867628][T12312] tipc: Disabling bearer [ 1534.894341][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1535.014075][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1535.126195][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1535.187139][T12332] ip6_vti0 speed is unknown, defaulting to 1000 [ 1535.248791][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1535.518655][T12343] sctp: [Deprecated]: syz.7.10021 (pid 12343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1535.518655][T12343] Use struct sctp_sack_info instead [ 1535.607112][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10024'. [ 1535.646826][T12345] ip6_vti0 speed is unknown, defaulting to 1000 [ 1535.684911][T12332] wg1 speed is unknown, defaulting to 1000 [ 1535.764624][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10024'. [ 1535.812638][T12356] nbd: device at index 64 is going down [ 1535.942010][T12345] wg1 speed is unknown, defaulting to 1000 [ 1536.117279][T12363] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10027'. [ 1536.388696][T12371] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10029'. [ 1536.431530][T12371] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10029'. [ 1536.625245][T12379] syzkaller0: entered promiscuous mode [ 1536.637221][T12379] syzkaller0: entered allmulticast mode [ 1536.769050][T12386] netlink: 'syz.6.10035': attribute type 4 has an invalid length. [ 1536.916825][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10037'. [ 1536.993429][T12406] netlink: 'syz.6.10039': attribute type 13 has an invalid length. [ 1537.011207][T12406] netlink: 'syz.6.10039': attribute type 17 has an invalid length. [ 1537.029246][T12403] bond1: entered promiscuous mode [ 1537.035330][T12403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1537.089193][T12406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.098529][T12406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.115621][T12412] bond0: (slave dummy0): Releasing backup interface [ 1537.252932][T12422] netlink: 'syz.3.10043': attribute type 13 has an invalid length. [ 1537.335293][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10043'. [ 1537.444587][T12429] bond1 (unregistering): Released all slaves [ 1537.527055][T12439] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10048'. [ 1537.585579][T12440] sit0: left promiscuous mode [ 1537.660629][T12440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.717007][ T5937] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.725008][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 1537.787629][T12430] ip6_vti0 speed is unknown, defaulting to 1000 [ 1538.517447][ T9511] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1538.563068][T12430] wg1 speed is unknown, defaulting to 1000 [ 1538.674283][ T912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1538.788238][T12479] netlink: 'syz.6.10054': attribute type 10 has an invalid length. [ 1538.823842][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.833439][T12479] team0: Port device bond0 added [ 1539.183935][ T9511] net_ratelimit: 27 callbacks suppressed [ 1539.183958][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1539.435181][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1539.495959][T12503] netlink: 'syz.3.10062': attribute type 15 has an invalid length. [ 1539.543972][ T9502] bond7: (slave macvlan4): failed to get link speed/duplex [ 1539.584048][ T6237] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1539.592096][ T6237] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1539.646763][T12509] x_tables: unsorted underflow at hook 2 [ 1539.704184][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1539.722315][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10063'. [ 1539.851946][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1539.877002][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10063'. [ 1539.958180][T12516] : renamed from bond_slave_0 [ 1539.977213][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1539.984675][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1540.004529][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1540.016744][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1540.029237][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1540.067522][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1540.134248][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1540.161699][T12517] ip6_vti0 speed is unknown, defaulting to 1000 [ 1540.265095][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1540.373761][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1540.514134][ T912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1540.593424][T12517] wg1 speed is unknown, defaulting to 1000 [ 1540.663858][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1540.879579][T12537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10072'. [ 1541.064023][T12540] ip6_vti0 speed is unknown, defaulting to 1000 [ 1541.166537][T12517] chnl_net:caif_netlink_parms(): no params data found [ 1541.414198][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.431053][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.448999][T12517] bridge_slave_0: entered allmulticast mode [ 1541.470717][T12517] bridge_slave_0: entered promiscuous mode [ 1541.499143][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.517366][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.531893][T12517] bridge_slave_1: entered allmulticast mode [ 1541.547555][T12517] bridge_slave_1: entered promiscuous mode [ 1541.557664][T12540] wg1 speed is unknown, defaulting to 1000 [ 1541.636183][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.662588][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.712163][T12554] netlink: 'syz.7.10074': attribute type 11 has an invalid length. [ 1541.725687][T12554] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.10074'. [ 1541.791847][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10074'. [ 1541.796306][T12517] team0: Port device team_slave_0 added [ 1541.820323][T12556] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10075'. [ 1541.827072][T12517] team0: Port device team_slave_1 added [ 1542.114982][T23169] Bluetooth: hci6: command tx timeout [ 1542.137771][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.162229][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.194283][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.207617][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10078'. [ 1542.239717][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.252811][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.311237][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.351713][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10079'. [ 1542.502262][T12517] hsr_slave_0: entered promiscuous mode [ 1542.525349][T12517] hsr_slave_1: entered promiscuous mode [ 1542.545652][T12517] debugfs: 'hsr0' already exists in 'hsr' [ 1542.551733][T12517] Cannot create hsr debugfs directory [ 1542.739485][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10082'. [ 1542.768756][T12585] netlink: 'syz.3.10083': attribute type 8 has an invalid length. [ 1542.808186][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10083'. [ 1542.995068][T12593] ipvlan2: entered promiscuous mode [ 1543.000302][T12593] ipvlan2: entered allmulticast mode [ 1543.013947][T12593] geneve1: entered allmulticast mode [ 1543.070246][T12579] delete_channel: no stack [ 1543.279027][T12605] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1543.464776][T12612] ip6_vti0 speed is unknown, defaulting to 1000 [ 1543.469795][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10094'. [ 1543.495496][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10094'. [ 1543.563732][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1543.828716][T12612] wg1 speed is unknown, defaulting to 1000 [ 1543.861963][T12517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1543.895139][T12517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1543.947586][T12517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1543.992480][T12517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1544.196745][T23169] Bluetooth: hci6: command tx timeout [ 1544.343738][ T8209] net_ratelimit: 8 callbacks suppressed [ 1544.343764][ T8209] bond7: (slave macvlan4): failed to get link speed/duplex [ 1544.548303][ T8203] bond7: (slave macvlan4): failed to get link speed/duplex [ 1544.652287][T12649] ip6_vti0 speed is unknown, defaulting to 1000 [ 1544.693630][ T5448] bond7: (slave macvlan4): failed to get link speed/duplex [ 1544.907114][T12517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.963963][ T8209] bond7: (slave macvlan4): failed to get link speed/duplex [ 1544.978357][T12666] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10104'. [ 1545.018302][T12517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.042944][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.050214][ T8203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.078628][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.086393][ T8203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.214399][ T8203] bond7: (slave macvlan4): failed to get link speed/duplex [ 1545.225301][T10968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1545.282174][T12649] wg1 speed is unknown, defaulting to 1000 [ 1545.292253][T12673] x_tables: unsorted entry at hook 1 [ 1545.397681][ T8209] bond7: (slave macvlan4): failed to get link speed/duplex [ 1545.514611][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1545.629832][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.814595][T12517] veth0_vlan: entered promiscuous mode [ 1545.824356][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1545.858180][T12517] veth1_vlan: entered promiscuous mode [ 1545.954714][T12517] veth0_macvtap: entered promiscuous mode [ 1545.977848][T12517] veth1_macvtap: entered promiscuous mode [ 1546.036861][T10966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1546.061282][T12517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.128865][T12517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.162549][ T8209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.181297][ T8209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.208140][ T8209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.261210][ T8209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.274307][T23169] Bluetooth: hci6: command tx timeout [ 1546.414314][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1546.576240][ T9505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.584559][ T9505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.624785][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1546.660464][ T9505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.689838][ T9505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.956455][T12744] __nla_validate_parse: 2 callbacks suppressed [ 1546.956474][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10065'. [ 1547.419551][T12772] netlink: 'syz.6.10132': attribute type 13 has an invalid length. [ 1547.424959][T12776] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 1547.514675][T12772] tipc: Resetting bearer [ 1547.578494][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10136'. [ 1547.705644][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10137'. [ 1547.731848][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10137'. [ 1547.798887][ T9509] tipc: Subscription rejected, illegal request [ 1547.900634][T12805] FAULT_INJECTION: forcing a failure. [ 1547.900634][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.937242][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.0.10141 Not tainted syzkaller #0 PREEMPT(full) [ 1547.937277][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1547.937289][T12805] Call Trace: [ 1547.937296][T12805] [ 1547.937306][T12805] dump_stack_lvl+0xe8/0x150 [ 1547.937340][T12805] should_fail_ex+0x414/0x560 [ 1547.937376][T12805] _copy_from_user+0x2d/0xb0 [ 1547.937404][T12805] ___sys_recvmsg+0x12e/0x510 [ 1547.937430][T12805] ? get_pid_task+0x20/0x1f0 [ 1547.937454][T12805] ? get_pid_task+0x20/0x1f0 [ 1547.937483][T12805] ? __pfx____sys_recvmsg+0x10/0x10 [ 1547.937512][T12805] ? __fget_files+0x2a/0x420 [ 1547.937552][T12805] ? __fget_files+0x3a0/0x420 [ 1547.937586][T12805] __x64_sys_recvmsg+0x198/0x260 [ 1547.937612][T12805] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1547.937641][T12805] ? __pfx_ksys_write+0x10/0x10 [ 1547.937670][T12805] do_syscall_64+0xec/0xf80 [ 1547.937690][T12805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.937707][T12805] ? trace_irq_disable+0x37/0x100 [ 1547.937731][T12805] ? clear_bhb_loop+0x60/0xb0 [ 1547.937752][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.937770][T12805] RIP: 0033:0x7f051638f749 [ 1547.937788][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.937805][T12805] RSP: 002b:00007f0517309038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1547.937826][T12805] RAX: ffffffffffffffda RBX: 00007f05165e5fa0 RCX: 00007f051638f749 [ 1547.937841][T12805] RDX: 0000000000001021 RSI: 0000200000000840 RDI: 0000000000000004 [ 1547.937854][T12805] RBP: 00007f0517309090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.937864][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.937876][T12805] R13: 00007f05165e6038 R14: 00007f05165e5fa0 R15: 00007fff83116618 [ 1547.937908][T12805] [ 1548.188678][T12810] siw: device registration error -23 [ 1548.355918][T23169] Bluetooth: hci6: command tx timeout [ 1548.480014][T12819] ip6_vti0 speed is unknown, defaulting to 1000 [ 1548.874028][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1549.049117][T12852] ip6gre1: entered promiscuous mode [ 1549.227216][T12857] FAULT_INJECTION: forcing a failure. [ 1549.227216][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.309763][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10154'. [ 1549.338887][T12819] wg1 speed is unknown, defaulting to 1000 [ 1549.344944][T12857] CPU: 0 UID: 0 PID: 12857 Comm: syz.3.10153 Not tainted syzkaller #0 PREEMPT(full) [ 1549.344973][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1549.344986][T12857] Call Trace: [ 1549.344995][T12857] [ 1549.345005][T12857] dump_stack_lvl+0xe8/0x150 [ 1549.345040][T12857] should_fail_ex+0x414/0x560 [ 1549.345080][T12857] should_failslab+0xa8/0x100 [ 1549.345108][T12857] __kmalloc_noprof+0xdf/0x800 [ 1549.345127][T12857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1549.345154][T12857] ? sock_kmalloc+0xd6/0x160 [ 1549.345187][T12857] sock_kmalloc+0xd6/0x160 [ 1549.345215][T12857] af_alg_alloc_areq+0x99/0x200 [ 1549.345241][T12857] skcipher_recvmsg+0x359/0x11d0 [ 1549.345269][T12857] ? aa_sk_perm+0x7ee/0x920 [ 1549.345306][T12857] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1549.345328][T12857] ? __lock_acquire+0x6b6/0x2cf0 [ 1549.345352][T12857] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1549.345370][T12857] ? security_socket_recvmsg+0x7e/0x2e0 [ 1549.345400][T12857] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1549.345425][T12857] sock_recvmsg+0x22c/0x270 [ 1549.345454][T12857] ____sys_recvmsg+0x1c9/0x460 [ 1549.345487][T12857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1549.345526][T12857] ? import_iovec+0x74/0xa0 [ 1549.345555][T12857] ___sys_recvmsg+0x1b5/0x510 [ 1549.345577][T12857] ? get_pid_task+0x20/0x1f0 [ 1549.345608][T12857] ? __pfx____sys_recvmsg+0x10/0x10 [ 1549.345639][T12857] ? __fget_files+0x2a/0x420 [ 1549.345680][T12857] ? __fget_files+0x3a0/0x420 [ 1549.345713][T12857] __x64_sys_recvmsg+0x198/0x260 [ 1549.345748][T12857] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1549.345784][T12857] ? __pfx_ksys_write+0x10/0x10 [ 1549.345817][T12857] do_syscall_64+0xec/0xf80 [ 1549.345840][T12857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.345859][T12857] ? trace_irq_disable+0x37/0x100 [ 1549.345886][T12857] ? clear_bhb_loop+0x60/0xb0 [ 1549.345912][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.345932][T12857] RIP: 0033:0x7fa8b938f749 [ 1549.345949][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.345968][T12857] RSP: 002b:00007fa8ba1f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1549.345989][T12857] RAX: ffffffffffffffda RBX: 00007fa8b95e5fa0 RCX: 00007fa8b938f749 [ 1549.346005][T12857] RDX: 0000000000001021 RSI: 0000200000000840 RDI: 0000000000000004 [ 1549.346019][T12857] RBP: 00007fa8ba1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.346032][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.346045][T12857] R13: 00007fa8b95e6038 R14: 00007fa8b95e5fa0 R15: 00007ffdcbb33c88 [ 1549.346080][T12857] [ 1549.355455][ T9509] net_ratelimit: 19 callbacks suppressed [ 1549.355476][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1549.658934][T12841] ip6_vti0 speed is unknown, defaulting to 1000 [ 1549.784929][ T8209] bond7: (slave macvlan4): failed to get link speed/duplex [ 1549.898177][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10158'. [ 1550.044188][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1550.062298][T12874] netlink: 63 bytes leftover after parsing attributes in process `syz.6.10158'. [ 1550.156865][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1550.246623][T12881] syzkaller0: entered promiscuous mode [ 1550.252234][T12881] syzkaller0: entered allmulticast mode [ 1550.340829][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.374569][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.391241][T12881] netlink: 'syz.0.10160': attribute type 16 has an invalid length. [ 1550.439530][T12881] netlink: 'syz.0.10160': attribute type 17 has an invalid length. [ 1550.568469][T12841] wg1 speed is unknown, defaulting to 1000 [ 1550.662072][T12881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1551.004018][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1551.262708][T12898] netlink: 'syz.6.10165': attribute type 1 has an invalid length. [ 1551.275817][T12899] netlink: 'syz.6.10165': attribute type 1 has an invalid length. [ 1553.089397][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 1553.838274][T12898] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1553.852542][T12899] bond7: entered promiscuous mode [ 1553.867850][T12899] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.877594][T12900] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1553.973872][T12906] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1554.000363][T10967] IPVS: starting estimator thread 0... [ 1554.041109][T12912] FAULT_INJECTION: forcing a failure. [ 1554.041109][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.084184][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.6.10167 Not tainted syzkaller #0 PREEMPT(full) [ 1554.084218][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1554.084230][T12912] Call Trace: [ 1554.084239][T12912] [ 1554.084249][T12912] dump_stack_lvl+0xe8/0x150 [ 1554.084285][T12912] should_fail_ex+0x414/0x560 [ 1554.084323][T12912] should_failslab+0xa8/0x100 [ 1554.084358][T12912] __kmalloc_noprof+0xdf/0x800 [ 1554.084377][T12912] ? sock_kmalloc+0xd6/0x160 [ 1554.084406][T12912] sock_kmalloc+0xd6/0x160 [ 1554.084431][T12912] skcipher_recvmsg+0x571/0x11d0 [ 1554.084475][T12912] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1554.084493][T12912] ? __lock_acquire+0x6b6/0x2cf0 [ 1554.084516][T12912] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1554.084534][T12912] ? security_socket_recvmsg+0x7e/0x2e0 [ 1554.084562][T12912] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1554.084585][T12912] sock_recvmsg+0x22c/0x270 [ 1554.084618][T12912] ____sys_recvmsg+0x1c9/0x460 [ 1554.084653][T12912] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1554.084696][T12912] ? import_iovec+0x74/0xa0 [ 1554.084724][T12912] ___sys_recvmsg+0x1b5/0x510 [ 1554.084749][T12912] ? get_pid_task+0x20/0x1f0 [ 1554.084779][T12912] ? __pfx____sys_recvmsg+0x10/0x10 [ 1554.084810][T12912] ? __fget_files+0x2a/0x420 [ 1554.084855][T12912] ? __fget_files+0x3a0/0x420 [ 1554.084892][T12912] __x64_sys_recvmsg+0x198/0x260 [ 1554.084921][T12912] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1554.084957][T12912] ? __pfx_ksys_write+0x10/0x10 [ 1554.084990][T12912] do_syscall_64+0xec/0xf80 [ 1554.085013][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.085033][T12912] ? trace_irq_disable+0x37/0x100 [ 1554.085060][T12912] ? clear_bhb_loop+0x60/0xb0 [ 1554.085085][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.085106][T12912] RIP: 0033:0x7f3d20b8f749 [ 1554.085126][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.085146][T12912] RSP: 002b:00007f3d219fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1554.085169][T12912] RAX: ffffffffffffffda RBX: 00007f3d20de5fa0 RCX: 00007f3d20b8f749 [ 1554.085186][T12912] RDX: 0000000000001021 RSI: 0000200000000840 RDI: 0000000000000004 [ 1554.085200][T12912] RBP: 00007f3d219fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.085215][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.085228][T12912] R13: 00007f3d20de6038 R14: 00007f3d20de5fa0 R15: 00007ffc38bd0ce8 [ 1554.085263][T12912] [ 1554.370231][T12909] IPVS: using max 26 ests per chain, 62400 per kthread [ 1554.376406][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1554.477182][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10169'. [ 1554.616164][T12928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input18 [ 1554.637990][T12918] netlink: 'syz.6.10169': attribute type 1 has an invalid length. [ 1554.674795][T12918] netlink: 'syz.6.10169': attribute type 2 has an invalid length. [ 1554.694514][T12918] netlink: 'syz.6.10169': attribute type 1 has an invalid length. [ 1554.789652][T12915] ip6_vti0 speed is unknown, defaulting to 1000 [ 1554.942486][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1555.183811][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1555.343323][T12940] vxcan3: entered promiscuous mode [ 1555.557889][T12915] wg1 speed is unknown, defaulting to 1000 [ 1555.778684][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10175'. [ 1555.794057][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10175'. [ 1555.808778][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1555.987976][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1556.003955][T12959] bond0: (slave sit0): Error: Device type is different from other slaves [ 1556.041816][T12959] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1556.119782][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10178'. [ 1556.130753][T12959] netlink: zone id is out of range [ 1556.164706][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1556.274009][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1556.322160][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10182'. [ 1556.389704][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10183'. [ 1556.404600][T12970] bridge9: port 1(ip6gretap1) entered blocking state [ 1556.416724][T12970] bridge9: port 1(ip6gretap1) entered disabled state [ 1556.436235][T12970] ip6gretap1: entered allmulticast mode [ 1556.446741][T12970] ip6gretap1: entered promiscuous mode [ 1556.506170][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10183'. [ 1556.531895][T12976] bridge9: port 2(veth17) entered blocking state [ 1556.541213][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10182'. [ 1556.555963][T12976] bridge9: port 2(veth17) entered disabled state [ 1556.568521][T12976] veth17: entered allmulticast mode [ 1556.577172][T12976] veth17: entered promiscuous mode [ 1556.583505][T12976] bridge9: port 2(veth17) entered blocking state [ 1556.590061][T12976] bridge9: port 2(veth17) entered forwarding state [ 1556.614935][T18280] bridge9: port 2(veth17) entered disabled state [ 1556.654180][ T5453] bond7: (slave macvlan4): failed to get link speed/duplex [ 1556.689789][T12981] syzkaller0: entered promiscuous mode [ 1556.695544][T12981] syzkaller0: entered allmulticast mode [ 1556.766778][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10186'. [ 1557.533787][T13016] netlink: 3 bytes leftover after parsing attributes in process `syz.9.10196'. [ 1558.347872][T13053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.406603][T13053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.437097][T13053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.458126][T13053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.823462][T13075] netlink: 'syz.3.10209': attribute type 1 has an invalid length. [ 1558.857820][T13075] netlink: 'syz.3.10209': attribute type 2 has an invalid length. [ 1559.476928][T13108] tipc: Enabled bearer , priority 0 [ 1559.504387][ T5458] net_ratelimit: 19 callbacks suppressed [ 1559.504410][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1559.529178][T13108] syzkaller0: entered promiscuous mode [ 1559.545769][T13108] syzkaller0: entered allmulticast mode [ 1559.568827][T13112] netlink: 'syz.9.10221': attribute type 1 has an invalid length. [ 1559.590590][T13108] tipc: Resetting bearer [ 1559.657895][T13112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.666831][T13107] tipc: Resetting bearer [ 1559.704772][T13107] tipc: Disabling bearer [ 1559.731556][T13118] erspan0: entered allmulticast mode [ 1559.764241][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1559.979612][T13129] syzkaller0: entered promiscuous mode [ 1560.003608][T13129] syzkaller0: entered allmulticast mode [ 1560.054197][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1560.065403][T13144] netlink: 'syz.6.10228': attribute type 9 has an invalid length. [ 1560.074736][T13144] netlink: 'syz.6.10228': attribute type 11 has an invalid length. [ 1560.110523][T13144] netlink: 'syz.6.10228': attribute type 12 has an invalid length. [ 1560.121764][T13145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1560.141590][ T8839] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1560.150794][T13144] __nla_validate_parse: 5 callbacks suppressed [ 1560.150817][T13144] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.10228'. [ 1560.184104][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1560.198692][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10228'. [ 1560.223435][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10228'. [ 1560.777611][ T5937] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1563.848626][ T5452] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.858071][ T5452] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.868783][ T5452] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.878027][ T5452] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.914034][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1564.043882][ T5453] bond7: (slave macvlan4): failed to get link speed/duplex [ 1564.154035][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1564.169386][T13192] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10235'. [ 1564.274557][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1564.328334][T13201] bond2: Unable to set down delay as MII monitoring is disabled [ 1564.342459][T13201] bond2 (unregistering): Released all slaves [ 1564.595218][T13217] netlink: 'syz.7.10248': attribute type 13 has an invalid length. [ 1564.604332][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1564.898297][T13237] nbd: nbd0 already in use [ 1564.903437][T13237] block nbd0: NBD_DISCONNECT [ 1564.909926][T13237] block nbd0: Send disconnect failed -32 [ 1564.916015][T13237] block nbd0: shutting down sockets [ 1565.009391][ T5457] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.018914][ T5457] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1565.034675][T13241] veth2: entered allmulticast mode [ 1565.084210][ T5457] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.092829][ T5457] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1565.101957][ T5457] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.117017][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10254'. [ 1565.117615][ T5457] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1565.148593][ T5457] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.170539][ T5457] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1565.203627][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.218705][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.246142][T13250] team0: Port device syz_tun added [ 1565.253202][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.268068][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.277192][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.291490][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.305640][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.315936][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.324936][ T9508] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.333195][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.342666][T13250] netlink: 'syz.0.10256': attribute type 10 has an invalid length. [ 1565.344811][T13254] tipc: Enabling of bearer rejected, failed to enable media [ 1565.433911][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.510266][T13260] Bluetooth: MGMT ver 1.23 [ 1565.517192][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10258'. [ 1565.548615][T13259] veth1_to_hsr: entered promiscuous mode [ 1565.554762][T13259] macvtap1: entered promiscuous mode [ 1565.562519][T13259] macvtap1: entered allmulticast mode [ 1565.569085][T13259] veth1_to_hsr: entered allmulticast mode [ 1565.569444][T13261] delete_channel: no stack [ 1565.596829][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.614066][T13261] delete_channel: no stack [ 1565.735908][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.868768][T13272] ip6_vti0 speed is unknown, defaulting to 1000 [ 1565.875652][ T8205] bond7: (slave macvlan4): failed to get link speed/duplex [ 1565.984096][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1566.105365][ T9508] bond7: (slave macvlan4): failed to get link speed/duplex [ 1566.234666][ T9508] bond7: (slave macvlan4): failed to get link speed/duplex [ 1566.994747][T13278] syzkaller1: entered promiscuous mode [ 1567.018782][T13278] syzkaller1: entered allmulticast mode [ 1567.111052][T13298] ip6_vti0 speed is unknown, defaulting to 1000 [ 1567.113044][T13272] wg1 speed is unknown, defaulting to 1000 [ 1567.174459][T13302] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10262'. [ 1567.356383][T13298] wg1 speed is unknown, defaulting to 1000 [ 1567.549896][T13324] sctp: [Deprecated]: syz.0.10276 (pid 13324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1567.549896][T13324] Use struct sctp_sack_info instead [ 1567.567194][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 1567.576414][T23169] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1567.582922][T13319] sctp: [Deprecated]: syz.0.10276 (pid 13319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1567.582922][T13319] Use struct sctp_sack_info instead [ 1567.876870][T13329] syzkaller1: entered promiscuous mode [ 1567.882398][T13329] syzkaller1: entered allmulticast mode [ 1567.998339][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10280'. [ 1568.029556][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10278'. [ 1568.826073][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10290'. [ 1569.055810][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10290'. [ 1569.302945][T13390] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1569.407947][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10292'. [ 1569.451653][T13390] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10292'. [ 1569.612136][T13405] ip6gre1: entered promiscuous mode [ 1569.633721][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10299'. [ 1569.650184][T13405] validate_nla: 27 callbacks suppressed [ 1569.650207][T13405] netlink: 'syz.6.10297': attribute type 7 has an invalid length. [ 1569.693780][T13405] netlink: 'syz.6.10297': attribute type 8 has an invalid length. [ 1569.717213][T25648] net_ratelimit: 19 callbacks suppressed [ 1569.717233][T25648] bond7: (slave macvlan4): failed to get link speed/duplex [ 1569.876412][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1569.898141][T13419] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10303'. [ 1570.003757][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.134335][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.274309][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.371272][T13440] Cannot find del_set index 2 as target [ 1570.384877][ T9508] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.494886][ T5448] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.502216][T13414] infiniband !yz!: set down [ 1570.502241][T13414] infiniband !yz!: added team_slave_0 [ 1570.617200][T13414] RDS/IB: !yz!: added [ 1570.625733][T13447] __nla_validate_parse: 8 callbacks suppressed [ 1570.625755][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10312'. [ 1570.641452][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1570.681253][T13414] smc: adding ib device !yz! with port count 1 [ 1570.689031][T13452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1570.734406][T13414] smc: ib device !yz! port 1 has no pnetid [ 1570.803721][T13447] openvswitch: netlink: Flow key attr not present in new flow. [ 1570.865375][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1571.045243][T13437] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1571.305216][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10316'. [ 1571.677704][T13483] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10321'. [ 1572.167312][T13505] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10327'. [ 1572.203125][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1572.910558][T13537] ip6_vti0 speed is unknown, defaulting to 1000 [ 1572.941305][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10341'. [ 1573.085265][T13545] netlink: 'syz.3.10343': attribute type 5 has an invalid length. [ 1573.182042][T13548] tipc: Resetting bearer [ 1573.209619][T13548] tipc: Resetting bearer [ 1573.336771][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10340'. [ 1573.668158][T13567] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 1573.935995][T13551] hsr_slave_1 (unregistering): left promiscuous mode [ 1574.160003][T13552] ip6_vti0 speed is unknown, defaulting to 1000 [ 1574.176502][T13537] wg1 speed is unknown, defaulting to 1000 [ 1574.681370][T13552] wg1 speed is unknown, defaulting to 1000 [ 1574.682892][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1574.813684][ T5457] net_ratelimit: 25 callbacks suppressed [ 1574.813707][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1574.845801][T13593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10351'. [ 1574.858342][T13593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10351'. [ 1574.933793][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1574.962596][T13594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.044211][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1575.155428][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1575.401623][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1575.645208][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1575.657145][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1575.669778][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1575.678696][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1575.687419][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1575.737287][ T9505] bond7: (slave macvlan4): failed to get link speed/duplex [ 1575.786847][T13608] ip6_vti0 speed is unknown, defaulting to 1000 [ 1575.874588][ T5448] bond7: (slave macvlan4): failed to get link speed/duplex [ 1575.987382][ T9505] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.106630][ T9505] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.154131][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1576.199222][ T9505] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.232835][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 1576.270293][ T9505] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.293923][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1576.439336][ T9505] bridge_slave_1: left allmulticast mode [ 1576.447074][ T9505] bridge_slave_1: left promiscuous mode [ 1576.453021][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.466430][ T9505] bridge_slave_0: left allmulticast mode [ 1576.472311][ T9505] bridge_slave_0: left promiscuous mode [ 1576.479872][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.495622][ T9505] gretap2: left allmulticast mode [ 1576.510915][ T9505] gretap2: left promiscuous mode [ 1576.523818][ T9505] bridge2: port 1(gretap2) entered disabled state [ 1576.568738][ T9505] tipc: Resetting bearer [ 1576.935223][ T9505] dvmrp6 (unregistering): left allmulticast mode [ 1577.239369][ T9505] tipc: Disabling bearer [ 1577.290717][ T9505] bond1 (unregistering): (slave bridge4): Releasing active interface [ 1577.470197][ T9505] team0: Port device bond0 removed [ 1577.478468][ T9505] bond0 (unregistering): (slave 32): Releasing backup interface [ 1577.487540][ T9505] bond0 (unregistering): Released all slaves [ 1577.501797][ T9505] bond1 (unregistering): Released all slaves [ 1577.677247][ T9505] bond2 (unregistering): Released all slaves [ 1577.689844][ T9505] bond3 (unregistering): Released all slaves [ 1577.719094][T23169] Bluetooth: hci7: command tx timeout [ 1577.862033][ T9505] team0: Port device bond4 removed [ 1577.868651][ T9505] bond4 (unregistering): Released all slaves [ 1577.882648][ T9505] bond5 (unregistering): Released all slaves [ 1577.895503][ T9505] bond6 (unregistering): Released all slaves [ 1578.068943][ T9505] bond7 (unregistering): Released all slaves [ 1579.135379][T13608] wg1 speed is unknown, defaulting to 1000 [ 1579.180904][T13607] wg1 speed is unknown, defaulting to 1000 [ 1579.358186][T13615] can: request_module (can-proto-0) failed. [ 1579.758863][ T9505] hmac(sha224): left promiscuous mode [ 1579.794754][T23169] Bluetooth: hci7: command tx timeout [ 1579.824783][ T9505] : left promiscuous mode [ 1579.900781][ T9505] tipc: Left network mode [ 1579.963772][ T8208] net_ratelimit: 11 callbacks suppressed [ 1579.963793][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1580.395311][T13621] tipc: Enabling of bearer rejected, failed to enable media [ 1580.404990][T13631] xt_socket: unknown flags 0x50 [ 1580.422966][T13607] chnl_net:caif_netlink_parms(): no params data found [ 1580.587564][T13634] netlink: 21 bytes leftover after parsing attributes in process `syz.7.10362'. [ 1580.855503][T13607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.874360][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.896201][T13607] bridge_slave_0: entered allmulticast mode [ 1580.922829][T13607] bridge_slave_0: entered promiscuous mode [ 1580.969895][T13646] bond2: option resend_igmp: invalid value (2878) [ 1580.976998][T13646] bond2: option resend_igmp: allowed values 0 - 255 [ 1580.999971][T13646] bond2 (unregistering): Released all slaves [ 1581.077179][T13607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.108248][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.133681][T13607] bridge_slave_1: entered allmulticast mode [ 1581.150215][T13607] bridge_slave_1: entered promiscuous mode [ 1581.324279][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1581.489633][T13607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.505893][T13678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1581.517948][T13677] smc: net device bond0 applied user defined pnetid SYZ0 [ 1581.556997][T13607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.570254][T13680] smc: net device bond0 erased user defined pnetid SYZ0 [ 1581.583402][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10374'. [ 1581.680272][ T9505] hsr_slave_0: left promiscuous mode [ 1581.874712][T23169] Bluetooth: hci7: command tx timeout [ 1581.896504][T13699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10377'. [ 1582.387038][T13719] openvswitch: netlink: Duplicate key (type 21). [ 1582.482804][ T9505] team0 (unregistering): Port device team_slave_1 removed [ 1582.563039][ T9505] team0 (unregistering): Port device team_slave_0 removed [ 1583.168745][T13607] team0: Port device team_slave_0 added [ 1583.306865][T13607] team0: Port device team_slave_1 added [ 1583.316851][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1583.371858][T13725] bond9: option arp_validate: invalid value (18446744073491447809) [ 1583.381632][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1583.395926][T13725] bond9 (unregistering): Released all slaves [ 1583.421105][T13735] netlink: 'syz.7.10384': attribute type 13 has an invalid length. [ 1583.511296][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10385'. [ 1583.671347][T13607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.681491][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.754201][T13607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.818466][T13607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.843938][T13752] netlink: 'syz.9.10390': attribute type 1 has an invalid length. [ 1583.852205][T13752] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10390'. [ 1583.865220][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.928163][T13607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.953250][T13760] netlink: 'syz.0.10392': attribute type 23 has an invalid length. [ 1583.962053][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1583.964337][T23169] Bluetooth: hci7: command tx timeout [ 1584.084519][T10966] hid-generic 0005:0006:5508.0005: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1584.164637][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1584.186887][T13607] hsr_slave_0: entered promiscuous mode [ 1584.200426][T13607] hsr_slave_1: entered promiscuous mode [ 1584.214977][T13607] debugfs: 'hsr0' already exists in 'hsr' [ 1584.220754][T13607] Cannot create hsr debugfs directory [ 1584.377468][T13776] tap1: tun_chr_ioctl cmd 1074025677 [ 1584.386926][T13776] tap1: linktype set to 1 [ 1584.684668][T13798] netlink: 388 bytes leftover after parsing attributes in process `syz.7.10402'. [ 1584.715885][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.774425][T13796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1584.911559][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1584.924053][T10966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1585.046097][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1585.164265][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1585.173843][T10966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1585.354332][ T5453] bond7: (slave macvlan4): failed to get link speed/duplex [ 1585.362139][T13607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1585.377810][T13607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1585.391298][T13607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1585.409227][T13607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1585.506333][ T9505] IPVS: stop unused estimator thread 0... [ 1585.523675][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1585.656035][T13828] __nla_validate_parse: 2 callbacks suppressed [ 1585.656054][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10407'. [ 1585.671746][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1585.684211][T13828] erspan0: left allmulticast mode [ 1585.740133][T13828] ip6tnl1: left allmulticast mode [ 1585.754981][T13828] ip6gre1: left allmulticast mode [ 1585.761162][T13828] ipvlan2: left allmulticast mode [ 1585.773124][T13828] geneve1: left allmulticast mode [ 1585.804714][ T9509] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1585.822638][T13607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.858563][T13607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.907005][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.914245][ T5457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.975626][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.982929][ T9509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.991081][T13834] netlink: 'syz.7.10409': attribute type 1 has an invalid length. [ 1586.001252][T13834] netlink: 'syz.7.10409': attribute type 1 has an invalid length. [ 1586.010374][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1586.014554][T13834] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10409'. [ 1586.053404][T13834] bond0: entered promiscuous mode [ 1586.059773][T13834] bond_slave_0: entered promiscuous mode [ 1586.066819][T13834] bond_slave_1: entered promiscuous mode [ 1586.077081][T13834] bond0: left promiscuous mode [ 1586.082415][T13834] bond_slave_0: left promiscuous mode [ 1586.088547][T13834] bond_slave_1: left promiscuous mode [ 1586.155945][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1586.209739][T13607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1586.294106][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1586.463826][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1586.576326][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1586.630582][T13607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.787714][T13865] netlink: 'syz.9.10415': attribute type 33 has an invalid length. [ 1586.806895][T13865] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10415'. [ 1586.827039][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10415'. [ 1586.849488][ T5457] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1586.859612][ T5457] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1587.017487][T10966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1587.112143][T13607] veth0_vlan: entered promiscuous mode [ 1587.142187][T13607] veth1_vlan: entered promiscuous mode [ 1587.259115][T13607] veth0_macvtap: entered promiscuous mode [ 1587.292166][T13607] veth1_macvtap: entered promiscuous mode [ 1587.408130][T13607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.486404][T13607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.558465][ T5452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.607269][T13888] netlink: 'syz.7.10418': attribute type 10 has an invalid length. [ 1587.660280][ T5452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.681958][ T5452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.704293][ T5452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.905524][ T9508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.934245][ T9508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.022094][T18280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.041527][T18280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.260206][T13899] bridge_slave_0: left allmulticast mode [ 1588.273355][T13899] bridge_slave_0: left promiscuous mode [ 1588.288184][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.301515][T13899] bridge_slave_1: left allmulticast mode [ 1588.309226][T13899] bridge_slave_1: left promiscuous mode [ 1588.341438][T13899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.398822][T13899] bond0: (slave bond_slave_0): Releasing backup interface [ 1588.479482][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10425'. [ 1588.537668][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10424'. [ 1588.646818][T13899] bond0: (slave bond_slave_1): Releasing backup interface [ 1588.674821][T13899] team0: Port device team_slave_0 removed [ 1588.689267][T13899] team0: Port device team_slave_1 removed [ 1588.696825][T13899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.705282][T13899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.716270][T13899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.725057][T13899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.752141][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10355'. [ 1588.978162][T13923] vlan3: entered allmulticast mode [ 1588.983423][T13923] bridge0: entered allmulticast mode [ 1589.009329][T13923] bridge10: port 1(vlan3) entered blocking state [ 1589.016475][T13923] bridge10: port 1(vlan3) entered disabled state [ 1589.065513][T13923] vlan3: entered promiscuous mode [ 1589.071005][T13923] bridge0: entered promiscuous mode [ 1589.093098][T13920] mac80211_hwsim hwsim98 wlan0: entered allmulticast mode [ 1589.200147][T13934] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.430327][T13934] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.506512][T13938] ip6_vti0 speed is unknown, defaulting to 1000 [ 1589.641285][T13943] netlink: 240 bytes leftover after parsing attributes in process `syz.9.10430'. [ 1589.697271][T13934] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.812537][T13934] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.064182][ T5452] net_ratelimit: 18 callbacks suppressed [ 1590.064202][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.086103][ T8208] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.102645][ T8208] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.112664][T13938] wg1 speed is unknown, defaulting to 1000 [ 1590.120338][ T8208] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.148459][ T5452] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.198555][ T8205] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.314686][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.423699][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.533765][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.640074][T13958] ip6_vti0 speed is unknown, defaulting to 1000 [ 1590.679795][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.794617][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1590.867997][T13958] wg1 speed is unknown, defaulting to 1000 [ 1590.904253][ T8205] bond7: (slave macvlan4): failed to get link speed/duplex [ 1591.153946][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1591.161944][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1591.414236][ T9508] bond7: (slave macvlan4): failed to get link speed/duplex [ 1591.537539][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10442'. [ 1591.648603][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10442'. [ 1591.847253][T13981] ip6_vti0 speed is unknown, defaulting to 1000 [ 1592.338211][T13993] tipc: Enabled bearer , priority 0 [ 1592.347794][T13993] syzkaller0: entered promiscuous mode [ 1592.353459][T13993] syzkaller0: entered allmulticast mode [ 1592.428591][T13981] wg1 speed is unknown, defaulting to 1000 [ 1592.439354][T13993] tipc: Resetting bearer [ 1592.462118][T13992] tipc: Resetting bearer [ 1592.519881][T13992] tipc: Disabling bearer [ 1593.680242][T14016] tipc: Started in network mode [ 1593.686110][T14016] tipc: Node identity 06e258808a94, cluster identity 4711 [ 1593.693974][T14016] tipc: Enabled bearer , priority 0 [ 1593.761761][T14014] tipc: Disabling bearer [ 1593.990589][T14021] geneve3: entered allmulticast mode [ 1594.218607][T14028] bridge_slave_0: left allmulticast mode [ 1594.259848][T14033] netlink: 'syz.0.10454': attribute type 1 has an invalid length. [ 1594.264968][T14028] bridge_slave_0: left promiscuous mode [ 1594.273511][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.368963][T14028] bridge_slave_1: left allmulticast mode [ 1594.370288][T14039] x_tables: duplicate underflow at hook 2 [ 1594.383815][T14028] bridge_slave_1: left promiscuous mode [ 1594.389612][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.436993][T14028] bond0: (slave bond_slave_0): Releasing backup interface [ 1594.449328][T14028] bond0: (slave bond_slave_1): Releasing backup interface [ 1594.461862][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.472842][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.528303][T14033] bond2: entered promiscuous mode [ 1594.536071][T14033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1594.544491][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10455'. [ 1594.558228][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10454'. [ 1594.574262][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1594.646430][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10459'. [ 1594.698341][T14048] ip6gretap1: entered promiscuous mode [ 1594.705397][T14048] ip6gretap1: entered allmulticast mode [ 1594.716851][T14043] netlink: 'syz.3.10457': attribute type 1 has an invalid length. [ 1594.718300][T14046] syzkaller0: entered promiscuous mode [ 1594.725391][T14043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1594.747946][T14046] syzkaller0: entered allmulticast mode [ 1594.790529][T14046] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1594.952978][T14061] netlink: 'syz.9.10463': attribute type 10 has an invalid length. [ 1594.965939][T14060] netlink: 'syz.9.10463': attribute type 10 has an invalid length. [ 1595.144052][ T9496] net_ratelimit: 17 callbacks suppressed [ 1595.144074][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1595.294256][T14073] bond2: option arp_validate: invalid value (18446744073491447809) [ 1595.316844][T14073] bond2 (unregistering): Released all slaves [ 1595.389629][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1595.413239][T14087] nbd: must specify at least one socket [ 1595.419948][T14083] netlink: 'syz.9.10465': attribute type 13 has an invalid length. [ 1595.429152][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10465'. [ 1595.433735][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1595.446156][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1595.554780][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1595.664099][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1595.715654][T14103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1595.842586][T14112] ip6gretap1: entered promiscuous mode [ 1595.874640][ T5453] bond7: (slave macvlan4): failed to get link speed/duplex [ 1595.909362][T14118] delete_channel: no stack [ 1595.983680][ T3511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1596.094348][ T3511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1596.204149][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1596.452106][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1596.693691][T14156] xt_policy: output policy not valid in PREROUTING and INPUT [ 1597.123185][T14167] netlink: 'syz.7.10487': attribute type 10 has an invalid length. [ 1597.192386][T14167] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1597.201947][T14169] Cannot find add_set index 0 as target [ 1597.268839][T14171] 8021q: VLANs not supported on vcan0 [ 1597.459486][T14179] __nla_validate_parse: 5 callbacks suppressed [ 1597.459503][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10490'. [ 1597.467975][T14187] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10492'. [ 1597.744324][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10495'. [ 1597.840231][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10499'. [ 1598.127894][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1598.140821][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1598.150861][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1598.159818][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1598.170880][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1598.217997][T14223] ip6_vti0 speed is unknown, defaulting to 1000 [ 1598.219140][T14224] tipc: Started in network mode [ 1598.238814][T14224] tipc: Node identity 068f1e2dbc56, cluster identity 4711 [ 1598.287182][T14224] tipc: Enabled bearer , priority 0 [ 1598.324488][T14228] syzkaller0: entered promiscuous mode [ 1598.357508][T14228] syzkaller0: entered allmulticast mode [ 1598.407484][T14224] tipc: Resetting bearer [ 1598.445477][T14224] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1598.451763][T14224] syzkaller1: linktype set to 778 [ 1598.484400][T14222] tipc: Resetting bearer [ 1598.519521][T14222] tipc: Disabling bearer [ 1598.616546][T14223] wg1 speed is unknown, defaulting to 1000 [ 1599.159787][T14256] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.10514'. [ 1599.240255][T14265] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10514'. [ 1599.243350][T14258] geneve1: entered promiscuous mode [ 1599.361856][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10518'. [ 1599.370723][T14256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.429982][T14266] tipc: Enabled bearer , priority 0 [ 1599.452248][T14268] syzkaller0: entered promiscuous mode [ 1599.460331][T14268] syzkaller0: entered allmulticast mode [ 1599.543930][T14256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.634669][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1599.684640][T14256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.821735][T14256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.923210][T14284] ip6_vti0 speed is unknown, defaulting to 1000 [ 1600.039698][T14254] tipc: Resetting bearer [ 1600.104914][T14254] tipc: Disabling bearer [ 1600.182741][T14223] chnl_net:caif_netlink_parms(): no params data found [ 1600.198006][T23169] Bluetooth: hci0: command tx timeout [ 1600.316917][T14284] wg1 speed is unknown, defaulting to 1000 [ 1600.367912][ T3511] bridge_slave_0: left allmulticast mode [ 1600.379372][ T3511] bridge_slave_0: left promiscuous mode [ 1600.386255][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.836531][ T3511] veth17: left allmulticast mode [ 1600.841623][ T3511] veth17: left promiscuous mode [ 1600.851672][ T3511] bridge9: port 2(veth17) entered disabled state [ 1600.869627][ T3511] ip6gretap1: left allmulticast mode [ 1600.876683][ T3511] ip6gretap1: left promiscuous mode [ 1600.882252][ T3511] bridge9: port 1(ip6gretap1) entered disabled state [ 1600.894767][ T3511] vlan3: left promiscuous mode [ 1600.899785][ T3511] bridge0: left promiscuous mode [ 1600.905464][ T3511] bridge10: port 1(vlan3) entered disabled state [ 1601.520960][ T3511] bridge2 (unregistering): left promiscuous mode [ 1601.928575][ T3511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.939849][ T3511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.949883][ T3511] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1601.961098][ T3511] bond0 (unregistering): Released all slaves [ 1601.976075][ T3511] bond1 (unregistering): Released all slaves [ 1601.988566][ T3511] bond2 (unregistering): Released all slaves [ 1602.001684][ T3511] bond3 (unregistering): Released all slaves [ 1602.181627][ T3511] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 1602.190392][ T3511] wireguard0: left promiscuous mode [ 1602.200322][ T3511] bond4 (unregistering): Released all slaves [ 1602.273866][T23169] Bluetooth: hci0: command tx timeout [ 1602.357940][ T3511] bond5 (unregistering): Released all slaves [ 1602.501215][ T3511] bond6 (unregistering): Released all slaves [ 1602.666580][ T3511] bond7 (unregistering): (slave veth9): Releasing active interface [ 1602.676371][ T3511] bond7 (unregistering): (slave veth11): Releasing active interface [ 1602.685932][ T3511] bond7 (unregistering): Released all slaves [ 1602.849372][ T3511] bond8 (unregistering): (slave veth13): Releasing active interface [ 1602.858891][ T3511] bond8 (unregistering): Released all slaves [ 1602.874269][ T8208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.010697][ T8208] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.045429][ T8208] net_ratelimit: 21 callbacks suppressed [ 1603.045450][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1603.140178][T14310] netlink: 'syz.6.10526': attribute type 3 has an invalid length. [ 1603.151700][ T3511] : left promiscuous mode [ 1603.256513][ T5452] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.279986][ T3511] tipc: Left network mode [ 1603.302918][ T3511] IPVS: stopping master sync thread 4092 ... [ 1603.353656][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10527'. [ 1603.372233][ T9508] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.598389][T14314] team0 (unregistering): Port device team_slave_0 removed [ 1603.612737][T14314] team0 (unregistering): Port device team_slave_1 removed [ 1603.629243][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.637613][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.648869][T14223] bridge_slave_0: entered allmulticast mode [ 1603.658304][T14223] bridge_slave_0: entered promiscuous mode [ 1603.671981][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.700377][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.709404][T14223] bridge_slave_1: entered allmulticast mode [ 1603.718656][T14223] bridge_slave_1: entered promiscuous mode [ 1603.761855][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1603.891454][T14324] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1603.932528][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.938660][T14333] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10532'. [ 1603.962920][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.982059][T14331] netlink: 'syz.9.10531': attribute type 7 has an invalid length. [ 1603.991364][T14331] netlink: 'syz.9.10531': attribute type 8 has an invalid length. [ 1604.014144][ T8205] bond7: (slave macvlan4): failed to get link speed/duplex [ 1604.151770][T14339] netlink: 'syz.6.10533': attribute type 21 has an invalid length. [ 1604.183107][T14341] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1604.284020][ T9509] bond7: (slave macvlan4): failed to get link speed/duplex [ 1604.354220][T23169] Bluetooth: hci0: command tx timeout [ 1604.391965][T14331] dvmrp12: entered allmulticast mode [ 1604.404148][T14339] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10533'. [ 1604.530641][T14330] dvmrp12: left allmulticast mode [ 1604.564111][T14344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10535'. [ 1604.748801][T14223] team0: Port device team_slave_0 added [ 1604.767190][T14223] team0: Port device team_slave_1 added [ 1604.830806][T14349] netpci0: tun_chr_ioctl cmd 1074025677 [ 1604.842421][T14354] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10538'. [ 1604.855079][T14349] netpci0: linktype set to 6 [ 1604.956035][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.986929][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.045145][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.094102][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.101205][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.180522][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.213929][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1605.286030][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10541'. [ 1605.637854][ T3511] veth1: left promiscuous mode [ 1605.664746][ T3511] hsr_slave_0: left promiscuous mode [ 1605.681636][ T3511] hsr_slave_1: left promiscuous mode [ 1605.692789][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.715679][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.750818][T14385] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10544'. [ 1606.274969][ T3511] pim6reg99999999 (unregistering): left allmulticast mode [ 1606.433891][T23169] Bluetooth: hci0: command tx timeout [ 1606.446274][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1606.524137][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1606.737056][T14409] IPVS: set_ctl: invalid protocol: 130 172.20.20.20:21 [ 1606.746502][T14409] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1607.011938][ T3511] team0 (unregistering): Port device team_slave_1 removed [ 1607.077298][ T3511] team0 (unregistering): Port device team_slave_0 removed [ 1607.086714][ T9496] smc: removing ib device !yz! [ 1607.707704][T14223] hsr_slave_0: entered promiscuous mode [ 1607.719214][T14223] hsr_slave_1: entered promiscuous mode [ 1607.727565][T14223] debugfs: 'hsr0' already exists in 'hsr' [ 1607.747858][T14223] Cannot create hsr debugfs directory [ 1608.047909][T14422] netlink: 'syz.3.10557': attribute type 1 has an invalid length. [ 1608.399919][T14428] bond2: (slave geneve4): making interface the new active one [ 1608.408885][T14428] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 1608.454271][ T5448] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.487363][ T5448] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.565018][ T5448] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.693574][ T5448] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1609.210631][T14439] syzkaller0: entered promiscuous mode [ 1609.236987][T14439] syzkaller0: entered allmulticast mode [ 1609.428935][T14457] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 1612.717277][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1612.764211][T14481] __nla_validate_parse: 2 callbacks suppressed [ 1612.764235][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10569'. [ 1612.815417][T14482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 1612.827838][T14481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10569'. [ 1612.838507][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1612.848901][T14481] netlink: 19 bytes leftover after parsing attributes in process `syz.3.10569'. [ 1612.860979][T14481] netlink: 'syz.3.10569': attribute type 6 has an invalid length. [ 1612.869127][T14481] netlink: 'syz.3.10569': attribute type 4 has an invalid length. [ 1612.974598][T14486] syzkaller0: entered promiscuous mode [ 1612.980142][T14486] syzkaller0: entered allmulticast mode [ 1613.034298][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1613.039780][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10574'. [ 1613.048516][ T3511] IPVS: stop unused estimator thread 0... [ 1613.232087][T14495] veth1_macvtap: left promiscuous mode [ 1613.281898][T14491] ip6_vti0 speed is unknown, defaulting to 1000 [ 1613.362744][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1613.484576][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1613.562726][T14511] syzkaller0: entered promiscuous mode [ 1613.568376][T14511] syzkaller0: entered allmulticast mode [ 1614.123267][T14524] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1616.510500][T14491] wg1 speed is unknown, defaulting to 1000 [ 1616.557963][T14223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1616.588097][T14523] ip6_vti0 speed is unknown, defaulting to 1000 [ 1616.588130][T14223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1616.639607][T14223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1616.665308][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 1616.670354][T14223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1616.744906][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1616.888768][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.943091][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10584'. [ 1616.952927][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1616.966557][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.005521][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.013211][ T9511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.069116][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.076400][ T9511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.135965][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1617.201127][T14523] wg1 speed is unknown, defaulting to 1000 [ 1617.364002][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1617.499396][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1617.754572][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1617.908546][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.953966][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.067712][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.076626][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10593'. [ 1618.216603][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.374266][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.408199][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10596'. [ 1618.417931][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10596'. [ 1618.484734][ T9511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.546456][T14597] tipc: Enabled bearer , priority 0 [ 1618.560679][T14597] syzkaller0: entered promiscuous mode [ 1618.575324][T14597] syzkaller0: entered allmulticast mode [ 1618.601476][T14597] netlink: 'syz.0.10597': attribute type 10 has an invalid length. [ 1618.617047][ T5443] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.657838][T14597] tipc: Resetting bearer [ 1618.688840][T14596] tipc: Resetting bearer [ 1618.742085][T14596] tipc: Disabling bearer [ 1618.795277][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1618.852145][T14223] veth0_vlan: entered promiscuous mode [ 1618.875388][T14223] veth1_vlan: entered promiscuous mode [ 1618.960399][T14223] veth0_macvtap: entered promiscuous mode [ 1618.997724][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1619.012705][T14223] veth1_macvtap: entered promiscuous mode [ 1619.121348][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.184673][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.186051][T14617] xt_l2tp: invalid flags combination: 8 [ 1619.229180][T18280] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.249750][T18280] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.285209][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10604'. [ 1619.303857][T14623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1619.352826][T18280] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.371214][T18280] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.431579][T14627] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10606'. [ 1619.625953][T14634] syzkaller0: entered promiscuous mode [ 1619.633004][T14634] syzkaller0: entered allmulticast mode [ 1619.646431][T18280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.676366][T18280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.815850][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10608'. [ 1619.910025][T18280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.924663][T18280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.942680][T14642] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10609'. [ 1620.188012][T14659] tipc: Started in network mode [ 1620.193072][T14659] tipc: Node identity 56394b294f, cluster identity 4711 [ 1620.231689][T14659] tipc: Enabled bearer , priority 0 [ 1620.254567][T14659] syzkaller0: entered promiscuous mode [ 1620.272163][T14659] syzkaller0: entered allmulticast mode [ 1620.408804][T14659] tipc: Resetting bearer [ 1620.435302][T14658] tipc: Resetting bearer [ 1620.541851][T14658] tipc: Disabling bearer [ 1620.618244][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10617'. [ 1620.727144][T14676] netem: invalid attributes len -1 [ 1620.738378][T14676] netem: change failed [ 1621.684971][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10631'. [ 1621.740076][T14706] syzkaller1: entered promiscuous mode [ 1621.747008][T14706] syzkaller1: entered allmulticast mode [ 1621.975091][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10633'. [ 1622.793957][ T5443] net_ratelimit: 24 callbacks suppressed [ 1622.793979][ T5443] bond7: (slave macvlan4): failed to get link speed/duplex [ 1622.913377][T14791] netlink: 'syz.6.10653': attribute type 1 has an invalid length. [ 1622.929643][T14788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1623.062729][T14798] 8021q: VLANs not supported on bond0 [ 1623.083712][ T5457] bond7: (slave macvlan4): failed to get link speed/duplex [ 1623.092330][T14796] __nla_validate_parse: 6 callbacks suppressed [ 1623.092348][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10655'. [ 1623.213610][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1623.354011][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1623.475095][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1623.594700][ T3511] bond7: (slave macvlan4): failed to get link speed/duplex [ 1623.607291][T14829] netlink: 'syz.9.10661': attribute type 11 has an invalid length. [ 1623.620610][T14828] netlink: zone id is out of range [ 1623.626303][T14828] netlink: zone id is out of range [ 1623.631595][T14828] netlink: zone id is out of range [ 1623.639672][T14828] netlink: zone id is out of range [ 1623.794137][ T5843] Bluetooth: hci7: command 0x0405 tx timeout [ 1624.184310][T14842] smc: net device veth1_to_hsr applied user defined pnetid SYZ2 [ 1624.255504][T14847] xt_cgroup: invalid path, errno=-2 [ 1624.464664][T14857] netlink: 'syz.0.10675': attribute type 1 has an invalid length. [ 1624.513893][T14857] netlink: 'syz.0.10675': attribute type 1 has an invalid length. [ 1624.917657][ T30] audit: type=1800 audit(1768019905.324:22): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10678" name="memory.events" dev="tmpfs" ino=333 res=0 errno=0 [ 1625.261056][T14881] netlink: 512 bytes leftover after parsing attributes in process `syz.0.10681'. [ 1625.859882][T14907] ip6_vti0 speed is unknown, defaulting to 1000 [ 1625.945057][T14909] netlink: 'syz.9.10690': attribute type 10 has an invalid length. [ 1625.984520][T14909] netlink: 228 bytes leftover after parsing attributes in process `syz.9.10690'. [ 1626.009102][T14909] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10690'. [ 1626.659810][T14907] wg1 speed is unknown, defaulting to 1000 [ 1626.725564][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10696'. [ 1626.899325][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10697'. [ 1627.582310][T14961] syzkaller0: entered promiscuous mode [ 1627.595621][T14961] syzkaller0: entered allmulticast mode [ 1627.661253][T14959] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1627.674292][T14959] smc: net device veth1_to_hsr erased user defined pnetid SYZ2 [ 1627.682024][T14959] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1627.769191][T14968] syzkaller0: entered promiscuous mode [ 1627.795576][T14972] netlink: 'syz.9.10704': attribute type 16 has an invalid length. [ 1627.809843][T14968] syzkaller0: entered allmulticast mode [ 1627.812382][T14972] netlink: 80 bytes leftover after parsing attributes in process `syz.9.10704'. [ 1627.846359][T14959] tipc: Enabled bearer , priority 0 [ 1627.865409][T14957] tipc: Resetting bearer [ 1627.931942][T14957] tipc: Disabling bearer [ 1628.166555][ T5450] net_ratelimit: 77 callbacks suppressed [ 1628.166582][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1628.324949][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1628.536899][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10710'. [ 1631.059650][T14999] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1631.063768][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1631.146829][T15002] netlink: 'syz.6.10713': attribute type 1 has an invalid length. [ 1631.160236][T15002] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1631.214581][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1631.363986][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1631.401313][T15020] batadv3: entered promiscuous mode [ 1631.517936][T15030] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1631.532999][T15031] pimreg: entered allmulticast mode [ 1631.539066][T15026] ip6_vti0 speed is unknown, defaulting to 1000 [ 1631.624300][T15034] netlink: 264 bytes leftover after parsing attributes in process `syz.9.10722'. [ 1631.639145][T15035] netlink: 264 bytes leftover after parsing attributes in process `syz.9.10722'. [ 1631.795450][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1631.822339][T15026] wg1 speed is unknown, defaulting to 1000 [ 1631.914780][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1632.023683][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1632.143685][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1632.324869][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1632.337182][T15059] netlink: 'syz.3.10728': attribute type 13 has an invalid length. [ 1632.343223][T15057] ip6_vti0 speed is unknown, defaulting to 1000 [ 1632.775894][T15081] xt_bpf: check failed: parse error [ 1632.895023][T15087] tipc: Enabling of bearer rejected, failed to enable media [ 1632.999602][T15057] wg1 speed is unknown, defaulting to 1000 [ 1633.091703][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10737'. [ 1633.273209][T15066] netlink: 'syz.7.10727': attribute type 6 has an invalid length. [ 1633.319540][T15102] vti0: entered promiscuous mode [ 1633.533949][ T5458] net_ratelimit: 7 callbacks suppressed [ 1633.533975][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1633.900539][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10745'. [ 1633.933874][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.062499][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.213730][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.361636][T15128] ip6_vti0 speed is unknown, defaulting to 1000 [ 1634.373699][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.381272][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10745'. [ 1634.480704][T15144] netlink: 'syz.3.10749': attribute type 2 has an invalid length. [ 1634.490909][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.592397][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10752'. [ 1634.663341][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1634.899210][T15158] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1635.118751][T15128] wg1 speed is unknown, defaulting to 1000 [ 1635.123892][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1635.341776][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1635.456928][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1635.530909][T15179] netlink: 'syz.3.10760': attribute type 15 has an invalid length. [ 1635.724245][T15185] syzkaller0: entered promiscuous mode [ 1635.730333][T15185] syzkaller0: entered allmulticast mode [ 1635.746286][T15187] geneve2: entered promiscuous mode [ 1635.766414][T15187] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.806546][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10764'. [ 1635.836358][T15187] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.892245][T15187] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.980968][T15187] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.090313][ T9496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.119867][ T5459] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.139785][ T5459] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.171795][ T5459] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.332210][T15209] syzkaller0: entered promiscuous mode [ 1636.340771][T15209] syzkaller0: entered allmulticast mode [ 1636.346052][T15211] netlink: 165 bytes leftover after parsing attributes in process `syz.7.10769'. [ 1636.358542][T15212] netlink: 165 bytes leftover after parsing attributes in process `syz.7.10769'. [ 1636.383896][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10768'. [ 1636.394474][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10768'. [ 1636.497272][T15217] netlink: 'syz.3.10771': attribute type 1 has an invalid length. [ 1636.506787][T15214] syzkaller0: entered allmulticast mode [ 1637.066512][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10777'. [ 1637.084392][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10777'. [ 1637.134585][T15251] netlink: 'syz.6.10777': attribute type 16 has an invalid length. [ 1637.876290][T15267] [†’Ì: entered promiscuous mode [ 1638.169880][T15275] ip6gretap1: left promiscuous mode [ 1638.349380][T15274] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.523788][T15274] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.604645][ T8208] net_ratelimit: 23 callbacks suppressed [ 1638.604668][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1638.730188][T15274] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.785581][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1638.909431][T15274] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.973781][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.136273][ T9501] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.170148][ T9501] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.219648][ T9501] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.249149][ T9501] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.283784][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.404877][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.534133][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.654026][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.763715][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1639.884113][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1640.013695][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1640.171689][T15290] tipc: Enabled bearer , priority 0 [ 1640.191767][T15291] syzkaller0: entered promiscuous mode [ 1640.197740][T15291] syzkaller0: entered allmulticast mode [ 1640.214424][T15293] __nla_validate_parse: 2 callbacks suppressed [ 1640.214444][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10792'. [ 1640.235596][T15289] tipc: Resetting bearer [ 1640.288244][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10792'. [ 1640.346374][T15289] tipc: Disabling bearer [ 1640.536257][T15297] netlink: 'syz.7.10793': attribute type 7 has an invalid length. [ 1640.735470][T15303] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1640.746489][T15303] netlink: 'syz.7.10795': attribute type 33 has an invalid length. [ 1640.756175][T15303] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1640.786485][T15303] `: renamed from team0 (while UP) [ 1640.808680][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1641.071096][T15311] netlink: 'syz.9.10797': attribute type 1 has an invalid length. [ 1641.227351][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10797'. [ 1641.297428][T15316] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1641.322665][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10801'. [ 1641.339340][T15311] bond3 (unregistering): (slave veth5): Releasing active interface [ 1641.354610][T15311] bond3 (unregistering): Released all slaves [ 1641.379838][T15318] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1641.407060][T15321] syzkaller0: entered promiscuous mode [ 1641.431852][T15321] syzkaller0: entered allmulticast mode [ 1641.489200][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10804'. [ 1641.508510][T15336] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10805'. [ 1641.518110][T15336] netlink: 'syz.6.10805': attribute type 9 has an invalid length. [ 1641.526257][T15336] netlink: 108 bytes leftover after parsing attributes in process `syz.6.10805'. [ 1641.552289][T15339] netlink: 'syz.7.10807': attribute type 9 has an invalid length. [ 1641.564357][T15339] netlink: 'syz.7.10807': attribute type 6 has an invalid length. [ 1641.647733][T15343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1641.669733][T10955] IPVS: starting estimator thread 0... [ 1641.731894][T15345] IPVS: Scheduler module ip_vs_ not found [ 1641.741468][T15348] IPVS: length: 24 != 12792 [ 1641.754762][T15343] IPVS: length: 24 != 12792 [ 1641.833758][T15349] IPVS: using max 35 ests per chain, 84000 per kthread [ 1642.051975][T15365] syzkaller1: entered promiscuous mode [ 1642.061190][T15365] syzkaller1: entered allmulticast mode [ 1642.091361][T15370] netlink: 'syz.6.10814': attribute type 2 has an invalid length. [ 1642.102589][T15370] netlink: 'syz.6.10814': attribute type 2 has an invalid length. [ 1642.384910][ T30] audit: type=1804 audit(1768019922.804:23): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.10819" name="/newroot/357/cgroup.controllers" dev="tmpfs" ino=1848 res=1 errno=0 [ 1642.444994][ T30] audit: type=1800 audit(1768019922.804:24): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10819" name="cgroup.controllers" dev="tmpfs" ino=1848 res=0 errno=0 [ 1642.656154][T15411] tipc: Enabling of bearer rejected, failed to enable media [ 1643.048876][T15427] mac80211_hwsim hwsim116 wlan0: entered promiscuous mode [ 1643.415296][T15455] netlink: 'syz.7.10837': attribute type 10 has an invalid length. [ 1643.470838][T15455] `: Device ipvlan1 failed to register rx_handler [ 1643.529980][T15452] ip6_vti0 speed is unknown, defaulting to 1000 [ 1643.714073][ T5458] net_ratelimit: 27 callbacks suppressed [ 1643.714093][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1643.853810][ T8206] bond7: (slave macvlan4): failed to get link speed/duplex [ 1643.886304][T15452] wg1 speed is unknown, defaulting to 1000 [ 1643.887662][T15474] ip6_vti0 speed is unknown, defaulting to 1000 [ 1644.363723][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1644.552361][T15474] wg1 speed is unknown, defaulting to 1000 [ 1644.566794][ T9496] bond7: (slave macvlan4): failed to get link speed/duplex [ 1644.578687][T15507] syzkaller0: entered promiscuous mode [ 1644.593760][T15507] syzkaller0: entered allmulticast mode [ 1644.917465][T15517] netlink: 'syz.6.10856': attribute type 10 has an invalid length. [ 1645.428384][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1645.437217][T15512] ip6_vti0 speed is unknown, defaulting to 1000 [ 1645.602106][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1645.687524][T15529] __nla_validate_parse: 21 callbacks suppressed [ 1645.687551][T15529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10859'. [ 1645.740347][T15529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10859'. [ 1645.766082][T15527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.794468][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1645.865660][T15527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.941942][T15533] netlink: 'syz.6.10860': attribute type 4 has an invalid length. [ 1645.948886][T15512] wg1 speed is unknown, defaulting to 1000 [ 1645.955882][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1645.994360][T10955] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1646.005824][T15527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.209435][T15527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.419876][ T9501] bond7: (slave macvlan4): failed to get link speed/duplex [ 1646.436177][T10966] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1646.523462][ T8208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.553757][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1646.594246][T18280] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.689138][ T5459] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.751935][T12927] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.772790][T15541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10862'. [ 1646.866012][T18280] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1646.935361][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10863'. [ 1646.954787][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10863'. [ 1647.260231][T15566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1647.370853][T15570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1647.723975][T15572] tipc: Enabling of bearer rejected, failed to enable media [ 1647.892216][T18280] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1647.923331][T18280] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1647.943787][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10871'. [ 1647.985359][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10871'. [ 1648.379553][T15580] tipc: Enabling of bearer rejected, failed to enable media [ 1648.764503][ T8840] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1648.773284][ T5443] net_ratelimit: 15 callbacks suppressed [ 1648.773304][ T5443] bond7: (slave macvlan4): failed to get link speed/duplex [ 1648.903699][T21116] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.023672][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.145849][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.192634][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1649.264645][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.674579][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.754292][T15598] netlink: 'syz.9.10878': attribute type 10 has an invalid length. [ 1649.756061][T15602] netlink: 'syz.9.10878': attribute type 10 has an invalid length. [ 1649.844600][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.954785][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1649.962402][T15611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1649.969695][T15611] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.976952][T15611] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.093987][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1650.203739][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1650.363764][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 1651.025750][T15631] netlink: 'syz.0.10886': attribute type 5 has an invalid length. [ 1651.585017][T15657] bond3: Removing last ns target with arp_interval on [ 1652.194200][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1652.229475][T15635] Can't find ip_set type hPLh:ip,mac [ 1652.848785][T15687] __nla_validate_parse: 3 callbacks suppressed [ 1652.848808][T15687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10905'. [ 1652.897203][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1652.915753][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1653.286377][T15703] ip6_vti0 speed is unknown, defaulting to 1000 [ 1653.472379][T15711] netlink: 'syz.7.10910': attribute type 1 has an invalid length. [ 1653.587232][T15703] wg1 speed is unknown, defaulting to 1000 [ 1653.669560][T15718] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1653.762979][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10910'. [ 1653.823370][T15723] bond1 (unregistering): (slave veth3): Releasing active interface [ 1653.862589][T15723] bond1 (unregistering): Released all slaves [ 1653.986790][T18280] net_ratelimit: 31 callbacks suppressed [ 1653.986812][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1654.113983][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1654.226093][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1654.423799][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1654.544482][ T8206] bond7: (slave macvlan4): failed to get link speed/duplex [ 1657.307544][T15755] veth5: entered promiscuous mode [ 1657.315877][T15761] syz_tun: Device is already in use. [ 1657.385974][T15766] tipc: Enabled bearer , priority 0 [ 1657.409240][T15767] syzkaller0: entered promiscuous mode [ 1657.433291][T15767] syzkaller0: entered allmulticast mode [ 1657.438170][T15786] x_tables: unsorted underflow at hook 3 [ 1657.462835][T15764] tipc: Resetting bearer [ 1657.495395][T15788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.510447][T15764] tipc: Disabling bearer [ 1657.522396][T15783] tipc: Cannot configure node identity twice [ 1657.543132][T15792] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10928'. [ 1657.559707][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10925'. [ 1657.561102][ T8208] bond7: (slave macvlan4): failed to get link speed/duplex [ 1657.603881][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10928'. [ 1657.706676][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1657.733738][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10928'. [ 1657.823757][ T5455] bond7: (slave macvlan4): failed to get link speed/duplex [ 1657.934015][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1658.410863][T15827] x_tables: duplicate underflow at hook 3 [ 1658.429992][ T8839] IPVS: starting estimator thread 0... [ 1658.526072][T15830] IPVS: using max 35 ests per chain, 84000 per kthread [ 1658.688032][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10941'. [ 1658.748625][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10941'. [ 1658.781046][T15843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1658.984049][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10945'. [ 1658.989033][T15852] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1659.063978][T21116] net_ratelimit: 9 callbacks suppressed [ 1659.063997][T21116] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.194316][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.216522][T15855] digital: digital_start_poll: Unknown protocol [ 1659.304249][ T5455] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.413676][T15860] ip6_vti0 speed is unknown, defaulting to 1000 [ 1659.453758][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.575483][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.621989][T15866] netlink: 'syz.7.10950': attribute type 1 has an invalid length. [ 1659.651844][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10951'. [ 1659.797643][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1659.888307][T15860] wg1 speed is unknown, defaulting to 1000 [ 1659.973660][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1660.171755][T15884] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10953'. [ 1660.243829][T15876] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1660.275135][ T5458] bond7: (slave macvlan4): failed to get link speed/duplex [ 1660.443714][T21116] bond7: (slave macvlan4): failed to get link speed/duplex [ 1660.443795][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1660.564509][T18614] bond7: (slave macvlan4): failed to get link speed/duplex [ 1660.594786][T23169] Bluetooth: hci2: command 0x0401 tx timeout [ 1661.328230][T15901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.366050][T15901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.655432][ T8208] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.672489][ T8208] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.694898][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10964'. [ 1661.702796][ T8208] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.740240][ T8208] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.771862][ T8208] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.793900][ T8208] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.887080][T15929] xt_hashlimit: size too large, truncated to 1048576 [ 1662.027795][ T8208] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.084960][ T8208] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.124713][T15919] –: renamed from vxcan1 (while UP) [ 1662.290643][T15950] tipc: Enabled bearer , priority 0 [ 1662.300923][T15950] syzkaller0: entered promiscuous mode [ 1662.306798][T15950] syzkaller0: entered allmulticast mode [ 1662.374568][T15950] tipc: Resetting bearer [ 1662.506860][T15969] netlink: 'syz.7.10979': attribute type 21 has an invalid length. [ 1662.520737][T15967] netlink: 'syz.6.10976': attribute type 1 has an invalid length. [ 1662.529966][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10979'. [ 1662.667640][T15978] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10983'. [ 1664.325078][T15945] tipc: Resetting bearer [ 1664.368981][T15945] tipc: Disabling bearer [ 1664.453709][T18280] net_ratelimit: 8 callbacks suppressed [ 1664.453730][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1664.530068][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10991'. [ 1664.584774][T21116] bond7: (slave macvlan4): failed to get link speed/duplex [ 1664.702284][T16018] ip6_vti0 speed is unknown, defaulting to 1000 [ 1664.710413][T21116] bond7: (slave macvlan4): failed to get link speed/duplex [ 1664.855651][ T5450] bond7: (slave macvlan4): failed to get link speed/duplex [ 1665.017460][T16018] wg1 speed is unknown, defaulting to 1000 [ 1665.317127][T16041] netlink: 'syz.0.10998': attribute type 1 has an invalid length. [ 1665.336054][T16041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1665.350700][T16039] netlink: 'syz.9.10999': attribute type 2 has an invalid length. [ 1665.386109][T16039] netlink: 'syz.9.10999': attribute type 2 has an invalid length. [ 1665.395862][T16028] ip6_vti0 speed is unknown, defaulting to 1000 [ 1665.404222][T18614] bond7: (slave macvlan4): failed to get link speed/duplex [ 1665.514728][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1665.639287][T12927] bond7: (slave macvlan4): failed to get link speed/duplex [ 1665.797209][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1665.814585][T16035] ip6_vti0 speed is unknown, defaulting to 1000 [ 1665.913781][T18614] bond7: (slave macvlan4): failed to get link speed/duplex [ 1666.042559][T16035] wg1 speed is unknown, defaulting to 1000 [ 1666.061556][T16028] wg1 speed is unknown, defaulting to 1000 [ 1666.061556][T16045] ip6_vti0 speed is unknown, defaulting to 1000 [ 1666.331359][T16045] wg1 speed is unknown, defaulting to 1000 [ 1666.376610][T16060] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1666.778571][T16060] ip6_vti0 speed is unknown, defaulting to 1000 [ 1667.119829][T16060] wg1 speed is unknown, defaulting to 1000 [ 1667.221553][T16079] tipc: Failed to remove unknown binding: 66,0,0/0:2520555429/2520555430 [ 1667.251112][T16079] tipc: Failed to remove unknown binding: 66,0,0/0:2520555429/2520555430 [ 1667.336355][T16081] netlink: 'syz.6.11009': attribute type 21 has an invalid length. [ 1667.367904][T16081] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11009'. [ 1667.385529][T16081] netlink: 'syz.6.11009': attribute type 1 has an invalid length. [ 1667.466718][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11011'. [ 1667.788470][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11015'. [ 1667.807895][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11015'. [ 1667.909671][T16103] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11016'. [ 1667.947476][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11014'. [ 1667.967177][T16104] netlink: 100 bytes leftover after parsing attributes in process `syz.7.11014'. [ 1668.182741][T16111] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1668.216156][T16117] Bluetooth: MGMT ver 1.23 [ 1668.349020][T16125] gre0: entered promiscuous mode [ 1668.568517][T16127] ip6_vti0 speed is unknown, defaulting to 1000 [ 1668.572888][T16129] netlink: 'syz.9.11023': attribute type 2 has an invalid length. [ 1668.617000][T16129] netlink: 119 bytes leftover after parsing attributes in process `syz.9.11023'. [ 1669.059354][T16139] netlink: 27 bytes leftover after parsing attributes in process `syz.9.11024'. [ 1669.468292][T18614] net_ratelimit: 20 callbacks suppressed [ 1669.468312][T18614] bond7: (slave macvlan4): failed to get link speed/duplex [ 1669.612362][T16127] wg1 speed is unknown, defaulting to 1000 [ 1669.623787][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1669.670970][T16164] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 1669.859251][T16164] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 1669.874592][T16164] netlink: 'syz.0.11032': attribute type 2 has an invalid length. [ 1669.904279][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1669.915996][T16164] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 1669.924819][T16164] __nla_validate_parse: 1 callbacks suppressed [ 1669.924838][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11032'. [ 1670.007569][T16171] bond4: (slave gretap1): making interface the new active one [ 1670.036236][T16171] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1670.135171][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.265449][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.374644][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.514873][T16183] syzkaller0: entered promiscuous mode [ 1670.520712][T16183] syzkaller0: entered allmulticast mode [ 1670.584773][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.693808][ T3745] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.853000][T16188] ip6_vti0 speed is unknown, defaulting to 1000 [ 1670.860669][ T6237] bond7: (slave macvlan4): failed to get link speed/duplex [ 1670.983704][ T5452] bond7: (slave macvlan4): failed to get link speed/duplex [ 1671.115560][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11040'. [ 1671.365456][T16188] wg1 speed is unknown, defaulting to 1000 [ 1671.376828][T16209] ip6_vti0 speed is unknown, defaulting to 1000 [ 1671.466591][T16214] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1671.695254][T16215] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11042'. [ 1672.573655][T16209] wg1 speed is unknown, defaulting to 1000 [ 1672.779664][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11047'. [ 1673.440207][T16248] validate_nla: 1 callbacks suppressed [ 1673.440227][T16248] netlink: 'syz.9.11053': attribute type 1 has an invalid length. [ 1673.479567][T16248] netlink: 476 bytes leftover after parsing attributes in process `syz.9.11053'. [ 1673.506848][T16248] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.11053'. [ 1673.539476][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11053'. [ 1673.570259][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11053'. [ 1673.704364][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11055'. [ 1673.810984][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11056'. [ 1674.035344][ T30] audit: type=1800 audit(1768019954.454:25): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11058" name="memory.events" dev="tmpfs" ino=1081 res=0 errno=0 [ 1674.181943][T16272] ip6_vti0 speed is unknown, defaulting to 1000 [ 1674.241278][T16283] tap0: tun_chr_ioctl cmd 1074812118 [ 1674.328045][T16283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1674.430349][T16291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1674.453367][T16291] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1674.485837][T16291] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1674.517649][T16289] vxcan0: entered allmulticast mode [ 1674.561100][T16272] wg1 speed is unknown, defaulting to 1000 [ 1674.579873][T16292] ip6_vti0 speed is unknown, defaulting to 1000 [ 1674.674097][T18280] net_ratelimit: 18 callbacks suppressed [ 1674.674118][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1674.803751][T18280] bond7: (slave macvlan4): failed to get link speed/duplex [ 1674.948657][T16312] tipc: Enabled bearer , priority 0 [ 1675.025460][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1675.033433][T16312] syzkaller0: entered promiscuous mode [ 1675.043051][T16312] syzkaller0: entered allmulticast mode [ 1675.092599][T16316] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1675.135350][T16316] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1675.155476][T16316] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1675.173288][T16321] __nla_validate_parse: 13 callbacks suppressed [ 1675.173308][T16321] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11071'. [ 1675.197858][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11071'. [ 1675.219440][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11075'. [ 1675.234960][T16307] veth0: entered promiscuous mode [ 1675.243755][T16292] wg1 speed is unknown, defaulting to 1000 [ 1675.250822][T16317] tipc: Resetting bearer [ 1675.260834][T16322] C: renamed from team_slave_0 [ 1675.267958][T16322] netlink: 'syz.9.11075': attribute type 2 has an invalid length. [ 1675.279459][T16322] netlink: 116 bytes leftover after parsing attributes in process `syz.9.11075'. [ 1675.293965][T16322] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1675.352204][T16321] IPv6: sit1: Disabled Multicast RS [ 1675.364581][T16321] sit1: entered promiscuous mode [ 1675.369582][T16321] sit1: entered allmulticast mode [ 1675.405346][ T6227] bond7: (slave macvlan4): failed to get link speed/duplex [ 1675.459018][T16311] tipc: Resetting bearer [ 1675.501750][T16311] tipc: Disabling bearer [ 1675.522895][T16306] veth0: left promiscuous mode [ 1675.804839][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1675.814768][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1675.938105][T16359] netlink: 'syz.9.11079': attribute type 1 has an invalid length. [ 1675.993417][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1676.021172][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1676.168629][T16361] 8021q: VLANs not supported on gre0 [ 1676.245791][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1676.279923][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1676.291115][T16363] ip6_vti0 speed is unknown, defaulting to 1000 [ 1676.294123][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1676.393679][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1676.443682][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1676.534105][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1676.667263][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1676.722610][T16363] wg1 speed is unknown, defaulting to 1000 [ 1676.776357][T16382] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1676.911248][T16387] netlink: 'syz.3.11088': attribute type 12 has an invalid length. [ 1676.927463][T16389] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1677.101855][T16396] tipc: Enabled bearer , priority 0 [ 1677.134261][T16393] syzkaller0: entered promiscuous mode [ 1677.140145][T16393] syzkaller0: entered allmulticast mode [ 1677.264918][T16393] tipc: Resetting bearer [ 1677.307843][T16393] tipc: Disabling bearer [ 1677.509059][T16410] netlink: 'syz.7.11094': attribute type 4 has an invalid length. [ 1677.545863][T16410] netlink: 'syz.7.11094': attribute type 4 has an invalid length. [ 1677.885314][T16421] x_tables: duplicate underflow at hook 2 [ 1678.122390][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.130735][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.691367][T16412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.731188][T16412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.153904][T23169] Bluetooth: hci7: command 0x0405 tx timeout [ 1679.203298][ T5443] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.232451][ T5443] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.260369][ T5443] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.315947][ T5443] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.406662][T16447] netlink: 'syz.3.11103': attribute type 1 has an invalid length. [ 1679.685151][ T9506] net_ratelimit: 9 callbacks suppressed [ 1679.685177][ T9506] bond7: (slave macvlan4): failed to get link speed/duplex [ 1680.422492][T16475] ip6_vti0 speed is unknown, defaulting to 1000 [ 1680.474084][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1680.576384][T16490] __nla_validate_parse: 9 callbacks suppressed [ 1680.576404][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11115'. [ 1680.614531][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1680.764005][ T8210] bond7: (slave macvlan4): failed to get link speed/duplex [ 1680.897341][T16501] syzkaller0: entered promiscuous mode [ 1680.902868][T16501] syzkaller0: entered allmulticast mode [ 1680.914451][ T8204] bond7: (slave macvlan4): failed to get link speed/duplex [ 1680.969490][T16475] wg1 speed is unknown, defaulting to 1000 [ 1680.976675][T16504] ip6_vti0 speed is unknown, defaulting to 1000 [ 1681.277996][T16504] wg1 speed is unknown, defaulting to 1000 [ 1681.371761][ T5459] bond7: (slave macvlan4): failed to get link speed/duplex [ 1681.592324][T16524] netlink: 80 bytes leftover after parsing attributes in process `syz.6.11124'. [ 1683.481863][ T31] INFO: task syz.1.9918:11956 blocked for more than 143 seconds. [ 1683.489833][ T31] Not tainted syzkaller #0 [ 1683.494972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1683.504111][ T31] task:syz.1.9918 state:D stack:27072 pid:11956 tgid:11955 ppid:11705 task_flags:0x400040 flags:0x00080002 [ 1683.516218][ T31] Call Trace: [ 1683.519502][ T31] [ 1683.522458][ T31] __schedule+0x149b/0x4fd0 [ 1683.527022][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 1683.532568][ T31] ? __pfx___schedule+0x10/0x10 [ 1683.537954][ T31] ? schedule+0x91/0x360 [ 1683.542215][ T31] schedule+0x165/0x360 [ 1683.546462][ T31] schedule_preempt_disabled+0x13/0x30 [ 1683.551936][ T31] __mutex_lock+0x7e6/0x1350 [ 1683.556710][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1683.561508][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1683.567279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1683.572314][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1683.576979][ T31] ? genlmsg_put+0x137/0x2e0 [ 1683.581586][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1683.587493][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1683.593760][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 1683.599101][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1683.604797][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1683.610969][ T31] genl_rcv_msg+0x60e/0x790 [ 1683.615587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1683.620613][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1683.626735][ T31] ? __asan_memcpy+0x40/0x70 [ 1683.631656][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1683.637279][ T31] netlink_rcv_skb+0x208/0x470 [ 1683.642099][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1683.647235][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1683.652612][ T31] ? genl_rcv+0x19/0x40 [ 1683.656976][ T31] ? down_read+0x274/0x2e0 [ 1683.661402][ T31] ? genl_rcv+0xd/0x40 [ 1683.665539][ T31] genl_rcv+0x28/0x40 [ 1683.669818][ T31] netlink_unicast+0x82f/0x9e0 [ 1683.674731][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1683.680023][ T31] ? __alloc_skb+0x198/0x3a0 [ 1683.684815][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1683.689812][ T31] ? skb_put+0x11b/0x210 [ 1683.694251][ T31] netlink_sendmsg+0x805/0xb30 [ 1683.699122][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1683.704614][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1683.709580][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1683.715177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1683.720520][ T31] __sock_sendmsg+0x21c/0x270 [ 1683.725342][ T31] ____sys_sendmsg+0x505/0x820 [ 1683.730144][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1683.735550][ T31] ? import_iovec+0x74/0xa0 [ 1683.740183][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1683.745765][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1683.751214][ T31] ? futex_wait+0x285/0x360 [ 1683.756296][ T31] ? __fget_files+0x2a/0x420 [ 1683.761159][ T31] ? __fget_files+0x3a0/0x420 [ 1683.766248][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1683.771217][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1683.776840][ T31] ? rcu_is_watching+0x15/0xb0 [ 1683.781627][ T31] do_syscall_64+0xec/0xf80 [ 1683.786190][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.792539][ T31] ? trace_irq_disable+0x37/0x100 [ 1683.797855][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1683.802542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.809141][ T31] RIP: 0033:0x7fc396f8f749 [ 1683.813762][ T31] RSP: 002b:00007fc397f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1683.822657][ T31] RAX: ffffffffffffffda RBX: 00007fc3971e5fa0 RCX: 00007fc396f8f749 [ 1683.832475][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1683.842175][ T31] RBP: 00007fc397013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1683.850821][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1683.859139][ T31] R13: 00007fc3971e6038 R14: 00007fc3971e5fa0 R15: 00007ffdb25aa7f8 [ 1683.867361][ T31] [ 1683.870444][ T31] [ 1683.870444][ T31] Showing all locks held in the system: [ 1683.892011][ T31] 1 lock held by khungtaskd/31: [ 1683.897014][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1683.907883][ T31] 2 locks held by getty/5588: [ 1683.912643][ T31] #0: ffff88814e98d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1683.922595][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1683.932991][ T31] 3 locks held by kworker/u8:39/5458: [ 1683.938618][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1683.950829][ T31] #1: ffffc9000cbffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1683.962396][ T31] #2: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1683.971838][ T31] 4 locks held by kworker/u8:40/5459: [ 1683.977297][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1683.988334][ T31] #1: ffffc9000cc0fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1683.999118][ T31] #2: ffffffff8f304db0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1684.008724][ T31] #3: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 1684.018145][ T31] 2 locks held by syz.8.9703/11168: [ 1684.023337][ T31] #0: ffffffff8f379ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1684.031721][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 1684.042756][ T31] 2 locks held by syz.1.9918/11956: [ 1684.049020][ T31] #0: ffffffff8f379ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1684.057280][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1684.067703][ T31] 2 locks held by syz.3.11110/16471: [ 1684.073917][ T31] #0: ffff888036cc4148 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1684.084864][ T31] #1: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0xa10 [ 1684.094062][ T31] 2 locks held by syz.3.11110/16508: [ 1684.099564][ T31] #0: ffffffff8f304db0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1684.109331][ T31] #1: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x85/0x250 [ 1684.121230][ T31] 2 locks held by syz.7.11118/16500: [ 1684.126653][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1684.135873][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 1684.147162][ T31] 1 lock held by syz.0.11121/16514: [ 1684.152428][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x5dc/0x1150 [ 1684.161489][ T31] 1 lock held by syz.6.11124/16524: [ 1684.167940][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1684.179544][ T31] 1 lock held by syz.9.11125/16534: [ 1684.185127][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 1684.195152][ T31] 1 lock held by syz.9.11125/16535: [ 1684.200853][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20 [ 1684.210326][ T31] 2 locks held by syz.9.11125/16538: [ 1684.215699][ T31] #0: ffffffff8f2f5ee8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790 [ 1684.225193][ T31] #1: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 1684.234662][ T31] [ 1684.247636][ T31] ============================================= [ 1684.247636][ T31] [ 1684.256210][ T31] NMI backtrace for cpu 1 [ 1684.256231][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1684.256252][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.256259][ T31] Call Trace: [ 1684.256266][ T31] [ 1684.256273][ T31] dump_stack_lvl+0xe8/0x150 [ 1684.256297][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1684.256324][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1684.256355][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1684.256384][ T31] sys_info+0x135/0x170 [ 1684.256397][ T31] watchdog+0xf95/0xfe0 [ 1684.256415][ T31] ? watchdog+0x20a/0xfe0 [ 1684.256432][ T31] kthread+0x711/0x8a0 [ 1684.256449][ T31] ? __pfx_watchdog+0x10/0x10 [ 1684.256462][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.256476][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1684.256494][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.256507][ T31] ret_from_fork+0x510/0xa50 [ 1684.256520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.256529][ T31] ? __switch_to+0xc9e/0x1480 [ 1684.256546][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.256559][ T31] ret_from_fork_asm+0x1a/0x30 [ 1684.256582][ T31] [ 1684.256587][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1684.377283][ C0] NMI backtrace for cpu 0 [ 1684.377302][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1684.377323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.377335][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1684.377360][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 91 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1684.377377][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 1684.377394][ C0] RAX: 00000000005a69b3 RBX: ffffffff819713ee RCX: 0000000080000001 [ 1684.377408][ C0] RDX: 0000000000000001 RSI: ffffffff8d792329 RDI: ffffffff8bc08360 [ 1684.377421][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1684.377434][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822370 [ 1684.377448][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1684.377461][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 1684.377475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1684.377488][ C0] CR2: 000055556841a5c8 CR3: 0000000075c12000 CR4: 00000000003526f0 [ 1684.377505][ C0] Call Trace: [ 1684.377514][ C0] [ 1684.377522][ C0] default_idle+0x13/0x20 [ 1684.377542][ C0] default_idle_call+0x73/0xb0 [ 1684.377565][ C0] do_idle+0x1be/0x4d0 [ 1684.377583][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1684.377606][ C0] ? __pfx_do_idle+0x10/0x10 [ 1684.377630][ C0] cpu_startup_entry+0x44/0x60 [ 1684.377648][ C0] rest_init+0x2de/0x300 [ 1684.377671][ C0] start_kernel+0x381/0x3d0 [ 1684.377691][ C0] x86_64_start_reservations+0x24/0x30 [ 1684.377715][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1684.377748][ C0] common_startup_64+0x13e/0x147 [ 1684.377779][ C0] [ 1684.562986][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1684.569862][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1684.578979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.589465][ T31] Call Trace: [ 1684.592828][ T31] [ 1684.595760][ T31] vpanic+0x1e0/0x670 [ 1684.599744][ T31] panic+0xb9/0xc0 [ 1684.603468][ T31] ? __pfx_panic+0x10/0x10 [ 1684.607958][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1684.613465][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1684.619938][ T31] watchdog+0xfdf/0xfe0 [ 1684.624984][ T31] ? watchdog+0x20a/0xfe0 [ 1684.629328][ T31] kthread+0x711/0x8a0 [ 1684.633676][ T31] ? __pfx_watchdog+0x10/0x10 [ 1684.638858][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.643862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1684.649363][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.653966][ T31] ret_from_fork+0x510/0xa50 [ 1684.658549][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.663658][ T31] ? __switch_to+0xc9e/0x1480 [ 1684.669060][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.673908][ T31] ret_from_fork_asm+0x1a/0x30 [ 1684.678824][ T31] [ 1684.682291][ T31] Kernel Offset: disabled [ 1684.686654][ T31] Rebooting in 86400 seconds..