last executing test programs: 31.239534723s ago: executing program 4 (id=1403): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x37}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835e010000000000000002000000fd00fe030000000008000400", @ANYRES32=r7, @ANYBLOB="84ee0700ffdfffff"], 0x2c}, 0x1, 0xffffff7f}, 0x84) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460028060000000000000000000000000000000000fe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a04090eb807800001312f78c5aaea555008d4434df8d965c0f700000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0x52f, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x9, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7f6}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0xd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x54) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdffffff0000aa0000023800", @ANYRES32=r10, @ANYBLOB="140003007665746830000000000000000000000008000100ac141402"], 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r12, &(0x7f0000000140)="24000000010006", 0x7) 30.675294052s ago: executing program 2 (id=1410): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000140)={@multicast2, @remote, 0x0, "9a499f26308324156bb55b474c49a230e71981f9a82f670459af1dcef1ce29c8", 0x8, 0x7, 0x4, 0x10}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001", @ANYRES64=r4, @ANYRESOCT], 0xb0}}, 0x0) 30.590005924s ago: executing program 4 (id=1411): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="050009000000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="c2ad5a0aaf26"], 0x28}}, 0x24000800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="fdb88d33a3872f28a1", @ANYRES16=r0, @ANYBLOB="000828bd7000fedbdf251d0000000c0099000b00000045000000"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0xc090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000340)=0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x110c2300fe) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/17, 0x11}, 0x7}], 0x1, 0x100, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 30.275920267s ago: executing program 2 (id=1415): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x9}, [@CTA_EXPECT_HELP_NAME={0xffffffffffffffeb, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet(0x2, 0xa, 0xd3) getpeername$l2tp(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e928f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40}, {0x0, 0x0, 0x0, 0x0, 0xe2}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 30.190296295s ago: executing program 1 (id=1418): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x8, 'macvtap0\x00', {'syzkaller1\x00'}, 0x3}) pread64(r1, &(0x7f00000000c0)=""/244, 0xf4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000074030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800020040000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0x2b, &(0x7f0000000200)="a4b7cd3104159c8515e996b691ab3ba677480d5d6d405a222e3b1b3db67286e43443d0f2ea8f66584b1d27"}) 30.014291435s ago: executing program 2 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000380)=r4) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x3, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000400)={"1f7951f5355ddf451067a392a0b81169", r3, r7, {0xfffffffffffffffa, 0x1c7}, {0x6, 0x2}, 0x9, [0x7, 0x8001, 0x401, 0x2, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x1, 0xc8, 0x3, 0x3, 0xb, 0x9, 0x8]}) 29.947288275s ago: executing program 1 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe0001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000002200000000000007b4b6cb9d08d15bbc4c2d92b5bf888ce84279a828b1a351ecc51734a27909b38392c850035ae5471839098aa0adba4e9430eb66d984cbb4042dae436f6bdb50db617d2c1818e3d1e29868de69077ea75485d8b413d0abbad1abe6fc2072e8263b3c555ca9310fae5e875b7b34945c624ec8d5bb6469f981d31a4a079c9f35353992d51d0eda3b0b532a000000000000b25aa7ffacad18b3e6da82b68f1f2763aee4321478", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'gre0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r5, r3}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003007379000000000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf95, 0x5b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048850}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="1011935784800000140003006e65746465f673696d30000000000000140014007866726d30000000000000000000000018001680140001801000020000000000ff0c00007e000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) 29.878663677s ago: executing program 3 (id=1424): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xf}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x80000000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9c95}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xc}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1411, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x30}, 0x10800) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0xf04, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x52d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x900000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf4, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44}, 0x4000) (async) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000740)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x460, 0x9, 0xa, 0x500, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x208, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1f8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xb0, 0x3, "0855f0c6a68c49b49688514d57c7a4f6f40a8afa6b952ae850f72b4f5d2aae365947c1e81337fe0bd6321cc5b19cc088c2858107748b370d09d73b51d6d8e7b630635553aa270142f826af6841b5be1eddbf53aae7f6e05862521f0fd6c7fdd31c17875541b9fbc717c3a0217c9810ec662cff7f5c6103ca2fe86357fe9850083d59224a7dd5d39f59a1cb1d2ef4d83172da8e51309134c619ad5e497e843d6bc18de47e99c1b29f8ecc747e"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TOS\x00'}, @NFTA_TARGET_INFO={0x6f, 0x3, "433b4879aeda200ba8fff9fa7f1790675af70b23d8f539cfad7ed2d10b621dd35712d80bdcde6abf6a84c58fe834cb26787ac090b46ba665c88739d2d16e128a0fd8018037415fc503f7f534f29b1626602ada52e2edb62ecb50addda32e470b5dea92acd88ae3ef259acc"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xc, 0x3, "3b804f07e6d490bd"}, @NFTA_TARGET_INFO={0x9d, 0x3, "e07b5a6ff31b1fa84beb8e4ac6fa0bc9eee7927a672af5417141a12f5ebce45282e47a01a1110e3ce3c398350b5957d747ffb7ed0bb53b8cb0c23472349092af778c4b3448e321a7b211c25ff80cebb08ed0327976856a99f5c55de7269cb1408f368a2131fd96640fd333991e996d7508da41b7d9b56b7c63f841bdb46fd8ec2a0110c45c1d0acb31687227124f5da8790a8b9c4c439ab5f2"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x44}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7aefdacd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffbf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf661}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffe00000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x6e, 0x8, "05ae09fb848fb59b076e7019611441a1cce1d07fe6ed780f3a6760d21717da53998ac87ff41c82f49c71e15e10f940e864ea8d2d9d58a2cd630a61bf84c35d756755870a2bddd3542c373180d912d08c2ec74cbbf95082ff7c3afcfdb20d2c40698ea622405c04704759"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x7, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2ec, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'nr0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1b8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x574}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x154, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0x69}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa7c}, 0x1, 0x0, 0x0, 0x20080000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000012c0)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "402b3009310ebd"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000022c0)={r4, 0x6}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000003300)={@rand_addr, @dev, 0x0}, &(0x7f0000003340)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)=@deltclass={0x34, 0x29, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0x4}, {0x1, 0xe}, {0xffe0, 0xd}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000864}, 0x8000) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000003540)={&(0x7f0000003440), 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x74, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_COMMENT={0xe, 0x1a, 'netdevsim\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x101}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000035c0), r0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x24, r8, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x36}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)=@getchain={0x64, 0x66, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0x8}, {0x0, 0x10}, {0xfff1, 0x3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x6036}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x9}]}, 0x64}}, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x58, r9, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "e11f010cee41ccfa6eff"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0809448aef"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x1) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000003ac0)={'team_slave_0\x00', 0x2, 0x101}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000003cc0)={@none, 0x2, 0x2, 0xfffb, 0x2, 0x4, "49b0922c9623af3222781f558bd724e5ebda42f3f974e5a6a5791149e22213c7fc5fcd330ff866cc2d8194c0161a415b78277523346be2762c9339d11111114cf1df0f9abfb588b2013da55d92e6869784d1f234a927cd2f3f7b0c57b8467d8f65700f63379ccca0778fed49eb4ed2746675660f04b863b391ac0a9cb8a9f266"}) (async) sendmsg$tipc(r0, &(0x7f0000003e80)={&(0x7f0000003d80)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000003dc0)="38fe862a6ad359a40ac0276c41b2e39f98dbccbface4f08963400d76162a2b4c1200a2d02aa32c97602b069d6195f1bd038fd2de77c7c67cec0519deacf504a2756530f3c0cfc00e8ec58e4ba7d975b2c5e91b224b8d", 0x56}], 0x1, 0x0, 0x0, 0x8000008}, 0x1840) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000003f00)=0x0, &(0x7f0000003f40)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000004040)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x70, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x48090) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004100)={0x88, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000042) 29.775163931s ago: executing program 1 (id=1425): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000280)=0x9, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf25080000001400018008000100", @ANYRES32=r2, @ANYBLOB="0800030002000008"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf25080000001400018008000100", @ANYRES32=r2, @ANYBLOB="0800030002000008"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) vmsplice(r7, &(0x7f00000006c0)=[{&(0x7f0000000f40)="a1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2000000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040085) 29.595104382s ago: executing program 3 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x72}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x880, 0xfff7]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="0700000000000000000000000000018000008da13d27cc92b61e655ae1d3", @ANYRES32=r2, @ANYBLOB="0500180125000000080026006c090000080027000300000008009f00000000000800a1000400000008002201a102000008009f00000000000800a000fdffffff05001901040000000800570003000000080057000500000008005700060000000800a000030000000800570008000000"], 0x8c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x20000008) 29.593647353s ago: executing program 1 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc14000706000000000000000005001500080000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000080000001c001280090001007866726d000000000c000280080002000300000008000a00", @ANYRES32=r1, @ANYBLOB="f1af768cbf0be7ac1ffd474a7ef15902a56deead2eb29b7d8aada0359a3357f81234aa000f332d05f514b91551d141dbc015b64168af948ecf595d8333ce47525cbb0689001a85897084b0292d70796d7ec7b12f4625e5c2d97ebaf8c1eb9675b9ad10d3c38b275dca49384c446610c011ee6fd5067aaa64280464a866196245bfb21c9e110be3ddc6c5fd45f2ce89c65a88d1e58eb3fbf2274856225687648414162a0c0e90e687fad7ece507a038c6848354c0eebde5d6bf7b44dd455f85c3e0cd4a"], 0x44}, 0x1, 0x0, 0x0, 0x402c081}, 0x8000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@ld}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) read(r5, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f00000003c0)={0x5, 0xfffffffffffff5be, 0x3, 0x7, 0x3, [0x0, 0x5, 0x3e22baad, 0x9]}) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000a189c2fd00", @ANYRES16=r9, @ANYBLOB="040025bd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8091) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000380)=0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900, 0x9}}) setsockopt$inet6_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "170c7e1ef7f89f3a", "4192cab0a15c16973ba45e2eeb72e608", "6465e9bb", "e84c9d4f03ae70f7"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) 29.590877728s ago: executing program 2 (id=1428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000208000440000000140900010073797a30000000000900020073797a320000000000000000000000000a"], 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) 29.53585102s ago: executing program 4 (id=1429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 29.528557614s ago: executing program 0 (id=1430): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @eol, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 29.505039634s ago: executing program 2 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r2, 0x400004) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 29.315225207s ago: executing program 0 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, @in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@ldst={0x3, 0x2, 0x3, 0x4, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000180)=0xfffffffffffffeb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000003c0)=0xfffffe69) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r6], 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={r6, 0x54e5, 0xd0e6}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x7ff}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f0000000440)={0x11, 0x4, 0x0, 0x1, 0x5}, 0x14) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000680)=r9, 0x4) sendmsg$inet(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a001460680000014001280150001006272696467650300000002800a000100aaaaaaaaaaaa00002b6154db1cc2a828e0a329b4b0ff2ae0ccab66201679"], 0x40}}, 0x20000000) 29.115282098s ago: executing program 3 (id=1433): r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4714751d0c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000000414b655ed4e5041cb6b0870010028bd708bca5e5a3f"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000003, 0x28011, r4, 0x16dfc000) mmap(&(0x7f0000698000/0x3000)=nil, 0x3000, 0x0, 0x50, r5, 0xfffff000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x300000f, 0x12, r2, 0x73f56000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='afs_folio_dirty\x00', r6, 0x0, 0x2}, 0x26) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0xffff, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000f14200025bd7000fddbdf25080001000000000008272e680c8c224aa400010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x4004001) bind$packet(r8, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) 29.091668837s ago: executing program 4 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000000009100"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 28.826736635s ago: executing program 0 (id=1435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x5d) r2 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket(0x27, 0x80000, 0xd2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = accept4$tipc(r4, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) sendmmsg$inet(r6, &(0x7f0000001140)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="9315c52d7b984d3256fbad99c454d74f42ee1e2a75d5bf5d143c4c3de273bd8c485a5d54e57bcf", 0x27}, {&(0x7f0000000340)="70d5ff804af8e43fb3b1a49c4751ce29aadb6bdd627270969bd97329c07a94dc81b568cef7cd4f80e7c75669de065b8276d3e60cd652ec83ae0d23bece6f3537f2105649ad89e18d147440bae6236d038a81605034ca9dad1cf04a8da79e6a7bc07e8ddd39", 0x65}, {&(0x7f00000003c0)="08b0e6772dcf5a58f3e8d6cfeb64147d94b9d3ade446c391291a2dda252045253e0ba07e1b72bb83b889594a8aaf44b4e39c38fb29a51b27e3cb9497866802e50cb1650cf1ea20103d1d3a", 0x4b}, {&(0x7f00000002c0)="f06301e2fb3a008ad3e1565f24e5afa6a84945fe825ba39b9230e263d80afe32a034b0b9be562271327c0ab6363539d29763ac15cdebc5eac3f797", 0x3b}], 0x4, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @generic={0x94, 0x11, "e2319ed1dc4baa0e1afb9eee1fa912"}, @noop, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x1, [{@remote, 0xd}]}, @lsrr={0x83, 0xf, 0x8c, [@remote, @multicast1, @loopback]}, @lsrr={0x83, 0x1f, 0x89, [@loopback, @empty, @loopback, @multicast2, @multicast1, @local, @private=0xa010101]}, @noop, @ssrr={0x89, 0x7, 0x28, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x3b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @rr={0x7, 0x23, 0x78, [@broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, @empty]}, @timestamp={0x44, 0x20, 0xa8, 0x0, 0xa, [0x400, 0x9, 0xffff, 0x8, 0x4, 0x8, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="56549e4e20a035668a7f11ca2c255f6ce754288d779820f6411267dcfa79453674d485b34205501b292eeca825f870606f3b9593ec2076a4bfb12d36235facdaa29148227f7b0e4e2c2c88d7ad051b094bffa74fbe162fc0fd11286338d35b7dae50de156ecf73be12f6823701ecb28c9c6ca5d2d1458616d911a2d15c6185a9130788402f8bf5b6ef982c040a84c926b532bceae744cb5aff37a7ead344ffde279183bc7d15bc5cfff4a5fc9390d9304bad6616a25418b358355913a988c39aa04ceb3eacf7a7df23bc", 0xca}, {&(0x7f0000000700)="d7dfe0a8ea2809b27fd478c6e153b44b97ce9475b97dbbae3486f87187384c5c1acaf772339504", 0x27}], 0x2, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="ab7317bde9a4f679d3cda8b2e6d68330132a50d9a4ea72da2d1a7ae62d92dbd5b437cd26e06422e2f790d30d85098059d7e46d3b8509ab9aa84ccef8312747a28a3e10054c7c9a446423f25ad29fbb", 0x4f}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000900)="4d96c0a6980b93f17a589e7fbc5cb23a49e5ec7c", 0x14}, {&(0x7f0000000940)="3a416be45c5288a6d7b97274e88921f65942d00783e225826111409f189fb80161127ed7735993203e89916c61f4bf3108dbac74ed5a9bed49d1b404cc779d70d7e06f6c251bf0d427cadf0479d403fd9fd58cfaca67070ed29caaecd7784f700907a9f93d1de5ff88df498713fa2d4bb2a1c4cb96e70b46e017dde93d915f2bc8b795effab2721292f5abb00e270789e936483b3d960f1b80e80a7b85ef79984ea6cc2830da", 0xa6}, {&(0x7f0000000a00)="1ebcb1d7ef6d19d4778107f42022416d34b6c0717cc5847b77d0fed14e2d653af173a222967f48e8d8f0c8901616a8c0a4d00b46835f1653871d5ca0a60631c491d4cfdf8733051d5503b1a98eecba4c84ae06fb3c2bf8b4681e1850adf27f12e623887ec5824521498f9711e42935abf2c3bd738fd8df0d8902ce19ab455d56bd8fefeff7b527d1d5d190cef591940cf0162ed907c790768ef186858f2bf84ecf7bc80b55b8ccfbcd965e04521ffa58f0f1953635beeb416a2f8c327151da52d27ad17e5a34cc85c663a9ede3197990620f95357a10cfa0ca541c01f0fbb4cfa4b17e3629cf0c226f97b8ac9dfc99ea72d5549b3630ba09", 0xf8}, {&(0x7f0000000b00)="1d904a5bb24f7d7f3403aa27cdd49f", 0xf}, {&(0x7f0000000b40)="27d26fc2152ee46cf4d645e84032a3afb2eb87ba6c81a274f8f7ea96a507346f16c0fdb9ab3edb736ecff45cf0aeb1340d8f7c8e4d83f21d0690297ed8f6008a18e15fdf0cbbfd716309b955222a910db1ceb2dc57bb8c04bd85cf99d55a9d5a588d285eb41cb9a60d", 0x69}, {&(0x7f0000000bc0)="5994e38e7e6e99cfe41d90124b4006271741f850f691fcb1c7916fb20fb90f594f73d46449a5e1a3b1bcc6e49bb90bcf2d7142e142664134bcf729d1fcf30d67b2f2b18cf8f7b3ca64d91e582c182d1272b36e57f4b2ec92719371365b96df04", 0x60}, {&(0x7f0000000c40)="810357", 0x3}, {&(0x7f0000000c80)="7189f4ab19ab4c3f41769cdd458684a87ef5d39aa7ec91dbbcd39c712363c9774f289e34cf8f95b97976259e1df85d3b55f88373b42e77cddc5b9569afb2b949292912b8a67709b3d61aaef6920264a4aa12029fc0ae7f86a0b9a681a9b5a86aba65e2fc58053d982e44c14f8e788609d2726bb65536f6a609d177df11ff1b90e3ab6a8b37803b5c164ab34f1e03689dc838528938fca097a6a9cbbf927f9b01d7b239eff5fec028eaaafa373f126adb2aa0f0299fc82483b7e7fe82ba22d181a718a3b82d0f130af901c11e952a", 0xce}, {&(0x7f0000000d80)="f9f2dc4f212ae77d1e3561544c65bc3abdac171d3c9dfec3d7dbc2a4e97688d869f73739a130e18b5eb4b54a6f7b81618a265e2c6bb0946ccc951510481951a778508421a89dd3c5d1a2952c14024db3d4aea0967482f0e00ff396c914555eae84e689763abf21ebebc700f1f0722eb9af2d50f97a9221bbc0740ef911c14e7ea33ae25871cc26b4c61563c636b4e3dad3e20ec2304638333eb53f6b1b8bfc05f0959c0516b54cb5be8f1d02dd", 0xad}, {&(0x7f0000000e40)="d61d928329d6345673f84a4ed3144a754fa040d120c06d00c6fd9fd7d96fe93f3d304974cfa2a8cb16bf8bbc4c2ad9dd4a2108e352ef6fda1eb889b3cd", 0x3d}], 0xa}}, {{&(0x7f0000000f40)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000f80)="06b390d071814b36b2b677ace8f68485d876c389b3018175e1cad1e77e9631e25156495c74ce9418eab5373e61b871d9db5446b1fc370cf1149ae06d86bb2469d0153af7b4f9d6188c130a90f1d50e16a71408d760d0fa7685d0a1aefd2775a16c08ea4a94782f7d06b0feb788ac729042df7aec8461069ff00bc32ffd1869243cc3cc111ce033d7734e548da5b10e9c51a45aea4ade33d8ae6d89", 0x9b}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000001040)="0c9707bbfba121c8dfa847f49e7be0f80bac21a58ed03b621fc44eb3f0372dc3cda17966b6059ba456c922d49f35d31c1e43042d2e478e41669094aade683f075f3ba3c04c9178e1c2c919cdec9aabe8c2397b12ef349f71a2f7b5a45ab7adcf5574", 0x62}, {&(0x7f00000010c0)="846fff664a5f6d4121c129708a738016060fc061fed5ce5910f78e2796a99af6224f3124618233170932de084eb22116", 0x30}], 0x4}}], 0x5, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xd, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x10}, {0x1, 0x9}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x4) 28.825333687s ago: executing program 3 (id=1436): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b15f07c2bc736574b5a87e1bf0df00b8f4a7c0aeb848d8af1b87025bbf0f73464e099bf2fbc2350b89a9a17d36f41b3cef4b7e46e96d6aea14b751b0eb3172445a1c7cd20e1889a61ab84e6b474f6b25819a329ded90b9db98656b06764ba7dc19321ef6b3bd5cd03718459a237e99c873334d2eb5fdfbec6809f2895a0da9710bad444fd7c4dfe95d22292c4759cec0d8363fed8bd3b205ef5bc9c5d5309ee6d8b53072dd34eb3e45c0085eb36548e17b7ffda102f1cbe196fe91fb8cb62ede20a807158d7f47f87736d47abd3f720b91560596014ed037820cb2afdc53fb050fae48864eb088f704ac3196350386071dc485b9adfcc880", 0xf8}], 0x1, 0x5) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) close(r3) r4 = socket$inet6(0xa, 0x800, 0x4804) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000001284cf44959ca3fd53581c243b919708b08e83b104a33a2a2e9d0ca7c60768d1b17f97893f32c59b70815a9424f628d909bff4d69c835f4ca03ed232a0362c6394e6d8a870202a72a1019e898a8da7371e3ba5b8fe479b65c87bd2f218a6e17e9cecedc8fd42414dd6f0c130b1785e4b235d5e044af85883821932d7c10272312913bd75621ab7b99e5b37c14dc49b7d299c440c3f03dccee9fe23872559e358b113586ea7c7bbfb5a037887392cf66ec62dbee5183f41ccfe12098b320d346a63f58655ce92d2196207827d838073a302bd8fcefd36b49ca81bb3e24438fc56a3382da40038e98ed7abe0b46eb12426a3f4854ec1e9bfaaf85401a0cf6a6b323c479533fe13c1ac90a5b926df2f0eee2079b381132a9d8cb46aaa9c00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000300)={r7, 0x1}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000300)={r7, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7, 0x5}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0008003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08001400e0000001"], 0x2c}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="5800000014001923fc834b80040d8c5620067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080cefffff88287da26daf0f", 0x58}], 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x20) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x3c, "5b9621dada30016bea1d82727a024c58975fecdd9567065b1ed8ecc563eb6f531bb889ecb958af4cf86780951b3bcb40a1af125752f696bd3d738261"}) 28.318370748s ago: executing program 2 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r5 = socket(0x21, 0xa, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50001900234a90c8c3886d000000003100000000a2b79cb2744b4e9801fda0905b09c543010fb8eb7bae3a80686e90ce5fced7b325c5ea382890c2a59f145bd997cfa453bf9d4f85e338ce07a994b56604a7c38626cab510112cd41255acc17c8a79e7184b7b2d178e6ddcadfed4a9fa46b7732729177e6578254bf34606ab0a4b2ce5b0e836bcc8df96518bf25e7f1c84cab846f218715526bf09b49a69bf331791485c5f714427c2e73426a0aca37416c0ccd0b2626e6bc432be4d3f5b8cabb66da65684ef3a8a89da42add5e18fb5964cfdda065198c9c3ad0bab47b98f1ea818c6a2b131d7405b82f6f8c421dafb02d2f4a2fded55b1", @ANYRES32=r9, @ANYBLOB="83040500000000003000128008000100677265002400028008000600ac1414bb06000e00020000000500160001000000060010004e210000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x80c0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 28.224626681s ago: executing program 1 (id=1438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) syz_emit_ethernet(0xa9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x3, 0x2, [0x1cd, 0x8db, 0x653, 0xf14]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000002) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}], {0x14}}, 0x9c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) close(r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4110000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x48}}, 0x4000010) 28.173747609s ago: executing program 0 (id=1439): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x700, 0x8, 0x1000, 0x5, {{0x3c, 0x4, 0x1, 0x1d, 0xf0, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x14, 0xb3, 0x0, 0x2, [0x1ff, 0x7, 0x53f55b36, 0x5]}, @rr={0x7, 0x1b, 0x5f, [@local, @rand_addr=0x64010102, @remote, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0xc, "cc252f3ccd7fedcd301c"}, {0x7, 0x8, "da73062cadf9"}]}, @cipso={0x86, 0xa, 0x1, [{0x5, 0x4, "d10d"}]}, @cipso={0x86, 0x24, 0x1, [{0x7, 0xc, "b6cc660820f218ba7a25"}, {0x7, 0xc, "29ad09db5e32c095b613"}, {0x0, 0x6, "4fbbe5bc"}]}, @lsrr={0x83, 0x3, 0x72}, @noop, @rr={0x7, 0x1b, 0x59, [@dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010101, @local, @remote, @local, @remote]}, @ssrr={0x89, 0x27, 0x31, [@broadcast, @local, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @remote]}, @ssrr={0x89, 0x1f, 0x6e, [@empty, @private=0xa010100, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe, 0x0, 0x1}, 0x10}, 0x94) 28.0180901s ago: executing program 4 (id=1440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xfeda, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000) 28.017173245s ago: executing program 3 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000208000440000000140900010073797a30000000000900020073797a320000000000000000000000000a"], 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) 28.014811773s ago: executing program 0 (id=1442): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x10}]}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x0) 27.884820745s ago: executing program 0 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf, 0x8}}]}]}]}, 0x48}}, 0x800) 27.877567894s ago: executing program 3 (id=1444): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r7, 0x0, 0x0) connect$rose(r7, 0x0, 0x0) recvfrom$ax25(r7, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 27.779169744s ago: executing program 4 (id=1445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xfffffffc}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@int=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xe00, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001001000010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x64}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xc, @mcast1, 0x7}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x54}}, 0x40001) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000440006803c00040067636d8142d0a8831b286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000000e19816361ac0195ba77c8493e54bdaa7bdbb8d9e14a5175148c97910cde53af917420c598449b196ab029a7af568ec6f7442040884a59a4b65fd8a002752c2c391b50072fa96bead1a9e14e0216dff58461f6b60891995962e7c38c66c6090", @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r11, 0x890c, &(0x7f00000005c0)={@null, 0x4}) 20.094133605s ago: executing program 1 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.171203775s ago: executing program 32 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r5 = socket(0x21, 0xa, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50001900234a90c8c3886d000000003100000000a2b79cb2744b4e9801fda0905b09c543010fb8eb7bae3a80686e90ce5fced7b325c5ea382890c2a59f145bd997cfa453bf9d4f85e338ce07a994b56604a7c38626cab510112cd41255acc17c8a79e7184b7b2d178e6ddcadfed4a9fa46b7732729177e6578254bf34606ab0a4b2ce5b0e836bcc8df96518bf25e7f1c84cab846f218715526bf09b49a69bf331791485c5f714427c2e73426a0aca37416c0ccd0b2626e6bc432be4d3f5b8cabb66da65684ef3a8a89da42add5e18fb5964cfdda065198c9c3ad0bab47b98f1ea818c6a2b131d7405b82f6f8c421dafb02d2f4a2fded55b1", @ANYRES32=r9, @ANYBLOB="83040500000000003000128008000100677265002400028008000600ac1414bb06000e00020000000500160001000000060010004e210000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x80c0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6.77947941s ago: executing program 33 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf, 0x8}}]}]}]}, 0x48}}, 0x800) 4.199738631s ago: executing program 34 (id=1444): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r7, 0x0, 0x0) connect$rose(r7, 0x0, 0x0) recvfrom$ax25(r7, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 2.179475044s ago: executing program 35 (id=1445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xfffffffc}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@int=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xe00, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001001000010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x64}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xc, @mcast1, 0x7}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x54}}, 0x40001) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000440006803c00040067636d8142d0a8831b286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000000e19816361ac0195ba77c8493e54bdaa7bdbb8d9e14a5175148c97910cde53af917420c598449b196ab029a7af568ec6f7442040884a59a4b65fd8a002752c2c391b50072fa96bead1a9e14e0216dff58461f6b60891995962e7c38c66c6090", @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r11, 0x890c, &(0x7f00000005c0)={@null, 0x4}) 0s ago: executing program 36 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): g new IBSS network, BSSID 50:50:50:50:50:50 [ 96.520083][ T5869] veth0_macvtap: entered promiscuous mode [ 96.539899][ T5869] veth1_macvtap: entered promiscuous mode [ 96.550400][ T5864] veth1_vlan: entered promiscuous mode [ 96.560824][ T4618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.570034][ T4618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.638825][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.656440][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.684141][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.738291][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.740928][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.790270][ T4618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.809300][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.819443][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.828653][ T4618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.860642][ T5864] veth0_macvtap: entered promiscuous mode [ 96.875024][ T5870] veth0_vlan: entered promiscuous mode [ 96.889877][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.904820][ T5864] veth1_macvtap: entered promiscuous mode [ 96.949081][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008789][ T5870] veth1_vlan: entered promiscuous mode [ 97.060801][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.153237][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.218607][ T5870] veth0_macvtap: entered promiscuous mode [ 97.239115][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.253417][ T9] cfg80211: failed to load regulatory.db [ 97.268741][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.343743][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357304][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398377][ T5870] veth1_macvtap: entered promiscuous mode [ 97.449870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.471842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.630685][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.648928][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.682145][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 97.703990][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.777549][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.828085][ T4618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.862156][ T4618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.885934][ T4618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.895305][ T5863] Bluetooth: hci0: command tx timeout [ 97.911435][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.919302][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.962208][ T5863] Bluetooth: hci1: command tx timeout [ 98.009409][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.042219][ T5863] Bluetooth: hci2: command tx timeout [ 98.043859][ T5183] Bluetooth: hci3: command tx timeout [ 98.047685][ T5863] Bluetooth: hci4: command tx timeout [ 98.087233][ T4618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187187][ T2130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.217642][ T2130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.580509][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.610210][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.671030][ T6014] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 98.833064][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.861266][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.885472][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 98.944558][ T6024] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 98.952961][ T6022] vlan0: entered promiscuous mode [ 99.362884][ T6036] tipc: Enabling of bearer rejected, failed to enable media [ 99.468405][ T6029] tipc: Enabling of bearer rejected, failed to enable media [ 99.540487][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 99.635557][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 99.677250][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 99.704502][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 99.791983][ T6051] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 99.853343][ T6051] syzkaller1: entered promiscuous mode [ 99.858875][ T6051] syzkaller1: entered allmulticast mode [ 99.929041][ T6051] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 100.338188][ T6080] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 100.635696][ T6087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 100.679856][ T6046] infiniband syz2: set active [ 100.702044][ T5980] dummy0 speed is unknown, defaulting to 1000 [ 100.712270][ T6046] infiniband syz2: added dummy0 [ 100.732677][ T6046] syz2: rxe_create_cq: returned err = -12 [ 100.738894][ T6046] infiniband syz2: Couldn't create ib_mad CQ [ 100.748892][ T6092] netlink: 7 bytes leftover after parsing attributes in process `syz.0.27'. [ 100.824632][ T6046] infiniband syz2: Couldn't open port 1 [ 100.988883][ T6046] RDS/IB: syz2: added [ 101.028431][ T6046] smc: adding ib device syz2 with port count 1 [ 101.043134][ T6103] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 101.054341][ T6046] smc: ib device syz2 port 1 has no pnetid [ 101.078631][ T5953] dummy0 speed is unknown, defaulting to 1000 [ 101.103816][ T6103] netlink: 'syz.3.30': attribute type 7 has an invalid length. [ 101.123475][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 101.287962][ T6107] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 101.585121][ T6123] Zero length message leads to an empty skb [ 101.793452][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 101.958520][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.047446][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 102.221401][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 102.605006][ T6143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.39'. [ 102.638457][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 102.838262][ T6137] dummy0 speed is unknown, defaulting to 1000 [ 103.078978][ T6153] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.44'. [ 103.106852][ T6153] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 103.116487][ T6153] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.126624][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 103.591862][ T6167] openvswitch: netlink: Flow key attribute not present in set flow. [ 103.633249][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.850444][ T6176] netlink: 184 bytes leftover after parsing attributes in process `syz.2.51'. [ 104.080997][ T6046] dummy0 speed is unknown, defaulting to 1000 [ 104.323059][ T6192] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.56'. [ 104.335259][ T6192] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 104.343847][ T6192] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 104.460960][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 104.483289][ T6194] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 104.500621][ T6194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.58'. [ 104.932914][ T6203] dummy0 speed is unknown, defaulting to 1000 [ 105.405986][ T6212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.718910][ T6212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.923801][ T6212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.052038][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 106.093596][ T6212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.371036][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.66'. [ 106.489025][ T2130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.498886][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 106.510111][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.595778][ T4618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.626806][ T4618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.648174][ T4618] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.680686][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 106.763808][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 106.953229][ T6246] nftables ruleset with unbound chain [ 107.172737][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 107.377595][ T6270] netlink: 'syz.0.79': attribute type 13 has an invalid length. [ 107.425691][ T6268] xfrm0: entered promiscuous mode [ 107.443079][ T6270] netlink: 'syz.0.79': attribute type 17 has an invalid length. [ 107.459867][ T6268] xfrm0: entered allmulticast mode [ 107.539620][ T6274] netlink: 'syz.1.82': attribute type 23 has an invalid length. [ 107.832997][ T6270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.098011][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.100646][ T6275] dummy0 speed is unknown, defaulting to 1000 [ 108.214655][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.726594][ T6310] dummy0 speed is unknown, defaulting to 1000 [ 108.939745][ T6321] tipc: Started in network mode [ 108.944872][ T6321] tipc: Node identity dad087ff6454, cluster identity 4711 [ 108.952610][ T6321] tipc: Enabled bearer , priority 0 [ 108.960582][ T6319] syzkaller0: entered promiscuous mode [ 108.966405][ T6319] syzkaller0: entered allmulticast mode [ 108.993730][ T6322] tipc: Resetting bearer [ 109.009321][ T6318] tipc: Resetting bearer [ 109.064728][ T6318] tipc: Disabling bearer [ 109.376634][ T6326] __nla_validate_parse: 11 callbacks suppressed [ 109.376654][ T6326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.96'. [ 110.092217][ T6341] dummy0 speed is unknown, defaulting to 1000 [ 110.098945][ T6349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.293645][ T6357] netlink: 64 bytes leftover after parsing attributes in process `syz.0.102'. [ 110.309583][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 110.330959][ T6357] veth0: entered promiscuous mode [ 110.351576][ T6357] vlan2: entered promiscuous mode [ 110.454317][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 110.689202][ T6372] netlink: 3 bytes leftover after parsing attributes in process `syz.1.107'. [ 110.729884][ T6372] batadv1: entered promiscuous mode [ 110.755399][ T6372] batadv1: entered allmulticast mode [ 110.902376][ T6382] netlink: 'syz.0.110': attribute type 12 has an invalid length. [ 110.981492][ T6387] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 111.003272][ T6386] IPVS: stopping backup sync thread 6387 ... [ 111.218105][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 111.453352][ T6404] Bluetooth: MGMT ver 1.23 [ 111.465010][ T6402] warning: `syz.3.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.042580][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 112.227129][ T6406] dummy0 speed is unknown, defaulting to 1000 [ 112.340196][ T6428] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 112.381671][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 112.411496][ T6428] dummy0: entered promiscuous mode [ 112.474965][ T6428] bridge0: port 3(dummy0) entered blocking state [ 112.497726][ T6428] bridge0: port 3(dummy0) entered disabled state [ 112.542004][ T6428] dummy0: entered allmulticast mode [ 112.563796][ T6428] bridge0: port 3(dummy0) entered blocking state [ 112.570509][ T6428] bridge0: port 3(dummy0) entered forwarding state [ 112.579669][ T5929] dummy0 speed is unknown, defaulting to 1000 [ 112.594230][ T10] dummy0 speed is unknown, defaulting to 1000 [ 112.657022][ T6431] tipc: Started in network mode [ 112.669822][ T6431] tipc: Node identity a6f490ce3d8a, cluster identity 4711 [ 112.682234][ T6431] tipc: Enabled bearer , priority 0 [ 112.702276][ T6431] syzkaller0: entered promiscuous mode [ 112.707810][ T6431] syzkaller0: entered allmulticast mode [ 112.720207][ T6430] tipc: Enabling of bearer rejected, already enabled [ 112.764472][ T6436] netlink: 'syz.1.122': attribute type 13 has an invalid length. [ 112.772483][ T6436] netlink: 'syz.1.122': attribute type 17 has an invalid length. [ 112.806683][ T6429] tipc: Resetting bearer [ 112.817356][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 112.868946][ T6429] tipc: Disabling bearer [ 112.876430][ T6442] netlink: 'syz.4.123': attribute type 4 has an invalid length. [ 112.982810][ T6447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.153510][ T6441] dummy0 speed is unknown, defaulting to 1000 [ 113.694106][ T6461] syz.4.128 (6461) used greatest stack depth: 16088 bytes left [ 113.975962][ T6480] dummy0 speed is unknown, defaulting to 1000 [ 114.126462][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 114.517327][ T6498] IPVS: nq: FWM 3 0x00000003 - no destination available [ 114.551899][ T5980] IPVS: starting estimator thread 0... [ 114.676709][ T6499] IPVS: using max 24 ests per chain, 57600 per kthread [ 115.078450][ T6506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 115.116924][ T6506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.443981][ T6518] netlink: 'syz.3.143': attribute type 13 has an invalid length. [ 115.479959][ T6518] netlink: 'syz.3.143': attribute type 17 has an invalid length. [ 115.636911][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.665516][ T6518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.119567][ T6531] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 116.128111][ T6531] netlink: 140 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.139450][ T6531] netlink: 96 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.239444][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 116.300186][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 116.392498][ T6543] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 116.402721][ T6539] dummy0 speed is unknown, defaulting to 1000 [ 116.983552][ T6556] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.152'. [ 117.086618][ T6559] wg1: entered promiscuous mode [ 117.104937][ T6559] wg1: entered allmulticast mode [ 117.375794][ T6563] siw: device registration error -23 [ 117.443606][ T6563] smc: removing ib device syz2 [ 117.558814][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 117.945196][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 118.198343][ T6593] bridge0: port 3(erspan0) entered blocking state [ 118.298316][ T6593] bridge0: port 3(erspan0) entered disabled state [ 118.382115][ T6593] erspan0: entered allmulticast mode [ 118.437965][ T6593] erspan0: entered promiscuous mode [ 118.482568][ T6593] bridge0: port 3(erspan0) entered blocking state [ 118.489391][ T6593] bridge0: port 3(erspan0) entered forwarding state [ 118.504148][ T6597] erspan0: left allmulticast mode [ 118.509245][ T6597] erspan0: left promiscuous mode [ 118.574706][ T6597] bridge0: port 3(erspan0) entered disabled state [ 118.645468][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.163'. [ 119.442050][ T6620] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 119.458330][ T6620] syzkaller1: linktype set to 6 [ 119.474262][ T6622] C: renamed from lo (while UP) [ 119.495592][ T6622] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 119.756601][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 119.828572][ T6628] geneve2: entered promiscuous mode [ 120.090671][ T6637] block nbd0: server does not support multiple connections per device. [ 120.115110][ T6637] block nbd0: shutting down sockets [ 120.372885][ T6640] __nla_validate_parse: 1 callbacks suppressed [ 120.372906][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 120.744265][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 120.753735][ T6667] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 120.838861][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 120.860918][ T6670] vlan1: entered allmulticast mode [ 120.872296][ T6670] veth0_vlan: entered allmulticast mode [ 121.280018][ T6678] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.965526][ T6711] batman_adv: batadv0: Adding interface: dummy0 [ 121.973242][ T6711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.001365][ T6711] batman_adv: batadv0: Interface activated: dummy0 [ 122.035365][ T6678] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.108797][ T6705] batadv0: mtu less than device minimum [ 122.116908][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.129182][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.141241][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.153239][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.165270][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.177295][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.189327][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.201465][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.213461][ T6705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 122.383764][ T6678] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.463711][ T6727] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.193'. [ 122.574692][ T6678] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.588522][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 122.598309][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 122.641013][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.196'. [ 122.708299][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.718086][ T6735] bridge0: port 3(bond1) entered blocking state [ 122.725835][ T6735] bridge0: port 3(bond1) entered disabled state [ 122.733879][ T6735] bond1: entered allmulticast mode [ 122.742092][ T6735] bond1: entered promiscuous mode [ 122.749160][ T6735] bridge0: port 3(bond1) entered blocking state [ 122.755813][ T6735] bridge0: port 3(bond1) entered forwarding state [ 122.766431][ T6741] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.990718][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 123.237733][ T201] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.248788][ T201] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.264423][ T6767] netlink: 136 bytes leftover after parsing attributes in process `syz.2.200'. [ 123.636287][ T201] bridge0: port 3(bond1) entered disabled state [ 123.647257][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.724322][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.246845][ T6800] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 124.558042][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.613519][ T6794] bond0: (slave bond1): Enslaving as an active interface with an up link [ 124.626213][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.209'. [ 124.735583][ T6823] tipc: Started in network mode [ 124.740522][ T6823] tipc: Node identity 0a003bf94e51, cluster identity 4711 [ 124.769043][ T6823] tipc: Enabled bearer , priority 0 [ 124.814943][ T6816] syzkaller0: entered promiscuous mode [ 124.836567][ T6816] syzkaller0: entered allmulticast mode [ 124.869457][ T6816] tipc: Resetting bearer [ 124.940141][ T6813] tipc: Resetting bearer [ 124.962134][ T6813] tipc: Disabling bearer [ 125.503044][ T6863] __nla_validate_parse: 1 callbacks suppressed [ 125.503063][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 125.749009][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.225'. [ 125.768085][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 126.872052][ T6923] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 126.991920][ T6923] k›*·: entered promiscuous mode [ 127.052821][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 127.199322][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 127.239453][ T6930] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 127.396755][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'. [ 127.424728][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 127.439365][ T6940] sctp: [Deprecated]: syz.0.241 (pid 6940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.439365][ T6940] Use struct sctp_sack_info instead [ 127.516748][ T6943] Bluetooth: MGMT ver 1.23 [ 127.672855][ T6951] netlink: 200 bytes leftover after parsing attributes in process `syz.1.243'. [ 127.701695][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 127.722084][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 127.931695][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.247'. [ 128.165793][ T6973] bond2: entered promiscuous mode [ 128.173140][ T6973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.206172][ T6978] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 128.275480][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.291497][ T6972] bridge0: port 3(bond1) entered blocking state [ 128.298145][ T6972] bridge0: port 3(bond1) entered disabled state [ 128.305140][ T6972] bond1: entered allmulticast mode [ 128.313516][ T6972] bond1: entered promiscuous mode [ 128.320399][ T6972] bridge0: port 3(bond1) entered blocking state [ 128.326897][ T6972] bridge0: port 3(bond1) entered forwarding state [ 128.534733][ T6990] tipc: Enabled bearer , priority 0 [ 128.542879][ T6990] syzkaller0: entered promiscuous mode [ 128.548405][ T6990] syzkaller0: entered allmulticast mode [ 128.571959][ T6990] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.622140][ T6990] tipc: Resetting bearer [ 128.638316][ T5929] IPVS: starting estimator thread 0... [ 128.749799][ T6997] IPVS: using max 23 ests per chain, 55200 per kthread [ 128.816346][ T6989] tipc: Resetting bearer [ 128.897924][ T6989] tipc: Disabling bearer [ 129.151689][ T3540] bridge0: port 3(bond1) entered disabled state [ 129.172943][ T7010] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 129.317037][ T7010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.476624][ T7009] delete_channel: no stack [ 129.674473][ T7019] net_ratelimit: 11 callbacks suppressed [ 129.674497][ T7019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 129.708703][ T7023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.441419][ T5863] block nbd0: Receive control failed (result -32) [ 130.664561][ T7071] __nla_validate_parse: 8 callbacks suppressed [ 130.664583][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.699495][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 130.711238][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.720398][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.730264][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.745159][ T7071] netlink: 22 bytes leftover after parsing attributes in process `syz.2.275'. [ 131.214152][ T7098] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 131.286634][ T7098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.280'. [ 131.330200][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 131.841105][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.287'. [ 131.892433][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 132.767595][ T7176] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 132.815011][ T7176] batman_adv: batadv0: Interface deactivated: dummy0 [ 132.835903][ T7176] batman_adv: batadv0: Removing interface: dummy0 [ 132.876192][ T7176] bridge_slave_0: left allmulticast mode [ 132.896518][ T7176] bridge_slave_0: left promiscuous mode [ 132.913277][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.952952][ T7176] bridge_slave_1: left allmulticast mode [ 132.976379][ T7176] bridge_slave_1: left promiscuous mode [ 132.995800][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.028208][ T7191] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 133.058232][ T7176] bond0: (slave bond_slave_0): Releasing backup interface [ 133.086798][ T7176] bond0: (slave bond_slave_1): Releasing backup interface [ 133.107945][ T7176] team0: Port device team_slave_0 removed [ 133.120993][ T7176] team0: Port device team_slave_1 removed [ 133.134790][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.145628][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.158916][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.170048][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.187380][ T7176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.217649][ T7191] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 133.677024][ T7217] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 133.751084][ T7217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.444133][ T7288] netlink: 'syz.1.317': attribute type 3 has an invalid length. [ 135.452708][ T7289] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 135.491118][ T7289] syz_tun: entered allmulticast mode [ 135.529841][ T43] IPVS: starting estimator thread 0... [ 135.582589][ T7294] unsupported nlmsg_type 40 [ 135.651471][ T7292] IPVS: using max 29 ests per chain, 69600 per kthread [ 135.963119][ T7303] erspan0: entered promiscuous mode [ 136.034411][ T7303] erspan0: left promiscuous mode [ 136.070669][ T7314] __nla_validate_parse: 10 callbacks suppressed [ 136.070690][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 136.250124][ T7317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 136.295138][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 136.423332][ T7313] netlink: 248 bytes leftover after parsing attributes in process `syz.4.324'. [ 136.664304][ T7328] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.330'. [ 136.688302][ T7328] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 136.721444][ T7328] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 136.746034][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 136.772839][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 136.783386][ T7341] veth1: entered promiscuous mode [ 136.842759][ T7341] netlink: 'syz.2.332': attribute type 8 has an invalid length. [ 136.896404][ T7341] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 136.963172][ T7349] pim6reg: entered allmulticast mode [ 137.001789][ T7341] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 137.086461][ T7353] pim6reg: left allmulticast mode [ 137.198856][ T7357] netlink: 'syz.3.334': attribute type 10 has an invalid length. [ 137.271709][ T7357] veth0_vlan: left promiscuous mode [ 137.279534][ T7357] veth0_vlan: entered promiscuous mode [ 137.289168][ T7357] team0: Device veth0_vlan failed to register rx_handler [ 137.610384][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 137.858462][ T7379] syzkaller1: entered promiscuous mode [ 137.869153][ T7379] syzkaller1: entered allmulticast mode [ 137.984972][ T7389] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 138.104422][ T7394] netlink: 3 bytes leftover after parsing attributes in process `syz.0.344'. [ 138.138160][ T7394] batadv1: entered promiscuous mode [ 138.146121][ T7394] batadv1: entered allmulticast mode [ 138.206199][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.215460][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.525284][ T7408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.347'. [ 138.866254][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 138.892788][ T7452] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 139.005020][ T5953] IPVS: starting estimator thread 0... [ 139.016164][ T7458] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 139.030022][ T7457] netlink: 'syz.4.352': attribute type 16 has an invalid length. [ 139.057358][ T7458] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 139.101577][ T7460] IPVS: using max 25 ests per chain, 60000 per kthread [ 139.453963][ T7473] ip6gre1: entered allmulticast mode [ 139.620215][ T7486] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 139.849942][ T7498] netlink: 'syz.1.364': attribute type 30 has an invalid length. [ 140.853124][ T7536] team_slave_0: entered promiscuous mode [ 140.859327][ T7536] team_slave_1: entered promiscuous mode [ 140.882250][ T7536] macsec1: entered promiscuous mode [ 140.892500][ T7536] team0: entered promiscuous mode [ 141.093780][ T7554] __nla_validate_parse: 9 callbacks suppressed [ 141.093800][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 141.643507][ T7582] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 141.807615][ T7591] tipc: Enabled bearer , priority 10 [ 141.916804][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.959769][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 142.022687][ T7595] netlink: 'syz.3.391': attribute type 20 has an invalid length. [ 142.246651][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.726244][ T7652] syzkaller1: entered promiscuous mode [ 142.750262][ T7652] syzkaller1: entered allmulticast mode [ 142.930644][ T7665] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 142.949567][ T10] tipc: Node number set to 3196356607 [ 142.987209][ T7665] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 143.001721][ T7658] !: renamed from dummy0 (while UP) [ 143.208554][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 143.242519][ T7685] netlink: 'syz.1.414': attribute type 3 has an invalid length. [ 143.250302][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.414'. [ 143.261802][ T7680] netlink: 'syz.3.412': attribute type 30 has an invalid length. [ 143.299186][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.411'. [ 143.312680][ T7685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.342847][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 143.352426][ T7680] netlink: 'syz.3.412': attribute type 30 has an invalid length. [ 143.423469][ T7689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 143.457313][ T7689] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.484550][ T7447] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.500479][ T7447] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.526156][ T7447] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.569435][ T7447] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.865888][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'. [ 143.999062][ T7720] netlink: 'syz.0.420': attribute type 9 has an invalid length. [ 144.039159][ T7720] netlink: 'syz.0.420': attribute type 7 has an invalid length. [ 144.109491][ T7720] netlink: 'syz.0.420': attribute type 8 has an invalid length. [ 144.334646][ T7732] tipc: Enabling of bearer rejected, failed to enable media [ 145.687829][ T7798] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 146.945225][ T7852] __nla_validate_parse: 7 callbacks suppressed [ 146.945246][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 146.963430][ T7865] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.454'. [ 147.008103][ T7850] syz.0.450: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.094397][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.0.450 Not tainted syzkaller #0 PREEMPT(full) [ 147.094427][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.094467][ T7850] Call Trace: [ 147.094476][ T7850] [ 147.094486][ T7850] dump_stack_lvl+0x189/0x250 [ 147.094526][ T7850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.094553][ T7850] ? __pfx__printk+0x10/0x10 [ 147.094584][ T7850] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.094610][ T7850] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.094638][ T7850] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 147.094668][ T7850] warn_alloc+0x214/0x310 [ 147.094709][ T7850] ? __pfx_warn_alloc+0x10/0x10 [ 147.094753][ T7850] ? __get_vm_area_node+0x28f/0x300 [ 147.094803][ T7850] ? hash_ipportip_create+0x358/0xfe0 [ 147.094838][ T7850] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 147.094869][ T7850] ? do_syscall_64+0xfa/0x3b0 [ 147.094930][ T7850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.094969][ T7850] ? rcu_is_watching+0x15/0xb0 [ 147.094993][ T7850] ? hash_ipportip_create+0x358/0xfe0 [ 147.095022][ T7850] ? hash_ipportip_create+0x358/0xfe0 [ 147.095049][ T7850] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 147.095086][ T7850] ? hash_ipportip_create+0x358/0xfe0 [ 147.095116][ T7850] ? hash_ipportip_create+0x2fe/0xfe0 [ 147.095151][ T7850] hash_ipportip_create+0x358/0xfe0 [ 147.095190][ T7850] ? __nla_parse+0x40/0x60 [ 147.095214][ T7850] ? __pfx_hash_ipportip_create+0x10/0x10 [ 147.095246][ T7850] ip_set_create+0xa94/0x1940 [ 147.095268][ T7850] ? ip_set_create+0x4a2/0x1940 [ 147.095301][ T7850] ? __pfx_ip_set_create+0x10/0x10 [ 147.095363][ T7850] nfnetlink_rcv_msg+0xb4d/0x1130 [ 147.095387][ T7850] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 147.095431][ T7850] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.095451][ T7850] ? kasan_save_free_info+0x46/0x50 [ 147.095530][ T7850] netlink_rcv_skb+0x208/0x470 [ 147.095558][ T7850] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.095583][ T7850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.095622][ T7850] ? bpf_lsm_capable+0x9/0x20 [ 147.095651][ T7850] ? security_capable+0x7e/0x2e0 [ 147.095693][ T7850] nfnetlink_rcv+0x26a/0x2520 [ 147.095720][ T7850] ? __dev_queue_xmit+0x1d79/0x3b50 [ 147.095764][ T7850] ? __dev_queue_xmit+0x27b/0x3b50 [ 147.095817][ T7850] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.095839][ T7850] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.095887][ T7850] ? ref_tracker_free+0x63a/0x7d0 [ 147.095909][ T7850] ? __asan_memcpy+0x40/0x70 [ 147.095933][ T7850] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.095973][ T7850] ? skb_clone+0x246/0x3a0 [ 147.096007][ T7850] ? __netlink_deliver_tap+0x807/0x850 [ 147.096033][ T7850] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.096067][ T7850] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.096102][ T7850] netlink_unicast+0x82c/0x9e0 [ 147.096135][ T7850] ? __pfx_netlink_unicast+0x10/0x10 [ 147.096160][ T7850] ? netlink_sendmsg+0x642/0xb30 [ 147.096184][ T7850] ? skb_put+0x11b/0x210 [ 147.096216][ T7850] netlink_sendmsg+0x805/0xb30 [ 147.096253][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.096284][ T7850] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.096309][ T7850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.096332][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.096360][ T7850] __sock_sendmsg+0x219/0x270 [ 147.096386][ T7850] ____sys_sendmsg+0x505/0x830 [ 147.096423][ T7850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.096464][ T7850] ? import_iovec+0x74/0xa0 [ 147.096497][ T7850] ___sys_sendmsg+0x21f/0x2a0 [ 147.096530][ T7850] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.096602][ T7850] ? __fget_files+0x2a/0x420 [ 147.096621][ T7850] ? __fget_files+0x3a0/0x420 [ 147.096652][ T7850] __x64_sys_sendmsg+0x19b/0x260 [ 147.096686][ T7850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.096729][ T7850] ? rcu_is_watching+0x15/0xb0 [ 147.096757][ T7850] ? do_syscall_64+0xbe/0x3b0 [ 147.096800][ T7850] do_syscall_64+0xfa/0x3b0 [ 147.096825][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.096850][ T7850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.096872][ T7850] ? clear_bhb_loop+0x60/0xb0 [ 147.096898][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.096919][ T7850] RIP: 0033:0x7f741538eba9 [ 147.096945][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.096963][ T7850] RSP: 002b:00007f7416183038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.096985][ T7850] RAX: ffffffffffffffda RBX: 00007f74155d5fa0 RCX: 00007f741538eba9 [ 147.097001][ T7850] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 147.097014][ T7850] RBP: 00007f7415411e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.097027][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.097040][ T7850] R13: 00007f74155d6038 R14: 00007f74155d5fa0 R15: 00007ffc1dc71b28 [ 147.097074][ T7850] [ 147.574687][ T7850] Mem-Info: [ 147.577888][ T7850] active_anon:3764 inactive_anon:0 isolated_anon:0 [ 147.577888][ T7850] active_file:3151 inactive_file:39881 isolated_file:0 [ 147.577888][ T7850] unevictable:768 dirty:192 writeback:0 [ 147.577888][ T7850] slab_reclaimable:11418 slab_unreclaimable:149265 [ 147.577888][ T7850] mapped:30030 shmem:1356 pagetables:940 [ 147.577888][ T7850] sec_pagetables:0 bounce:0 [ 147.577888][ T7850] kernel_misc_reclaimable:0 [ 147.577888][ T7850] free:1279342 free_pcp:14598 free_cma:0 [ 147.623274][ T7850] Node 0 active_anon:14980kB inactive_anon:0kB active_file:12604kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120160kB dirty:768kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12628kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.655356][ T7850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.685353][ T7850] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.714778][ T7850] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 147.720595][ T7850] Node 0 DMA32 free:1209132kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15032kB inactive_anon:0kB active_file:12604kB inactive_file:157752kB unevictable:1536kB writepending:768kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:42256kB local_pcp:21600kB free_cma:0kB [ 147.753388][ T7850] lowmem_reserve[]: 0 0 1 1 1 [ 147.758166][ T7850] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 147.787415][ T7850] lowmem_reserve[]: 0 0 0 0 0 [ 147.792652][ T7850] Node 1 Normal free:3892864kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15872kB local_pcp:6240kB free_cma:0kB [ 147.824642][ T7850] lowmem_reserve[]: 0 0 0 0 0 [ 147.829427][ T7850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.842726][ T7850] Node 0 DMA32: 2022*4kB (UM) 485*8kB (UME) 146*16kB (UME) 122*32kB (UME) 81*64kB (UM) 64*128kB (UM) 44*256kB (UME) 20*512kB (UM) 9*1024kB (UM) 6*2048kB (UME) 277*4096kB (UM) = 1209184kB [ 147.861632][ T7850] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 147.875733][ T7850] Node 1 Normal: 194*4kB (UME) 55*8kB (UME) 30*16kB (UME) 105*32kB (UME) 19*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3892864kB [ 147.894540][ T7850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.905018][ T7850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.916868][ T7850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.927047][ T7850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.936699][ T7850] 44385 total pagecache pages [ 147.941568][ T7850] 0 pages in swap cache [ 147.945759][ T7850] Free swap = 124996kB [ 147.949941][ T7850] Total swap = 124996kB [ 147.954285][ T7850] 2097051 pages RAM [ 147.958125][ T7850] 0 pages HighMem/MovableOnly [ 147.963180][ T7850] 425679 pages reserved [ 147.967467][ T7850] 0 pages cma reserved [ 148.015029][ T7874] netlink: 'syz.3.457': attribute type 10 has an invalid length. [ 148.054616][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.095945][ T7874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.160119][ T7874] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 148.309558][ T7897] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 148.325788][ T7897] netlink: 224 bytes leftover after parsing attributes in process `syz.4.461'. [ 148.415730][ T7874] can: request_module (can-proto-5) failed. [ 148.819706][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 148.960099][ T7911] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.468'. [ 149.199423][ T7924] netlink: 22 bytes leftover after parsing attributes in process `syz.2.471'. [ 149.326667][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 149.609469][ T7938] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 149.618633][ T7938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.475'. [ 150.003753][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 150.046015][ T7943] netlink: zone id is out of range [ 150.051680][ T7949] veth0: entered promiscuous mode [ 150.076119][ T7943] netlink: zone id is out of range [ 150.092322][ T7943] netlink: zone id is out of range [ 150.128955][ T7943] netlink: zone id is out of range [ 150.146942][ T7947] netlink: del zone limit has 4 unknown bytes [ 150.185301][ T7943] netlink: zone id is out of range [ 150.190531][ T7943] netlink: zone id is out of range [ 150.206391][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.245351][ T7943] netlink: zone id is out of range [ 150.250534][ T7943] netlink: zone id is out of range [ 150.294916][ T7951] veth0 (unregistering): left promiscuous mode [ 150.503665][ T7958] IPVS: length: 8 != 235018839336 [ 151.228596][ T7989] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 151.644098][ T8000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.494'. [ 152.233319][ T7994] veth0: entered promiscuous mode [ 152.256780][ T7993] veth0: left promiscuous mode [ 153.221183][ T8063] __nla_validate_parse: 3 callbacks suppressed [ 153.221204][ T8063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.511'. [ 153.239967][ T8066] netlink: 8928 bytes leftover after parsing attributes in process `syz.1.510'. [ 153.750000][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 154.625128][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.518'. [ 155.265498][ T8068] bridge_slave_0: left allmulticast mode [ 155.271748][ T8068] bridge_slave_0: left promiscuous mode [ 155.277641][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.311247][ T8068] bridge_slave_1: left allmulticast mode [ 155.317798][ T8068] bridge_slave_1: left promiscuous mode [ 155.327043][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.340043][ T8068] bond0: (slave bond_slave_0): Releasing backup interface [ 155.358678][ T8068] bond0: (slave bond_slave_1): Releasing backup interface [ 155.370132][ T8068] team_slave_0: left promiscuous mode [ 155.385079][ T8068] team0: Port device team_slave_0 removed [ 155.397618][ T8068] team_slave_1: left promiscuous mode [ 155.415629][ T8068] team0: Port device team_slave_1 removed [ 155.424901][ T8068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.433457][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.442639][ T8068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.450208][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.460471][ T8068] net_ratelimit: 8 callbacks suppressed [ 155.460485][ T8068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.520976][ T8097] netlink: 'syz.1.518': attribute type 5 has an invalid length. [ 155.542104][ T8103] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 155.720453][ T8112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.522'. [ 155.792755][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 156.186353][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 156.369620][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 156.379806][ T8139] netlink: 'syz.1.529': attribute type 8 has an invalid length. [ 156.447734][ T8146] netlink: 112 bytes leftover after parsing attributes in process `syz.4.530'. [ 156.662654][ T8132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.693786][ T8132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.721087][ T8132] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 156.745211][ T8132] bond0 (unregistering): Released all slaves [ 156.839101][ T8149] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 157.109501][ T8158] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 157.127544][ T8158] netlink: 212 bytes leftover after parsing attributes in process `syz.3.532'. [ 157.145694][ T8158] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 157.208863][ T8158] ip6gretap0: entered promiscuous mode [ 157.262174][ T8158] syz_tun: entered promiscuous mode [ 157.305580][ T8161] netlink: zone id is out of range [ 157.317650][ T8161] netlink: zone id is out of range [ 157.349665][ T8161] netlink: zone id is out of range [ 157.379376][ T8161] netlink: zone id is out of range [ 157.395920][ T8161] netlink: zone id is out of range [ 157.401134][ T8161] netlink: zone id is out of range [ 157.414634][ T8161] netlink: zone id is out of range [ 157.420068][ T8161] netlink: zone id is out of range [ 157.438015][ T8161] netlink: zone id is out of range [ 157.903988][ T8189] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 157.951451][ T8189] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 157.975844][ T8186] netlink: 'syz.2.540': attribute type 30 has an invalid length. [ 158.014338][ T8186] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 158.053257][ T8186] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 158.327670][ T8203] tipc: Enabling of bearer rejected, failed to enable media [ 158.490077][ T8181] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 158.716069][ T8216] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 158.895811][ T8216] bond2: (slave bridge1): making interface the new active one [ 158.911009][ T8216] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 159.098083][ T8218] can: request_module (can-proto-4) failed. [ 159.406772][ T8249] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 159.435508][ T8249] __nla_validate_parse: 4 callbacks suppressed [ 159.435528][ T8249] netlink: 224 bytes leftover after parsing attributes in process `syz.4.558'. [ 159.456707][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 159.537985][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'. [ 160.002940][ T8287] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 160.620495][ T8303] net_ratelimit: 19 callbacks suppressed [ 160.620517][ T8303] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 160.826119][ T8310] netdevsim netdevsim1: Direct firmware load for æ° failed with error -2 [ 160.878195][ T8310] netdevsim netdevsim1: Falling back to sysfs fallback for: æ° [ 161.203769][ T8330] validate_nla: 1 callbacks suppressed [ 161.203791][ T8330] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 161.234281][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 162.055754][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 162.077316][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 162.107547][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 162.118408][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 162.139170][ T8358] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 162.148158][ T8358] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 162.157192][ T8359] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 162.166020][ T8359] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 163.047418][ T8388] tipc: Enabled bearer , priority 0 [ 163.151734][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.585'. [ 163.160733][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.585'. [ 163.176862][ T8388] syzkaller0: entered promiscuous mode [ 163.198891][ T8388] syzkaller0: entered allmulticast mode [ 163.251195][ T8388] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 163.272183][ T8388] tipc: Resetting bearer [ 163.288790][ T8387] tipc: Resetting bearer [ 163.346630][ T8387] tipc: Disabling bearer [ 163.433806][ T8405] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 163.580095][ T8412] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 163.644729][ T8413] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 163.724600][ T8413] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 163.792342][ T8413] tipc: Enabling of bearer rejected, failed to enable media [ 163.929484][ T8420] Illegal XDP return value 4291312888 on prog (id 273) dev N/A, expect packet loss! [ 164.066487][ T8423] veth0: entered promiscuous mode [ 164.086461][ T8420] wg2: entered promiscuous mode [ 164.093712][ T8420] wg2: entered allmulticast mode [ 164.258106][ T8423] veth0 (unregistering): left promiscuous mode [ 164.368305][ T8436] batadv2: entered promiscuous mode [ 164.375802][ T8436] batadv2: entered allmulticast mode [ 164.622632][ T8452] __nla_validate_parse: 6 callbacks suppressed [ 164.622656][ T8452] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.602'. [ 164.655322][ T8452] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 165.099494][ T8463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.606'. [ 165.452289][ T8479] netlink: 80 bytes leftover after parsing attributes in process `syz.2.612'. [ 165.660828][ T8497] dummy0: left allmulticast mode [ 165.680670][ T8497] dummy0: left promiscuous mode [ 165.705351][ T8497] bridge0: port 3(dummy0) entered disabled state [ 165.734734][ T8497] bridge_slave_0: left allmulticast mode [ 165.756764][ T8497] bridge_slave_0: left promiscuous mode [ 165.770118][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.825587][ T8497] bridge_slave_1: left allmulticast mode [ 165.846598][ T8497] bridge_slave_1: left promiscuous mode [ 165.872624][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.910810][ T8497] bond0: (slave bond_slave_0): Releasing backup interface [ 165.948122][ T8497] bond0: (slave bond_slave_1): Releasing backup interface [ 165.982810][ T8497] team0: Port device team_slave_0 removed [ 166.002593][ T8497] team0: Port device team_slave_1 removed [ 166.010211][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.019829][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.031810][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.039587][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.059878][ T8497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.277538][ T8516] netlink: 14 bytes leftover after parsing attributes in process `syz.2.622'. [ 166.354877][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 166.376247][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 166.406461][ T8516] hsr_slave_0: left promiscuous mode [ 166.427243][ T8516] hsr_slave_1: left promiscuous mode [ 166.690960][ T8521] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.705774][ T8521] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 167.475574][ T8516] macvlan2: entered promiscuous mode [ 167.501762][ T8516] macvlan2: entered allmulticast mode [ 167.507699][ T8516] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 167.674496][ T8550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 167.732951][ T8550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 167.784170][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 168.107881][ T8570] tipc: Enabled bearer , priority 0 [ 168.116378][ T8570] syzkaller0: entered promiscuous mode [ 168.132954][ T8570] syzkaller0: entered allmulticast mode [ 168.213668][ T8575] tipc: Enabled bearer , priority 0 [ 168.222314][ T8575] syzkaller0: entered promiscuous mode [ 168.227834][ T8575] syzkaller0: entered allmulticast mode [ 168.406605][ T8573] tipc: Resetting bearer [ 168.493895][ T8573] tipc: Disabling bearer [ 168.825078][ T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 168.841105][ T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 168.862575][ T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 168.983970][ T8566] tipc: Resetting bearer [ 169.043368][ T8566] tipc: Disabling bearer [ 169.051147][ T8592] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 169.098785][ T8590] tipc: Started in network mode [ 169.104551][ T8590] tipc: Node identity 8e19f02857a1, cluster identity 16 [ 169.137602][ T8590] tipc: Enabled bearer , priority 0 [ 169.159514][ T8593] syzkaller0: entered promiscuous mode [ 169.159538][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 169.177654][ T8593] syzkaller0: entered allmulticast mode [ 169.187153][ T8592] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 169.265269][ T8593] tipc: Resetting bearer [ 169.302595][ T8589] tipc: Resetting bearer [ 169.355109][ T8589] tipc: Disabling bearer [ 169.564523][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 169.576182][ T8605] netlink: 'syz.1.648': attribute type 9 has an invalid length. [ 169.684977][ T8611] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.697890][ T8611] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 169.765653][ T8614] __nla_validate_parse: 1 callbacks suppressed [ 169.765673][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 170.042834][ T8622] netlink: 209580 bytes leftover after parsing attributes in process `syz.0.650'. [ 170.134482][ T8619] bridge2: entered allmulticast mode [ 170.199927][ T8624] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 170.477503][ T8636] netlink: 209580 bytes leftover after parsing attributes in process `syz.2.654'. [ 170.640428][ T8641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.655'. [ 171.038740][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 171.068308][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 171.099435][ T8651] tipc: Invalid UDP bearer configuration [ 171.099505][ T8651] tipc: Enabling of bearer rejected, failed to enable media [ 171.154008][ T8657] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 171.162862][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 171.252094][ T8657] team0: Port device geneve0 added [ 171.258801][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 171.275199][ T8651] bridge2: entered promiscuous mode [ 171.280652][ T8651] bridge2: entered allmulticast mode [ 171.305947][ T8660] batadv_slave_0: entered promiscuous mode [ 171.389645][ T8662] syzkaller1: entered promiscuous mode [ 171.396761][ T8662] syzkaller1: entered allmulticast mode [ 171.409749][ T8662] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 171.440683][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 171.554774][ T8658] batadv_slave_0: left promiscuous mode [ 171.676371][ T8664] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.439645][ T8688] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 172.500737][ T8688] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 172.961971][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 173.025360][ T8707] FAULT_INJECTION: forcing a failure. [ 173.025360][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.071533][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.3.674 Not tainted syzkaller #0 PREEMPT(full) [ 173.071565][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.071578][ T8707] Call Trace: [ 173.071587][ T8707] [ 173.071596][ T8707] dump_stack_lvl+0x189/0x250 [ 173.071627][ T8707] ? __pfx____ratelimit+0x10/0x10 [ 173.071652][ T8707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.071677][ T8707] ? __pfx__printk+0x10/0x10 [ 173.071707][ T8707] ? __might_fault+0xb0/0x130 [ 173.071749][ T8707] should_fail_ex+0x414/0x560 [ 173.071805][ T8707] _copy_from_iter+0x1de/0x1790 [ 173.071866][ T8707] ? __pfx__copy_from_iter+0x10/0x10 [ 173.071893][ T8707] ? __build_skb_around+0x257/0x3e0 [ 173.071922][ T8707] ? netlink_sendmsg+0x642/0xb30 [ 173.071944][ T8707] ? skb_put+0x11b/0x210 [ 173.071972][ T8707] netlink_sendmsg+0x6b2/0xb30 [ 173.072006][ T8707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.072035][ T8707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.072057][ T8707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.072079][ T8707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.072104][ T8707] __sock_sendmsg+0x219/0x270 [ 173.072128][ T8707] ____sys_sendmsg+0x505/0x830 [ 173.072163][ T8707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.072201][ T8707] ? import_iovec+0x74/0xa0 [ 173.072243][ T8707] ___sys_sendmsg+0x21f/0x2a0 [ 173.072275][ T8707] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.072342][ T8707] ? __fget_files+0x2a/0x420 [ 173.072360][ T8707] ? __fget_files+0x3a0/0x420 [ 173.072390][ T8707] __x64_sys_sendmsg+0x19b/0x260 [ 173.072422][ T8707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.072461][ T8707] ? __pfx_ksys_write+0x10/0x10 [ 173.072486][ T8707] ? rcu_is_watching+0x15/0xb0 [ 173.072512][ T8707] ? do_syscall_64+0xbe/0x3b0 [ 173.072543][ T8707] do_syscall_64+0xfa/0x3b0 [ 173.072567][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.072590][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.072611][ T8707] ? clear_bhb_loop+0x60/0xb0 [ 173.072637][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.072657][ T8707] RIP: 0033:0x7f66d4d8eba9 [ 173.072676][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.072693][ T8707] RSP: 002b:00007f66d5bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.072714][ T8707] RAX: ffffffffffffffda RBX: 00007f66d4fd5fa0 RCX: 00007f66d4d8eba9 [ 173.072729][ T8707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 173.072742][ T8707] RBP: 00007f66d5bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 173.072754][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.072766][ T8707] R13: 00007f66d4fd6038 R14: 00007f66d4fd5fa0 R15: 00007fffc51078f8 [ 173.072797][ T8707] [ 173.643950][ T8712] Bluetooth: MGMT ver 1.23 [ 174.007366][ T8734] syzkaller0: entered promiscuous mode [ 174.044831][ T8734] syzkaller0: entered allmulticast mode [ 174.152966][ T8747] FAULT_INJECTION: forcing a failure. [ 174.152966][ T8747] name failslab, interval 1, probability 0, space 0, times 1 [ 174.200858][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(full) [ 174.200895][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.200908][ T8747] Call Trace: [ 174.200917][ T8747] [ 174.200927][ T8747] dump_stack_lvl+0x189/0x250 [ 174.200959][ T8747] ? __pfx____ratelimit+0x10/0x10 [ 174.200985][ T8747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.201012][ T8747] ? __pfx__printk+0x10/0x10 [ 174.201045][ T8747] ? __lock_acquire+0xab9/0xd20 [ 174.201096][ T8747] should_fail_ex+0x414/0x560 [ 174.201136][ T8747] should_failslab+0xa8/0x100 [ 174.201171][ T8747] kmem_cache_alloc_noprof+0x73/0x3c0 [ 174.201201][ T8747] ? skb_clone+0x212/0x3a0 [ 174.201238][ T8747] skb_clone+0x212/0x3a0 [ 174.201273][ T8747] __netlink_deliver_tap+0x404/0x850 [ 174.201312][ T8747] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.201340][ T8747] netlink_deliver_tap+0x19c/0x1b0 [ 174.201366][ T8747] netlink_unicast+0x7fa/0x9e0 [ 174.201397][ T8747] ? __pfx_netlink_unicast+0x10/0x10 [ 174.201422][ T8747] ? netlink_sendmsg+0x642/0xb30 [ 174.201445][ T8747] ? skb_put+0x11b/0x210 [ 174.201477][ T8747] netlink_sendmsg+0x805/0xb30 [ 174.201513][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.201543][ T8747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.201566][ T8747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.201589][ T8747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.201616][ T8747] __sock_sendmsg+0x219/0x270 [ 174.201640][ T8747] ____sys_sendmsg+0x505/0x830 [ 174.201675][ T8747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.201713][ T8747] ? import_iovec+0x74/0xa0 [ 174.201744][ T8747] ___sys_sendmsg+0x21f/0x2a0 [ 174.201777][ T8747] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.201849][ T8747] ? __fget_files+0x2a/0x420 [ 174.201867][ T8747] ? __fget_files+0x3a0/0x420 [ 174.201898][ T8747] __x64_sys_sendmsg+0x19b/0x260 [ 174.201931][ T8747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.201973][ T8747] ? __pfx_ksys_write+0x10/0x10 [ 174.201998][ T8747] ? rcu_is_watching+0x15/0xb0 [ 174.202025][ T8747] ? do_syscall_64+0xbe/0x3b0 [ 174.202056][ T8747] do_syscall_64+0xfa/0x3b0 [ 174.202093][ T8747] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.202117][ T8747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.202139][ T8747] ? clear_bhb_loop+0x60/0xb0 [ 174.202164][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.202185][ T8747] RIP: 0033:0x7f3c75f8eba9 [ 174.202205][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.202222][ T8747] RSP: 002b:00007f3c76ee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.202244][ T8747] RAX: ffffffffffffffda RBX: 00007f3c761d5fa0 RCX: 00007f3c75f8eba9 [ 174.202259][ T8747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.202272][ T8747] RBP: 00007f3c76ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 174.202285][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.202297][ T8747] R13: 00007f3c761d6038 R14: 00007f3c761d5fa0 R15: 00007ffd2e437358 [ 174.202332][ T8747] [ 174.695864][ T8753] tipc: Enabling of bearer rejected, failed to enable media [ 174.772092][ T8761] __nla_validate_parse: 5 callbacks suppressed [ 174.772118][ T8761] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.689'. [ 174.806921][ T8755] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.689'. [ 174.836971][ T8766] tipc: Enabled bearer , priority 0 [ 174.846287][ T8766] syzkaller0: entered promiscuous mode [ 174.852695][ T8766] syzkaller0: entered allmulticast mode [ 174.975392][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 175.089852][ T8776] tipc: Resetting bearer [ 175.135171][ T8763] tipc: Resetting bearer [ 175.178947][ T8763] tipc: Disabling bearer [ 175.246328][ T8782] netlink: 108 bytes leftover after parsing attributes in process `syz.1.698'. [ 175.262248][ T8786] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 175.287266][ T8788] FAULT_INJECTION: forcing a failure. [ 175.287266][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 175.306570][ T8786] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 175.315783][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(full) [ 175.315813][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.315826][ T8788] Call Trace: [ 175.315835][ T8788] [ 175.315843][ T8788] dump_stack_lvl+0x189/0x250 [ 175.315877][ T8788] ? __pfx____ratelimit+0x10/0x10 [ 175.315903][ T8788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.315929][ T8788] ? __pfx__printk+0x10/0x10 [ 175.315963][ T8788] ? __pfx___might_resched+0x10/0x10 [ 175.315984][ T8788] ? fs_reclaim_acquire+0x7d/0x100 [ 175.316010][ T8788] should_fail_ex+0x414/0x560 [ 175.316050][ T8788] should_failslab+0xa8/0x100 [ 175.316085][ T8788] __kmalloc_noprof+0xcb/0x4f0 [ 175.316113][ T8788] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.316155][ T8788] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 175.316198][ T8788] genl_family_rcv_msg_doit+0xb8/0x300 [ 175.316246][ T8788] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 175.316281][ T8788] ? __pfx_genl_get_cmd+0x10/0x10 [ 175.316311][ T8788] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 175.316350][ T8788] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 175.316397][ T8788] genl_rcv_msg+0x60e/0x790 [ 175.316438][ T8788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.316469][ T8788] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 175.316497][ T8788] ? __asan_memcpy+0x40/0x70 [ 175.316521][ T8788] ? __pfx_ref_tracker_free+0x10/0x10 [ 175.316552][ T8788] netlink_rcv_skb+0x208/0x470 [ 175.316575][ T8788] ? __lock_acquire+0xab9/0xd20 [ 175.316609][ T8788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.316643][ T8788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.316693][ T8788] ? down_read+0x1ad/0x2e0 [ 175.316726][ T8788] genl_rcv+0x28/0x40 [ 175.316756][ T8788] netlink_unicast+0x82c/0x9e0 [ 175.316786][ T8788] ? __pfx_netlink_unicast+0x10/0x10 [ 175.316810][ T8788] ? netlink_sendmsg+0x642/0xb30 [ 175.316832][ T8788] ? skb_put+0x11b/0x210 [ 175.316861][ T8788] netlink_sendmsg+0x805/0xb30 [ 175.316896][ T8788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.316925][ T8788] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.316948][ T8788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.316969][ T8788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.316996][ T8788] __sock_sendmsg+0x219/0x270 [ 175.317020][ T8788] ____sys_sendmsg+0x505/0x830 [ 175.317058][ T8788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.317100][ T8788] ? import_iovec+0x74/0xa0 [ 175.317134][ T8788] ___sys_sendmsg+0x21f/0x2a0 [ 175.317167][ T8788] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.317247][ T8788] ? __fget_files+0x2a/0x420 [ 175.317266][ T8788] ? __fget_files+0x3a0/0x420 [ 175.317298][ T8788] __x64_sys_sendmsg+0x19b/0x260 [ 175.317332][ T8788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.317374][ T8788] ? __pfx_ksys_write+0x10/0x10 [ 175.317402][ T8788] ? rcu_is_watching+0x15/0xb0 [ 175.317430][ T8788] ? do_syscall_64+0xbe/0x3b0 [ 175.317463][ T8788] do_syscall_64+0xfa/0x3b0 [ 175.317488][ T8788] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.317512][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.317534][ T8788] ? clear_bhb_loop+0x60/0xb0 [ 175.317561][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.317582][ T8788] RIP: 0033:0x7f6c0c38eba9 [ 175.317602][ T8788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.317620][ T8788] RSP: 002b:00007f6c0d1a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.317643][ T8788] RAX: ffffffffffffffda RBX: 00007f6c0c5d5fa0 RCX: 00007f6c0c38eba9 [ 175.317674][ T8788] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.317687][ T8788] RBP: 00007f6c0d1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.317700][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.317712][ T8788] R13: 00007f6c0c5d6038 R14: 00007f6c0c5d5fa0 R15: 00007ffc7d4c8458 [ 175.317746][ T8788] [ 175.890217][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.701'. [ 175.933362][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 176.127667][ T8800] vlan0: entered promiscuous mode [ 176.151171][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 176.152264][ T8800] vlan0: entered allmulticast mode [ 176.180611][ T8800] hsr_slave_1: entered allmulticast mode [ 176.520563][ T8802] syzkaller0: entered allmulticast mode [ 176.736044][ T8820] tipc: Enabled bearer , priority 0 [ 176.752647][ T8820] syzkaller0: entered promiscuous mode [ 176.768113][ T8820] syzkaller0: entered allmulticast mode [ 176.859916][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 176.888386][ T8833] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.010765][ T8839] ieee802154 phy0 wpan0: encryption failed: -90 [ 177.057020][ T8837] vlan2: entered allmulticast mode [ 177.064801][ T8837] batadv0: entered allmulticast mode [ 177.100322][ T8839] IPv6: sit1: Disabled Multicast RS [ 177.121818][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 177.142705][ T8839] sit1: entered allmulticast mode [ 177.489338][ T8849] bond0: (slave bond1): Releasing backup interface [ 177.517836][ T8849] bond2: (slave bridge1): Releasing active interface [ 177.697829][ T8819] tipc: Resetting bearer [ 177.743488][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 177.824052][ T8819] tipc: Disabling bearer [ 178.541467][ T8903] netlink: 'syz.1.728': attribute type 13 has an invalid length. [ 178.677712][ T8915] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 179.288369][ T8942] bridge3: entered promiscuous mode [ 179.306083][ T8940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 179.413264][ T8953] bridge4: entered promiscuous mode [ 179.799555][ T8981] Bluetooth: MGMT ver 1.23 [ 180.997519][ T9013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.187046][ T9021] __nla_validate_parse: 9 callbacks suppressed [ 181.187068][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 181.405918][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 181.448602][ T9027] batadv0: entered promiscuous mode [ 181.464441][ T9027] macsec1: entered promiscuous mode [ 181.495733][ T9027] macsec1: entered allmulticast mode [ 181.518216][ T9027] batadv0: entered allmulticast mode [ 181.584953][ T9027] batadv0: left allmulticast mode [ 181.602581][ T9027] batadv0: left promiscuous mode [ 181.832844][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 181.969511][ T9060] netlink: 92 bytes leftover after parsing attributes in process `syz.1.770'. [ 182.089927][ T9063] netlink: 'syz.2.771': attribute type 13 has an invalid length. [ 182.098334][ T9063] netlink: 'syz.2.771': attribute type 17 has an invalid length. [ 182.131027][ T9067] netlink: 676 bytes leftover after parsing attributes in process `syz.1.773'. [ 182.152480][ T9067] netlink: 676 bytes leftover after parsing attributes in process `syz.1.773'. [ 182.222946][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 182.386690][ T9063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.575645][ T9079] tipc: Enabled bearer , priority 0 [ 182.585613][ T9081] tun0: tun_chr_ioctl cmd 1074025675 [ 182.596124][ T9081] tun0: persist enabled [ 182.608569][ T9081] tun0: tun_chr_ioctl cmd 1074025675 [ 182.619290][ T9081] tun0: persist enabled [ 182.654597][ T9087] syzkaller0: entered promiscuous mode [ 182.664543][ T9087] syzkaller0: entered allmulticast mode [ 182.728122][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 183.023484][ T9097] netlink: 830 bytes leftover after parsing attributes in process `syz.1.780'. [ 183.234054][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.362548][ T9078] tipc: Resetting bearer [ 183.413792][ T9105] netlink: 'syz.3.783': attribute type 21 has an invalid length. [ 183.428347][ T9078] tipc: Disabling bearer [ 183.440836][ T9105] netlink: 'syz.3.783': attribute type 22 has an invalid length. [ 183.449883][ T9105] netlink: 'syz.3.783': attribute type 23 has an invalid length. [ 184.268873][ T9135] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.846107][ T9151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.024707][ T9158] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 185.189743][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.235996][ T9158] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.249663][ T9168] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 185.430040][ T9168] bond4: entered promiscuous mode [ 185.435844][ T9168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.859722][ T9194] tipc: Enabling of bearer rejected, failed to enable media [ 185.945451][ T9202] openvswitch: netlink: Multiple metadata blocks provided [ 185.954549][ T9202] veth1_to_bond: entered allmulticast mode [ 185.969710][ T9204] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 186.448513][ T9202] veth1_to_bond (unregistering): left allmulticast mode [ 186.681951][ T9196] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 186.906005][ T9221] netlink: 'syz.2.811': attribute type 7 has an invalid length. [ 186.918330][ T9221] netlink: 'syz.2.811': attribute type 3 has an invalid length. [ 186.932014][ T9221] __nla_validate_parse: 12 callbacks suppressed [ 186.932035][ T9221] netlink: 224 bytes leftover after parsing attributes in process `syz.2.811'. [ 187.385536][ T9242] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 187.545127][ T9245] netlink: 100 bytes leftover after parsing attributes in process `syz.2.817'. [ 187.746137][ T9249] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 187.758335][ T9248] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 188.303264][ T9267] tipc: Cannot configure node identity twice [ 188.475498][ T9275] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 188.636843][ T9275] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 189.708948][ T9316] veth3: entered promiscuous mode [ 189.875768][ T9320] tipc: Enabled bearer , priority 0 [ 189.885879][ T9320] syzkaller0: entered promiscuous mode [ 189.892913][ T9320] syzkaller0: entered allmulticast mode [ 189.929244][ T9319] tipc: Resetting bearer [ 190.002914][ T9319] tipc: Disabling bearer [ 190.518257][ T9331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.545131][ T9337] netlink: 'syz.0.841': attribute type 22 has an invalid length. [ 190.732095][ T9343] trusted_key: syz.0.844 sent an empty control message without MSG_MORE. [ 190.789370][ T9345] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 191.057543][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.849'. [ 191.116597][ T9372] netlink: 68 bytes leftover after parsing attributes in process `syz.0.852'. [ 191.126313][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 191.152611][ T9372] vlan0: entered promiscuous mode [ 191.384279][ T9384] syz_tun: entered allmulticast mode [ 191.390603][ T9384] syz_tun: left allmulticast mode [ 191.466202][ T9386] netlink: 'syz.0.857': attribute type 4 has an invalid length. [ 191.479892][ T9386] 8021q: VLANs not supported on nlmon0 [ 191.766568][ T9401] tipc: Enabled bearer , priority 0 [ 191.806883][ T9401] syzkaller0: entered promiscuous mode [ 191.819603][ T9401] syzkaller0: entered allmulticast mode [ 191.952023][ T9401] tipc: Resetting bearer [ 191.969580][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 191.979425][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 192.008030][ T9399] tipc: Resetting bearer [ 192.059675][ T9399] tipc: Disabling bearer [ 192.229688][ T9415] bond0: entered promiscuous mode [ 192.243757][ T9428] netlink: 277 bytes leftover after parsing attributes in process `syz.4.869'. [ 192.331881][ T9415] bond0: left promiscuous mode [ 192.448968][ T9432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.389706][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 193.420214][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 193.479595][ T9449] geneve3: entered promiscuous mode [ 193.497969][ T9449] geneve3: entered allmulticast mode [ 193.647538][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 193.670631][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 193.818600][ T9463] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 193.836946][ T9463] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 193.852023][ T9463] netlink: 216 bytes leftover after parsing attributes in process `syz.1.879'. [ 193.988862][ T9476] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 194.043730][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 194.259925][ T9493] netlink: 209580 bytes leftover after parsing attributes in process `syz.4.886'. [ 195.020320][ T9518] netlink: 'syz.4.892': attribute type 11 has an invalid length. [ 196.597568][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.605445][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.057636][ T9590] __nla_validate_parse: 42 callbacks suppressed [ 197.057660][ T9590] netlink: 209580 bytes leftover after parsing attributes in process `syz.1.911'. [ 197.180213][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 197.375988][ T9602] netlink: 80 bytes leftover after parsing attributes in process `syz.1.914'. [ 197.453279][ T9606] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 197.484928][ T9606] netlink: 112 bytes leftover after parsing attributes in process `syz.0.916'. [ 197.553118][ T9598] netlink: 80 bytes leftover after parsing attributes in process `syz.1.914'. [ 197.736312][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 197.851759][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 197.987749][ T9633] netlink: 209580 bytes leftover after parsing attributes in process `syz.4.924'. [ 198.058949][ T9636] syz_tun: left allmulticast mode [ 198.293477][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 198.366187][ T9648] netlink: 312 bytes leftover after parsing attributes in process `syz.3.928'. [ 198.402266][ T9656] tipc: Can't bind to reserved service type 0 [ 198.833769][ T9661] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.288351][ T9679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 199.599498][ T9689] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 199.629722][ T9689] CPU: 0 UID: 0 PID: 9689 Comm: syz.3.939 Not tainted syzkaller #0 PREEMPT(full) [ 199.629772][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.629786][ T9689] Call Trace: [ 199.629796][ T9689] [ 199.629806][ T9689] dump_stack_lvl+0x189/0x250 [ 199.629846][ T9689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.629875][ T9689] ? __pfx__printk+0x10/0x10 [ 199.629914][ T9689] ? kernfs_path_from_node+0x2f/0x290 [ 199.629941][ T9689] ? kernfs_path_from_node+0x250/0x290 [ 199.629964][ T9689] ? kernfs_path_from_node+0x2f/0x290 [ 199.629997][ T9689] sysfs_warn_dup+0x8e/0xa0 [ 199.630039][ T9689] sysfs_do_create_link_sd+0xc0/0x110 [ 199.630068][ T9689] device_add_class_symlinks+0x1cf/0x240 [ 199.630103][ T9689] device_add+0x475/0xb50 [ 199.630137][ T9689] wiphy_register+0x1c81/0x2aa0 [ 199.630188][ T9689] ? __pfx_wiphy_register+0x10/0x10 [ 199.630216][ T9689] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 199.630258][ T9689] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 199.630297][ T9689] ieee80211_register_hw+0x3442/0x40a0 [ 199.630351][ T9689] ? ieee80211_register_hw+0x13a1/0x40a0 [ 199.630398][ T9689] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 199.630437][ T9689] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.630472][ T9689] ? __hrtimer_setup+0x187/0x210 [ 199.630493][ T9689] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 199.630528][ T9689] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 199.630603][ T9689] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 199.630638][ T9689] ? trace_kmalloc+0x1f/0xd0 [ 199.630666][ T9689] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 199.630703][ T9689] ? kstrndup+0xbf/0x160 [ 199.630740][ T9689] hwsim_new_radio_nl+0xea4/0x1b10 [ 199.630780][ T9689] ? __pfx___nla_validate_parse+0x10/0x10 [ 199.630823][ T9689] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 199.630875][ T9689] ? __nla_parse+0x40/0x60 [ 199.630904][ T9689] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 199.630951][ T9689] genl_family_rcv_msg_doit+0x212/0x300 [ 199.630996][ T9689] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.631048][ T9689] ? bpf_lsm_capable+0x9/0x20 [ 199.631078][ T9689] ? security_capable+0x7e/0x2e0 [ 199.631123][ T9689] genl_rcv_msg+0x60e/0x790 [ 199.631165][ T9689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.631198][ T9689] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 199.631252][ T9689] netlink_rcv_skb+0x208/0x470 [ 199.631275][ T9689] ? __lock_acquire+0xab9/0xd20 [ 199.631308][ T9689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.631343][ T9689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.631393][ T9689] ? down_read+0x1ad/0x2e0 [ 199.631425][ T9689] genl_rcv+0x28/0x40 [ 199.631456][ T9689] netlink_unicast+0x82c/0x9e0 [ 199.631490][ T9689] ? __pfx_netlink_unicast+0x10/0x10 [ 199.631518][ T9689] ? netlink_sendmsg+0x642/0xb30 [ 199.631551][ T9689] ? skb_put+0x11b/0x210 [ 199.631585][ T9689] netlink_sendmsg+0x805/0xb30 [ 199.631626][ T9689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.631659][ T9689] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.631686][ T9689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.631710][ T9689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.631740][ T9689] __sock_sendmsg+0x219/0x270 [ 199.631768][ T9689] ____sys_sendmsg+0x505/0x830 [ 199.631807][ T9689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.631851][ T9689] ? import_iovec+0x74/0xa0 [ 199.631887][ T9689] ___sys_sendmsg+0x21f/0x2a0 [ 199.631922][ T9689] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.632000][ T9689] ? __fget_files+0x2a/0x420 [ 199.632020][ T9689] ? __fget_files+0x3a0/0x420 [ 199.632054][ T9689] __x64_sys_sendmsg+0x19b/0x260 [ 199.632089][ T9689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.632135][ T9689] ? rcu_is_watching+0x15/0xb0 [ 199.632165][ T9689] ? do_syscall_64+0xbe/0x3b0 [ 199.632199][ T9689] do_syscall_64+0xfa/0x3b0 [ 199.632224][ T9689] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.632250][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.632272][ T9689] ? clear_bhb_loop+0x60/0xb0 [ 199.632300][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.632322][ T9689] RIP: 0033:0x7f66d4d8eba9 [ 199.632362][ T9689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.632382][ T9689] RSP: 002b:00007f66d5bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.632405][ T9689] RAX: ffffffffffffffda RBX: 00007f66d4fd5fa0 RCX: 00007f66d4d8eba9 [ 199.632422][ T9689] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 199.632436][ T9689] RBP: 00007f66d4e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 199.632450][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.632464][ T9689] R13: 00007f66d4fd6038 R14: 00007f66d4fd5fa0 R15: 00007fffc51078f8 [ 199.632500][ T9689] [ 200.148181][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.158286][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.304453][ T9700] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 200.337809][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.802716][ T9723] erspan0: entered promiscuous mode [ 200.819762][ T9723] vlan0: entered promiscuous mode [ 200.867504][ T9727] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 201.336792][ T9744] blkio.reset_stats is deprecated [ 201.353342][ T9743] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 201.437948][ T9743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.085962][ T9771] __nla_validate_parse: 6 callbacks suppressed [ 202.085984][ T9771] netlink: 209580 bytes leftover after parsing attributes in process `syz.3.965'. [ 202.246371][ T7444] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.268384][ T7444] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.305328][ T7444] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.337451][ T7444] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.647460][ T9793] netlink: 184 bytes leftover after parsing attributes in process `syz.3.970'. [ 202.697457][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 203.143161][ T9801] netlink: 140 bytes leftover after parsing attributes in process `syz.1.974'. [ 203.192172][ T9801] netlink: 140 bytes leftover after parsing attributes in process `syz.1.974'. [ 203.566665][ T9805] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 203.572425][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 203.812368][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.977'. [ 203.835950][ T9815] netlink: 209580 bytes leftover after parsing attributes in process `syz.0.978'. [ 204.097524][ T9832] syz.0.980 uses old SIOCAX25GETINFO [ 204.129187][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.980'. [ 204.520289][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.987'. [ 204.546108][ T9853] vlan0: entered promiscuous mode [ 204.559438][ T9853] !: entered promiscuous mode [ 205.492669][ T9901] tipc: Started in network mode [ 205.530901][ T9901] tipc: Node identity 2a417bd926ed, cluster identity 4711 [ 205.585674][ T9901] tipc: Enabled bearer , priority 0 [ 205.607143][ T9901] syzkaller0: entered promiscuous mode [ 205.630705][ T9901] syzkaller0: entered allmulticast mode [ 206.108165][ T9890] tipc: Resetting bearer [ 206.152429][ T9890] tipc: Disabling bearer [ 206.192994][ T9929] ..0·: renamed from hsr0 (while UP) [ 206.211057][ T9929] ..0·: entered allmulticast mode [ 206.235285][ T9929] hsr_slave_0: entered allmulticast mode [ 206.267306][ T9929] hsr_slave_1: entered allmulticast mode [ 206.295616][ T9929] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 207.102450][ T7424] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.130366][ T7424] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.158107][ T9970] bond0: Caught tx_queue_len zero misconfig [ 207.173888][ T7424] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.201397][ T7424] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.268265][ T9983] netlink: 'syz.1.1024': attribute type 4 has an invalid length. [ 207.280099][ T9983] __nla_validate_parse: 6 callbacks suppressed [ 207.280119][ T9983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1024'. [ 207.300298][ T9983] wlan1: mtu less than device minimum [ 207.527221][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 207.712672][T10004] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1030'. [ 207.986659][T10018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1035'. [ 208.395685][T10029] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.440140][T10033] lo speed is unknown, defaulting to 1000 [ 208.450436][T10033] lo speed is unknown, defaulting to 1000 [ 208.484190][T10033] lo speed is unknown, defaulting to 1000 [ 208.526409][T10035] netlink: 'syz.3.1039': attribute type 12 has an invalid length. [ 208.566570][T10033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.597574][T10033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 208.716828][T10033] lo speed is unknown, defaulting to 1000 [ 208.784146][T10033] lo speed is unknown, defaulting to 1000 [ 208.850497][T10033] lo speed is unknown, defaulting to 1000 [ 209.020874][T10033] lo speed is unknown, defaulting to 1000 [ 209.078663][T10050] syzkaller0: entered promiscuous mode [ 209.100194][T10050] syzkaller0: entered allmulticast mode [ 209.121754][T10033] lo speed is unknown, defaulting to 1000 [ 209.676207][T10060] syzkaller1: entered promiscuous mode [ 209.682945][T10060] syzkaller1: entered allmulticast mode [ 209.826928][T10060] lo speed is unknown, defaulting to 1000 [ 210.172705][T10072] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20002 [ 210.902984][T10095] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 210.910778][T10095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1053'. [ 210.990125][T10099] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1055'. [ 211.393343][T10103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.605480][T10103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.767737][T10103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.944501][T10103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.963944][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 211.970091][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 211.976948][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.128034][T10144] tipc: Enabled bearer , priority 0 [ 212.237109][T10144] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 212.248492][T10151] tipc: Enabled bearer , priority 0 [ 212.257700][T10151] syzkaller0: entered promiscuous mode [ 212.264818][T10151] syzkaller0: entered allmulticast mode [ 212.283505][T10148] syzkaller0: entered promiscuous mode [ 212.290121][T10148] syzkaller0: entered allmulticast mode [ 212.366966][T10144] tipc: Resetting bearer [ 212.437201][ T7433] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.462810][T10157] tipc: Resetting bearer [ 212.479913][T10143] tipc: Resetting bearer [ 212.506163][T10143] tipc: Disabling bearer [ 212.526673][ T7433] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.548120][T10146] tipc: Resetting bearer [ 212.594349][T10146] tipc: Disabling bearer [ 212.617769][ T7433] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.629269][T10152] lo speed is unknown, defaulting to 1000 [ 212.645793][ T7433] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.077342][T10175] syzkaller0: entered promiscuous mode [ 213.101564][T10175] syzkaller0: entered allmulticast mode [ 213.287280][T10185] openvswitch: netlink: IP tunnel TTL not specified. [ 213.307081][T10185] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.736878][T10204] netlink: 'syz.0.1083': attribute type 39 has an invalid length. [ 214.387937][T10229] lo speed is unknown, defaulting to 1000 [ 214.404981][T10237] tipc: Enabled bearer , priority 0 [ 214.413513][T10237] syzkaller0: entered promiscuous mode [ 214.419043][T10237] syzkaller0: entered allmulticast mode [ 214.442776][T10244] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.1093'. [ 215.099549][T10262] netlink: 'syz.1.1098': attribute type 8 has an invalid length. [ 215.183867][T10230] tipc: Resetting bearer [ 215.287573][T10230] tipc: Disabling bearer [ 215.793701][T10277] tap0: tun_chr_ioctl cmd 35108 [ 216.200528][T10293] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 216.246867][T10290] lo speed is unknown, defaulting to 1000 [ 216.393579][T10295] xt_limit: Overflow, try lower: 604147548/4200216962 [ 216.496909][T10300] tipc: Enabled bearer , priority 0 [ 216.505380][T10300] syzkaller0: entered promiscuous mode [ 216.510919][T10300] syzkaller0: entered allmulticast mode [ 216.556416][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 216.600205][T10300] tipc: Resetting bearer [ 216.608026][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1106'. [ 216.617902][T10300] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1106'. [ 216.675842][T10299] tipc: Resetting bearer [ 216.716807][T10299] tipc: Disabling bearer [ 216.786199][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 216.803280][T10315] tipc: Enabled bearer , priority 0 [ 216.813131][T10315] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1109'. [ 216.824788][T10315] tipc: Resetting bearer [ 216.832242][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'. [ 216.869145][T10314] tipc: Disabling bearer [ 217.004585][T10313] geneve4: entered promiscuous mode [ 217.020183][T10313] geneve4: entered allmulticast mode [ 217.099955][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 217.441552][T10338] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1114'. [ 217.456044][T10338] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1114'. [ 217.985288][T10364] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 217.990889][ T9039] lo speed is unknown, defaulting to 1000 [ 218.593244][T10377] lo speed is unknown, defaulting to 1000 [ 218.729880][T10383] lo speed is unknown, defaulting to 1000 [ 218.769017][T10382] lo speed is unknown, defaulting to 1000 [ 220.105383][T10422] netlink: 'syz.1.1139': attribute type 12 has an invalid length. [ 220.323286][T10438] netlink: 'syz.1.1144': attribute type 3 has an invalid length. [ 220.339222][T10436] __nla_validate_parse: 6 callbacks suppressed [ 220.339241][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 220.361983][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'. [ 220.454247][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 220.599216][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'. [ 220.747370][T10455] lo speed is unknown, defaulting to 1000 [ 220.815835][T10459] lo: Caught tx_queue_len zero misconfig [ 220.830394][ T9042] IPVS: starting estimator thread 0... [ 220.840094][T10457] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.852441][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 220.886158][T10460] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.886535][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 220.959951][ T7424] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.979076][ T7424] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.995794][T10459] syzkaller1: entered promiscuous mode [ 221.011432][T10461] IPVS: using max 26 ests per chain, 62400 per kthread [ 221.019366][T10459] syzkaller1: entered allmulticast mode [ 221.144896][ T7424] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.181927][T10459] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1149'. [ 221.210374][T10463] batman_adv: batadv0: Adding interface: dummy0 [ 221.245323][T10463] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.291943][T10463] batman_adv: batadv0: Interface activated: dummy0 [ 221.408082][ T7424] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.775870][T10470] wireguard0: entered promiscuous mode [ 221.802738][T10470] wireguard0: entered allmulticast mode [ 222.078365][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 222.099951][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 222.163041][T10490] netlink: 'syz.4.1155': attribute type 16 has an invalid length. [ 222.176154][T10490] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1155'. [ 222.761415][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 222.963508][T10527] lo speed is unknown, defaulting to 1000 [ 222.970746][T10528] netlink: 'syz.1.1168': attribute type 13 has an invalid length. [ 222.980984][T10528] netlink: 'syz.1.1168': attribute type 17 has an invalid length. [ 223.128571][T10530] xfrm0: entered promiscuous mode [ 223.144277][T10530] xfrm0: entered allmulticast mode [ 223.286798][T10524] lo speed is unknown, defaulting to 1000 [ 223.519052][T10541] syz_tun: entered allmulticast mode [ 223.584828][T10540] dvmrp8: entered allmulticast mode [ 223.625800][T10538] syz_tun: left allmulticast mode [ 223.631016][T10538] dvmrp8: left allmulticast mode [ 223.745117][T10557] netlink: 'syz.4.1177': attribute type 7 has an invalid length. [ 223.786853][T10557] netlink: 'syz.4.1177': attribute type 7 has an invalid length. [ 223.907777][T10567] tipc: Enabled bearer , priority 0 [ 223.916649][T10567] syzkaller0: entered promiscuous mode [ 223.923028][T10567] syzkaller0: entered allmulticast mode [ 223.933897][T10567] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 223.984368][T10567] tipc: Resetting bearer [ 224.038374][T10566] tipc: Resetting bearer [ 224.098633][T10566] tipc: Disabling bearer [ 224.327058][T10582] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 224.949751][T10603] syzkaller0: tun_net_xmit 76 [ 224.971927][T10598] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 224.998201][T10603] tipc: Enabled bearer , priority 0 [ 225.082291][ C0] syzkaller0: tun_net_xmit 76 [ 225.185222][T10616] sit0: Caught tx_queue_len zero misconfig [ 225.194231][T10597] tipc: Resetting bearer [ 225.812347][T10630] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 226.043538][ T9040] tipc: Node number set to 212630489 [ 227.196624][T10597] tipc: Disabling bearer [ 227.470395][T10645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 227.559822][T10651] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 227.890734][T10666] lo speed is unknown, defaulting to 1000 [ 227.920821][T10671] __nla_validate_parse: 6 callbacks suppressed [ 227.920844][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 227.940628][T10671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1206'. [ 228.008149][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 228.318450][T10686] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1208'. [ 228.380117][T10686] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1208'. [ 228.536853][T10700] netlink: 'syz.3.1211': attribute type 13 has an invalid length. [ 228.545999][T10700] netlink: 'syz.3.1211': attribute type 17 has an invalid length. [ 228.587922][T10700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.838508][T10714] netlink: 'syz.3.1215': attribute type 6 has an invalid length. [ 228.879170][T10714] macsec1: entered promiscuous mode [ 228.889327][T10714] macsec1: entered allmulticast mode [ 228.997741][T10714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1215'. [ 229.050015][T10718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1215'. [ 229.065028][T10723] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1218'. [ 229.110966][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 229.120436][T10725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.191125][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 229.288441][T10734] netlink: 'syz.4.1221': attribute type 8 has an invalid length. [ 229.350307][T10729] bridge4: port 1(veth3) entered blocking state [ 229.381635][T10729] bridge4: port 1(veth3) entered disabled state [ 229.388213][T10729] veth3: entered allmulticast mode [ 229.429376][T10729] veth3: entered promiscuous mode [ 229.466435][T10728] vlan3: entered allmulticast mode [ 229.476805][T10728] veth1: entered allmulticast mode [ 229.494889][T10728] bridge4: port 2(vlan3) entered blocking state [ 229.502450][T10728] bridge4: port 2(vlan3) entered disabled state [ 229.527257][T10744] nbd: illegal input index 65508 [ 229.537798][T10728] vlan3: entered promiscuous mode [ 229.547485][T10728] veth1: entered promiscuous mode [ 229.828052][T10757] netlink: 'syz.0.1227': attribute type 10 has an invalid length. [ 230.342842][T10779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.474781][T10779] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 230.505381][T10779] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 230.577623][T10789] bridge_slave_0: left allmulticast mode [ 230.589027][T10789] bridge_slave_0: left promiscuous mode [ 230.608570][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.648542][T10789] bridge_slave_1: left allmulticast mode [ 230.661532][T10789] bridge_slave_1: left promiscuous mode [ 230.667771][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.690197][T10789] bond0: (slave bond_slave_0): Releasing backup interface [ 230.714113][T10789] bond0: (slave bond_slave_1): Releasing backup interface [ 230.765361][T10789] team0: Port device team_slave_0 removed [ 230.787794][T10789] team0: Port device team_slave_1 removed [ 230.844441][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.853270][T10789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.872034][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.881891][T10789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.903503][T10789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.023163][T10807] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 231.058333][T10802] pim6reg: entered allmulticast mode [ 231.064143][T10803] pim6reg: left allmulticast mode [ 231.239713][T10812] veth1_to_batadv: entered allmulticast mode [ 231.268864][T10812] syz_tun: entered allmulticast mode [ 231.284206][T10812] Unsupported ieee802154 address type: 0 [ 231.304446][T10810] veth1_to_batadv: left allmulticast mode [ 231.373402][T10809] syzkaller1: entered promiscuous mode [ 231.431392][T10809] syzkaller1: entered allmulticast mode [ 232.037519][T10842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 232.721775][T10865] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 232.729572][T10865] netlink: 'syz.0.1253': attribute type 2 has an invalid length. [ 233.080309][T10878] tipc: Enabled bearer , priority 0 [ 233.282640][T10878] syzkaller0: entered promiscuous mode [ 233.298503][T10878] syzkaller0: entered allmulticast mode [ 233.309444][T10878] tipc: Resetting bearer [ 233.375669][T10877] tipc: Resetting bearer [ 233.645083][T10896] netlink: 'syz.3.1262': attribute type 2 has an invalid length. [ 233.653121][T10896] netlink: 'syz.3.1262': attribute type 8 has an invalid length. [ 233.660899][T10896] __nla_validate_parse: 8 callbacks suppressed [ 233.660942][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1262'. [ 234.091631][ T9041] tipc: Node number set to 2608763086 [ 235.363892][T10877] tipc: Disabling bearer [ 235.448131][T10906] lo speed is unknown, defaulting to 1000 [ 235.547178][T10911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1265'. [ 235.613427][T10910] lo speed is unknown, defaulting to 1000 [ 235.689253][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 235.846618][T10928] IPVS: length: 184 != 24 [ 236.173817][T10943] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1274'. [ 236.288985][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'. [ 236.634302][T10958] erspan0: entered promiscuous mode [ 236.665776][T10958] erspan0: left promiscuous mode [ 236.796517][T10965] batman_adv: batadv0: Adding interface: vxlan2 [ 236.810205][T10965] batman_adv: batadv0: The MTU of interface vxlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.854561][T10965] batman_adv: batadv0: Interface activated: vxlan2 [ 237.009446][T10975] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1284'. [ 237.114156][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 237.125753][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 237.139774][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 237.143579][T10981] delete_channel: no stack [ 237.150756][T10977] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1285'. [ 237.328889][T10982] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.363384][T10979] lo speed is unknown, defaulting to 1000 [ 238.609417][T11021] lo speed is unknown, defaulting to 1000 [ 238.898093][T11032] __nla_validate_parse: 2 callbacks suppressed [ 238.898117][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 239.223236][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 239.243035][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 239.254665][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 239.432874][T11014] lo speed is unknown, defaulting to 1000 [ 239.636987][T11054] lo speed is unknown, defaulting to 1000 [ 239.750887][T11063] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 240.228915][T11087] pimreg: entered allmulticast mode [ 240.334431][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1313'. [ 240.950197][T11114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.997232][T11110] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 241.265993][T11141] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.525229][T11149] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.214385][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 244.232786][T11213] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1344'. [ 244.317313][T11213] ipvlan2: entered promiscuous mode [ 244.346279][T11213] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 244.398397][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1347'. [ 244.662408][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 245.048925][ T9574] lo speed is unknown, defaulting to 1000 [ 245.067131][ T9574] syz2: Port: 1 Link DOWN [ 245.325449][T11277] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1360'. [ 245.448191][T11274] lo speed is unknown, defaulting to 1000 [ 245.515383][T11273] lo speed is unknown, defaulting to 1000 [ 245.878573][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 246.085131][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 246.399512][T11320] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.412720][T11320] syzkaller1: linktype set to 6 [ 246.746874][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1376'. [ 246.906103][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 246.940482][T11346] netlink: 'syz.1.1379': attribute type 21 has an invalid length. [ 246.990550][T11346] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1379'. [ 247.026456][T11346] netlink: 'syz.1.1379': attribute type 5 has an invalid length. [ 247.037204][T11354] netlink: 206344 bytes leftover after parsing attributes in process `syz.1.1379'. [ 247.056089][T11350] netlink: 'syz.2.1381': attribute type 15 has an invalid length. [ 247.057119][T11346] netlink: 'syz.1.1379': attribute type 6 has an invalid length. [ 247.194709][T11358] netlink: 'syz.0.1384': attribute type 5 has an invalid length. [ 247.236121][T11356] geneve3: entered promiscuous mode [ 247.507797][T11376] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 247.657191][T11377] kthread_run failed with err -4 [ 248.567702][T11428] lo speed is unknown, defaulting to 1000 [ 248.803577][T11442] tipc: Enabling of bearer rejected, failed to enable media [ 249.096456][T11455] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 249.162141][T11455] netlink: 'syz.3.1413': attribute type 2 has an invalid length. [ 249.327009][T11464] __nla_validate_parse: 8 callbacks suppressed [ 249.327033][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1415'. [ 249.328572][T11466] netlink: 'syz.0.1416': attribute type 28 has an invalid length. [ 249.384594][ T7444] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.421398][ T7444] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.447697][ T7444] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.256626][T11527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 250.499517][T11528] tipc: Resetting bearer [ 250.754954][T11528] veth1: left promiscuous mode [ 250.965740][T11528] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 250.990107][T11528] team0: left promiscuous mode [ 251.012312][T11528] macsec1: left promiscuous mode [ 251.020664][T11528] bridge2: left promiscuous mode [ 251.027447][T11528] bridge2: left allmulticast mode [ 251.046075][T11528] bridge3: left promiscuous mode [ 251.063496][T11528] bridge4: left promiscuous mode [ 251.069784][T11528] bond4: left promiscuous mode [ 251.090956][T11528] wireguard0: left promiscuous mode [ 251.097886][T11528] wireguard0: left allmulticast mode [ 251.174082][ T6775] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.221384][ T6775] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.256322][ T6775] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.285875][ T6775] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.351417][ T6775] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.371006][ T6775] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.389032][T11555] tipc: Enabled bearer , priority 0 [ 251.519341][T11555] syzkaller0: entered promiscuous mode [ 251.548451][T11555] syzkaller0: entered allmulticast mode [ 251.559845][T11555] tipc: Resetting bearer [ 251.592706][T11556] tipc: Enabling of bearer rejected, already enabled [ 251.622306][T11554] tipc: Resetting bearer [ 251.801215][T11579] sctp: [Deprecated]: syz.4.1445 (pid 11579) Use of int in max_burst socket option deprecated. [ 251.801215][T11579] Use struct sctp_assoc_value instead [ 261.115882][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.899670][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.069315][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.379128][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.180767][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.550771][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.060924][ T5867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.340571][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.569734][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.360514][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.630884][ T5867] Bluetooth: hci5: command tx timeout [ 303.768620][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.209979][ T5867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.329006][ T5867] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.560258][ T5867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.739065][ T5867] Bluetooth: hci5: command tx timeout [ 306.068968][ T5867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.458810][ T5867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.550282][ T5867] Bluetooth: hci6: command tx timeout [ 307.829845][ T5183] Bluetooth: hci5: command tx timeout [ 308.090024][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.170524][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.380586][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.630773][ T5183] Bluetooth: hci6: command tx timeout [ 308.749319][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.410930][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.430618][ T5183] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.500433][T10137] Bluetooth: hci7: command tx timeout [ 309.609807][T10137] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.900028][T10137] Bluetooth: hci5: command tx timeout [ 309.939166][T10137] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 310.360282][T10137] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 310.780457][ T5863] Bluetooth: hci6: command tx timeout [ 310.960406][ T5863] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 311.590557][ T5867] Bluetooth: hci7: command tx timeout [ 312.380744][ T5863] Bluetooth: hci1: command tx timeout [ 312.850099][ T5863] Bluetooth: hci6: command tx timeout [ 313.660777][ T5863] Bluetooth: hci7: command tx timeout [ 313.920577][ T5863] Bluetooth: hci8: command tx timeout [ 314.528579][ T5863] Bluetooth: hci1: command tx timeout [ 315.739414][ T5863] Bluetooth: hci7: command tx timeout [ 316.050030][ T5863] Bluetooth: hci8: command tx timeout [ 316.609381][ T5863] Bluetooth: hci1: command tx timeout [ 318.140083][ T5863] Bluetooth: hci8: command tx timeout [ 318.720065][ T5863] Bluetooth: hci1: command tx timeout [ 320.249743][ T5863] Bluetooth: hci8: command tx timeout [ 322.557056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.419568][ T5867] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 361.699217][ T5867] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 361.910004][ T5867] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 362.220863][ T5867] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 362.470178][ T5867] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 365.830037][ T5867] Bluetooth: hci9: command tx timeout [ 367.731073][ T5863] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 367.908582][T10137] Bluetooth: hci9: command tx timeout [ 367.969076][T10137] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.120994][T10137] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.231025][T10137] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 368.840781][T10137] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 368.998614][T10137] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 369.210992][T10137] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 369.600833][ T5875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 369.785729][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 369.970152][ T5875] Bluetooth: hci9: command tx timeout [ 370.320433][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 370.420456][ T5875] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 370.760079][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 370.869609][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 371.770631][ T5867] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 372.079012][ T5867] Bluetooth: hci9: command tx timeout [ 372.209569][ T5867] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 373.331086][ T5867] Bluetooth: hci10: command tx timeout [ 373.580656][ T5867] Bluetooth: hci11: command tx timeout [ 373.950516][T10137] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 374.158630][T10137] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 374.469880][T10137] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 375.190537][ T5863] Bluetooth: hci12: command tx timeout [ 375.220572][T10137] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 375.430396][T10137] Bluetooth: hci10: command tx timeout [ 375.630483][T10137] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 375.649157][T10137] Bluetooth: hci11: command tx timeout [ 377.340513][T10137] Bluetooth: hci12: command tx timeout [ 377.500090][T10137] Bluetooth: hci10: command tx timeout [ 377.769499][T10137] Bluetooth: hci11: command tx timeout [ 378.620571][T10137] Bluetooth: hci13: command tx timeout [ 379.419695][T10137] Bluetooth: hci12: command tx timeout [ 379.570199][T10137] Bluetooth: hci10: command tx timeout [ 379.810135][T10137] Bluetooth: hci11: command tx timeout [ 380.689760][T10137] Bluetooth: hci13: command tx timeout [ 381.499134][T10137] Bluetooth: hci12: command tx timeout [ 382.768782][T10137] Bluetooth: hci13: command tx timeout [ 384.010151][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.859594][T10137] Bluetooth: hci13: command tx timeout [ 410.870941][ T31] INFO: task kworker/u8:36:7443 blocked for more than 143 seconds. [ 411.199975][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc [ 411.459046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.628593][ T31] task:kworker/u8:36 state:D stack:23784 pid:7443 tgid:7443 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 411.948969][ T31] Workqueue: events_unbound linkwatch_event [ 412.180312][ T31] Call Trace: [ 412.279187][ T31] [ 412.479336][ T31] __schedule+0x1798/0x4cc0 [ 412.597990][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.809045][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.960889][T11623] warn_alloc: 1 callbacks suppressed [ 412.960911][T11623] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 413.129582][ T31] ? __pfx___schedule+0x10/0x10 [ 413.249508][T11623] ,cpuset=/,mems_allowed=0-1 [ 413.387996][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 413.388043][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.388064][T11623] Call Trace: [ 413.388078][T11623] [ 413.388095][T11623] dump_stack_lvl+0x189/0x250 [ 413.388141][T11623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.388168][T11623] ? __pfx__printk+0x10/0x10 [ 413.388199][T11623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 413.388226][T11623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 413.388254][T11623] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 413.388284][T11623] warn_alloc+0x214/0x310 [ 413.388325][T11623] ? __pfx_warn_alloc+0x10/0x10 [ 413.388370][T11623] ? __get_vm_area_node+0x28f/0x300 [ 413.388401][T11623] ? kcov_ioctl+0x55/0x640 [ 413.388435][T11623] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 413.388502][T11623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 413.388542][T11623] ? __pfx_kcov_ioctl+0x10/0x10 [ 413.388572][T11623] vmalloc_user_noprof+0xad/0xf0 [ 413.388605][T11623] ? kcov_ioctl+0x55/0x640 [ 413.388635][T11623] kcov_ioctl+0x55/0x640 [ 413.388666][T11623] ? bpf_lsm_file_ioctl+0x9/0x20 [ 413.388694][T11623] ? __pfx_kcov_ioctl+0x10/0x10 [ 413.388723][T11623] __se_sys_ioctl+0xfc/0x170 [ 413.388753][T11623] do_syscall_64+0xfa/0x3b0 [ 413.388780][T11623] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.388804][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.388825][T11623] ? clear_bhb_loop+0x60/0xb0 [ 413.388851][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.388877][T11623] RIP: 0033:0x7fbed5f8e7ab [ 413.388898][T11623] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 413.388917][T11623] RSP: 002b:00007fffd15c1dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.388940][T11623] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbed5f8e7ab [ 413.388955][T11623] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 413.388970][T11623] RBP: 00007fbed61d6128 R08: 00000000000000d8 R09: 0000000000000000 [ 413.388984][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.388997][T11623] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 413.389029][T11623] [ 413.389041][T11623] Mem-Info: [ 413.499786][ T31] ? schedule+0x91/0x360 [ 414.279593][T11623] active_anon:7001 inactive_anon:0 isolated_anon:0 [ 414.279593][T11623] active_file:3346 inactive_file:39987 isolated_file:0 [ 414.279593][T11623] unevictable:768 dirty:7 writeback:4 [ 414.279593][T11623] slab_reclaimable:11675 slab_unreclaimable:196012 [ 414.279593][T11623] mapped:82223 shmem:1356 pagetables:1202 [ 414.279593][T11623] sec_pagetables:0 bounce:0 [ 414.279593][T11623] kernel_misc_reclaimable:0 [ 414.279593][T11623] free:1102087 free_pcp:10620 free_cma:0 [ 414.919219][T11623] Node 0 active_anon:27704kB inactive_anon:0kB active_file:13384kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:316892kB dirty:28kB writeback:16kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13812kB pagetables:4664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.168483][ T31] schedule+0x165/0x360 [ 415.176983][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.230688][ T31] __mutex_lock+0x7e6/0x1350 [ 415.320242][ T31] ? look_up_lock_class+0x74/0x170 [ 415.619162][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.728578][T11623] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.809519][ T31] ? linkwatch_event+0xe/0x60 [ 416.049933][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.368101][T11623] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.381123][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.720638][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 416.818464][T11623] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 416.918677][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 416.970475][T11623] Node 0 DMA32 free:500848kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22436kB inactive_anon:0kB active_file:13380kB inactive_file:158176kB unevictable:1536kB writepending:52kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:40804kB local_pcp:21352kB free_cma:0kB [ 417.140638][ T31] linkwatch_event+0xe/0x60 [ 417.268569][ T31] process_scheduled_works+0xae1/0x17b0 [ 417.378520][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.600220][ T31] worker_thread+0x8a0/0xda0 [ 417.649871][T11623] lowmem_reserve[]: 0 0 1 1 1 [ 417.780075][ T31] kthread+0x70e/0x8a0 [ 417.849923][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.888850][T11623] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 417.979135][ T31] ? __pfx_kthread+0x10/0x10 [ 418.160608][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.300889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.448447][T11623] lowmem_reserve[]: 0 0 0 0 0 [ 418.539674][ T31] ? __pfx_kthread+0x10/0x10 [ 418.591061][T11623] Node 1 Normal free:3897532kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11360kB local_pcp:2432kB free_cma:0kB [ 418.669859][ T31] ret_from_fork+0x436/0x7d0 [ 418.840123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.060347][T11623] lowmem_reserve[]: 0 0 0 0 0 [ 419.110800][ T31] ? __switch_to_asm+0x39/0x70 [ 419.217888][T11623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 419.250090][ T31] ? __switch_to_asm+0x33/0x70 [ 419.399679][ T31] ? __pfx_kthread+0x10/0x10 [ 419.489238][T11623] Node 0 DMA32: 80*4kB (UME) 63*8kB (UM) 63*16kB (UM) 276*32kB (UME) 182*64kB (UME) 94*128kB (UME) 38*256kB (UM) 6*512kB (UME) 4*1024kB (M) 0*2048kB 114*4096kB (M) = 518184kB [ 419.530037][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.679545][ T31] [ 419.786357][ T31] INFO: task syz.0.1443:11574 blocked for more than 152 seconds. [ 419.859727][T11623] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 420.169203][T11623] Node 1 Normal: 193*4kB (UME) 55*8kB (UME) 30*16kB (UME) 179*32kB (UME) 45*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3897532kB [ 420.530011][T11623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.589886][ T31] Not tainted syzkaller #0 [ 420.838228][T11623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB