last executing test programs: 4m19.348779949s ago: executing program 3 (id=447): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0xc}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 4m18.864332141s ago: executing program 3 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0xffd8) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0) 4m18.704854954s ago: executing program 3 (id=456): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="302e332c4e5e397a84f7eb08a765d7a46db335b7c7e0d9799f4fc5cd79daecc25bf6e2cd12333d5d1c5596148f290122c24e807bfed0f32bd1ed7d9ed2f4ad2a0e00b56f1415557490228350c08b2b9d5573b061f62aaf523cbb7d3fa8317d55b56c8cddd5fc89b58396db1c65a7031ef95725b72a72c751ef54f964aaa8c4ef9710acfde8b237accabf57a18fd2758d3018615e3926dbdf5195ff7c43dbd2492d3f98dae9db4b73e22fd038474985cbfb72fd258e2e70fdb733d691ca625f4f0e68751b7dd942ed1d0454368e1dd2cd276690eeb19487160a69603a50109f", 0xdf}, {&(0x7f0000000440)="a03112a0a96ad31d1d0b3df3538683ffeee4ff948ea1a601e1182718d676536651f1cf5da8866e35f5fa05a11bbd59f0591eaaa52669e56cf889c396b811f843172898d9e950a748c7b088cc65f5592566f3285a2ce583c9b7ff1e7a2442737be96d56b2235983a442ef1243493832c95701a188be44e14f341ca077416287740bdebef9c76d63a31ea0bb1d92ddc8106ec55f33a57616973145e7998041f309ec542ca699712ae04591389cd48be134603da3a88b25df3461c95a4a", 0xbc}, {&(0x7f0000000500)="c13043e96aac1f7611f5fe5a11741cbd601cddec155452457cfa10cd4b38846d616945a89ceb1effa624aa2728a40f544ce16b61ba83ada552dea85c61acd32adb3653cbdf22e4cc6145", 0x4a}, {&(0x7f0000000580)="1cad6061134d7c280ea47cfef3b58bf44eb06bf9ff93546b2b9333e256a4e7f18b2b96cc7dca9a768c6d223e574573121da6f7916a46d2b4746409ae5a243fe1293e298e91ae6c511e3489f225c4f466be0a67", 0x53}], 0x4}, 0x4004094) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)={0x1038, r8, 0xc6e8cd902659d574, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x800000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1038}}, 0x4040000) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r14, @ANYBLOB="dc826e00000085ea251fd16a5f767e1886e6c7e28b97a47552f91d1c476384225486e8b3cafb22266e99bde8dbf4509e30d7672a88493df2da76cbd7e8209960b7d16a31db931894b86feddb72f80ace52eb173b200149c91e99674d6dfcf36e7ad1efdceb8b3a707aa6bf747a"], 0x20}}, 0x0) write$tcp_congestion(r11, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r11, &(0x7f0000000300)='reno\x00', 0x5) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m18.392101718s ago: executing program 3 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301042, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x3, 0x5, 0xa, 0xafd2}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x800}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff36) sendfile(r3, r3, 0x0, 0x8) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x1, 0xa, 0x0) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000001000004a", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xe, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@deltaction={0x11c, 0x31, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0xffffffffffffffa3, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffcf7f}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x40, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x240410d2}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18", 0x5dc}], 0x1}, 0x4) getuid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000003500)) 4m16.321935189s ago: executing program 3 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20064094) 4m16.04529147s ago: executing program 3 (id=480): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x22a}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac=@broadcast, {0x8, 0x40}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x1}}, 0x41, @void}}, @NL80211_ATTR_FRAME={0x26, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @broadcast, @random="705a9bb4cefb", {0x5, 0x5}}, 0x2800, 0xc, @random=0xff, @val={0x1, 0x2, [{0x6, 0x1}, {0x24, 0x1}]}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x8810) 4m0.962241965s ago: executing program 32 (id=480): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x22a}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac=@broadcast, {0x8, 0x40}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x1}}, 0x41, @void}}, @NL80211_ATTR_FRAME={0x26, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @broadcast, @random="705a9bb4cefb", {0x5, 0x5}}, 0x2800, 0xc, @random=0xff, @val={0x1, 0x2, [{0x6, 0x1}, {0x24, 0x1}]}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x8810) 2m28.104405477s ago: executing program 4 (id=1404): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYRES8, @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="943c814a0c8a02602efc9ec252f158d12b0220179eb3397d782ada8914ec2df41db0c3198abd0b68bf9863f1508251352f3077f382b191f79fd4bed0367440a1b4a1ab97c28e79d2bb7da4ac0a1bbb0bb139e19d57ef93f22493bd9b71baddbc63a7acd04d0200000000000000d6a6995a8188ac89d4033ccc4008d2f259daf9757ba2fb9779c8fd7acc95b1c97491442a920b257456b2b6c17fcb3d8923a1149f33a8c1e2d826a145c29135bc998f04b16f14ae9b02252e9afbeb9b0973ca72b527e5cc05e5c95c2983e95001b89bf9e8494c164848ad0abaf239e056ce00c454e9177a5fc1891b8609a4704b0cb46e4c266c43840c7402502ad373a7dd1c334d4e4b984c86b8e3daa1843eb1ac8813589ab0b1699782da5ad1dfdb1178b8aeed4f82508ae8bda564e4d977609d53b76583b38f9981e65e98c51efb5b3de61ffcf31edb20ac74838fde32a4de2ea9848402eb5310f7ba6b0df7f5"], 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x20008840) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20080011}, 0x810) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m27.961537918s ago: executing program 4 (id=1409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x0, 0x14}, @mpls={[{0x2}, {0x5ff8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7fff}], @ipv6=@tcp={0x8, 0x6, "03131a", 0x0, 0x6, 0x0, @private0, @private2, {[@routing={0x89, 0x0, 0x2, 0x4, 0x0, [@private0]}, @routing={0x3a, 0x0, 0x0, 0x1, 0x0, [@empty]}], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x40ef, {[@md5sig={0x13, 0x0, "15a79aa0d1f14a3cddcd684ab62d940e"}, @sack_perm, @md5sig={0x13, 0x0, "f958a57d0a9186a3689d78cb108f9f5f"}, @mptcp=@remove_addr={0x1e, 0x0, 0x1, 0x0, "b79b5f83b251550c0e06c7680fe8c2d2184f71f454b6478949e078ce4bf7bf10b4e0344185aa20407f4c8e852c855bd57ce9175a0fbfe0041eedb27189e20c5ef27c3cfa23f05d945e7aafa9c81123d3dfc0c194191daef79a855aedbd21d8ad3126970d454fdc298ed031330e4842a6c17049ff19c6fdb1f0550aa1f97a19e3a14fd439472c2d688d11222ff52ab798df"}]}}, {"165020633bd0539f7e1683b33e1750463f214d89dc1d5cfde13ca4e21a447b3008e9c885ac7266d36f9c47aa27f5bb9570e80a970b0b2a78ba0e68fa00807e4ff14484baf0c03a719e5f3aab63ec0a448be76528cccb7b4b183d307131b8827b1a6985f93d63cf806e47ad9eb94c9bc08fe5a7cf1c5547f55e8d0ff3ed872ce8b750d79191863df67a7b500930aa6c90b7adfdf5dce8c84f3070218ff9622588baf3ee85806d65b0e253c1bd0333f05d6ff11a771d43a5f55330de58c6d9d399"}}}}}}, 0x6a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg1\x00', 0x1}) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m27.696346704s ago: executing program 4 (id=1413): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x8a, &(0x7f0000000440), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) epoll_create(0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) accept$inet6(r3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r8, 0x201, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x68080}, 0x0) 2m26.808541435s ago: executing program 4 (id=1431): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000ffdadf250e0000003c00018008da7b5353000b007369700008000b0073697000060004004e0001000a00000008000800008000000600020084000000080005000000000008000400000400000000060000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4044818) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4803}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="28a55a00ed49cb2844c80538132da8f1acaf64c1cc49c411edfd57e9608289c47c032ebad5233cc6a42b8ee56c2cdd0eb8503146a785463fe7f282697e73de9cae52f319c1ee418faa101b0d63cf45734eafa9510e7be6f1b21f40ae46cc7b36ae3d8f3a", @ANYRES16=r9, @ANYBLOB="04002abd7000fcdbdf250800000008000900040000000c0016000800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x24000804) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) close(r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000cc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6cc, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4f, 0xffff, 0x3, 0xacdd, 0x2, 0xfff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x9, 0x24, 0x12, 0x9, 0x48, 0x4, 0x5, 0xb, 0x12, 0x6f, 0x10, 0x75, 0xb, 0x6]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x60, 0x9, 0x2, 0x18, 0x12, 0x12, 0x1, 0xc, 0xb, 0xca, 0x70, 0x16, 0x1b, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x16, 0x2, 0xc, 0x2, 0x16, 0x48, 0xc, 0x24, 0x60, 0x30, 0x4249ed0eea6ea75c, 0x4, 0x48, 0x5, 0x3, 0x1, 0x2, 0x60, 0x36, 0x1a, 0x24, 0x1, 0xb, 0xd, 0x1e, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xff, 0x9, 0x0, 0x6, 0x9372, 0xfffe, 0x7f]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x16, 0x1b, 0x36, 0x36, 0x6, 0x25, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x8, 0x1, 0x7, 0xba1, 0x4, 0x99f7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x3, 0x48, 0x48, 0x6c, 0x4b, 0x24, 0x6c, 0x24, 0x3, 0x12, 0xc, 0x1b, 0x72, 0x60, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x8000, 0xff38, 0x7fff, 0x4, 0x0, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x30, 0x36, 0x24, 0xc, 0x0, 0x1, 0x24, 0x2, 0x16, 0x1, 0x60, 0x18, 0x16, 0x36, 0x5, 0x3, 0x6c, 0x12, 0xc, 0xb, 0x16, 0x4, 0x3, 0x60, 0x48, 0x1, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x3, 0x4, 0x9, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xbf3, 0x0, 0x2, 0x1d6, 0x7bf, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0xcd90, 0x4, 0x8001, 0xfff8, 0x14, 0x1]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x5}, {0x5, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x8}, {0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x2, 0x7}, {0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2841, 0x7, 0x10, 0x23, 0x8, 0xfffd]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x5, 0x100, 0x1, 0x5, 0xffff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x5, 0x1, 0x7, 0x8, 0x4d2, 0x2]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x4}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x9}, {0x3}, {0x5, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x7}, {0x2, 0x3}, {0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0x2}, {0x6}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {}, {0x1, 0x6}, {0x2}, {0x2, 0x4}, {0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0xa}, {0x6}, {0x0, 0x8}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x4, 0x0, 0x21, 0xf001, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x12, 0x24, 0x6, 0x6c, 0x24, 0x65, 0xcf5b994f91e56cd5, 0xb, 0x1, 0x18, 0x9, 0x60, 0x6, 0x30, 0x30, 0x60, 0x60, 0x18, 0x2, 0x2, 0x1b, 0x2, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x56, 0xfffd, 0xf, 0x10, 0xffff, 0xd345]}}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7, 0x2, 0x3, 0xf3, 0x9af3, 0x2d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x18, 0x0, 0x48, 0x5, 0x2, 0x60, 0x5, 0xb, 0x36, 0xc, 0xc, 0x18, 0x14, 0x18, 0xc, 0x6, 0x4, 0x3, 0x36, 0x1b, 0x6]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {}, {0x1, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x6}, {0x6, 0x9}, {0x7}, {0x0, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x5}, {}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0xb, 0xc, 0xee, 0x6, 0x9, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x448, 0x7fff, 0x0, 0x3, 0x7f, 0x5, 0xb, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x1}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x2}, {0x3, 0xe}, {0x2}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x4}, {0x6, 0x4}, {0x3, 0x6}, {0x6, 0x3}, {0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x6}, {0x6}, {0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4042, 0x7, 0x3, 0xbd, 0x3, 0x100, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x58, 0x5, 0x9, 0x4, 0xfffa, 0x5, 0xbd, 0xf286]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x24, 0x0, 0x1, 0xb, 0x30, 0x1b, 0x2, 0x0, 0x9, 0x0, 0x36, 0x16, 0x6, 0x1b, 0x9, 0x16, 0x2, 0x12, 0x5, 0x2, 0xc, 0x12, 0x3, 0xc, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x16, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x59e, 0x0, 0x101, 0x1, 0x4, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x67, 0x9, 0x12, 0x18, 0x5, 0x1b, 0x24, 0x24, 0x60, 0x3a, 0x2, 0x5, 0x12, 0xb, 0x5, 0x0, 0x6c, 0x1, 0x0, 0xb, 0x0, 0x6, 0x6, 0x6, 0x5, 0x24, 0xb, 0x16, 0x1b, 0x6, 0x5c]}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x3, 0x5, 0x3, 0x1, 0x101, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x8}, {0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {}, {0x5, 0x2}, {0x5, 0x2}, {0x5, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x77b3, 0x3, 0xadc8, 0x0, 0x7, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x5}, {0x1, 0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x4}, {0x6, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x7}, {0x4, 0x7}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x6, 0x5}, {0x4}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0xa}, {0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x5}, {0x7}, {0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x2d, 0xf5e0, 0xc, 0x4, 0x3c1, 0x4]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x2}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0x9}, {0x6}, {0x7, 0x4}, {0x7, 0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x1}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x3, 0x5}, {0x6}, {0x1, 0x8}, {0x2}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x1}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x8}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x16, 0x13, 0x9, 0x1b, 0x9, 0x18, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x6c, 0x5, 0x6c, 0xc, 0x60, 0xc, 0x1, 0x4, 0x1, 0x6c, 0x6]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x5, 0x2}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x1b, 0x18, 0x3, 0x9, 0x1b, 0x6, 0x2, 0x6, 0x3, 0x36, 0x16, 0x36, 0x36, 0x36, 0xc, 0x60, 0x8, 0x5, 0x18, 0xc, 0xc, 0x4, 0xe, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb8, 0x8, 0x4, 0x9, 0x1, 0x0, 0x9, 0xc9]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x1}]}]}]}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x10}, 0x8001) 2m26.437082818s ago: executing program 4 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000b", @ANYRES16=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) (async) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 2m26.112286644s ago: executing program 4 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0xb, 0x2, 0x1, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6e) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0x37}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e00000010008188c6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a00a2120f0000000280000093594ae20556ce4ed834ae1469f4217bf0bac54f67930c5793bf9077019aaa6e89b58ba233629600b4c6f6287d3b1d033eb30dca2577d52718938c8812ee75504ed4b68f232cbf92c30253fd5c602cbc1b3c86a1ef79e3306ac2d5dedb304da9e604360861abb5a54c94ff07d2cf1e0f894b24c09ae9540927ccbf93c54e5f60f4d7b34395bd6473c36890", 0xb9}], 0x1}, 0x80) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x28}}, 0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffffffffffe, 0x1000) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6e179000580001002bbd70e8fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) 2m11.079769044s ago: executing program 33 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0xb, 0x2, 0x1, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6e) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0x37}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e00000010008188c6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a00a2120f0000000280000093594ae20556ce4ed834ae1469f4217bf0bac54f67930c5793bf9077019aaa6e89b58ba233629600b4c6f6287d3b1d033eb30dca2577d52718938c8812ee75504ed4b68f232cbf92c30253fd5c602cbc1b3c86a1ef79e3306ac2d5dedb304da9e604360861abb5a54c94ff07d2cf1e0f894b24c09ae9540927ccbf93c54e5f60f4d7b34395bd6473c36890", 0xb9}], 0x1}, 0x80) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x28}}, 0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffffffffffe, 0x1000) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6e179000580001002bbd70e8fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) 40.220225883s ago: executing program 0 (id=2724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xffffffffffffffb5, 0xb, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 40.068306832s ago: executing program 0 (id=2727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 39.763425896s ago: executing program 0 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socketpair(0x28, 0x1, 0xb0a9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000003240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003200)={&(0x7f0000000200)={0x2fe8, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x24, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0x8, 0x4}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x5, 0x7fffffff}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2d24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x280, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x270, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x6f, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @preq={0x82, 0x3b, {{0x1, 0x1}, 0x5, 0x9, 0x2, @broadcast, 0x6, @void, 0x10000, 0xfffffff2, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @broadcast, 0xd743}, {{0x0, 0x0, 0x1}, @device_a, 0x3}]}}, @supported_rates={0x1, 0x7, [{0x24, 0x1}, {0x18}, {0x60, 0x1}, {0xc}, {0xb, 0x1}, {0x30, 0x1}, {0x1, 0x1}]}, @tim={0x5, 0x7, {0x6, 0x30, 0x7f, "bfe3b451"}}, @measure_req={0x26, 0xe3, {0x8, 0x9, 0x5, "d5048358771b232f88b81cc4691004740182391aa876b8242583a1c80014b8ad7bb39afac26f811fd0c711aee1e8fede96278164358f3435a4ac89003a1b8628f8158fdc5cd12ea5a9d93926c5f79694f51954cfa3a7f94611b4a3183a5e46f6c394c7138bbe05a7af181e7a68a9e8b9ea87440f01b23e3fada0d271da64b723941f791d44a222450baf2b38d8fb02044d3b5745e9d0fe2189bd9a8e80dfa002b9cb311fb9259e97af91251fc7cd2edb278f0bf87f7b55676c3465434bfacff1f9a2c6077688ef158c9d87f1d788ed4088905b130e6af2fa3410010bccc9f45b"}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x7, 0x0, {0x1, 0xff, 0x0, 0x10, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x2, 0xb}}, @ssid={0x0, 0x13, @random="e543b968b304afd319d6be1abb01fddd9f140f"}, @measure_req={0x26, 0xe2, {0xff, 0x8, 0x2, "5ed17fb07fa43c25549bf3a37127a4b62b9dd8f8a95e6428beb1083eb8a2225864e5a06a1b1d14f2421787bdcfe13537134676bc1a9da83dbd20c48c14d87c76014d75efed7090308f65bae98b9f22740edcedff32b2769f77713883ebda40c760d26cae82d2827ed4f5d93195fcc5e18c0c922bd859d1050e246175b9bafd6c83f5b29253a32af0fb1c5cec07cee7750428d9be03b4d7b9d3f197cb6dedb383fcc3ba24846ad24188b0dc21e424b38d36d77c038579d3b49412cd133674a0aef5ca64abd61e97b2e04195911350e6e73a485b3f26dbfb3dd8685c47ea9a1b"}}, @mic={0x8c, 0x18, {0x3, "eeae3e18740a", @long="0248f0bf0b752cac1bb3ef06c8e79ef1"}}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010100}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2704, 0x4, 0x0, 0x1, [{0x1054, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x31, 0x2, "e5b523c998c88c3ddaf63feeb2fc49c1275ebbf934d0bf225553c14a7c2800018790751569a5bf6bc18b173149"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9d2b954}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd8, 0x1, "43d130597f1b6e1635e129d3d91573f981fefd7b83e7f40c0cf56b2e9201503cf2d5e88a42200ee25a3f6569c3b558af0895256640925378f5336484163d38fc5ecebe504c3df7ea438573eebfb1e0cfad136734a724398bda47745b0d5979195b3ffc3dc3ace3bae21d72ca27e572eef9e1190a2ebc24c1f5779cdd0249648969446053007ff332c1e100a200c37c0537a8f89a706612c2a75bd419215080572dd858ed8d8c9e20acf4c2d5c03fe884abb3d2feff92f6b8b4ac3e29084b2f8658a196eb6d40a64fba9cc1ac473caa8ac347beba"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}, @NL80211_PKTPAT_MASK={0x76, 0x1, "0df2cc97a022f585ff9901228c5ea968504e1bf6945ede60a8dbc950338bff74dc2190a65a3d6ec16d38da0951282ce16d84462f2b46fddda9920012797b2b165d7c7f98b40761bb9661973d578759b78d23c83826292eb60f16ac82a37f6a0c13e8ce85d514014e26aaeaa87b23bac0cc72"}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0x4d, 0x1, "7256498dffcf40ef72699f6ff9f23fa3e2184da8ae1b69b7c0a33102cf384b6cdc5d15abd87976b83c068e789857a958a4d0d3fe32c6ac2d52a4f35bd4559a60d05016ebfe52ccc69c"}, @NL80211_PKTPAT_MASK={0x25, 0x1, "8313248800a3092363545683fa8afe97a6673d4be4242452fee06d57f4370893f7"}, @NL80211_PKTPAT_PATTERN={0xe1, 0x2, "c8bf4878ff9ee07e4ee0a50c7845f8ae6ed189b84504bf22367d548fedfe2165f9df46b79b80ada75365328774df75623b602294bac63d2b310bf2bf7de0af0ace074fe1758bec56fc255329c2b5bde6e4d099dd6fe8142ae51f378fc0d0d1316ac5030e0dad53a5adf33e8b062a92e1c5008d2c793041aca28e3ec6b6877f2e79ac7d39db3a89399faa7ba2ade29ca5f55e93de0b3dc2d01faa7805589acaf2a52979b489ae515432a40da6cda557b6b18f1e0135857bc46cb0f0f29a4da73647340889438563dbdd1d466382b4cde0d91362fac82ce6ae9c0fbbdda9"}, @NL80211_PKTPAT_PATTERN={0x8, 0x2, "60dc71f6"}, @NL80211_PKTPAT_MASK={0xe, 0x1, "faef9dea3d6e8213a8bc"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_MASK={0x55, 0x1, "c185c05ab8de126187da23f9c65cf99d2687c7bf1745e3246b16f85314cfd682cc18cbde454a91396153928f3ad3a466ce04d14c8fd46016f7c7f3b739fc286a73518cc11a1781f56b383686a97ffaf3ab"}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xdf, 0x1, "a43728c2f25e8f142e545c29a4e8048b54e766cf7ac66cc474694e0ad79ce9114fabfe9190d156a58debbe2269b47f9c872534aef415202175f15a8bd577d880660e66f0d72179fee006d752e6787d605a1dbc7a27fa361b9b32ea030a51d86efe169d85f5235902f5d4fb4743e483a5b4b506a6ab2ef83437abb08d5625f80f66046ba95f46490432a3cfd5643609d4ac9be2b9155954abe09f85e2e107eb529199155f29e446a5b9e15985a2d0518e646df542f6fdeed8654d13b367fbe8aa730fb15b4c6aec24f74d53c8b746ef2a1ddb1573dfa6306c226140"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x43, 0x1, "a4840c69a9efbe3f6c84850533339905c1b9f800434cde43ffef78a9617c876287ac8e5eb633a16b92354a27eb3ed6cbc9d40ad1f74e3613c9c6dc32b6278f"}, @NL80211_PKTPAT_MASK={0xc, 0x1, "a8dbd0cd8cae9b5f"}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd6, 0x2, "c64adaf294d9e5bafee4d96fb5bb960f1027de382142e77d0deeb42bf7936cbcec61484f5bedfac34815632bb0addf1734b49e1db36fcfd73cd10f8480e28eff476297a34ca18c8c1243e8725d75d07114be9e369b046fc3b9bc52212a96db177a7a403a6fc6e973ac162500a64eb7dc452be6bd9671194f2efc66bd617fee97f2e721c323cf1051d22e7afa61040ba3881d9fb6b5de33f084d3be4a2ea8db3d6528d50410cae39eef350afc5406048b25578c8d86316b1fc52cefab05543d89b64f9cd5478bf48d52e4d31a80da6745a4a0"}]}, {0x1038, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_PATTERN={0x16, 0x2, "2024116607b6728cf21960646d68951e29f3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, '6'}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x7a, 0x1, "282b33bc4be74b8daeb9b6be9613d48ceb2d48a86397893b3771d260b804637fd49e97b534f022d2f5449c2d8215e728a94787e84fd056a028fa1438919f148bd868cd6d811f129dcd7c43ed7f545fac7692f24471f867a694c452788ce5258182f93d4b1e39c44c50d26ce19f5d39dca33fd4370817"}, @NL80211_PKTPAT_PATTERN={0x84, 0x2, "e1a44b5098746f6ad1fc5189188ed3c4b14e32c8f6a5a2cdc34412f6d9cd941c5d9f95f2c32cd7052e1d478618de47b88b253d69f8bbf5d6df0e47766b01fab7f86963df08554d3e49ab62b4ea9f742b1c1a145dfd4cc3cac141764949b542d3be5ad2cd77f6a0764744e3fd37bdb34818009add6d01390a09cd6c5caed148d8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x380, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0xe4, 0x2, "600cf8a6c21430809660cb2052f1a91874fa2a2f6b72f23d1f6d1c19467b824ab0d5173628e84412208a0cdeea9695082e8c579c128b846124fa937bb57d28f1e1346fb6cab851ad4e6be8024c879937e57a81de585923bd8555e2cf0331aace7867fff8fe8185afbd673b57041e7918409372cb22bff6e5f910690024815566cbb96b60f771096a0ac9019e54bb2c8a569e9ab35485ac9ddbc06cadcfc656f900dc151af4d0037d4efc6a15c19c432e8110d9d8778114d7905bf5ecca731704b994d5442125696781ed6fa25ed62f0696c8b321ec15d7e3593aed82dd446cec"}, @NL80211_PKTPAT_MASK={0xaa, 0x1, "326ea926bb1310adb493dd66e7a167f7f7ff1c32072f3131c320b1e3b3f5b6922cfef0476f5a0d3c2167a230c5a6f1b47cb5a40b6202d22a5d18eb0ba47ca7726d13c4e50c26e8d865c61970348e5e531b015e08d5998da44d549f4261e4873fd32dc5bc84ceb2274f89aae698ef8a685007e13e8ebaf79024c6bafa61aa87a0e00c0d56ac83f8fe45e35f187c8bd1674ef331dc7ad9248061679794f21f41b4b13b57f1770f"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xdb}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_MASK={0x6d, 0x1, "3f6d4f4b4ef42e4f6f08dfcf42a2cf1c24e29ad46decc697083361582ac8084efd6f969f34f6ba3c1ee892bb061d19a70aadc3688163edde3e24e558920cd767f370b8558870fdb022e0b0f77a449eb4bbc1c15ea95179e67496df0bb6816cad33a245342a6d92cbf0"}, @NL80211_PKTPAT_PATTERN={0x17, 0x2, "f3ee87bf7177beb0a47335fe3cf42871ecda76"}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x14, 0x1, "b4be1bbef393f66d14f5f6a69fbe7aa2"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x7e, 0x1, "de00792a6ff3fe7a48f5b8764fa573157a6f7d3dbb6570ba8990f4ef3004aac616d636ea6c2d8dbddbb5026267a9a5349efec07046dad6875e0d87ab9230d07a51e03a88c2523f181baf3eda9d26e73718fcd58ba35212a767b09b529b6561c6021df204d5926d1bfed4edcdb9223911b80738973d89b1e6c674"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0x37, 0x1, "c4b7b8ebd648c2acf454031d9162642b0b06cea35b849c938b5e564329cb052cb11bb512be10c6fd9d4526b9c751a22e979626"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x85a}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x27c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xa4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x7c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x14, 0x0, @random="3d4f2a3e6bfb4e1807e95519d0b1865f"}, {0x1f, 0x0, @random="7ac8bb656e8e352a4ad94f65c8d2740eff448e72dc1a1301590f6a"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="285ea4c6effeabead8bd3d839e601a"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0xdc3}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x188}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xdd, 0xa, "c27f714fd071d47f6e6f4f162b9a4fa75c59af0443597b5decf85ae3af690ace4dacfe5d71fd082fff6a895fd67f3db8d0978ed3bd1a01661b332fdfeeba0386721aab206bec220d458c47cdf0a97c89cbb2e980d10c0471d269f739065d8ddc2928f555acfbdca42d9c2fd6df14930ffd31b67394aeb10089a6da0a35997bb5f11760d98408a5a78795b5d5825c0402ee75931ca331e937447c97a12858f6eb53ec775fd1b2e727b192a1bdb40de77c9cbb8e744040dee6739a0f7c9cb910598c814f485d08181dc0310d2840012be5110e998e651007872a"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa5, 0x6, "b1194077b769e0ab7e43924d5c788bd63191b293f3a4a4a807c9c69539250b8141712e7d13be54048235446f0fcaed1c1463937037025bbcf235b8e313a616c87a5cac3155da580e0b12c3819da682f03d011163b7484845cadbf3bf8d7d67e1a2e3db9e5c76199f9ef9a7928622178509b32336613329fce90be2d26d87b7fa1eb763480f59e8c4d15e244d70da55086e3773a604d61c89ce6fdcce3bde9aa837"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xdf}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x2fe8}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000003280)=0x4, &(0x7f00000032c0)=0x2) r6 = socket(0x2d, 0xa, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000003580)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003340)={0x1fc, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x45}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfb474ef}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb6b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8a2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1cf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2eba}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x48d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11d663b1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ddd}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96, 0x3, "33b0495a4274b5087bafb486642ed2b5d3519ce8aa706604335911f85479837b607fd1a80f01203c8fe2914ac98388822211648c5f6e4d03bb4df702f65ff01bb5cd3310c6402a3a66e18f0dc379aab114e03a24f20890ab2f775df9d1d987f3f17f89bc6fad6faf59f29f76300d4e0b8f7ed07f64e603817235857f2084ad3cd6969939c93a9171bc2c116e09286c418894"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4930}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000036c0)={0x1, 0x7, 0xe4, &(0x7f00000035c0)=""/228}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000003740)={'sit0\x00', &(0x7f0000003700)={@mcast2, @broadcast, 0x6, 0x14}}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000037c0)=@o_path={&(0x7f0000003780)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003880)={r7, &(0x7f0000003800)="1c60bb722e5b3a1e0c3034f71baa94b94b7881aff4983a1979349dad9c42528cb4e2226415cc3903bda8ad6a00655c3f32e613bdbaece96b67", &(0x7f0000003840)=@tcp=r2, 0x2}, 0x20) ioctl$FICLONE(r1, 0x40049409, r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000003ac0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003900)={0x17c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x78}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x38baa681}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8f9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x40040c0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x7c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x8001) r9 = syz_genetlink_get_family_id$team(&(0x7f0000003c80), r8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x58, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x24044880) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000003dc0)={0x8, 'veth0\x00', {'veth0_to_batadv\x00'}}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000003e00)=0x7, 0x4) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000003e80), r8) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x20, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40) socket(0x1e, 0x1, 0x91e) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000003f80)=0x0, &(0x7f0000003fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000004040)=@bloom_filter={0x1e, 0x0, 0x800, 0x0, 0x106, r7, 0x1, '\x00', r11, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x6}, 0x50) 39.493353832s ago: executing program 0 (id=2733): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 39.25959807s ago: executing program 0 (id=2735): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x72bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xd2c00, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r10, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) close(r3) 38.744251331s ago: executing program 0 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r9, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b40)="4803c34a59757670d6d50f6f7084362cefbf4f9b8b15f9d097c78dc70c9db4d100ab42b7b1ae3636c363d5bb7f1d4135221e301ca8a5d90df7690ee08a5ef7f71120acf1b711689d6e6377106a24b661ee405ace2721ba0f85b4662333a336b5934a72dd3c8f828e5b3af512f998850402e8d2bae15d5588523edec4883fa37ec41d5c915c9b9bd8ea4eef359ba3be83598ac0c2d9d7148ade63dbff3f2950154b3af2b15efa0f7185ecd33e15c30ceff10f7df994c1bd90228551e2fe029c13f2c73f9231f257b655a485571bbb76d797b149c6b59deb66ee07c04197e7ae301d7875d69e49eb5e1bb86a99332fd8790824d78fd974952059e4f4d461db8666b9a88a66aa4db94201d2602dff30b815ba20be5bcc6142c2d187d3e0cc96e9eb89f1bfaf0cbcafebaf6e0b924e6bd192a14b9bed4e4a7f46579fbe883e634dc6870ccfd3ca4eb7622dc64e5600765fedd33f3f3f8e75304ddbc9f21711afe4b8f44d3fc9d1528c2872024e8e03396faf3c23175fed0b2428302debfc2859674c5836d1750444f6793f2961fc87dd1df7913b64edea73aa9e0dde7bfc39181c0b498864fb14da7e39d7dcf226583c167b638298b5419db1a506ecef1fac10d10ab959188ff95f53aec906fae1905ce5d18c8a20b0d38aff747648c6e6c5d5c352da9a588618266c833ed23fea2d24fe1070aab36811761cf26d3bc54770737cb213552861ee9187771eb08cd0b2d9bc1cf1f094e9903392919cf0b03407f920c32111a14b936694c1be48da8ec422d53d59dd8f91f5587e8ac98575fdd5c6dda2c9f92beb66d53d95499a4601365c7b982cdd6cf17472fea5dddeb90ac75656a8f1978a98b505e50722eb39639b47dcd37744e9cbdeca2223f0ffc95a2bb80a6f5b7edac80d2342e88b06e96a19698f896a8953791add52ede24d0aec5b7fd52f18", 0x2a1}], 0x1}}], 0x2, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56641, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='vxcan1\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000300)={0x18, 0x0, {0x4, @multicast, 'geneve1\x00'}}, 0x1e) writev(r11, &(0x7f00000018c0)=[{&(0x7f0000001740)="18000a98b19b6b", 0x7}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 23.425281172s ago: executing program 34 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r9, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b40)="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", 0x2a1}], 0x1}}], 0x2, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56641, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='vxcan1\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000300)={0x18, 0x0, {0x4, @multicast, 'geneve1\x00'}}, 0x1e) writev(r11, &(0x7f00000018c0)=[{&(0x7f0000001740)="18000a98b19b6b", 0x7}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 16.265295548s ago: executing program 1 (id=3013): r0 = socket$inet6(0xa, 0x4, 0xc29f) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000080)=""/182, 0xb6}], 0x2, 0x2, 0x5) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x43, 0x600000, 0x5}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000002280)=[{&(0x7f0000000200)={0x27, r2, 0xffffffffffffffff, 0x4, 0x3, 0x9, "f08e8c4ad4c5d7b403a8dba25a95f5b4fc7e0daf11c5bd994700d1c9029f58bc20d2bd8a907095ea21396249b4f38af8a8487fef0712e8d7a23bb86fac8c72", 0x2f}, 0x60, &(0x7f0000000500)=[{&(0x7f0000000280)="ff3761fdaea32cb560e14998ceff27ca945609371b07d5c4fb8c7bc81b3af22f4fa41ec74b1074d5aa64b9f1b290ec3998a9a963410277dab3866c4fc89b49971ecd0fcdca8ec4af579b397f92bc8694ddc2b1cf3191b0caf81d42512c89d639976219d11b6f9ece36fa718628a6739f06453ca0e29cace3bc30a36b9c5ee4dacc979697ee9722cb8412b016a9a9cdab1d7228eaa839d46b6d125b10b9406558ec4704f8ba93a25cb1f344795db15c", 0xaf}, {&(0x7f0000000340)="031fa451cc0594cbb6a95bb3deb1c399cd2244221b623c2d9c68bc5d8114d6779950d9cac0baf9fa484415ec92913adb71da6e04aff82ce45c6b4e2853b56e2f37471b3ae93aa3187e9c89eec5ec38fe911a156f42b7a2f4ebd2ff84d3eea1c8d7f7da40a0f0e4210926ed91fb2bbb1ffafac9021be0", 0x76}, {&(0x7f00000003c0)="e7e24788215b76f5490764b3c96854608ba9d1d1b947bd89be10242043d9a6f947130a3c698a02046a43c11f48263fdc9632d8873a13667acdf4ec6f336901df145bb4311fbb32", 0x47}, {&(0x7f0000000440)="80380fce56ca9b58ef83e6c237941c489a4ec9394971aa48e54a85db52df76e6a81b28172cf1c5ce351c304d0786eb1defb59a025367c7906e57f57bf1da82c13c6c896f8c72ccb7273ddbe4402ca75924a5f6871426a3170c08610820459adc4a65dac8f7e674598920071af3bb5487049f7e884ef6a4a598e85f69b8efbdaebf46857e1fb010ac2e652a286cf49d1a884f4c33fd204eb8e608648c02333adf05fdcf0177bac387032dae90fc5d", 0xae}], 0x4, &(0x7f0000000540)={0xd0, 0x1, 0xee28, "53b6ead4d96a593adcd10380ea6b106a8042b0ac32b96f6649634c0c8929f34afc8c33956d4f945df43e60ba3ba0ecffb30e7076802a70d8aa965aa31c901d9e95d4c9b06ac0e4cafa4e4ee480c4d9f925ef2255e37388487c2c44281c906c9bd51fbf74024fa5983946927d6853eb20a904aa5772c451ac848154c9f9f2fed6b77cceb9aeb845a4945066a7ee5895c3f5f2600ba384e0139a732ac6432121e10e44050862262a80c302fce7d4f89eb83331ff16e9ec780d8f1e27353e79"}, 0xd0, 0x844}, {&(0x7f0000000680)={0x27, r3, 0x1, 0x7, 0x0, 0x85, "6b91b8a7e839fcb453c5cba867982c5766e201bdc7c5880525b9ee1aa25785ba2ceb4f4b380cf03729394587ba0d5f6bceea38623b675d78124e5c0378e3d9", 0x11}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000000700)="5f3c8a186798f0aa7a3407ccac42d76f40f7b9230189a2ecbe37d414f14efdfe70d9192babf93f024da849ecab4482fb086b5756636a24f37eb2a0e7de5d098edd5f6dcbcaa3eb0222af9859004881866321327471752a70daf94e7c6b89f711897bb63e29a892ce41ab97d5c8a94c82c326d7159edb4c272e16de3edbc43a578245ff2efb", 0x85}, {&(0x7f00000007c0)="7260f7abef1d3b006cc681f072e7bdda8c85eb8f5034fee50747ced3e4bc95dd15f83d8dbe890af7a0ed43f401c1c2d62f31e3123a00411032f7e17dd43b38ea19079e8dde959cb22f84982446ec9eeb60206ed772b76a4fe25b0e3f710e0a781f4d6c86c4d6408ec648bbf4ed65689eecb01cfeef61a5c1de5961468eb0b35c015089fb57f9cd5e7b1dfbddcf516dc915d36ee49eb0c3c1da50613a65b135d5a52e9e1d773e5a8727632415b7de8fac52e2063d2b0bfebe9bf46a0b64d4e1a51dee8a4b7e3801261ffafd02a0945455c2077a92a84e2c024b3c1a576493cb0de36241cba8b0b213a1f6168b5de91d941ee644d11b5a", 0xf6}, {&(0x7f00000008c0)="ae46801a4833bfec7fc262c0308e334a811cb7aac90df1aeb7048bfb56c52a58028976e2d3f2605f6d9885037bfb42062828dc17eac5f7043f79008fbb71deef3fa5762600d8acc2a83f733161367f8a76d4450b30ab457afd674d71e98671599e3442759709966323ba7b987bd971f10ee7a62f589bef8f08f4e8895b6e0d8c206d3251e9cca29a8b90931ef879aae708a697dffa416c04ea8a85afabbf9906e2b6273535346e87dc99f7e9c369b2dc7ca7e7f4929d8521dd3a8e55a177a00fe171848086c9c70f8d4963b63e5a5bc214d743ff13", 0xd5}, {&(0x7f00000009c0)="51854f860fbe6063a913659a913ece89c9d327d57fbd6cf905601ce0077f8945b8763319a6ae23edbb21c2859dec6b3d67d3ef159e562f202d04aaeb3e3cb1728d67a1c0cabe6b", 0x47}], 0x4, &(0x7f0000000a80)={0x18, 0x0, 0x2, "d47ddd28"}, 0x18, 0x1}, {&(0x7f0000000b00)={0x27, r4, 0x1, 0x4, 0x7f, 0x1, "1a376bb8b8c589a4cf994e261da672a8566badeaf338db8fa7293372951b4eb30bb09760e0b9bfe2cc63c435b0e8cd96b37293520efad0156ef413bffcd47e", 0x2c}, 0x60, &(0x7f0000001f00)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="4a92c11910952a33d33a2ae6cc1b94c81449991d27b03f81eaf796b5addd11b863897ac22459d1a4c23bea8ba23a57190a8a82df", 0x34}, {&(0x7f0000001bc0)="fb48ccddb9f8d5032a692ed6b8dae9f79ec586fe8f2a18ceec3d44f5867d8581cea42003efa0754a9e31a578ce1c85c25eff6bb6914b98e8d8d1cb9c5272f91950ec78690bd33678935018c7297acf509269242d0e5db583b3d4b8f0006914da03ce669e6be9ad23a1a4c99ddd9b5e0cda632c7969447d5cdfffd07db37fad1ceca519a7f2fafa71eb4af8c05d64ad6a5fc04ec1661a4feab7c453a9795e814f65c7ba999171c18f16138cc9cec1566d865f908cbd138c622aec2990e838ec3ee8844c94e1", 0xc5}, {&(0x7f0000001cc0)="602330fbea08084b14a9e1e65f897f34588edd162ee53959067690fb2a6871dab1ae9e9b911de753df7575e94d46f486ef97fb43de61d8f3532907ea9500d0fe6fdfd361cdf245f5e2f0fe0e4ab207e8808d1fd515c3a4d96542ed3ccbb64397f008f474ea9fed42db014ff29694507d568044d229", 0x75}, {&(0x7f0000001d40)="eec8502f5a15d0517461e4af2b5c18e2350d5f1396676338bd041cb6c34104fc61a462b3456c1a04c6007f39e3ad9c42a8802b9b92429460ea63cac8eda24303e9b0b2ae3f8776af098a7931008b3b80486b23680de45d99692581c432b2654be9bc53c977fb9778653eb1f3556b83328b582c8113fa8e701a8f03ff2493fe4095e55866", 0x84}, {&(0x7f0000001e00)="d0e0d029258bad31243a125c41d53b4a1c42f0cdfd351564f0787ea1a5db48a320c08e6044319d523bd1959257a1de80def137ee63cf794b408ee23595b06f24ffb4eac5836a3a5eeaad2f687bb7136082395edd9b596b9229e9df4269efcca33c", 0x61}, {&(0x7f0000001e80)="38e5abeed7ada06cd309e64b0cac39a1119c9ade6f2cd397059f74a609e1e0fb06f7826a084629b2dbd1946ce95cfee4c3c46d21132a01ea190c6b6a8da1ecdbd590ad38a2c2e7a2f1de5e3b0641", 0x4e}], 0x7, &(0x7f0000001f80)={0xa0, 0x1, 0xffff527c, "db99e47365a102556744fad86f4f80d426cba4faa48b6cc0d42e3c445df0e982ecaa3f0203f7b40de961272c7f4b4c1e2fb25c6a458700f1f7986bc01e3015e32de19a829fd8a4c25ec2aa22f240d0b14ddda539ca1ec954ba4f3bd0ac35673ab12a62e280c3b1c74008bf2a335ae51438daa3b2ecb7038b2f23c8636e96f17e01bd2426e7d29f1f6ef2a93cd14feb"}, 0xa0, 0x40}, {&(0x7f0000002040)={0x27, 0x0, 0x0, 0x2, 0x4, 0x4, "297d1e1f04f44d3e9b973c7ac1fdba4ad5332e84eebde4a1bce54c93fb96a0dc23d968d075be314d1448dba193dcc93060b2b60a620304290f35cc1453eb1a", 0xc}, 0x60, &(0x7f0000002200)=[{&(0x7f00000020c0)="a821f52b0f357fe0a5a4aa0b6c35bb1baf8c86e3b3d562043348f8536a5384c159ca29e3b065845228bddcda98ccd46b959f7c1bf50638b0ec43ff649c16c02fce4231464bcc58125ff9aced082c8c89daff200893dfab1b84de85898857709d4920d2fbcb49e24e69e0b91389ec", 0x6e}, {&(0x7f0000002140)="9869165ae8ffe4ddc72d6a7f0591b70357a2989997078e4527e47710300d421e56d38925f57d255022677db7f88613880b0db2", 0x33}, {&(0x7f0000002180)="065bee7b", 0x4}, {&(0x7f00000021c0)}], 0x4, &(0x7f0000002240)={0x18, 0x88, 0x8, "522f257470a1e9"}, 0x18, 0x4c0d4}], 0x4, 0x40) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), 0xffffffffffffffff) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000023c0), &(0x7f0000002400)=0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000002440)={0x0, 0x0, [0x8, 0x7, 0x7f, 0x4, 0x1, 0xfffffffffffffff7]}) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000002480)=0x7fff) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000025c0)={'pim6reg1\x00', &(0x7f00000024c0)=@ethtool_gstrings={0x1b, 0x5, 0xe6, "c14c3e079e8d0a48725141d20f7b8e6492b78d47c8926732b2976f79908ee98088deef9b6b76b96f52d0f21587480e6c26d45e1af90b9189529847933ee6e0bfe1776967b9e482a2efb7c84964f88aaee56807c978023c86e96c53d718a7f0fa0c3f16ba30367b4cdd636df3aa40250d4508141a766a31e15905639ec9715eca04f6657c2fcc1cf074d7c206f70d06285e61b9035da0e4524a303666d1cb934c639c0f0ce0a926bf7e8ffc131de48c0e281db1e22aa1e5fdcb36946e6f1cd3f00716a9e8856e046b1b9528e617c6a17b5972dae9c0a816f1e8eb3ae475a06942f8789ae986ed"}}) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000002700)={0x5, {0x10, 0x5, 0x3, 0x80000000, 0x2}}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000002740)={r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000002780), 0x2200, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x2c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x20000000) (async) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x44, r9, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x40) (async) close(r6) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000002a40)=0xf, 0x4) (async) write$cgroup_devices(r1, &(0x7f0000002a80)={'c', ' *:* ', 'wm\x00'}, 0x9) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000002ac0)={'nat\x00', 0x0, 0x0, 0x0, [0xe, 0x0, 0x8, 0xcf9, 0x6, 0x1]}, &(0x7f0000002b40)=0x78) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0), r7) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040051}, 0x14040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 15.819787472s ago: executing program 1 (id=3016): unshare(0x20040600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x44000}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) 15.648116893s ago: executing program 1 (id=3018): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @null, 0x0, [@default, @null, @default, @remote, @null]}, &(0x7f0000000080)=0x40, 0x80800) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="79a0d21569259100000000008003003fc4f460f5cd2d688c7e0bd3f61576e44c9f559fc3823a6e62ee0c0f16652c9f4c2b1f1974f11e790715d70b1ec88e119eaa2967da740892ce4055232e5098b2c8d694845bbb5f66d1c2ea654cea2ebbde1db45a3239ddc073c7e968e672e7cda97888d4bf20db0b41ede19449bc9ec70597d1d243e7ab5d9a1fee75f973933e5f58fbd05eaade409a0e9ca2aab14edb3a6fcb7089cc5ce4ca8eba0c1bbc077ab0bfad86f95a1ece1fe9291f915d0b4e793384fedd5b4413eaca3e99f70a1e7a18f001f64f31b1f2584e32b817355807e17113bb37e235ecd472fa984dcd08fbd0f58ce2c92df62641bceb644880078ac0d5eca4d1c504cff1e51054c8f4dc46caa653c230c551097d0c93b3b2277ce3fe0480a8f784be5c16e06bacca93e66be964fae442998c3f529a06672cb5f65a70bb8caa54c53bc5b8af41696e31ff5aa2990517b606eb7d8507000000c3a218af7deb1f80cb5e5fa21d214535f4b84c4dcb8cfe2f1b8546ca10d0bd4e70c9112cb357f20b3137e343bbf1f9d9de53d300000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.226657127s ago: executing program 1 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x28, r2, 0x1, 0x40000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}}, 0x2008041) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) 4.040340628s ago: executing program 1 (id=3148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0x110, r0, 0xdb9d6000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) 3.892290014s ago: executing program 1 (id=3152): r0 = socket(0x26, 0x3, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0x4}, {0x1, 0xd}, {0x0, 0x5}}, ["", "", ""]}, 0x24}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000400000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000400000000000000001800"/28], 0x50) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffffffff, 0xfffffbdf, 0x10, 0x1}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) accept4$tipc(r11, 0x0, 0x0, 0x80800) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r8, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r12, 0x111, 0x3, 0x0, &(0x7f0000000080)) r13 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000600)="7def0cd948815515020054698931e498f37ffc8d2e48845cbc4422679c85a13224d4c9bd2601040000c75cdb80ac4fec54d161d0947b7cf798ab097093b1cdfea36f1e24c02c786005614ba23f843f24fa329962cfb2dfa8f0f00dceff32bbf75385da564bb4f1dee106ad015b61a996e88ee4f304491c283a6b5543fc60bdd1cd78d6967711fc713b8df0bd1ece86bb2ae7f32a3a557a5579ad5e353c42360aa08dad837692613e785fd20968efe15770e3561a1e79ba63fd68184c661b5e1a59c56cbb124d7cdaef445248933e45f54c0482d2d9ab5d347bc052c2f2eafe99685817f84e168a1d8bd2a596352358d00b73cd3c289b6f2f28302117b804e087e3e2379804d64e8736ee415e566fb05810820b6ee1c98f88cc8a579f10fb01ee32d9ca0b7fb4d5d92d26c052f39ee8376ea698fa250e3292b5ee8c94dd38d36d291e4bda84fce653af", &(0x7f0000001300)=""/4096, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x409, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r14, {0x0, 0xfff2}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe1b}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.095756531s ago: executing program 2 (id=3171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 2.03678005s ago: executing program 5 (id=3172): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8, 0x10000, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0xd}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x5, [@union={0xf, 0xa, 0x0, 0x5, 0x0, 0x4, [{0xe, 0x4, 0xc404f098}, {0xa, 0x1, 0x858e}, {0x1, 0x3, 0x1}, {0xa, 0x0, 0x6}, {0xa, 0x0, 0xb}, {0xb, 0x0, 0x4}, {0xe, 0x4, 0x3}, {0xc, 0x0, 0x3}, {0xd, 0x5, 0x908}, {0x7, 0x5, 0x7}]}, @enum64={0x5, 0x3, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xb, 0x80000000}, {0xe, 0x0, 0x2}, {0x8, 0x6, 0x5fbe43ab}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x30, 0x61]}}, &(0x7f0000000440)=""/239, 0xdd, 0xef, 0x1, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff, '\x00', 0x0, r2, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.761819254s ago: executing program 5 (id=3173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x59) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x8, 0x0, 0x13, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd, 0x88000}]}}}}}}, 0x46) 1.669158195s ago: executing program 2 (id=3175): r0 = socket(0x25, 0x5, 0xb4) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async, rerun: 32) r2 = socket(0x2, 0x2, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x3200000c) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="46060900000000001400350065727370616e30000000000000000000050021000200000010994aa0cebb385b39362635ef781413854203811f541f46582dce3ffb3a054ccedaaf62d12392f8f8f5094f4c96eee1f94998a4974edca77d76c96ddfb4b0366f9c5b4b22278f", @ANYRES32=0x0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4044) 1.519536933s ago: executing program 7 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) (async) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000003c0)=0x7f, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x200, 0x4e24, 0x8, 0xa, 0x0, 0x20, 0x0, r6, r7}, {0xffff, 0x36697263, 0x1, 0x42dd, 0x2, 0x4, 0x8000000000000001, 0x401}, {0xda63, 0x8, 0x8ce, 0x6}, 0x800, 0x9, 0x2, 0x1, 0x3, 0x1}, {{@in=@private=0xa010100, 0x4d5, 0x32}, 0xa, @in6=@empty, 0x3505, 0x3, 0x3, 0xfd, 0x0, 0xfd1c, 0x5}}, 0xe8) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x10, 0x70bd2d, 0x25dbdbfc, {0x0, 0x0, 0x0, r4, 0x40046, 0x420}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0xfffc}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.448801726s ago: executing program 2 (id=3177): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001080b0c10000000224e000000004f42cd8a47792984355ef3b46979fbd010656be958576ed9386f493c142e53e4063ba20d4b50fb7005a0e4c3b68e29afd045e08b0a576e01afc570bb7b4d51494a9fa5480ed636239dac8a597f4c945f6b2b663b5539c5e6f15f47b419e0d63200606c13209f9942e313a4", 0xc3}], 0x1) 1.35616352s ago: executing program 5 (id=3178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0xe, 0x4, 0x2, {{0x3e, 0x4, 0x2, 0x5, 0xf8, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x6, [{@multicast1, 0x10000}, {@broadcast, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @ssrr={0x89, 0xb, 0x16, [@broadcast, @multicast2]}, @ssrr={0x89, 0x1f, 0x3d, [@multicast2, @private=0xa010100, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @cipso={0x86, 0x48, 0x0, [{0x7, 0x3, "83"}, {0x2, 0x4, "b587"}, {0x7, 0x12, "f3fdc619971508f876998ed0eb3ee599"}, {0x1, 0x9, "2ba8e29847fec2"}, {0x1, 0x7, "eacb58fa4c"}, {0x7, 0x6, "eb860e75"}, {0x6, 0x7, "66b81f7578"}, {0x0, 0xc, "f83c94b5245c62e0c235"}]}, @generic={0x7, 0x10, "102108d1486ed53a49db1cdae96b"}, @rr={0x7, 0x17, 0xf7, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102, @multicast1, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0x71, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x5, [{@empty, 0x8}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xd, "141ce7821de3ba756f8a08"}, {0x6, 0x2}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0xe, 0x4, 0x2, {{0x3e, 0x4, 0x2, 0x5, 0xf8, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x6, [{@multicast1, 0x10000}, {@broadcast, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @ssrr={0x89, 0xb, 0x16, [@broadcast, @multicast2]}, @ssrr={0x89, 0x1f, 0x3d, [@multicast2, @private=0xa010100, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @cipso={0x86, 0x48, 0x0, [{0x7, 0x3, "83"}, {0x2, 0x4, "b587"}, {0x7, 0x12, "f3fdc619971508f876998ed0eb3ee599"}, {0x1, 0x9, "2ba8e29847fec2"}, {0x1, 0x7, "eacb58fa4c"}, {0x7, 0x6, "eb860e75"}, {0x6, 0x7, "66b81f7578"}, {0x0, 0xc, "f83c94b5245c62e0c235"}]}, @generic={0x7, 0x10, "102108d1486ed53a49db1cdae96b"}, @rr={0x7, 0x17, 0xf7, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102, @multicast1, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0x71, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x5, [{@empty, 0x8}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xd, "141ce7821de3ba756f8a08"}, {0x6, 0x2}]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) (async) 1.355248889s ago: executing program 6 (id=3179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x1203}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r6, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.334237991s ago: executing program 2 (id=3180): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44044}, 0x20008001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000200206000000000", @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESOCT=r0], 0xcc}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) socket$rds(0x15, 0x5, 0x0) 1.236808609s ago: executing program 7 (id=3181): r0 = socket(0x200000000000011, 0x2, 0xd) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) (async) shutdown(r3, 0x1) (async) close(0x3) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1409, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.105084081s ago: executing program 6 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.088794744s ago: executing program 5 (id=3183): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) listen(r2, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf0f7}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x43245902a08729ce) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x82e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042ebd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="fab0817d6ca30000240012801100f1c76272696467555f736c617665000000000c00058008002200dd706d2df1"], 0x44}, 0x1, 0x0, 0x0, 0x40480c4}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) 1.037840897s ago: executing program 2 (id=3184): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000120021020000000010"], 0x38}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000300)=0x319a6eff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="04a08db25b6d3e664e38355a33ccf2f66dccb1c28aecb4ff76", @ANYRES8=r3, @ANYBLOB="0100000000ff00000000ffff"], 0x14}}, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ac1414aa0000000000000000030005000000000002000000ffffffff000000000000000002001300020000000001000000000000"], 0x50}, 0x1, 0x7}, 0x0) 928.071838ms ago: executing program 7 (id=3185): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18ea1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 899.88955ms ago: executing program 6 (id=3186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020000002c0007010000000000000000017c0000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000018000180140002006e657464657673696d300000000000000800110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60040}, 0xc, &(0x7f0000000900)={&(0x7f0000001300)={0x384, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'CLUSTERIP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!@\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'rpfilter\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd505}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'%^\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'CLUSTERIP\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'CLUSTERIP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa5a6}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "99d784e1e2d6d9681af26af8214891b9095ddf9fce1baf2b2cd7ae3b59904f7c6e7181febf42e251cac51ee522f7f4a473af739f6eec50578b32c80d0621bda021b7c06f2ebf390cb2129680f95bd6a506049750f3e882a6a7fe0bf29adc3224d6dfecf19ba51788922bca791779118b90d9e0b8b86e1ac1a8678643c680d2cfd2ac30ade0991fda2b61d16fc10e"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "ff4555b8f4f8407364baa98eae4231756842bbb54705d0ab0fcc99426e6a02c94b0fb427e508bd6c4db29ca18f4b53bd96a07ee5527fe32c0ac444a8c437193cada2432308295babb3bb110da56034cc86335b894aec8da5ca2fd7f3efc063fed928f4d190c95f49b8bd551b85bceae74c307f416545fe0a2055f907504f22fc7a5228883f7668668001b8077ebee8c810bdc8801be949453c69d34cc625fc6af9c30f704afe0747bb4870aa650fb927bf7a5ce78403d24fc3b8159e425a359ddd8cf9566566e7356a0a126ac09c5cd10f428e366535c330eca82a62bfa47ff58d9b1e6e5c1a49ea4524849992acf6d18839d5"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x20040041) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="e00200001300290a0000000000000000072e0000002a71e953e552ca7791da6e6f26efbcb6af975702072b72e5953fcbceebf02eef83377920ca2cc4e032d9d11b9a3b3c1ba8ea0b32841cd503779e820000000000000007a854f65cafa22b1af44e56976652", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000580c80103803000018005000c000000000019fc0500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80000020000000000000001000000000007000200293a00000500060000000000080001000000000000000400ff113547dbeb23909940baa30e29bf640000010000000000000002006272696467655f736c6176655f30000018000180140004004da20e6ede7bff4cea0fe2090f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad00000600000000001400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e830000c80080025000000000005000600000000001400190003dd96197aca85b64424a37dbda7b69405000600000000003c00188008000100000000000800010000000000000001000000000000000400d34e5b43deb42e02bb0da42531cf13090000020078cc63dba56d0000dc001a8020000a80050008000000000014000700fc00000000000000000000000000000000000700040007006c000a8000000700fc02000000000000000000000000000014000700fe8000000000000000000000000000bb14000700000000000000000000000000000000010500080000000000050008000000000014000700fc02000000000000000000000000000014000700fc0100"/664], 0x2e0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5b2a, 0x2, 0x1, 0xa, 0x5, 0xf618}, 0x20) r9 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x541b, &(0x7f0000000100)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r11}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001000130726bd70000000000000000000000000000000ffffe0000002ffffffff0000000000000000000000004e22000100000003020000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200010028000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000006a5d00000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}, 0x1, 0x0, 0x0, 0x40834}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0acbdd4ae00000000900000000000000f92818c9bdbace5350cc6e5f002ccbf0eaee330693dc6d3128bc1a19401856b05d5f1ae3c1ccc5bad9adafe2f703600b47e30ce2c2e8ab4244e0d37846d5433df62730f557dbad2ff3c8fd6bd69d97696dcc43f29ca2db747e49b9d202f8bf691fdbc4de19f3fc87bafd14784cb8c3d08033f789022fedfe1daa6f2e00e8b0a89dbe78aa2b7c06bb8c668dff0bc1132f93d3d05ad2ff6c4b5b36815e847e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000880)={@private1, 0x7d, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 691.276032ms ago: executing program 7 (id=3187): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x27}, 0x6) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 552.368818ms ago: executing program 6 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd26, 0x25dedbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5deae23bdeee09d031ab5940c8e8c0e296665dbb7a1fad8ce8ae56479b6574bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7009938e03f1d20b"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4814) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x1, 0x8]}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 540.324852ms ago: executing program 5 (id=3189): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/19, 0x13}, {&(0x7f0000005140)=""/4096, 0x721}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="010000000000000014001a80100004800c00068008"], 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e08030000000c008f000c000000000000000c00900072ca0000000000000e0001006e656d0000000f0002006e657464657673696d30000008008e00030000000c008f0009000000000000000c00900008000000000000657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0008000000000000000c0090000100008000"/196], 0xd0}}, 0xc0800) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000ffa3c613f000000000000000500000106000b0002000000050001000700000006000b00010000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x880) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="504ae68e"], 0x8) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r13], 0x58}}, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="30372cbd7000fddbdf256300000008000300", @ANYRES32=r13, @ANYBLOB="165e4d4a942c31953ef0763af8bf414f18d0aebbabe662e7c8c01ca27c1f0a25bfaee0fc7d06da9ba032da4c98d7dfa029d5bc95947c19941d4a23b32396bb0419c7db6c7cd8bdf5eb459b62f94ab4e95c7fca2cce48f562e5ba3c38ec6061530707b561b17788dea0148f20660a36dd014e96d4ced9712ae9241a00000000000000"], 0x1c}}, 0x14009000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e0000000700000002000000ff01000041060000", @ANYRES32=r14, @ANYBLOB="7f00"/20, @ANYRES32=r7, @ANYRES32=r15, @ANYBLOB="050000000000000000000000020000000000000000000000000000005d38a7755c28f8a475d0aaaec3ae35a07a7b705111191cd9468b28b3a6a319f50d"], 0x50) 512.514926ms ago: executing program 7 (id=3190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0x0, 0x20, 0x2c}, {0x80000000, 0x2, 0x100, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x2, 0xfc}, {0x0, 0x1, 0x2, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x2, 0x4, 0x0, 0x2, 0x7, 0x2, 0x1000}}, 0xe8) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) sendmsg$SOCK_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x290, 0x15, 0x400, 0x70bd2b, 0x25dfdbfc, {0x26, 0xfc}, [@INET_DIAG_REQ_BYTECODE={0xce, 0x1, "5407d82013f39c0be11319f46897bab6191c39763fa487fb3e5a00ecf8b83223286eee434f37976247706d79374ec7a3a76384682f0e0fc931ab5673bc78a0625dab591c9e70055a082c1241581144a5500e93fa85c51d87df060be995ec126d750e85318f037e26b35ae4cf6650109753f0e4844eb29c4c63045260b1a03dc3e647a586763ca2e61729c8bc9614bfbefa1437b62d3d32b88337cbd0e4bdd4a61c9da2e4c54a646021d250bf2fd59d22c8366cf91e939904419b3b4c3e4b6a51aa4d5c7fd767e6200b66"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "d7de88a8ce499123a244db5d8f7b50f983835e2f9968dc0dd0ab4930ecacd5ddf2f4a9ba28b85994f8096329d808d95e911e336cee3e436ea01980382021c9a97317c40ec1be6c17471bad16e99ec691f8cac1795b606d61b3870de398783632b7841e18cd82bc2596d6b2a850ce319b0c552c48"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "e00f9c4fc87b3409c384559929d56082461619412a168b73f26679b85c5ad3b33f6438ab224cae6162183443f47ce4c4ff477fc54ede5c1c1590b7ed2e23e4b8ef6d43eb121388829bbe3e6595b26579c9b339ed16e63b53cb240b38b523ec3fbbf863d8179a222f365d176e4cbc7dbb0d14cc00fabd2f9e17bf3f7243b870dcd3510b51f6990b4407466ad1a5bf510732064d10d850c14e561d2a0fff436b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "eac56dac3102873e4a14bf7a08cfb24ec88bf8b66c9dd2652618cbae27b3a461bc0a4d6561d023823c4f096af03c57a4f0543ca20639b72725aed9750f63647d2fe8c14733dda6563246dc370e0975d6207652ea4a14f0a4e2e0e6ea69531866d9e4317eaa40c0402b9350"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "820c29d778f2a40be87a77afadd3f74433c5e9310a01b39ab5d3a038"}]}, 0x290}, 0x1, 0x0, 0x0, 0x4040800}, 0x40080c5) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) (async) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newtclass={0x3c, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x2}, {0x0, 0xffe0}, {0xfff2, 0xb}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8000) (async, rerun: 32) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (rerun: 32) write$tun(r0, &(0x7f0000000900)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x0, 0x0, 0x14}, @llc={@llc={0xcc, 0x8e, 't', "df2002c80494b0f6b779ee83768d81d9d3a7c066423b1b026d926248240d05f457e6b9f3ec51a180c1a7bd9d56cd7f9781af3d81be51cef9889178221e9b796a3b2bb17884ae7d8e5f1c55c3"}}}, 0x5d) 376.267272ms ago: executing program 6 (id=3191): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000500000000000000aa8c000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000040000000001801000020756c3d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x35, 0x301, 0x0, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) 262.022568ms ago: executing program 6 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000360085eff6fc5792bb28b07bc32dbd7000fddbdf2503000000"], 0x14}}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0x2}, {0x7, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048081}, 0x40c0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 255.21833ms ago: executing program 7 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002dbd707890755dd23aad54fda423e8a47d09d8dc1b8ff048ee912f27c6e9c79b49fb21837eeb1c6568e996716d25c6de9e8e59ffaac5b74f94a638a5141c84fa9ccfc0449d37c8c43035dbebd17128665154864400b1ae4acf6795b4f99a4a91444f07f595ac1bca430ec8fc83d6df0470cae97a17b49cb6a705c44156b2f5036669a62335e78cf7d981d9e439a3cbb566794e74a0c6623c3b4c4ffee305e12a5e2b14c2f25f402f198eb40d77", @ANYRES32=r3, @ANYBLOB="0c00990000000000370000000600ed00b50700000600ab00080000001f001300822fb6123612858181e0048448039be0051698b68674304889c8a4000800118004000300"], 0x60}, 0x1, 0x0, 0x0, 0x40084}, 0x200000c0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c0001"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000280)=0x8, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 28.456072ms ago: executing program 5 (id=3194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "db53e0", 0x0, 0x33, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xa5e7, 0x2, 0x4}) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 0s ago: executing program 2 (id=3195): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6a040000) (async) kernel console output (not intermixed with test programs): tman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.182203][T11878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.242972][ T9988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.269815][ T9988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.271594][T12121] openvswitch: netlink: IP tunnel dst address not specified [ 264.300356][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 264.310272][ T9988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.319125][ T9988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.337314][T12120] netlink: 'syz.2.1735': attribute type 7 has an invalid length. [ 264.354219][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 264.476725][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1737'. [ 264.525841][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.561480][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.665722][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 264.696215][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.717579][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.881727][T12142] validate_nla: 1 callbacks suppressed [ 264.881815][T12142] netlink: 'syz.2.1740': attribute type 15 has an invalid length. [ 264.937076][T12142] netlink: 'syz.2.1740': attribute type 3 has an invalid length. [ 264.953383][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1667'. [ 264.960711][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1741'. [ 265.230575][ T5850] Bluetooth: hci6: command tx timeout [ 265.283307][T12162] netlink: 'syz.6.1744': attribute type 10 has an invalid length. [ 265.327582][T12162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.359364][T12170] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1744'. [ 265.370556][T12162] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.405434][T12172] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 265.422507][T12174] block nbd1: Unsupported socket: should be TCP or UNIX. [ 265.485907][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 265.546470][T12174] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.828347][T12189] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 265.862818][T12189] netlink: 'syz.1.1750': attribute type 7 has an invalid length. [ 265.903103][T12189] netlink: 'syz.1.1750': attribute type 8 has an invalid length. [ 265.934139][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1750'. [ 266.227433][T12211] syzkaller1: entered promiscuous mode [ 266.250369][T12211] syzkaller1: entered allmulticast mode [ 266.384360][T12213] syzkaller1: left promiscuous mode [ 266.410487][T12213] syzkaller1: left allmulticast mode [ 266.781845][ T8676] bond1: (slave ip6gretap1): link status up again after 0 ms [ 266.794786][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.920557][ T1077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.964319][T12259] netlink: 'syz.2.1769': attribute type 3 has an invalid length. [ 267.041484][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.206518][ T30] audit: type=1800 audit(1768562941.886:5): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1773" name="memory.events" dev="tmpfs" ino=2020 res=0 errno=0 [ 267.234206][ T30] audit: type=1804 audit(1768562941.916:6): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1773" name="/newroot/393/memory.events" dev="tmpfs" ino=2020 res=1 errno=0 [ 267.280257][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.312138][ T5850] Bluetooth: hci6: command tx timeout [ 267.393004][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.516420][T12294] netlink: 'syz.0.1779': attribute type 11 has an invalid length. [ 267.554240][T12291] team0: Device ipvlan3 failed to register rx_handler [ 267.761756][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.451454][ T9969] net_ratelimit: 3 callbacks suppressed [ 268.451475][ T9969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.593977][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.740506][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.910931][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.999450][T12378] x_tables: duplicate underflow at hook 2 [ 269.023363][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 269.095985][T12383] __nla_validate_parse: 10 callbacks suppressed [ 269.096004][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 269.143048][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 269.181766][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 269.320768][T12387] gretap0: entered allmulticast mode [ 270.053514][ T25] block nbd0: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 90 seconds [ 270.064717][ T25] block nbd0: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 90 seconds [ 270.076301][ T25] block nbd0: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 90 seconds [ 270.088902][ T25] block nbd0: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 90 seconds [ 270.310421][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1810'. [ 271.319698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 271.521203][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.553761][T12406] syzkaller0: entered promiscuous mode [ 271.559951][T12406] syzkaller0: entered allmulticast mode [ 271.777868][T12432] bridge0: port 4(team0) entered blocking state [ 271.791135][T12432] bridge0: port 4(team0) entered disabled state [ 271.808538][T12432] team0: entered allmulticast mode [ 271.818141][T12432] team_slave_0: entered allmulticast mode [ 271.852579][T12432] team_slave_1: entered allmulticast mode [ 271.889117][T12432] team0: entered promiscuous mode [ 271.902201][T12432] team_slave_0: entered promiscuous mode [ 271.908329][T12432] team_slave_1: entered promiscuous mode [ 271.946203][T12432] bridge0: port 4(team0) entered blocking state [ 271.953301][T12432] bridge0: port 4(team0) entered listening state [ 272.042670][ T9969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.107267][T12451] ip6t_srh: unknown srh invflags 4000 [ 272.190413][ T9969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.307703][T12466] tipc: Failed to remove unknown binding: 66,1,1/2377245235:2374528713/2374528715 [ 272.368576][T12466] tipc: Failed to remove unknown binding: 66,1,1/2377245235:2374528713/2374528715 [ 272.525494][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1826'. [ 272.580752][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1826'. [ 272.765635][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 272.825713][T12492] bond0: (slave caif0): Error: Device type is different from other slaves [ 272.826010][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1829'. [ 272.861495][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1829'. [ 273.392502][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 273.531620][ T6357] net_ratelimit: 10 callbacks suppressed [ 273.531644][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.644808][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1843'. [ 273.658330][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 273.690589][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.755647][T12547] Bluetooth: MGMT ver 1.23 [ 273.810620][ T3445] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.921525][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.954674][T12554] tipc: Bearer : already 2 bearers with priority 10 [ 273.980267][T12554] tipc: Bearer : trying with adjusted priority [ 274.017953][T12554] tipc: Enabling not permitted [ 274.046391][T12554] tipc: Enabling of bearer rejected, failed to enable media [ 274.091441][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.125087][T12570] __nla_validate_parse: 2 callbacks suppressed [ 274.125110][T12570] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1851'. [ 274.142315][T12574] netlink: 'syz.6.1850': attribute type 58 has an invalid length. [ 274.150650][T12574] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1850'. [ 274.210226][ T9985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.261400][T12579] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 274.279759][T12578] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 274.358361][T12579] `: (slave syz_tun): Enslaving as an active interface with an up link [ 274.391344][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.515845][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.643555][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.689591][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 274.717334][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 274.755129][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1861'. [ 274.766647][T12604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.782309][T12610] bond0: left allmulticast mode [ 274.795271][T12606] geneve2: entered promiscuous mode [ 274.800898][T12606] geneve2: entered allmulticast mode [ 274.810316][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.097623][T12621] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1868'. [ 275.119948][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.127310][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.129744][T12625] netlink: 'syz.6.1867': attribute type 1 has an invalid length. [ 275.373871][T12633] vlan2: entered allmulticast mode [ 275.380715][T12633] veth1: entered allmulticast mode [ 275.516943][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 275.534972][T12616] wg1 speed is unknown, defaulting to 1000 [ 275.550933][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1872'. [ 275.668113][ T3445] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.678871][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 275.695262][ T3445] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.709262][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1872'. [ 275.726789][ T3445] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.748619][ T3445] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.783023][T12650] netlink: 'syz.6.1874': attribute type 2 has an invalid length. [ 275.801117][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 275.804996][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 275.938940][T12650] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 275.970040][T12650] bond1: option packets_per_slave: allowed values 0 - 65535 [ 276.192129][T12650] bond1 (unregistering): Released all slaves [ 276.257379][T12663] gretap0: entered promiscuous mode [ 276.291984][T12667] gretap0: left promiscuous mode [ 276.306235][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.313716][T12667] bridge0: port 2(bridge_slave_1) entered listening state [ 276.321199][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.328503][T12667] bridge0: port 1(bridge_slave_0) entered listening state [ 276.395274][T12670] netlink: 'syz.0.1877': attribute type 9 has an invalid length. [ 276.414254][T12670] netlink: 'syz.0.1877': attribute type 11 has an invalid length. [ 276.439462][T12670] netlink: 'syz.0.1877': attribute type 12 has an invalid length. [ 277.045301][T12694] syzkaller0: entered promiscuous mode [ 277.057100][T12694] syzkaller0: entered allmulticast mode [ 277.485159][T12708] tipc: Enabled bearer , priority 10 [ 277.702982][T12714] gre1: entered promiscuous mode [ 277.709015][T12714] gre1: entered allmulticast mode [ 277.785784][T12720] syzkaller0: entered allmulticast mode [ 277.825782][T12720] tipc: Enabled bearer , priority 0 [ 277.903012][T12713] tipc: Disabling bearer [ 277.993987][T12736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.368776][T12751] gre0: entered promiscuous mode [ 278.387568][T12751] gre0: entered allmulticast mode [ 278.487222][T12755] netlink: 'syz.5.1900': attribute type 1 has an invalid length. [ 278.581039][ T9984] net_ratelimit: 19 callbacks suppressed [ 278.581062][ T9984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.682338][T12765] nbd: must specify at least one socket [ 278.696003][T12761] tipc: Started in network mode [ 278.701752][T12761] tipc: Node identity 7a4fe75d6953, cluster identity 4711 [ 278.718854][T12761] tipc: Enabled bearer , priority 0 [ 278.738190][T12761] tipc: Resetting bearer [ 278.761416][ T1077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.823036][T12760] tipc: Disabling bearer [ 278.858898][T12773] syzkaller1: entered promiscuous mode [ 278.866728][T12773] syzkaller1: entered allmulticast mode [ 278.890554][ T5923] tipc: Node number set to 983301632 [ 278.912462][ T1077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.932009][T12780] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 279.030262][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.161826][ T3445] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.280789][ T3445] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.306859][T12804] __nla_validate_parse: 16 callbacks suppressed [ 279.306879][T12804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1917'. [ 279.403285][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.498042][T12817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'. [ 279.508737][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'. [ 279.520470][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.609588][T12821] validate_nla: 1 callbacks suppressed [ 279.609607][T12821] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 279.631335][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.770320][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.843233][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1925'. [ 279.861786][T12833] netlink: 147804 bytes leftover after parsing attributes in process `syz.1.1927'. [ 279.883345][T12832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1925'. [ 279.947662][T12837] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 279.983863][T12837] bond0 (unregistering): Released all slaves [ 280.008336][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1929'. [ 280.285743][T12856] netlink: 'syz.6.1933': attribute type 5 has an invalid length. [ 280.296477][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1933'. [ 280.364426][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 280.924450][T12887] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 280.932832][T12887] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1942'. [ 281.385497][T12913] syzkaller0: entered allmulticast mode [ 281.994532][T12956] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 282.186035][T12962] geneve2: entered promiscuous mode [ 282.203217][T12962] geneve2: entered allmulticast mode [ 282.233545][T12966] wireguard0: entered promiscuous mode [ 282.239696][T12966] wireguard0: entered allmulticast mode [ 282.265549][T12966] team0: Device wireguard0 is of different type [ 282.735838][T13000] netlink: 'syz.0.1977': attribute type 5 has an invalid length. [ 282.741089][T12997] netlink: 'syz.1.1976': attribute type 1 has an invalid length. [ 282.758566][T12997] netlink: 'syz.1.1976': attribute type 2 has an invalid length. [ 282.767027][T13003] netlink: 'syz.6.1978': attribute type 1 has an invalid length. [ 283.075590][T13023] IPVS: Unknown mcast interface: vlan1 [ 283.097234][T13016] syzkaller0: entered promiscuous mode [ 283.103078][T13016] syzkaller0: entered allmulticast mode [ 283.115094][T13023] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 283.307357][T13027] delete_channel: no stack [ 283.590968][ T9985] net_ratelimit: 30 callbacks suppressed [ 283.590992][ T9985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.674918][T13050] netlink: 'syz.6.1993': attribute type 10 has an invalid length. [ 283.754201][T13050] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.778983][T13050] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.792805][ T9985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.930351][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.151905][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.312791][ T9985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.321335][ T9991] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 284.329756][T13085] netlink: 'syz.0.2000': attribute type 5 has an invalid length. [ 284.349168][T13085] __nla_validate_parse: 10 callbacks suppressed [ 284.349190][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2000'. [ 284.441736][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.561681][ T9991] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.626043][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2003'. [ 284.682627][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.800857][ T9985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.851187][T13081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.860777][T13107] syzkaller0: entered promiscuous mode [ 284.866649][T13107] syzkaller0: entered allmulticast mode [ 284.951227][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.162466][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2009'. [ 285.396020][T13140] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2015'. [ 285.868275][T13162] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2021'. [ 286.130849][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2029'. [ 286.138180][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 286.312205][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 286.544775][T13201] netlink: 'syz.1.2038': attribute type 11 has an invalid length. [ 286.564196][T13201] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2038'. [ 286.626887][T13208] wg1: entered promiscuous mode [ 286.634137][T13208] wg1: entered allmulticast mode [ 286.755838][T13213] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 287.096912][T13227] netlink: 'syz.0.2048': attribute type 18 has an invalid length. [ 287.249549][T13237] netlink: 'syz.5.2050': attribute type 13 has an invalid length. [ 287.273062][T13237] macvtap0: refused to change device tx_queue_len [ 287.321745][ C1] bridge0: port 4(team0) entered learning state [ 287.493153][T13253] netlink: 'syz.5.2056': attribute type 1 has an invalid length. [ 287.539416][T13253] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2056'. [ 287.757288][T13271] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 289.592769][T13338] __nla_validate_parse: 9 callbacks suppressed [ 289.592803][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2074'. [ 289.709152][T13340] xt_ecn: cannot match TCP bits for non-tcp packets [ 289.870938][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 289.877230][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 289.948759][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2078'. [ 289.966809][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2078'. [ 290.380837][ T6076] net_ratelimit: 22 callbacks suppressed [ 290.380853][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.500974][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.643610][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.772366][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.801873][T13373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 290.844096][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 291.038942][T13390] sctp: [Deprecated]: syz.6.2091 (pid 13390) Use of int in max_burst socket option. [ 291.038942][T13390] Use struct sctp_assoc_value instead [ 291.086323][T13384] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2090'. [ 291.096461][T13384] nbd: socks must be embedded in a SOCK_ITEM attr [ 291.613040][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.730283][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.784909][T13398] netlink: 'syz.5.2092': attribute type 4 has an invalid length. [ 291.809674][T13398] netlink: 'syz.5.2092': attribute type 1 has an invalid length. [ 291.831889][T13398] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2092'. [ 291.863315][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.987799][T13406] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2092'. [ 292.000887][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.120780][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.177439][T13417] Cannot find add_set index 0 as target [ 292.218100][T13423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2101'. [ 292.448420][T13417] syzkaller0: entered promiscuous mode [ 292.486004][T13417] syzkaller0: entered allmulticast mode [ 292.513553][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 294.689790][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2112'. [ 294.729967][T13466] netlink: 'syz.6.2112': attribute type 8 has an invalid length. [ 294.926997][T13480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.317300][T13454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.358756][T13454] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 295.406189][T13454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.415533][T13454] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 295.457137][T13454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.475104][T13454] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 295.518716][T13454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.530373][T13454] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 297.045570][T13506] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 297.080171][ T6076] net_ratelimit: 5 callbacks suppressed [ 297.080195][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.261361][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.417160][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.097240][T13454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 298.117645][T13454] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 298.217923][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.241166][T13454] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 298.247127][T13454] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 298.282456][T13582] wg1: left promiscuous mode [ 298.292060][T13582] wg1: left allmulticast mode [ 298.547557][T13574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2128'. [ 298.557189][ T9988] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.644297][T13600] xt_connbytes: Forcing CT accounting to be enabled [ 298.755845][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 298.820967][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.960469][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 299.017587][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2135'. [ 299.089969][T13616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.160965][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 299.185249][T13615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.451977][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2140'. [ 299.528386][T13640] netlink: 'syz.5.2139': attribute type 2 has an invalid length. [ 299.613988][T13633] syz.5.2139 (13633) used greatest stack depth: 16920 bytes left [ 299.633983][T13642] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 299.739455][T13650] bond7: entered promiscuous mode [ 299.759425][T13650] bond7: entered allmulticast mode [ 300.124726][ T25] block nbd0: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 120 seconds [ 300.140190][ T25] block nbd0: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 120 seconds [ 300.151784][ T25] block nbd0: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 120 seconds [ 300.163286][ T25] block nbd0: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 120 seconds [ 300.301561][T13664] geneve2: entered promiscuous mode [ 300.306860][T13664] geneve2: entered allmulticast mode [ 300.370750][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 300.386790][T13614] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.499361][T13614] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.525067][T13614] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.555750][T13614] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.142059][T13677] syzkaller0: entered promiscuous mode [ 301.149734][T13677] syzkaller0: entered allmulticast mode [ 301.343807][T13721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.405774][T13658] wg1 speed is unknown, defaulting to 1000 [ 301.806668][T13734] syzkaller1: entered promiscuous mode [ 301.829684][T13734] syzkaller1: entered allmulticast mode [ 301.864222][T13736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2161'. [ 301.891131][T13736] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2161'. [ 301.919956][T13736] netlink: 'syz.0.2161': attribute type 6 has an invalid length. [ 301.949020][T13741] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2161'. [ 301.970572][T13736] netlink: 'syz.0.2161': attribute type 5 has an invalid length. [ 301.978361][T13736] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2161'. [ 302.014608][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2163'. [ 302.374091][T13756] netem: incorrect gi model size [ 302.393322][T13756] netem: change failed [ 302.630224][ T6076] net_ratelimit: 13 callbacks suppressed [ 302.630246][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.670256][ C1] bridge0: port 4(team0) entered forwarding state [ 302.676979][ C1] bridge0: topology change detected, propagating [ 302.802714][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.941766][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.085340][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 303.122006][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.296909][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.391927][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2174'. [ 303.444833][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.590194][ T9986] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.138828][T13842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2184'. [ 305.868078][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.990471][ T3527] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.006265][T13862] netlink: 'syz.1.2193': attribute type 5 has an invalid length. [ 306.024076][T13865] netlink: 'syz.1.2193': attribute type 5 has an invalid length. [ 306.089072][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 306.122953][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.194323][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 306.230749][T13881] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 306.281619][T13884] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2198'. [ 306.287735][T13881] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 306.337649][T13891] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 306.449410][T13898] sctp: [Deprecated]: syz.1.2202 (pid 13898) Use of int in maxseg socket option. [ 306.449410][T13898] Use struct sctp_assoc_value instead [ 306.457735][T13891] bond0: entered promiscuous mode [ 306.479557][T13891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.489597][T13903] netlink: 'syz.5.2201': attribute type 29 has an invalid length. [ 306.510422][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 306.517921][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 306.523354][T13903] netlink: 'syz.5.2201': attribute type 29 has an invalid length. [ 306.568485][T13903] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2201'. [ 306.611390][T13903] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2201'. [ 306.623881][T13903] 8021q: VLANs not supported on ip6_vti0 [ 306.652946][T13909] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2205'. [ 306.709214][T13909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2205'. [ 306.720869][T13910] tipc: Enabled bearer , priority 0 [ 306.732494][T13910] syzkaller0: entered promiscuous mode [ 306.738061][T13910] syzkaller0: entered allmulticast mode [ 306.784191][T13907] tipc: Resetting bearer [ 306.836493][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2207'. [ 306.857006][T13907] tipc: Disabling bearer [ 306.952291][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2207'. [ 307.199383][T13942] xt_l2tp: v2 tid > 0xffff: 1114244 [ 307.209168][T13944] netlink: 'syz.6.2215': attribute type 1 has an invalid length. [ 307.405138][T13957] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 307.414013][T13958] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 307.437051][T13957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2220'. [ 307.671112][ T6216] net_ratelimit: 11 callbacks suppressed [ 307.671137][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.810734][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.933106][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.050478][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.180914][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.311487][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.446643][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.572402][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.701706][ T9986] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.840547][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.886213][ T5915] IPVS: starting estimator thread 0... [ 309.000168][T14037] IPVS: using max 27 ests per chain, 64800 per kthread [ 309.627237][T14079] netlink: 'syz.0.2253': attribute type 4 has an invalid length. [ 309.641572][T14053] wg1 speed is unknown, defaulting to 1000 [ 309.716987][T14075] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 310.071034][T14089] netlink: 'syz.6.2257': attribute type 24 has an invalid length. [ 310.655770][T14116] Unsupported ieee802154 address type: 0 [ 310.662174][T14113] sctp: [Deprecated]: syz.6.2261 (pid 14113) Use of int in max_burst socket option deprecated. [ 310.662174][T14113] Use struct sctp_assoc_value instead [ 310.690454][T14121] sctp: [Deprecated]: syz.6.2261 (pid 14121) Use of int in max_burst socket option deprecated. [ 310.690454][T14121] Use struct sctp_assoc_value instead [ 311.653466][T14173] IPVS: Unknown mcast interface: macvlan0 [ 311.898303][T14182] __nla_validate_parse: 4 callbacks suppressed [ 311.898325][T14182] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2276'. [ 311.917038][T14182] block nbd0: reconnected socket [ 311.933825][ T5838] block nbd0: Receive control failed (result -32) [ 311.979591][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 311.992338][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2278'. [ 312.359551][T14212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 312.423704][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'. [ 312.487454][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.508291][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2285'. [ 312.595360][T14222] netlink: 'syz.6.2288': attribute type 11 has an invalid length. [ 312.596755][T14211] bridge_slave_0 (unregistering): left allmulticast mode [ 312.618794][T14211] bridge_slave_0 (unregistering): left promiscuous mode [ 312.626314][T14222] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2288'. [ 312.641687][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.811664][ T9976] net_ratelimit: 16 callbacks suppressed [ 312.811686][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.997652][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.019055][T14237] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002 [ 313.099393][T14244] netlink: 'syz.2.2293': attribute type 2 has an invalid length. [ 313.121134][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.219650][ T30] audit: type=1804 audit(1768562987.896:7): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2294" name="/newroot/455/cgroup.controllers" dev="tmpfs" ino=2336 res=1 errno=0 [ 313.240199][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.294040][ T30] audit: type=1800 audit(1768562987.896:8): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2294" name="cgroup.controllers" dev="tmpfs" ino=2336 res=0 errno=0 [ 313.371940][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.390962][T14257] netlink: 'syz.5.2297': attribute type 1 has an invalid length. [ 313.416039][T14258] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 313.427914][T14258] tipc: Failed to remove unknown binding: 66,0,0/2377245235:2826261562/2826261563 [ 313.444054][T14257] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2297'. [ 313.473152][T14258] tipc: Failed to remove unknown binding: 66,0,0/2377245235:2826261562/2826261563 [ 313.490708][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.610502][ T9986] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.745671][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.881502][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.425208][T14305] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 314.825735][T14322] IPVS: Error connecting to the multicast addr [ 315.173155][T14352] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.2321'. [ 315.370978][T14356] macvtap1: entered allmulticast mode [ 315.376560][T14356] vlan0: entered allmulticast mode [ 315.387322][T14356] veth0_vlan: entered allmulticast mode [ 315.535296][T14366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2323'. [ 315.555925][T14368] netlink: 'syz.5.2325': attribute type 1 has an invalid length. [ 315.647833][T14374] netlink: 'syz.5.2325': attribute type 12 has an invalid length. [ 315.671042][T14374] netlink: 'syz.5.2325': attribute type 29 has an invalid length. [ 315.822653][T14382] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 315.838270][T14382] bond6 (unregistering): Released all slaves [ 315.959262][T14389] block nbd0: NBD_DISCONNECT [ 315.969248][T14389] block nbd0: Send disconnect failed -32 [ 315.977784][T14389] block nbd0: shutting down sockets [ 316.029162][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.039058][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.048535][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.058106][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.073513][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.083265][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 316.091295][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.101016][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 316.135883][ T9628] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.162662][ T9628] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.197239][ T9628] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.216221][T14408] netlink: 'syz.6.2332': attribute type 83 has an invalid length. [ 316.230621][ T9628] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.238718][ T9628] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.260800][ T9628] Buffer I/O error on dev nbd0, logical block 2, async page read [ 316.269054][ T9628] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.300110][ T9628] Buffer I/O error on dev nbd0, logical block 3, async page read [ 316.310382][ T9628] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.330369][ T9628] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.338259][ T9628] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.370269][ T9628] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.378840][ T9628] ldm_validate_partition_table(): Disk read failed. [ 316.408185][ T9628] Dev nbd0: unable to read RDB block 0 [ 316.423476][T14414] syzkaller0: entered promiscuous mode [ 316.429588][T14414] syzkaller0: entered allmulticast mode [ 316.442166][ T9628] nbd0: unable to read partition table [ 316.464857][ T9628] ldm_validate_partition_table(): Disk read failed. [ 316.497439][ T9628] Dev nbd0: unable to read RDB block 0 [ 316.504532][ T9628] nbd0: unable to read partition table [ 316.767161][T14424] tipc: Enabled bearer , priority 0 [ 316.806473][T14423] tipc: Disabling bearer [ 317.043059][T14443] siw: device registration error -23 [ 317.043263][T14444] siw: device registration error -23 [ 317.133976][T14449] netlink: 'syz.1.2344': attribute type 24 has an invalid length. [ 317.214202][T14457] __nla_validate_parse: 5 callbacks suppressed [ 317.214223][T14457] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2347'. [ 317.401954][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.438077][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'. [ 317.509829][T14468] bond6: entered promiscuous mode [ 317.515353][T14468] bond6: entered allmulticast mode [ 317.523356][T14468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.871041][ T12] net_ratelimit: 65 callbacks suppressed [ 317.871064][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.023870][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.144870][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'. [ 318.170994][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.195455][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 318.208911][T14506] netlink: 'syz.6.2360': attribute type 12 has an invalid length. [ 318.217580][T14506] netlink: 'syz.6.2360': attribute type 11 has an invalid length. [ 318.301003][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.421278][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.452532][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 318.565055][T14520] bridge6: port 1(veth9) entered blocking state [ 318.574151][T14520] bridge6: port 1(veth9) entered disabled state [ 318.581518][T14520] veth9: entered allmulticast mode [ 318.591694][T14520] veth9: entered promiscuous mode [ 318.618659][T14525] veth0_to_bond: left allmulticast mode [ 318.638774][T14525] veth0_to_bond: left promiscuous mode [ 318.662680][T14525] bridge2: port 1(veth0_to_bond) entered disabled state [ 318.719275][T14525] bridge6: port 2(veth0_to_bond) entered blocking state [ 318.726090][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'. [ 318.734160][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 318.749382][T14525] bridge6: port 2(veth0_to_bond) entered disabled state [ 318.768693][T14525] veth0_to_bond: entered allmulticast mode [ 318.778006][T14525] veth0_to_bond: entered promiscuous mode [ 318.850646][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.017370][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.140797][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.276697][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.440899][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.507133][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2377'. [ 319.533790][T14575] syzkaller0: entered promiscuous mode [ 319.539497][T14575] syzkaller0: entered allmulticast mode [ 319.639384][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 319.766932][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2379'. [ 319.957645][T14595] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 319.973527][T14595] bond7 (unregistering): Released all slaves [ 320.239531][T14612] syz.0.2388: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.258828][T14612] CPU: 0 UID: 0 PID: 14612 Comm: syz.0.2388 Not tainted syzkaller #0 PREEMPT(full) [ 320.258858][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.258871][T14612] Call Trace: [ 320.258879][T14612] [ 320.258889][T14612] dump_stack_lvl+0xe8/0x150 [ 320.258924][T14612] warn_alloc+0x214/0x310 [ 320.258948][T14612] ? stack_trace_save+0x9c/0xe0 [ 320.258985][T14612] ? __pfx_warn_alloc+0x10/0x10 [ 320.259016][T14612] ? kasan_save_track+0x4f/0x80 [ 320.259035][T14612] ? kasan_save_track+0x3e/0x80 [ 320.259053][T14612] ? __kasan_kmalloc+0x93/0xb0 [ 320.259072][T14612] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 320.259091][T14612] ? xskq_create+0x56/0x170 [ 320.259121][T14612] ? xsk_setsockopt+0x4dc/0x8d0 [ 320.259146][T14612] ? do_sock_setsockopt+0x17c/0x1b0 [ 320.259167][T14612] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 320.259187][T14612] ? do_syscall_64+0xec/0xf80 [ 320.259214][T14612] __vmalloc_node_range_noprof+0x134/0x16a0 [ 320.259270][T14612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.259299][T14612] ? __kasan_kmalloc+0x93/0xb0 [ 320.259328][T14612] vmalloc_user_noprof+0xad/0xf0 [ 320.259349][T14612] ? xskq_create+0xbf/0x170 [ 320.259379][T14612] xskq_create+0xbf/0x170 [ 320.259410][T14612] xsk_init_queue+0xb0/0x110 [ 320.259440][T14612] xsk_setsockopt+0x4dc/0x8d0 [ 320.259470][T14612] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.259496][T14612] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.259525][T14612] ? aa_sock_opt_perm+0xff/0x1a0 [ 320.259554][T14612] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 320.259573][T14612] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.259615][T14612] do_sock_setsockopt+0x17c/0x1b0 [ 320.259642][T14612] __x64_sys_setsockopt+0x13f/0x1b0 [ 320.259673][T14612] do_syscall_64+0xec/0xf80 [ 320.259694][T14612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.259713][T14612] ? trace_irq_disable+0x37/0x100 [ 320.259745][T14612] ? clear_bhb_loop+0x60/0xb0 [ 320.259770][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.259790][T14612] RIP: 0033:0x7f16f758f749 [ 320.259809][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.259826][T14612] RSP: 002b:00007f16f8440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.259849][T14612] RAX: ffffffffffffffda RBX: 00007f16f77e5fa0 RCX: 00007f16f758f749 [ 320.259866][T14612] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 320.259879][T14612] RBP: 00007f16f7613f91 R08: 0000000000000004 R09: 0000000000000000 [ 320.259893][T14612] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.259906][T14612] R13: 00007f16f77e6038 R14: 00007f16f77e5fa0 R15: 00007ffdfb3a4c48 [ 320.259942][T14612] [ 320.536747][T14612] Mem-Info: [ 320.540013][T14612] active_anon:6197 inactive_anon:0 isolated_anon:0 [ 320.540013][T14612] active_file:2885 inactive_file:39968 isolated_file:0 [ 320.540013][T14612] unevictable:768 dirty:71 writeback:0 [ 320.540013][T14612] slab_reclaimable:12143 slab_unreclaimable:116498 [ 320.540013][T14612] mapped:39550 shmem:1359 pagetables:1310 [ 320.540013][T14612] sec_pagetables:0 bounce:0 [ 320.540013][T14612] kernel_misc_reclaimable:0 [ 320.540013][T14612] free:1277429 free_pcp:14509 free_cma:0 [ 320.586657][T14612] Node 0 active_anon:24788kB inactive_anon:0kB active_file:11540kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158200kB dirty:276kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15052kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.620392][T14612] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.652035][T14612] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.683536][T14612] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 320.689454][T14612] Node 0 DMA32 free:1202356kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24788kB inactive_anon:0kB active_file:11540kB inactive_file:159672kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2559496kB mlocked:0kB bounce:0kB free_pcp:43428kB local_pcp:25424kB free_cma:0kB [ 320.724678][T14612] lowmem_reserve[]: 0 0 1 1 1 [ 320.729466][T14612] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.760348][T14612] lowmem_reserve[]: 0 0 0 0 0 [ 320.765388][T14612] Node 1 Normal free:3892000kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14432kB local_pcp:9536kB free_cma:0kB [ 320.799068][T14612] lowmem_reserve[]: 0 0 0 0 0 [ 320.805128][T14612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.818492][T14612] Node 0 DMA32: 3766*4kB (UM) 1967*8kB (UME) 314*16kB (UME) 39*32kB (UME) 8*64kB (ME) 24*128kB (UME) 8*256kB (UME) 3*512kB (UM) 1*1024kB (M) 3*2048kB (ME) 281*4096kB (UM) = 1202384kB [ 320.867399][T14612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.909150][T14612] Node 1 Normal: 156*4kB (UME) 34*8kB (UME) 42*16kB (UME) 134*32kB (UME) 33*64kB (UME) 14*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3892000kB [ 320.987993][T14612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.004665][T14612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.060242][T14612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.100653][T14612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.112345][T14612] 44208 total pagecache pages [ 321.117083][T14612] 0 pages in swap cache [ 321.126773][T14612] Free swap = 124996kB [ 321.185701][T14612] Total swap = 124996kB [ 321.190021][T14612] 2097051 pages RAM [ 321.200153][T14612] 0 pages HighMem/MovableOnly [ 321.221668][T14612] 425087 pages reserved [ 321.226066][T14612] 0 pages cma reserved [ 321.227967][ T5923] IPVS: starting estimator thread 0... [ 321.318344][T14644] hsr_slave_0: left promiscuous mode [ 321.340719][T14645] IPVS: using max 25 ests per chain, 60000 per kthread [ 321.357364][T14644] hsr_slave_1: left promiscuous mode [ 321.543248][T14668] bridge0: entered promiscuous mode [ 321.598464][T14656] bridge0: left promiscuous mode [ 321.744655][T14673] geneve3: entered promiscuous mode [ 321.750431][T14673] geneve3: entered allmulticast mode [ 322.367371][T14719] __nla_validate_parse: 7 callbacks suppressed [ 322.367392][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2414'. [ 322.403501][T14719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2414'. [ 322.667510][T14738] bond2: option min_links: invalid value (18446744073709551614) [ 322.682720][T14738] bond2: option min_links: allowed values 0 - 2147483647 [ 322.700649][T14738] bond2 (unregistering): Released all slaves [ 322.773350][T14743] tipc: Enabled bearer , priority 0 [ 322.869474][T14743] syzkaller0: entered promiscuous mode [ 322.890141][T14743] syzkaller0: entered allmulticast mode [ 322.896976][T14743] tipc: Resetting bearer [ 322.948352][T14749] syzkaller0: entered promiscuous mode [ 322.956748][T14749] syzkaller0: entered allmulticast mode [ 322.974048][T14742] tipc: Resetting bearer [ 324.845037][T14742] tipc: Disabling bearer [ 324.900347][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 324.938143][T14749] tipc: Enabled bearer , priority 0 [ 324.981052][T14751] tipc: Resetting bearer [ 324.989083][T14746] tipc: Resetting bearer [ 325.046061][T14746] tipc: Disabling bearer [ 325.086250][ T5923] tipc: Node number set to 320661341 [ 325.140497][ T2201] net_ratelimit: 21 callbacks suppressed [ 325.140520][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.301308][ T9977] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.329320][T14791] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2429'. [ 325.431770][ T1927] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.573358][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.852184][ T9966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.947267][T14824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2434'. [ 325.957107][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 326.007514][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 326.064897][T14811] syzkaller0: entered promiscuous mode [ 326.100249][T14811] syzkaller0: entered allmulticast mode [ 326.130702][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 326.429422][T14845] netlink: 'syz.6.2438': attribute type 32 has an invalid length. [ 326.479461][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2438'. [ 326.872954][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 326.882342][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2440'. [ 328.333772][T14836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.351992][T14845] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 328.359941][T14853] tipc: Enabling of bearer rejected, failed to enable media [ 328.384652][ T9966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.540935][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.564802][T14867] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2441'. [ 328.652503][T14874] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 328.672131][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.679876][T14874] netlink: 'syz.2.2442': attribute type 11 has an invalid length. [ 328.732845][T14874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2442'. [ 328.865255][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 329.055075][T14896] netlink: 'syz.2.2449': attribute type 9 has an invalid length. [ 329.079975][T14896] netlink: 'syz.2.2449': attribute type 11 has an invalid length. [ 329.099310][T14896] netlink: 'syz.2.2449': attribute type 12 has an invalid length. [ 329.148173][T14896] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2449'. [ 329.521289][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2457'. [ 329.798383][T14935] pim6reg1: entered promiscuous mode [ 329.812443][T14935] pim6reg1: entered allmulticast mode [ 330.011804][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2462'. [ 330.240319][ T9970] net_ratelimit: 10 callbacks suppressed [ 330.240341][ T9970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.304982][T14965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2465'. [ 330.354402][T14967] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2465'. [ 330.411348][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.467131][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2468'. [ 330.576184][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 330.601518][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.721353][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.871135][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.030162][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.141705][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.290450][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.408461][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.540199][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.789972][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2484'. [ 331.876220][T15045] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 332.231288][T15070] : entered promiscuous mode [ 332.416464][T15083] netlink: 'syz.6.2495': attribute type 64 has an invalid length. [ 332.673321][T15094] xt_TCPMSS: Only works on TCP SYN packets [ 332.710775][T15094] xt_TCPMSS: Only works on TCP SYN packets [ 332.717859][T15098] netlink: 'syz.0.2501': attribute type 39 has an invalid length. [ 332.742565][T15098] `: (slave v): Releasing backup interface [ 332.777497][T15097] x_tables: unsorted entry at hook 1 [ 333.052130][T15111] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.224223][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.273474][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.445205][T15126] netlink: 'syz.1.2511': attribute type 5 has an invalid length. [ 333.456109][T15126] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 333.827402][T15144] __nla_validate_parse: 13 callbacks suppressed [ 333.827421][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 334.141136][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2522'. [ 334.359879][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2522'. [ 334.390868][T15175] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2525'. [ 334.697017][T15191] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 336.365206][T15191] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 336.432011][ T6702] net_ratelimit: 23 callbacks suppressed [ 336.432034][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.476471][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 336.590255][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.597563][ C1] bridge0: topology change detected, propagating [ 336.607118][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.645094][T15223] IPVS: length: 239 != 24 [ 336.701688][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 336.702423][T15225] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 336.732208][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.784781][T15236] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2537'. [ 336.931600][ T9966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.081247][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.392931][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.521507][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.527512][T15269] FAULT_INJECTION: forcing a failure. [ 337.527512][T15269] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 337.560204][T15269] CPU: 0 UID: 0 PID: 15269 Comm: syz.2.2550 Not tainted syzkaller #0 PREEMPT(full) [ 337.560234][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.560245][T15269] Call Trace: [ 337.560255][T15269] [ 337.560264][T15269] dump_stack_lvl+0xe8/0x150 [ 337.560297][T15269] should_fail_ex+0x414/0x560 [ 337.560334][T15269] _copy_from_iter+0x1cd/0x1630 [ 337.560370][T15269] ? __pfx__copy_from_iter+0x10/0x10 [ 337.560393][T15269] ? __build_skb_around+0x22d/0x3c0 [ 337.560418][T15269] ? __alloc_skb+0x198/0x3a0 [ 337.560437][T15269] ? netlink_sendmsg+0x642/0xb30 [ 337.560461][T15269] ? skb_put+0x11b/0x210 [ 337.560487][T15269] netlink_sendmsg+0x6b2/0xb30 [ 337.560523][T15269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.560552][T15269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.560581][T15269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.560600][T15269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.560627][T15269] __sock_sendmsg+0x21c/0x270 [ 337.560659][T15269] ____sys_sendmsg+0x505/0x820 [ 337.560688][T15269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.560729][T15269] ? import_iovec+0x74/0xa0 [ 337.560758][T15269] ___sys_sendmsg+0x21f/0x2a0 [ 337.560784][T15269] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.560845][T15269] ? __fget_files+0x2a/0x420 [ 337.560869][T15269] ? __fget_files+0x3a0/0x420 [ 337.560906][T15269] __x64_sys_sendmsg+0x19b/0x260 [ 337.560933][T15269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.560968][T15269] ? __pfx_ksys_write+0x10/0x10 [ 337.561000][T15269] do_syscall_64+0xec/0xf80 [ 337.561022][T15269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.561041][T15269] ? trace_irq_disable+0x37/0x100 [ 337.561066][T15269] ? clear_bhb_loop+0x60/0xb0 [ 337.561092][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.561110][T15269] RIP: 0033:0x7f393c18f749 [ 337.561129][T15269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.561146][T15269] RSP: 002b:00007f393d08d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.561168][T15269] RAX: ffffffffffffffda RBX: 00007f393c3e5fa0 RCX: 00007f393c18f749 [ 337.561182][T15269] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 337.561195][T15269] RBP: 00007f393d08d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.561208][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.561219][T15269] R13: 00007f393c3e6038 R14: 00007f393c3e5fa0 R15: 00007ffec41d59f8 [ 337.561254][T15269] [ 337.824091][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.950500][ T9977] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.103919][T15276] 8021q: adding VLAN 0 to HW filter on device ` [ 338.122594][T15283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2557'. [ 338.147721][T15276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.477452][T15307] batadv_slave_1: entered promiscuous mode [ 338.528003][T15306] batadv_slave_1: left promiscuous mode [ 338.688977][T15312] FAULT_INJECTION: forcing a failure. [ 338.688977][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.790634][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.0.2563 Not tainted syzkaller #0 PREEMPT(full) [ 338.790666][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.790679][T15312] Call Trace: [ 338.790687][T15312] [ 338.790696][T15312] dump_stack_lvl+0xe8/0x150 [ 338.790728][T15312] should_fail_ex+0x414/0x560 [ 338.790766][T15312] _copy_from_iter+0x1cd/0x1630 [ 338.790802][T15312] ? __pfx__copy_from_iter+0x10/0x10 [ 338.790824][T15312] ? __build_skb_around+0x22d/0x3c0 [ 338.790849][T15312] ? __alloc_skb+0x198/0x3a0 [ 338.790870][T15312] ? netlink_sendmsg+0x642/0xb30 [ 338.790894][T15312] ? skb_put+0x11b/0x210 [ 338.790918][T15312] netlink_sendmsg+0x6b2/0xb30 [ 338.790954][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.790983][T15312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.791013][T15312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.791031][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.791058][T15312] __sock_sendmsg+0x21c/0x270 [ 338.791092][T15312] ____sys_sendmsg+0x505/0x820 [ 338.791122][T15312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.791156][T15312] ? import_iovec+0x74/0xa0 [ 338.791185][T15312] ___sys_sendmsg+0x21f/0x2a0 [ 338.791212][T15312] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.791277][T15312] ? __fget_files+0x2a/0x420 [ 338.791301][T15312] ? __fget_files+0x3a0/0x420 [ 338.791338][T15312] __x64_sys_sendmsg+0x19b/0x260 [ 338.791366][T15312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.791402][T15312] ? __pfx_ksys_write+0x10/0x10 [ 338.791436][T15312] do_syscall_64+0xec/0xf80 [ 338.791466][T15312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.791486][T15312] ? trace_irq_disable+0x37/0x100 [ 338.791510][T15312] ? clear_bhb_loop+0x60/0xb0 [ 338.791535][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.791555][T15312] RIP: 0033:0x7f16f758f749 [ 338.791574][T15312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.791591][T15312] RSP: 002b:00007f16f8440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.791615][T15312] RAX: ffffffffffffffda RBX: 00007f16f77e5fa0 RCX: 00007f16f758f749 [ 338.791629][T15312] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.791642][T15312] RBP: 00007f16f8440090 R08: 0000000000000000 R09: 0000000000000000 [ 338.791655][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.791667][T15312] R13: 00007f16f77e6038 R14: 00007f16f77e5fa0 R15: 00007ffdfb3a4c48 [ 338.791703][T15312] [ 339.179170][T15323] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2567'. [ 339.192338][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2566'. [ 339.368844][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 339.410490][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'. [ 339.440574][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 339.452635][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'. [ 339.623530][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2577'. [ 340.196922][T15371] bond3: option mode: invalid value (133) [ 340.207008][T15371] bond3 (unregistering): Released all slaves [ 340.243161][T15373] tipc: Enabled bearer , priority 0 [ 340.252454][T15382] syzkaller0: entered promiscuous mode [ 340.257982][T15382] syzkaller0: entered allmulticast mode [ 340.325690][T15386] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 340.409395][T15373] tipc: Resetting bearer [ 340.425496][T15372] tipc: Resetting bearer [ 340.492546][T15372] tipc: Disabling bearer [ 340.560593][T15402] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 340.777147][T15414] syzkaller1: entered promiscuous mode [ 340.790907][T15414] syzkaller1: entered allmulticast mode [ 340.801051][T15422] netlink: 'syz.6.2597': attribute type 11 has an invalid length. [ 340.824159][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 340.836229][T15422] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2597'. [ 341.160848][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2601'. [ 341.170807][T15434] netlink: 'syz.0.2601': attribute type 7 has an invalid length. [ 341.188081][T15434] netlink: 'syz.0.2601': attribute type 8 has an invalid length. [ 341.333101][T15445] veth0: entered promiscuous mode [ 341.351474][T15447] tunl0: entered promiscuous mode [ 341.380871][T15447] netlink: 'syz.0.2605': attribute type 3 has an invalid length. [ 341.396244][T15444] veth0: left promiscuous mode [ 341.461726][ T2096] net_ratelimit: 21 callbacks suppressed [ 341.461751][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.622117][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.743496][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.870632][ T9990] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.972700][T15479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 342.026105][T15483] tipc: Enabled bearer , priority 10 [ 342.060414][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.118568][T15498] netlink: 'syz.5.2621': attribute type 10 has an invalid length. [ 342.142769][T15498] syz_tun: entered promiscuous mode [ 342.176839][T15498] `: (slave syz_tun): Enslaving as an active interface with an up link [ 342.181502][T15499] netlink: 'syz.5.2621': attribute type 10 has an invalid length. [ 342.231295][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.276680][T15499] 8021q: adding VLAN 0 to HW filter on device ` [ 342.315395][T15499] `: entered promiscuous mode [ 342.330253][T15499] bond_slave_0: entered promiscuous mode [ 342.336242][T15499] bond_slave_1: entered promiscuous mode [ 342.346747][T15499] `: entered allmulticast mode [ 342.363941][T15499] bond_slave_0: entered allmulticast mode [ 342.369857][T15499] bond_slave_1: entered allmulticast mode [ 342.398828][T15499] syz_tun: entered allmulticast mode [ 342.406956][T15499] team0: Port device ` added [ 342.419451][T15510] `: (slave syz_tun): Releasing backup interface [ 342.437000][T15510] syz_tun: left allmulticast mode [ 342.465485][T15510] `: left promiscuous mode [ 342.477452][T15510] bond_slave_0: left promiscuous mode [ 342.489242][T15510] bond_slave_1: left promiscuous mode [ 342.518467][T15510] `: left allmulticast mode [ 342.539963][T15510] bond_slave_0: left allmulticast mode [ 342.550733][T15510] bond_slave_1: left allmulticast mode [ 342.576687][ T30] audit: type=1804 audit(1768563017.256:9): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2628" name="/newroot/542/memory.events" dev="tmpfs" ino=2779 res=1 errno=0 [ 342.605806][T15510] team0: Port device ` removed [ 342.623724][T15510] team0: left allmulticast mode [ 342.628646][T15510] team_slave_0: left allmulticast mode [ 342.651095][ T30] audit: type=1800 audit(1768563017.256:10): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2628" name="memory.events" dev="tmpfs" ino=2779 res=0 errno=0 [ 342.685486][T15510] team_slave_1: left allmulticast mode [ 342.694844][T15510] team0: left promiscuous mode [ 342.700423][T15510] team_slave_0: left promiscuous mode [ 342.706294][T15510] team_slave_1: left promiscuous mode [ 342.715121][T15510] bridge0: port 4(team0) entered disabled state [ 342.726855][T15510] dummy0: left allmulticast mode [ 342.737858][T15510] bridge0: port 3(dummy0) entered disabled state [ 342.751314][T15510] bridge_slave_0: left allmulticast mode [ 342.756995][T15510] bridge_slave_0: left promiscuous mode [ 342.764395][T15510] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.776261][T15510] bridge_slave_1: left allmulticast mode [ 342.783474][T15510] bridge_slave_1: left promiscuous mode [ 342.789317][T15510] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.802870][T15510] `: (slave bond_slave_0): Releasing backup interface [ 342.814075][T15510] `: (slave bond_slave_1): Releasing backup interface [ 342.828433][T15510] team0: Port device team_slave_0 removed [ 342.842543][T15510] team0: Port device team_slave_1 removed [ 342.849134][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.858118][T15510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.867593][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.876056][T15510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.885234][T15510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.920415][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.031209][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.151890][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.204201][T15546] netlink: 'syz.0.2633': attribute type 9 has an invalid length. [ 343.419958][T15559] veth0: entered promiscuous mode [ 343.578329][T15552] veth0: left promiscuous mode [ 343.857919][T15577] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 343.883516][T15585] xt_socket: unknown flags 0xe4 [ 344.095673][T15596] netlink: 'syz.6.2652': attribute type 1 has an invalid length. [ 344.208323][T15608] __nla_validate_parse: 8 callbacks suppressed [ 344.208343][T15608] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2655'. [ 344.226199][T15601] veth7: entered allmulticast mode [ 344.637455][T15641] netlink: 'syz.0.2663': attribute type 20 has an invalid length. [ 344.664143][T15641] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.879991][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2665'. [ 344.894830][T15658] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.2664'. [ 344.918170][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2664'. [ 344.979673][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2664'. [ 345.149404][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2665'. [ 345.709396][T15707] bond3: Removing last ns target with arp_interval on [ 345.823055][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 346.458889][T15753] validate_nla: 2 callbacks suppressed [ 346.458910][T15753] netlink: 'syz.0.2687': attribute type 39 has an invalid length. [ 346.520227][ T2096] net_ratelimit: 26 callbacks suppressed [ 346.520251][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 346.597766][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 346.663350][ T9975] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 346.744944][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2693'. [ 346.784448][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 346.931975][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.061783][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.210872][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.361749][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.553641][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.730791][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.862961][T13614] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.008997][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2706'. [ 348.272556][T15810] wg1 speed is unknown, defaulting to 1000 [ 348.303452][T15859] veth0: entered promiscuous mode [ 348.308809][T15859] veth0: left promiscuous mode [ 349.142804][T15901] 8021q: VLANs not supported on gre0 [ 349.151121][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 349.207084][T15904] netlink: 'syz.2.2718': attribute type 9 has an invalid length. [ 349.221701][T15837] wg1 speed is unknown, defaulting to 1000 [ 349.556075][T15923] __nla_validate_parse: 1 callbacks suppressed [ 349.556098][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 349.715188][T15930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2726'. [ 350.785201][T15963] ipt_REJECT: TCP_RESET invalid for non-tcp [ 351.187909][T15986] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.280747][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 351.458033][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2742'. [ 351.471205][T15997] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2742'. [ 351.554204][ T9986] net_ratelimit: 20 callbacks suppressed [ 351.554225][ T9986] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.616314][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2744'. [ 351.669170][T16002] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 351.701740][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.843345][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 352.028847][T16013] netlink: 'syz.6.2749': attribute type 1 has an invalid length. [ 352.072583][ T9986] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 352.200867][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 352.264271][T16022] bond0: (slave team0): Releasing backup interface [ 352.312665][T16022] bond0: (slave batadv0): Releasing backup interface [ 352.356957][T16022] bridge_slave_0: left allmulticast mode [ 352.390649][T16022] bridge_slave_0: left promiscuous mode [ 352.410558][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.419119][T16032] IPv6: Can't replace route, no match found [ 352.449508][T16022] bridge_slave_1: left allmulticast mode [ 352.456159][T16022] bridge_slave_1: left promiscuous mode [ 352.464131][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.483930][T16022] bond0: (slave bond_slave_0): Releasing backup interface [ 352.494809][T16033] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 352.505871][T16022] bond0: (slave bond_slave_1): Releasing backup interface [ 352.527658][T16022] team0: Port device team_slave_0 removed [ 352.538103][T16022] team0: Port device team_slave_1 removed [ 352.544985][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.552962][T16022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.561853][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.569242][T16022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.667288][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 352.705748][T16032] xt_l2tp: v2 doesn't support IP mode [ 352.748856][T16039] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 352.772934][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 352.795496][T16043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2758'. [ 352.836205][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 352.858318][ T30] audit: type=1804 audit(1768563027.536:11): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2760" name="/newroot/433/cgroup.controllers" dev="tmpfs" ino=2216 res=1 errno=0 [ 352.864170][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 352.895369][ T30] audit: type=1800 audit(1768563027.566:12): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2760" name="cgroup.controllers" dev="tmpfs" ino=2216 res=0 errno=0 [ 352.960386][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.081860][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.238117][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.350529][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.418688][T16078] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003 [ 353.464184][T16083] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.829808][T16105] IPVS: Error connecting to the multicast addr [ 354.093943][T16111] vlan3: entered promiscuous mode [ 354.099019][T16111] bridge0: entered promiscuous mode [ 354.362995][ T5915] IPVS: starting estimator thread 0... [ 354.413705][T16130] tipc: Enabled bearer , priority 10 [ 354.472118][T16127] IPVS: using max 26 ests per chain, 62400 per kthread [ 354.693153][T16143] __nla_validate_parse: 7 callbacks suppressed [ 354.693173][T16143] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2791'. [ 354.865531][T16159] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2794'. [ 354.892765][T16155] bridge0: port 1(team0) entered blocking state [ 354.901150][T16157] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 354.910375][T16155] bridge0: port 1(team0) entered disabled state [ 354.926960][T16155] team0: entered allmulticast mode [ 354.940267][T16155] team0: entered promiscuous mode [ 355.586450][T16183] wg1 speed is unknown, defaulting to 1000 [ 355.685385][T16199] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 355.720660][T16199] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 356.256043][T16206] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2806'. [ 356.402404][T16208] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2807'. [ 356.562134][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2809'. [ 356.623233][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'. [ 356.636994][T16216] netlink: 'syz.6.2809': attribute type 33 has an invalid length. [ 356.670186][ T6076] net_ratelimit: 28 callbacks suppressed [ 356.670207][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.714054][T16223] delete_channel: no stack [ 356.726905][T16224] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 356.736332][T16224] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2813'. [ 356.748784][T16224] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 356.764557][T16224] netlink: 638 bytes leftover after parsing attributes in process `syz.2.2813'. [ 356.773747][T16224] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2813'. [ 356.822754][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.838786][T16229] netlink: 'syz.6.2815': attribute type 1 has an invalid length. [ 356.896879][T16232] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2816'. [ 356.925813][T16234] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.945061][T16234] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 356.990006][T16229] gretap1: entered promiscuous mode [ 357.009219][T16229] bond2: (slave gretap1): making interface the new active one [ 357.021442][T16229] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 357.042076][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.137005][T16240] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20004 [ 357.149416][T16240] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 357.157626][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.256107][T16252] netlink: 'syz.6.2822': attribute type 16 has an invalid length. [ 357.264252][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.275888][T16252] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 357.420892][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.532538][ T9966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.650719][ T6216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.795593][ T9966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.256955][T16304] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 358.269960][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.901013][T16335] bond0: entered allmulticast mode [ 359.213912][T16348] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.263316][T16352] netlink: 'syz.6.2857': attribute type 22 has an invalid length. [ 359.302561][T16352] netlink: 'syz.6.2857': attribute type 22 has an invalid length. [ 359.302567][ T3810] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.343939][ T3810] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.378044][ T3810] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.420743][ T3810] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.798558][T16382] __nla_validate_parse: 20 callbacks suppressed [ 359.798581][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2863'. [ 359.827831][T16388] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2866'. [ 359.837946][T16388] xt_policy: neither incoming nor outgoing policy selected [ 359.960339][T16393] netlink: 'syz.6.2867': attribute type 4 has an invalid length. [ 359.973142][T16398] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2866'. [ 360.303622][T16417] netlink: 'syz.6.2873': attribute type 3 has an invalid length. [ 360.324656][T16415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.416041][T16417] pim6reg: entered allmulticast mode [ 360.438341][T16424] netlink: 'syz.6.2873': attribute type 3 has an invalid length. [ 360.466428][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2877'. [ 360.566411][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 360.624087][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 360.636112][ T9977] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 360.836465][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.846891][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.855503][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.868879][T16446] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2881'. [ 360.884297][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.893275][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.972799][ T5830] `: (slave syz_tun): Releasing backup interface [ 361.146681][T16444] wg1 speed is unknown, defaulting to 1000 [ 361.534124][T16461] vlan2: entered allmulticast mode [ 361.539403][T16461] bridge_slave_0: entered allmulticast mode [ 361.575958][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 361.586635][T16468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2887'. [ 361.601025][T16468] netlink: 'syz.5.2887': attribute type 1 has an invalid length. [ 361.677063][T16468] bond5: entered promiscuous mode [ 361.685644][T16468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.715438][T16471] bond5: (slave bridge2): making interface the new active one [ 361.723910][T16471] bridge2: entered promiscuous mode [ 361.736305][T16471] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 361.750718][ T6789] net_ratelimit: 32 callbacks suppressed [ 361.750739][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.766813][T16473] xt_hashlimit: overflow, rate too high: 0 [ 361.795716][T16444] chnl_net:caif_netlink_parms(): no params data found [ 361.955076][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 362.065210][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.085699][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.100680][T16444] bridge_slave_0: entered allmulticast mode [ 362.136677][T16444] bridge_slave_0: entered promiscuous mode [ 362.178887][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.188426][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.198030][T16444] bridge_slave_1: entered allmulticast mode [ 362.206494][T16444] bridge_slave_1: entered promiscuous mode [ 362.246071][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.268714][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.329496][T16500] pim6reg1: entered promiscuous mode [ 362.335732][T16500] pim6reg1: entered allmulticast mode [ 362.345837][T16444] team0: Port device team_slave_0 added [ 362.356835][T16444] team0: Port device team_slave_1 added [ 362.490578][ T3810] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.498903][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.514642][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.544616][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.614110][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.641083][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.713131][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.912023][T16444] hsr_slave_0: entered promiscuous mode [ 362.928674][T16444] hsr_slave_1: entered promiscuous mode [ 362.944020][T16444] debugfs: 'hsr0' already exists in 'hsr' [ 362.951831][T16444] Cannot create hsr debugfs directory [ 362.990686][ T5850] Bluetooth: hci7: command tx timeout [ 363.074277][T16536] bond0: entered promiscuous mode [ 363.084140][T16536] batadv0: entered promiscuous mode [ 363.093745][T16536] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 363.105183][T16536] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 363.450530][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.527753][T16444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.540317][T16444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.592114][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.678547][T16444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.711624][T16444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.770285][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.857124][T16444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.884909][T16444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.940681][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.037993][T16444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.051416][T16444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.079481][T16556] wg1 speed is unknown, defaulting to 1000 [ 364.081455][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.200170][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.330631][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.365933][T16444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.413772][T16444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.448710][T16444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.474113][T16444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.520298][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.645315][T16587] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 364.848294][T16444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.919906][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.956634][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.964242][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.003835][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.011174][ T9972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.070820][ T5850] Bluetooth: hci7: command tx timeout [ 365.088690][T16594] __nla_validate_parse: 5 callbacks suppressed [ 365.088711][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2918'. [ 365.313251][ T6357] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 365.326701][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2918'. [ 365.631121][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.766796][T16444] veth0_vlan: entered promiscuous mode [ 365.774658][T16623] netlink: 'syz.1.2925': attribute type 21 has an invalid length. [ 365.784101][T16444] veth1_vlan: entered promiscuous mode [ 365.842222][T16625] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2926'. [ 365.883055][T16444] veth0_macvtap: entered promiscuous mode [ 365.907675][T16444] veth1_macvtap: entered promiscuous mode [ 365.936583][T16627] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2927'. [ 365.945857][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.954713][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.973038][ T9976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.983809][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 365.986532][ T9976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.008725][ T9976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.019449][ T9976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.269168][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.303444][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.380428][T16641] netlink: 'syz.6.2930': attribute type 21 has an invalid length. [ 366.399357][T16641] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2930'. [ 366.434548][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.449823][T16643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2931'. [ 366.461475][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.506059][T16643] syzkaller1: entered promiscuous mode [ 366.518118][T16643] syzkaller1: entered allmulticast mode [ 366.762050][ T6789] net_ratelimit: 12 callbacks suppressed [ 366.762073][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.846742][T16659] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2935'. [ 366.881186][T16659] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2935'. [ 366.929043][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.941033][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.949578][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.957958][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.964711][T16668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2934'. [ 366.979660][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.001265][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.052111][T16670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.151044][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.151357][ T5838] Bluetooth: hci7: command tx timeout [ 367.290188][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.418912][T16682] bond6: Unable to set up delay as MII monitoring is disabled [ 367.464144][T16682] bond6 (unregistering): Released all slaves [ 367.589036][T16684] bond6: Unable to set up delay as MII monitoring is disabled [ 367.614124][T16684] bond6 (unregistering): Released all slaves [ 367.661221][T16666] wg1 speed is unknown, defaulting to 1000 [ 367.667568][T16696] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 367.680165][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.715509][T16696] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 367.807217][ T1927] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.842627][T16706] syzkaller0: entered promiscuous mode [ 367.849169][T16706] syzkaller0: entered allmulticast mode [ 367.891617][T16705] gretap0: entered promiscuous mode [ 367.920017][T16705] gretap0: left promiscuous mode [ 367.952844][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.231776][ T1927] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.269246][T16720] : entered promiscuous mode [ 368.530812][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.601854][T16666] chnl_net:caif_netlink_parms(): no params data found [ 368.839044][ T6357] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.872116][ T6357] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.071455][ T5838] Bluetooth: hci3: command tx timeout [ 369.108397][T16666] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.116504][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.124719][T16666] bridge_slave_0: entered allmulticast mode [ 369.133944][T16666] bridge_slave_0: entered promiscuous mode [ 369.154550][T16666] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.163065][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.170998][T16666] bridge_slave_1: entered allmulticast mode [ 369.180019][T16666] bridge_slave_1: entered promiscuous mode [ 369.239293][ T5838] Bluetooth: hci7: command tx timeout [ 369.289860][T16770] netlink: 'syz.5.2960': attribute type 21 has an invalid length. [ 369.293728][T16666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.325969][T16666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.408020][T16666] team0: Port device team_slave_0 added [ 369.431232][T16666] team0: Port device team_slave_1 added [ 369.484753][T16781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.492306][T16781] IPv6: NLM_F_CREATE should be set when creating new route [ 369.499619][T16781] IPv6: NLM_F_CREATE should be set when creating new route [ 369.507002][T16781] IPv6: NLM_F_CREATE should be set when creating new route [ 369.522146][T16781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.565105][T16666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.580281][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.622940][T16666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.642500][T16666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.649822][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.677552][T16666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.727570][T16790] bridge0: left allmulticast mode [ 369.869173][T16797] x_tables: duplicate entry at hook 2 [ 369.976325][T16666] hsr_slave_0: entered promiscuous mode [ 369.985097][T16666] hsr_slave_1: entered promiscuous mode [ 369.992579][T16666] debugfs: 'hsr0' already exists in 'hsr' [ 369.998556][T16666] Cannot create hsr debugfs directory [ 370.009893][T16804] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.018070][T16804] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.124038][T16799] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 370.129924][T16799] syzkaller1: Linktype set failed because interface is up [ 370.164733][T16810] netlink: 'syz.6.2970': attribute type 30 has an invalid length. [ 370.169046][T16807] Bluetooth: MGMT ver 1.23 [ 370.174152][T16799] __nla_validate_parse: 11 callbacks suppressed [ 370.174170][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2970'. [ 370.272794][T16804] syzkaller1: entered promiscuous mode [ 370.279264][T16804] syzkaller1: entered allmulticast mode [ 370.573713][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'. [ 370.644537][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'. [ 370.688132][T16830] netlink: 'syz.6.2980': attribute type 4 has an invalid length. [ 370.928883][T16666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.949272][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 370.973714][T16666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.997818][T16666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.016370][T16855] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2986'. [ 371.037524][T16666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.151145][ T5838] Bluetooth: hci3: command tx timeout [ 371.199082][T16867] tipc: New replicast peer: 255.255.255.255 [ 371.208416][T16867] tipc: Enabled bearer , priority 10 [ 371.322069][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2988'. [ 371.348114][T16872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2988'. [ 371.381909][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.396323][T16875] netlink: 'syz.5.2990': attribute type 1 has an invalid length. [ 371.446022][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.479920][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.487409][ T9976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.558370][ T2096] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.565923][ T2096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.846526][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 371.871677][ T2096] net_ratelimit: 11 callbacks suppressed [ 371.871704][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.980883][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 371.997654][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 372.040555][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.186122][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.231642][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.385428][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.522132][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.630634][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.751937][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.913866][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.955630][T16666] veth0_vlan: entered promiscuous mode [ 372.994599][T16666] veth1_vlan: entered promiscuous mode [ 373.014925][T16948] netlink: 'syz.1.3008': attribute type 11 has an invalid length. [ 373.024379][T16948] netlink: 'syz.1.3008': attribute type 11 has an invalid length. [ 373.110341][ T6702] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.188595][T16666] veth0_macvtap: entered promiscuous mode [ 373.219933][T16666] veth1_macvtap: entered promiscuous mode [ 373.231440][ T5838] Bluetooth: hci3: command tx timeout [ 373.269812][T16959] netlink: 'syz.2.3011': attribute type 23 has an invalid length. [ 373.334223][T16666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.347419][T16966] netlink: 'syz.2.3011': attribute type 23 has an invalid length. [ 373.381331][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.422218][T16666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.474725][ T9976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.506326][ T9976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.536295][ T9976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.607734][ T9976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.861451][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.873800][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.946898][ T1927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.961393][ T1927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.036252][T16987] netlink: 'syz.5.3017': attribute type 1 has an invalid length. [ 374.755150][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 374.766008][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 374.775783][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 374.785432][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 374.795257][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 375.310656][ T5838] Bluetooth: hci3: command tx timeout [ 375.434400][T17013] wg1 speed is unknown, defaulting to 1000 [ 376.181591][T17084] netlink: 'syz.7.3044': attribute type 27 has an invalid length. [ 376.222253][T17084] __nla_validate_parse: 10 callbacks suppressed [ 376.222275][T17084] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3044'. [ 376.266292][T17083] bond1: ARP target 1.0.0.0 is already present [ 376.291099][T17083] bond1: option arp_ip_target: invalid value (1) [ 376.313447][T17083] bond1 (unregistering): Released all slaves [ 376.326516][T17092] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.3048'. [ 376.662901][T17106] netlink: 'syz.7.3050': attribute type 1 has an invalid length. [ 376.691641][T17106] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3050'. [ 376.712098][T17117] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 376.816653][T17013] chnl_net:caif_netlink_parms(): no params data found [ 376.845783][ T5838] Bluetooth: hci8: command tx timeout [ 377.002450][ T6076] net_ratelimit: 15 callbacks suppressed [ 377.002473][ T6076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.136727][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.161039][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.175695][T17013] bridge_slave_0: entered allmulticast mode [ 377.208316][T17013] bridge_slave_0: entered promiscuous mode [ 377.227208][T17013] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.249504][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.268732][T17013] bridge_slave_1: entered allmulticast mode [ 377.285476][T17013] bridge_slave_1: entered promiscuous mode [ 377.334272][T17154] netlink: 'syz.7.3064': attribute type 10 has an invalid length. [ 377.367629][T17155] netlink: 'syz.7.3064': attribute type 10 has an invalid length. [ 377.382628][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.405859][T17013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.428494][T17013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.447269][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.468809][T17154] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 377.574957][T17013] team0: Port device team_slave_0 added [ 377.591293][ T8676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.611275][T17013] team0: Port device team_slave_1 added [ 377.736730][T17013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.746396][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.779113][T17013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.836256][T17013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.894149][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.923850][T17013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.985234][T17181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3071'. [ 378.253189][T17187] veth0_virt_wifi: renamed from veth0_vlan [ 378.365655][T17173] wg1 speed is unknown, defaulting to 1000 [ 378.375314][T17013] hsr_slave_0: entered promiscuous mode [ 378.393669][T17013] hsr_slave_1: entered promiscuous mode [ 378.403319][T17013] debugfs: 'hsr0' already exists in 'hsr' [ 378.430851][T17013] Cannot create hsr debugfs directory [ 378.450218][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.544046][T17200] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.781575][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.805356][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 378.910402][ T5838] Bluetooth: hci8: command tx timeout [ 378.935628][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3079'. [ 378.992868][T17219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3079'. [ 379.096454][T17222] syzkaller0: entered promiscuous mode [ 379.102267][T17222] syzkaller0: entered allmulticast mode [ 379.130296][ T2201] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.296267][T17013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.320641][T17013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.568751][T17244] netlink: 'syz.2.3086': attribute type 2 has an invalid length. [ 379.586306][T17244] netlink: 'syz.2.3086': attribute type 11 has an invalid length. [ 379.596586][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3086'. [ 379.641589][T17013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.669742][T17013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.715336][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.873935][T17013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.905506][T17013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.941012][T17252] syzkaller0: entered promiscuous mode [ 379.946555][T17252] syzkaller0: entered allmulticast mode [ 380.163349][ T5494] veth0_virt_wifi: left promiscuous mode [ 380.281955][ T5494] veth0_virt_wifi: entered promiscuous mode [ 380.459415][T17013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.502127][T17013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.748474][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3093'. [ 380.748533][T17285] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3094'. [ 380.876181][ C0] vcan0: j1939_session_tx_dat: 0xffff888030e78800: queue data error: -100 [ 380.891656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 380.898594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.906628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.914560][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.922558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.930521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.938449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.946298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.954375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.962357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.970558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.978398][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 380.986564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 380.994593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.002923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.010931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.018893][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.027385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.035697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.043564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.051608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.059502][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.067473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.075411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.083505][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.091803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.099861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.107813][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.116053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.124113][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.132111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.140149][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.148164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.156078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.163986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.172276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.180964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.188978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.197149][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.204998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.212883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.220879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.228852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.236698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.244853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.253337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.261692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.269679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.277861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.285693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.293674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.301702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.309639][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.317628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.325717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.333692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.341945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.349751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.357760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.365856][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.374018][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.381967][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.390416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.398446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.406944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.415116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.436870][ T5838] Bluetooth: hci8: command tx timeout [ 381.523861][ T9977] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.541198][T17287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3095'. [ 381.673934][ T9977] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.710892][T17013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.733469][T17013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.766036][T17013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.803777][T17013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.034175][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.059799][T17315] openvswitch: netlink: Message has 8 unknown bytes. [ 382.073598][T17320] netlink: 'syz.6.3103': attribute type 5 has an invalid length. [ 382.139914][T17323] netlink: 'syz.2.3104': attribute type 9 has an invalid length. [ 382.350730][ T9972] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.406695][T17013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.466215][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 382.488309][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3106'. [ 382.515994][T17336] netlink: 'syz.5.3106': attribute type 2 has an invalid length. [ 382.543439][T17342] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3108'. [ 382.617503][T17013] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.663733][T17336] 9: entered promiscuous mode [ 382.708072][T17348] netlink: 'syz.7.3110': attribute type 1 has an invalid length. [ 382.758136][T17352] netlink: 'syz.7.3110': attribute type 1 has an invalid length. [ 382.835560][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.842835][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.933471][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.940811][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.010172][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.172515][T17363] syzkaller0: entered promiscuous mode [ 383.197900][T17363] syzkaller0: entered allmulticast mode [ 383.382903][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.404758][T17372] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3117'. [ 383.431915][T17372] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3117'. [ 383.453202][T17372] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 383.485396][ T5838] Bluetooth: hci8: command tx timeout [ 383.513943][T17372] netlink: 'syz.7.3117': attribute type 1 has an invalid length. [ 383.537525][T17372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.580296][ T2096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.712856][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.766898][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3122'. [ 383.841564][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 384.022770][T17013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.152686][T17405] netlink: 536 bytes leftover after parsing attributes in process `syz.6.3125'. [ 384.265402][T17408] netlink: 'syz.5.3126': attribute type 6 has an invalid length. [ 384.313329][T17408] netlink: 'syz.5.3126': attribute type 6 has an invalid length. [ 384.348687][T17013] veth0_vlan: entered promiscuous mode [ 384.372802][T17013] veth1_vlan: entered promiscuous mode [ 384.483174][T17013] veth0_macvtap: entered promiscuous mode [ 384.521256][T17013] veth1_macvtap: entered promiscuous mode [ 384.563416][T17013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.608650][T17013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.660822][ T9976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.700788][ T9976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.734347][ T9976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.764185][ T9976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.073058][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3137'. [ 385.083657][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.119997][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.266121][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.292741][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.335244][T17455] block nbd0: Unsupported socket: should be TCP or UNIX. [ 385.533446][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3020'. [ 386.763852][T17528] __nla_validate_parse: 3 callbacks suppressed [ 386.763872][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3163'. [ 386.901336][T17537] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3167'. [ 387.035790][T17539] tipc: Resetting bearer [ 387.409346][T17539] tipc: Disabling bearer [ 387.445545][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3170'. [ 387.593342][ T154] net_ratelimit: 20 callbacks suppressed [ 387.593366][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.856402][T17561] net veth1_virt_wifi .: renamed from virt_wifi0 [ 387.901224][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.030741][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.151607][T17570] SET target dimension over the limit! [ 388.173468][T17570] SET target dimension over the limit! [ 388.240634][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.371822][T17575] vlan2: entered promiscuous mode [ 388.396710][T17575] bridge0: entered promiscuous mode [ 388.443659][T17582] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 388.501353][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 388.522693][T17586] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 388.539811][T17585] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 388.560335][T17585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.572364][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.708873][T17596] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3182'. [ 388.711138][ T6357] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.871945][ T6789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.990850][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.110536][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.398290][T17633] netlink: 'syz.5.3189': attribute type 83 has an invalid length. [ 389.445865][T17624] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3189'. [ 389.555127][T17640] netlink: 'syz.7.3193': attribute type 12 has an invalid length. [ 389.564894][T17640] netlink: 'syz.7.3193': attribute type 29 has an invalid length. [ 389.575873][T17640] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3193'. [ 389.587211][T17640] netlink: 'syz.7.3193': attribute type 1 has an invalid length. [ 389.635122][T17640] netlink: 47 bytes leftover after parsing attributes in process `syz.7.3193'. [ 389.711376][ T31] INFO: task syz.4.1441:11124 blocked for more than 143 seconds. [ 389.735320][ T31] Not tainted syzkaller #0 [ 389.750155][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.769492][ T31] task:syz.4.1441 state:D stack:27376 pid:11124 tgid:11122 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 389.812590][ T31] Call Trace: [ 389.815971][ T31] [ 389.819028][ T31] __schedule+0x149b/0x4fd0 [ 389.865005][ T31] ? __pfx___schedule+0x10/0x10 [ 389.887715][ T31] ? schedule+0x91/0x360 [ 389.918106][ T31] schedule+0x165/0x360 [ 389.944458][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.977673][ T31] __mutex_lock+0x7e6/0x1350 [ 390.003891][ T31] ? __mutex_lock+0x5bb/0x1350 [ 390.040634][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 390.067904][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.092715][ T31] ? __nlmsg_put+0xef/0x1b0 [ 390.097324][ T31] ? genlmsg_put+0x137/0x2e0 [ 390.124033][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 390.150175][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 390.155660][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 390.172313][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 390.177944][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.201682][ T31] ? __dev_queue_xmit+0x280/0x3100 [ 390.206963][ T31] genl_rcv_msg+0x60e/0x790 [ 390.230189][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.235725][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 390.244750][ T31] ? __asan_memcpy+0x40/0x70 [ 390.249413][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.271441][ T31] netlink_rcv_skb+0x208/0x470 [ 390.276289][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.290080][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.295520][ T31] ? genl_rcv+0x19/0x40 [ 390.299759][ T31] ? down_read+0x274/0x2e0 [ 390.320146][ T31] ? genl_rcv+0xd/0x40 [ 390.324775][ T31] genl_rcv+0x28/0x40 [ 390.329009][ T31] netlink_unicast+0x82f/0x9e0 [ 390.351195][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 390.358020][ T31] ? __alloc_skb+0x198/0x3a0 [ 390.370598][ T31] ? netlink_sendmsg+0x642/0xb30 [ 390.375734][ T31] ? skb_put+0x11b/0x210 [ 390.390520][ T31] netlink_sendmsg+0x805/0xb30 [ 390.395591][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.410177][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.415204][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.431638][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.437348][ T31] __sock_sendmsg+0x21c/0x270 [ 390.461811][ T31] ____sys_sendmsg+0x505/0x820 [ 390.466830][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.480126][ T31] ? import_iovec+0x74/0xa0 [ 390.484951][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 390.489875][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.510681][ T31] ? futex_wake+0x4b2/0x560 [ 390.515309][ T31] ? file_init_path+0x434/0x590 [ 390.530093][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 390.535101][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.547211][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.554958][ T31] do_syscall_64+0xec/0xf80 [ 390.559805][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.566100][ T31] ? trace_irq_disable+0x37/0x100 [ 390.574033][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.578783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.585741][ T31] RIP: 0033:0x7f808258f749 [ 390.590717][ T31] RSP: 002b:00007f80833e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.600109][ T31] RAX: ffffffffffffffda RBX: 00007f80827e6090 RCX: 00007f808258f749 [ 390.608215][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000005 [ 390.621179][T17648] wg1 speed is unknown, defaulting to 1000 [ 390.630339][ T31] RBP: 00007f8082613f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.638507][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.662773][ T31] R13: 00007f80827e6128 R14: 00007f80827e6090 R15: 00007ffec1fa6108 [ 390.674306][ T31] [ 390.695636][ T31] [ 390.695636][ T31] Showing all locks held in the system: [ 390.722849][ T31] 1 lock held by khungtaskd/31: [ 390.727778][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.741302][ T31] 2 locks held by getty/5592: [ 390.746031][ T31] #0: ffff88802fa520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.756751][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 390.792448][ T31] 2 locks held by syz.3.480/7577: [ 390.797652][ T31] #0: ffffffff8f379db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.832691][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 390.844616][ T31] 3 locks held by kworker/0:14/7786: [ 390.858600][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 390.880870][ T31] #1: ffffc90003017bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 390.902403][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 390.950155][ T31] 2 locks held by syz.4.1441/11124: [ 390.956614][ T31] #0: ffffffff8f379db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.980158][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 391.020180][ T31] 2 locks held by syz.0.2738/15978: [ 391.025663][ T31] #0: ffffffff8f379db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.061570][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 391.090615][ T31] 5 locks held by syz-executor/16666: [ 391.096047][ T31] #0: ffff888033b20ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 391.120787][ T31] #1: ffff888033b200c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 391.150764][ T31] #2: ffffffff8f484308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 391.160986][ T31] #3: ffff888026d21338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 391.200147][ T31] #4: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 391.222073][ T31] 1 lock held by syz.1.3152/17487: [ 391.227361][ T31] 1 lock held by syz.6.3192/17635: [ 391.260158][ T31] #0: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 391.280877][ T31] 5 locks held by syz.2.3195/17648: [ 391.286499][ T31] 4 locks held by syz.2.3195/17650: [ 391.302370][ T31] [ 391.304770][ T31] ============================================= [ 391.304770][ T31] [ 391.330259][ T31] NMI backtrace for cpu 0 [ 391.330284][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.330305][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.330318][ T31] Call Trace: [ 391.330325][ T31] [ 391.330334][ T31] dump_stack_lvl+0xe8/0x150 [ 391.330365][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 391.330393][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.330425][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 391.330455][ T31] sys_info+0x135/0x170 [ 391.330477][ T31] watchdog+0xf95/0xfe0 [ 391.330509][ T31] ? watchdog+0x20a/0xfe0 [ 391.330544][ T31] kthread+0x711/0x8a0 [ 391.330573][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.330599][ T31] ? __pfx_kthread+0x10/0x10 [ 391.330627][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.330657][ T31] ? __pfx_kthread+0x10/0x10 [ 391.330683][ T31] ret_from_fork+0x510/0xa50 [ 391.330705][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.330721][ T31] ? __switch_to+0xc9e/0x1480 [ 391.330753][ T31] ? __pfx_kthread+0x10/0x10 [ 391.330777][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.330821][ T31] [ 391.330830][ T31] Sending NMI from CPU 0 to CPUs 1: [ 391.467922][ C1] NMI backtrace for cpu 1 [ 391.468022][ C1] CPU: 1 UID: 0 PID: 17487 Comm: syz.1.3152 Not tainted syzkaller #0 PREEMPT(full) [ 391.468048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.468065][ C1] RIP: 0010:clear_page_erms+0xb/0x20 [ 391.468090][ C1] Code: 48 8d 7f 40 75 d9 90 e9 13 52 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 391.468104][ C1] RSP: 0018:ffffc90002f67630 EFLAGS: 00010246 [ 391.468120][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000001000 [ 391.468131][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880502e0000 [ 391.468142][ C1] RBP: 1ffffffff1b34ea6 R08: ffffffff8f822c77 R09: 0000000000000000 [ 391.468153][ C1] R10: ffffed100a05c000 R11: fffffbfff1f0458f R12: fffa8000502e0000 [ 391.468165][ C1] R13: fffa800000000000 R14: 1ffffffff1b34ea4 R15: 0000000000000001 [ 391.468177][ C1] FS: 00007f950ca366c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 391.468252][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.468268][ C1] CR2: 00007fe7f655fe9c CR3: 000000004c4c8000 CR4: 00000000003526f0 [ 391.468286][ C1] Call Trace: [ 391.468296][ C1] [ 391.468303][ C1] post_alloc_hook+0x1ba/0x290 [ 391.468327][ C1] get_page_from_freelist+0x24e0/0x2580 [ 391.468351][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 391.468378][ C1] ? prepare_alloc_pages+0x22b/0x650 [ 391.468399][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 391.468419][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.468445][ C1] alloc_pages_bulk_noprof+0x560/0x710 [ 391.468470][ C1] __kasan_populate_vmalloc+0xc1/0x1d0 [ 391.468489][ C1] alloc_vmap_area+0xdc4/0x14e0 [ 391.468521][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 391.468542][ C1] ? __kmalloc_cache_node_noprof+0x475/0x700 [ 391.468559][ C1] ? __get_vm_area_node+0x13f/0x300 [ 391.468581][ C1] ? arena_map_alloc+0x256/0x520 [ 391.468605][ C1] __get_vm_area_node+0x1f8/0x300 [ 391.468630][ C1] get_vm_area+0x80/0xb0 [ 391.468651][ C1] ? arena_map_alloc+0x256/0x520 [ 391.468668][ C1] arena_map_alloc+0x256/0x520 [ 391.468690][ C1] map_create+0xafd/0x16a0 [ 391.468712][ C1] ? security_bpf+0x7e/0x300 [ 391.468730][ C1] __sys_bpf+0x5f0/0x860 [ 391.468751][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 391.468780][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 391.468798][ C1] ? rcu_is_watching+0x15/0xb0 [ 391.468821][ C1] __x64_sys_bpf+0x7c/0x90 [ 391.468840][ C1] do_syscall_64+0xec/0xf80 [ 391.468856][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.468871][ C1] ? trace_irq_disable+0x37/0x100 [ 391.468890][ C1] ? clear_bhb_loop+0x60/0xb0 [ 391.468908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.468923][ C1] RIP: 0033:0x7f950bb8f749 [ 391.468939][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.468952][ C1] RSP: 002b:00007f950ca36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.468970][ C1] RAX: ffffffffffffffda RBX: 00007f950bde5fa0 RCX: 00007f950bb8f749 [ 391.468982][ C1] RDX: 0000000000000050 RSI: 0000200000003940 RDI: 0000000000000000 [ 391.468993][ C1] RBP: 00007f950bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.469003][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.469013][ C1] R13: 00007f950bde6038 R14: 00007f950bde5fa0 R15: 00007ffdeda98ca8 [ 391.469034][ C1] [ 391.847459][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 391.854590][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.863987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.874454][ T31] Call Trace: [ 391.877761][ T31] [ 391.880712][ T31] vpanic+0x1e0/0x670 [ 391.884904][ T31] panic+0xb9/0xc0 [ 391.889206][ T31] ? __pfx_panic+0x10/0x10 [ 391.893985][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 391.899633][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 391.906188][ T31] watchdog+0xfdf/0xfe0 [ 391.910852][ T31] ? watchdog+0x20a/0xfe0 [ 391.915210][ T31] kthread+0x711/0x8a0 [ 391.919296][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.924047][ T31] ? __pfx_kthread+0x10/0x10 [ 391.928782][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.934275][ T31] ? __pfx_kthread+0x10/0x10 [ 391.938890][ T31] ret_from_fork+0x510/0xa50 [ 391.943511][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.948790][ T31] ? __switch_to+0xc9e/0x1480 [ 391.953768][ T31] ? __pfx_kthread+0x10/0x10 [ 391.958403][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.963289][ T31] [ 391.966837][ T31] Kernel Offset: disabled [ 391.971194][ T31] Rebooting in 86400 seconds..