last executing test programs: 6m45.420851572s ago: executing program 2 (id=1255): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c000100000000000000000014000300ff"], 0x114}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0xf2, 0x3, 0x3, 0x7, 0x0, [0x6, 0x8, 0xdd7, 0x200]}) 6m45.397331786s ago: executing program 2 (id=1256): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x2, 0x78, 0x9, 0x3ff}, {0x6c8, 0x8, 0x3}, {0x3229, 0x7f, 0x7, 0x81}, {0x3, 0x5, 0x2, 0x80}, {0xa50e, 0x7, 0xfe, 0x200}, {0xc, 0x22, 0xd, 0x9}]}, 0x10) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x9, 0x7, {{0xc, 0x4, 0x1, 0x21, 0x30, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x9, [{@remote, 0x8}, {@multicast2, 0x100}, {@empty, 0xd0}]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0xffffffffffffff88, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x8, 0xfffffffe, 0x40, @loopback, @empty, 0x10, 0x1, 0x4, 0x3ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080106}, 0xc, &(0x7f0000001100)={&(0x7f0000001300)={0x940, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x940}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 6m45.168646818s ago: executing program 2 (id=1263): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "3ea1"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) unshare(0x62040200) gettid() (async) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004804}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xe, 0x4, 0x1, 0x22, 0x38, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @timestamp_addr={0x44, 0x4, 0xc9, 0x1, 0x4}, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xe, 0x4, 0x1, 0x22, 0x38, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @timestamp_addr={0x44, 0x4, 0xc9, 0x1, 0x4}, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) 6m44.847942144s ago: executing program 2 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0xa, 0x800, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="6c0900000600"}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/392], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (rerun: 64) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r8}, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000300)=0x28) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000180)='dvmrp0\x00') r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r10}, 0x18) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c000004006e001400018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="a9566cdf41eaca78b393ab610c6d5ef1079df2f123ad7b83950b78a4f81a671f47ae4a014e0004e6b764b405cf33d303f5398b602b2010572d548cd7ec975d06032878e0b81c7ea27043f9e5385a2fa45373fcb21aa6727892ad44bcebd0e5bc0c394dcaf515d4162daa8046172e0c7a9eba9abd6b64c346d8e3f0e87e3c4d2166725200000000000000"], 0x2c}}, 0x0) (async) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) (async, rerun: 64) r12 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async, rerun: 64) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m44.656247118s ago: executing program 2 (id=1270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x800}, {0x3d}, {0x2}, {0x6}]}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0xa8916409ae5fa508}}, 0x14) (async) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f0000000000)=0x8, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000bc0)="39739832bb7490f89d6f55b666b380869e121d3af7cebe29fd32c3fc791a2d265400e0bb7a14e361f323c03e7ee6aaae9ca90b8dc1c2430b9b6363cb9a087151b1a05fcb4842a131061784e7f13ab5c8392b79cc77e3f1c8e7ce026db61560b2988bc2f7fd4f85e74b2f2c72756a2ddc390047f9fe1771ac80cfb8f112a716d2927b4f981bf803029b88ed89873675d220e6dc277f50626fd9f053d55f6fd3e1ac1952144b8b3e184946c4d0ad315f29484c806905b385db5846b65be4593e2ceb1e2e10", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000f40)="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", 0x131}], 0x1}}], 0x2, 0xc8c0) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000007f000000000000000000000018010000756c6c2500000000000220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000850000001100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) r9 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r9, 0x2}, 0x20) 6m44.059857659s ago: executing program 2 (id=1285): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) socket$netlink(0x10, 0x3, 0x4) (async) sendfile(r3, r2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x800) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000995000/0x1000)=nil, 0x1000, 0x4, 0x13, r1, 0x585d2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6m43.906217967s ago: executing program 32 (id=1285): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) socket$netlink(0x10, 0x3, 0x4) (async) sendfile(r3, r2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x800) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000995000/0x1000)=nil, 0x1000, 0x4, 0x13, r1, 0x585d2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 2.60803845s ago: executing program 1 (id=5031): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x8, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x11, 0x482, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040029bd7000ffdbdf25110000001800018b14000200626f2e643000000000000000000000009bd7139b44654656593a123f7f1a7217617fa6c1bb7086f9ed35d79f12dd91bd880eee49fdb687630934186d6475a1d5343ef84251e1622b9cbd401ab1830108bf8d3a86d117e198986c6b5572013ab462dabdf667cd1ffc80fd0f7c31a4c9d75c4bc4e5171ff045adae77bc25dee50d978a61bc083ec20287fffc89b1cd4b28d1273c0c33ee2e13f49ec7cad6b177d65583836a"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 2.334896484s ago: executing program 1 (id=5034): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c80000023000100800000000000000000000000050071"], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/17, 0x11}, 0x80000000}], 0x1, 0x40000021, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0xfffffffffffffc28, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r8 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x9b3b, 0x36, @rand_addr=' \x01\x00', @private2, 0x7, 0x7800, 0x5, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@RTM_NEWMDB={0x58, 0x54, 0x800, 0x70bd2d, 0x25dfdbfd, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x1, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x1, 0x1, {@ip4=@multicast1, 0x9edd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x48090) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="5400000010001fff0000000001000000000000", @ANYRES32=0x0, @ANYRES32=r15, @ANYRESOCT=r10], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.769995342s ago: executing program 5 (id=5049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000005000000000000000000010018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000050000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) pipe(&(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.676012794s ago: executing program 5 (id=5052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000100000024000480050003000100"], 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'batadv_slave_0\x00', 0x2}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010528bd7000fddbdf251a80000000002280040000800400008004000080030000800700210061610000"], 0x30}, 0x1, 0x0, 0x0, 0x20008044}, 0x44) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40844) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x4c}}, 0x80) 1.639334951s ago: executing program 3 (id=5053): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000000) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x2d0, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x36f7}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x49}, {0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x5bfd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffa}, {0x8, 0xb, 0x23c4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8}}, {0x8}, {0x6, 0x16, 0xa}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xfffffff9}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r6}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket(0x10, 0x3, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000000) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x80003, 0x6) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)) (async) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x2d0, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x36f7}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x49}, {0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x5bfd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffa}, {0x8, 0xb, 0x23c4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8}}, {0x8}, {0x6, 0x16, 0xa}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xfffffff9}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r6}, 0xc) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) 1.564618306s ago: executing program 3 (id=5054): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x4010, 0xffffffffffffffff, 0x42723000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="7a6661d596f1c10ff16c779f3f58492fb14eed4b54da583832dc075d2cda286e5c54c5d4fa6dfc0c40d73be129217fd751f9a0bc64e587c4449b310f4f7e71340b43c63f04ffa76580", 0x49}, {&(0x7f0000000080)="4c517d8e352bfb4da54d4cccb52b58277990a340e58e05ee891e6174ab2b480c88141f83ad678488ee8c9ab2bf1a0f2af89255f97f44d57e77e5123cbf3765780419a76c8debebbeab2b0400081276ab41d1be8d2171cf00eb49d80f1e5a6d0a7d75728aa949f2ad6a7f9ef587d3642974afd95684d0510a4a4e7724e76afc9cbc1be5fc7f48dc69818614ed3fdfc8cd46201ed9bfbbbe6948e2c0b19a497c3443efdee2e47a78147baf7bf916e3442c42928191581d4430ec238e3dabfa5e0db81091b2c59846bbe211445387d60c3224aee3d7682230516ac5eefc9b056414bdb26a96fb302b0be7", 0xe9}, {&(0x7f0000000180)="2f0dab3995b0e8af75c073aaa567f3fdf4d9556ffa1e000c37d8ced1d2ca81055442efcfa28a830a02eecea27e148fecd40680190ba1603defe29f117d6d4c2450bb7478aa6a65565fed937fe43472f5ac54d2a7c33f398830ef2c00d21f471e972167bb024945093809b82a6dc6a19076a7ebb8831ad044e8a6db486c519f427fc5843f3185de58673d8062fdf829948fb82225678552d6ee2cfd478fe19d12a9576d24924c370165242205d1601901bb7d4ef15d93d76c378c73fab69d6c1d73f1425ae54350356ffb9575f1ea2db1ad78a2a6fc1c013f1c1c61d083bed708cc0141372f05d4a572423869e1025b8aa3da4a155c", 0xf5}, {&(0x7f0000000280)="ee364d8755b91894864937e55b471143173d6433fd827724cba19306b35fda29e19e6d81880622a60a1f9c37489d677a7298ae65c293d97272cce12e28ecb93558f039237dd64dc1c9db63acf4330fbc92b4b7997e7a7a8dfc8c9c9e9a2941b650ffaaf7656bf8b790de642225357444cbf62e30007a84c864a40bb40c80d77a3434565d78ba9256bccfcf6549275ab5d2ee956467cdc54b6ec8d20c5451098cc0ebc56eee97abe8ae9fe31bb7bc7ed11ac4", 0xb2}], 0x4, &(0x7f0000000380)=[{0x100, 0x103, 0x7, "50e2ce30d6612214312990c31c21f8dd078d5e448eac8a77e0fbbfcf57cefa7f62a900f590e0b48512a21656d572850f6e27ac1efbe2be73c99efd52140253ed4eacb9eff5ef9a6a6ba791367ba6f96eada09669166bb3dd037e7bd53a29f6bd9051dfe2787b8e0810ced69834f1324725ce5aa51743cea0692c5447d9502d13b954907606e661497efe06dd0bc422578841a4e86bd3e8c72df0205e5eca0becbdc09f8d746fa99aa7c5324f83d9b777c3aa4f5f5869ed90e64e5e412541ab1d9ac701fb817fd80b5373ad3f8f8ada6902d6d47207a7675c3ce9da06a964499871ff12d2b3f21606e3417c77"}, {0x50, 0x118, 0xa9, "8146a75bf044aec147c47d9474c0b57eb2cad3ba8343f1cda57b5094d266d8caffeaacab9360099fb94ff9afe3d12c50fb202d45aeb03537ffc4a6f91e"}, {0x1010, 0x1, 0x8, "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"}], 0x1160}, 0x800) socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000001540)={0x1, 'bond0\x00', {}, 0x3}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000001540)={0x1, 'bond0\x00', {}, 0x3}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='net_prio.prioidx\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000017c0)={0x4, 0x4}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000019c0)={&(0x7f0000001800), 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x98, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80000000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffc8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1ef8b447d1f7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b46ea54077f791df7affadde524538e6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4d99d406586b5c287dff02cea9b528f2"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "6b33a2e0a5dd26ab7eead4145a70f4a1"}]}, 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x1) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000019c0)={&(0x7f0000001800), 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x98, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80000000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffc8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1ef8b447d1f7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b46ea54077f791df7affadde524538e6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4d99d406586b5c287dff02cea9b528f2"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "6b33a2e0a5dd26ab7eead4145a70f4a1"}]}, 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) (async) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x8c, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x396}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x350}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40880}, 0x20008010) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x8c, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x396}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x350}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40880}, 0x20008010) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000001c00)) getsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) socket(0x15, 0x2, 0x2) (async) r7 = socket(0x15, 0x2, 0x2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001d40)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001d40)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={r1, 0xe0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0], 0x0, 0x93, &(0x7f0000001e40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002100)={'gre0\x00', &(0x7f0000002080)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x1, 0x2, {{0x9, 0x4, 0x1, 0x3, 0x24, 0x68, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0xc, 0x2c, 0x0, 0x0, [0x10001, 0xfffffff8]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000021c0)={'gretap0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x1e9, 0x6d4, {{0xb, 0x4, 0x2, 0x6, 0x2c, 0x66, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x18, 0x5b, 0x0, 0x4, [0xfff, 0x1000, 0x4, 0x9d61, 0x5]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000021c0)={'gretap0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x1e9, 0x6d4, {{0xb, 0x4, 0x2, 0x6, 0x2c, 0x66, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x18, 0x5b, 0x0, 0x4, [0xfff, 0x1000, 0x4, 0x9d61, 0x5]}]}}}}}) getpeername$packet(r1, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002300)={'ip6gre0\x00', &(0x7f0000002280)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xfc, 0x800, 0x8, @remote, @empty, 0x7, 0x8000, 0xf00, 0x6}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000002540)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f0000002340)={0x198, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24004080}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000002600)) 1.504221798s ago: executing program 4 (id=5055): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "4cecd28fa44b95a3", "52bac32cae9f17d859b627eaed4735f4ba98da9aa265e83caa5ed4d2419aae7d", "eb54c015", "c9214f7b159c5abc"}, 0x38) (async) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "4cecd28fa44b95a3", "52bac32cae9f17d859b627eaed4735f4ba98da9aa265e83caa5ed4d2419aae7d", "eb54c015", "c9214f7b159c5abc"}, 0x38) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x14, 0x18, 0x821}, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x14, 0x18, 0x821}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, 0x0, 0x4000) (async) sendmsg$NL80211_CMD_SET_CQM(r6, 0x0, 0x4000) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) unshare(0x400) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}, 0x1c) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}}}, 0x0, 0x0, 0x33, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}}}, 0x0, 0x0, 0x33, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r8, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x3}, 0x37}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5d45ac80341ff6883407c4c1a00b3cfc53b8f7c955055d3415fa5d8a65f5d942459c1adf7e197998becd9e77a9a1292dd3cb275462443ae4a221fe71090f3daf423ac92ba68baa270317c805aa09000000000000001bc09f5984d72573fb0d63b87f5ee57c196144ea1a4a4a797ab161c5de7f1f1c8789ba0ed600dc4cb3949a3c66dc3ccf0811cf7dda1007fa7f1803b44fb1e41b06a8", @ANYRES16=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.448073617s ago: executing program 3 (id=5056): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="a6aa2e85307e3f42d919f6bddc031b9fc2dbd0bff682ce0e9de66b4c6cd8452e862e49e83bdffb71f4ce259dc52c45f07bb8895b222822623e5f04fdaf9de231f8f4d00ea6b481"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe08, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e00)={0x28, 0x3e, 0xc4faffb10e5e520f, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000140)="24000000010006", 0x7) 1.424629584s ago: executing program 1 (id=5057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.360349581s ago: executing program 4 (id=5058): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000660000000000100018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d000000060000000400000074f4870d1d6a8401000000000000009ca01b72b500000000000000", @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRES8=r3, @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x5, 0x35, &(0x7f0000000340)=""/53, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x10, 0x8}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="18110000e669486f21fce330918db2732686567e7c4d11c9074bee7df553fe1fcbec46ef28a60ba092e1878af7e82a7dfc72effc6c86c6fef2707331208f4c570c30e89862a636cd7e690d703fbc11f6e0856a9a003491496562ced50b06f7614e93da234e48d5a86fe07f92bb0913ac7cc82898b60b11d57d0f8942283d28ba116d9216a6d7f3e6f85f3211", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000c9240c000500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x13}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$nfc_llcp(r8, &(0x7f0000000ac0)=[{&(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x6, "1927a98a27ab516de9c89c49b3d4af4172969b08ffc8301abb584087e1f7ebc690e858e6cc6b5744055a59f075e2ca2b37bd5dcc035e6506dd3b18c6f91b06", 0x2c}, 0x60, &(0x7f0000000e00)=[{&(0x7f00000007c0)}, {&(0x7f0000000400)="cc1d9cca37234b0fbbb858da520234bded815ea82f9da0fbcec7cb7bd45027dca8ed891d9247ae3a254354f2", 0x2c}, {&(0x7f0000000600)="a626929344b4a97f76c8fb43426843f9a70d64b0fbac2e369caa59a00a3024675be83b7c3f9d417030a0bc07a6cb6a6a585b725d812665447dc0a3aabf82cd1d9f18094a38617fc67f18419b8e6031297405b419b0b43738813c5f824ad99a27df0b116d3d654234f3eea8def3f89b520092f0bba456f92b8926", 0x7a}, {&(0x7f0000000300)="827c53", 0x3}, {&(0x7f0000000d00)="eb3fd94a6cb5c1e40d170468b44245fcbe66107443709e6ce74809424f57ba4f3a2962a94cf3d833dcb73965f7c39906f371f5147471ddc83bfc74249178a2c336b82eafb9bd8bb13602adb2951057a752fa158d55c5e25ba7c44bc6293105a175fa1159a5f1d0a6ee584e70aa74f379cb253482124534e09e1fa9842019aaa0b64ecf75c15af304644b1a0cbd26ef0d748821499b4630aa61fa6d6d5413379122", 0xa1}, {&(0x7f0000000ec0)="9af51b1280b2feac06d6387fc73a988e6b3168f8de4309225413408dee08e74efb2d6c96bae9cbdefa79d4156188180acca91c896afbe7ac04774420916709cad98fdff580d081f337699cff91c0f20744fad6d76ac68b0bc1908f6367131d365509bc1985fdc4eebbf4078e693dc7fd58d55625b97f195b011c7bcca1ee21b26004b2", 0x83}, {&(0x7f0000000dc0)='{e', 0x2}], 0x7, &(0x7f0000000fc0)=ANY=[@ANYBLOB="f00000000000000001000000030000008636de5f38ca16a27b199a2131d35b5a662c850e4d83a13b9c29d8ff0111a6dca376344d8e051463bb5844a1cbcd26b59bc17ab3315cda7d62a713bc4d7c0f93a3f94add5dcc5a7310a3c397cface35932ade1caeb0813fbfef73adebc4dc09079dacda04ec899d3ae642e32dd240d3227d40c240abeddb923275c318f48fc503aba87a6abd8565d89feca2b6e98ca0f3955fd0800706b8cfb2b910a510eb63104df685366175872b15511a45585d7f04a2b564524f1f2d5cd7400117360dc8762cd239139c34beb4c29d947923a757aff36f583e4eea67b5f7d7a5cbf1cdc00"], 0xf0, 0x10}, {&(0x7f00000010c0)={0x27, 0x0, 0x1, 0x2, 0xe, 0x7, "6362e6aecabe42f4d47c3c6dfc50c1f25e4846480a35cf4402b9a278d9fc7177a6b1c23592e1f0f04e6371b6123b7b87532097a18d423235f16f044788fdc7", 0x1}, 0x60, &(0x7f00000012c0)=[{&(0x7f0000001140)="4b43677385de058fd073c59aff", 0xd}, {&(0x7f0000001180)="4af193186d9a031c4718794225a935f1383c07bfd9db94f85c3efabd54e84a6ed68b3c609d71b95038", 0x29}, {&(0x7f00000011c0)="e439c61eb26692fb6eda8dc4a0a8efb53393052714fd8b15781768d1d2a559a1f8a117fd9ef08c7fafc0de9e7e6d1522313964a40ddd22a52956725dd1df99efcde57d031c3a3fc2fbf7da925b8508c64d6b70761f6f54d9edaa751859aaba95755fd6c1d7f6d0e1f1d71a227ef7a7d8e15c3e125ddd6558e9e03793f5c172bb395bd98aca76b3e4a843b7e5de8fac9271533350450a1aa1885da90efaa1ef974519ee30d299d8072ea54ad3cdd63165eada8e33fb3e7011616e566ff9ed8f43a97b9f01f31450392b1ba0108ef8cc2e85715209bc647d627ef0faf8dce2", 0xde}], 0x3, &(0x7f0000001300)=ANY=[], 0xc8, 0x40000}, {&(0x7f0000001440)={0x27, 0x0, 0x1, 0xa, 0x1, 0xb, "8f7e86bf58b60e2259ee8e77b8b53f55dc384041e717a11f808cf94ddbd720283766e1a1a17f4ab2503079576de7a3bd1a4e74e2cacbdc214d8b9c4492a68a", 0x7}, 0x60, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="10100000000000000c010000020000004b32abe628903a5e7c9c19d72e3235d6194c90419ea082d95399727b49cdd9679033453bc93a6676909e7d273659ebd939a2186bd641afadf114b362328b6348a74eac99307c1ba5ae16e81f3e86c46ab5e9a6fb4e8a5d29cff92d78e79d4bcbbc008ab22ca0aec7be3b42a10ef6ea6e478d458566a826d1b6b5a0426ff44de97a17d060fd57caebbe891402e00b90d8a688795d08ddf3004ed002025e52f0df854235e01c726c36b03177d214e641fdf9f212add600706544755d9de516b7e7d7819c80e522f1f163a4943ecf3c1cdfca159990eb74b0015d0431b4b61d5de0a4d639e1d86fd99bcc7729d58d4c9022effbe4f744d131c8ef322f430a72a6fc2605e1bac2d10e8fc8d09a81f7afd9d495d032ffba53a9dfa073dd911b916dd34249d2faea96bb7b8ef4b54ece9432e60afcc542211d6348e03c97f3c2c3ab3d5e373a95743d551d2c34392947812f797196c8f686210451f7f47395d5137f28e90e91f88c139788e62fc0c322ecff75bdfdd1b8cf368ffd9219ba3aa45eb0984dab96656015172743d1ba9fdc9cdf349390e4906028be3d3d0befa703c2d4855557ef4cc6eb62e9f4707f73cf4dce59f37c851bba3d658144c7c0e2c92261b55d40e4af33134f5325dc455ec87f0eae81bdcaac6518dad6ee10c1f0f9ae22824611683ef340698a0e4e71ab538a5222b84612dd5257735509456a03e930a418d5d2adf83b91e8b21c8bf23fc708d4cb843affdb495e8a7f8a76469801d78ebc8bf63c49f4ad004f7e2f45f528882b0e54501ad7af46df07ec9b03b8cdddf9e5689032221c29bd17c68f7b37f3be940fdb9780ab2297d0696e6ea0e459a6f77bac1d7cf087c08081ed11cca2c80ae998747a4f2f990fedea2258ab0a91fc548fa902389af335ad1f9b1040f1949037e93b66166da70fc3093bf734ec2a40e486833f2a150d7ccd6d54252a2d2ec72c896ffb523ed7241432e322e866111a188b5a7d2eb1bc690424bd8769cfd9b391a943a2c64a5859e50609c51eb552166988c5521dc804300498600312a1fb8a86c80ac06e701ce641b75a1150d0fe4369d764ee272e4fbf8e248780177ee92a2d9e0ae77f83f8acf72c287a28d7567eefab4c20bae5fd3b4fee231fb415d41db659d1248628bda4ae5d54afe4fb128668d0e58d31f24688e1ac7e167191045e00e9e14c8876f34ef1ad4af6d285a99abbba14bc52437d3126993a09ef9794327b8c4bdf1d364431a021f4caa2e73335de2ce146753ac6548a7bdfd7a6799fc3e35f8b6e455ab7567e8e5c330402b43fce952175fc8aaafc2def3e75217b6d59ba561c4b36b03712cdc561c8bb0041aeef169800f4df516fadfb61a4e60b531090d6882b35fde84b66973d78c20d2e8a4cde54d908265f708128d8c464fa52314afc18aae27ef0c36d41a44faa1563d010dc1ffa0c355c7ed03628da85201dcc9d5d53ea0ae26cb540d3eb4763e0a14be08bdeee97b39748ff1c086dd8f157652d706916cd20fdd7123dfee40faec3f69ffc6b3a637968262fbdacc65b378664a92116f86b844abaddebf1e81a5bc1a876d5bb8e45c308dc010e393c36998e7d653ff414989ba108b0b10f80a1f16f22ee0682882811e444811e5139bfcb705e44337dfc1e2480a55c7717e28f745698a94cefbe906183756e451dd76af7c1494ea92da1211f217a659c5ede5a7a2264d46773993cbd71b793bad62d6a830b2b466490e8308dee3e5ad0530caf7708a8a03ad8c1c62833966b02a87e69569e657487456b46b0362279bd1f0db08e3a36b8ce3c43c0f0fabe30c266cf7dd9dd905a7fd87238e35a71b0b4581141963b3658f7da829cc74c70dafe5a54173d9432f4232ea439ef0d7c4f09e227232b07c1edf3c286dfd1500170724110850b384abfaabcdaab7f60aade89cffd965a7af03c0d103e27ba43d8de646b08670386ef4781bc3b123e6fff08298861148d187d29b160aff995d7f0f6d4d0c395760e267cc02b09b0e5b693a2d5ce3535d251d92f29c0aeef65ac6251da8d887394d357818b99783484af7523b83cef5d13917c04636680e59e5148149fa54d76eeac9df1204690d080ef12d9878478159db9e95728aa0623f6e279ba39a7fa854e3beb072ca81d1c7e7fb224c735ac811e966cfb95fd42f5f0ac6312b73341881ee8f48dd41972f30000c883918a21cfbe87cca7f380cc528a53086c12583f1c95a7cc0ce1220f7f8412b20817761d6245c7e01148fc36cb99608ea427cd4621765d52bd069da505d094be4314c1eb26e9db4827dfa4c91008fe30e00664541db427174d90f71a20937084abc9accee9094f667a257053eea9876f1c119761536cf245ee92c82dcff76ce92ef5b8df71596dae23e7fb8e83190ce5504e9b2a6cbc36fbfa46222b333a1f8a4d43c3a7e4353d492c3c19de3b3c61b0835cf57289eb91f7bbf978fe1c86a702f9231f463ee5119ba474a96ea2b4c570302ac1444385fcfe1cd525c92aa39c3ef0d21c376edbe6e437f7ea397f9ff3edf7419f9fa44268e41629361e61176b12ff71968dbbab83bd5b006e553065ae96825abff4a5dbe9cd3038dcb05941c9add8bf1e07b6243d4706e5a2e938b31a7eb5b095e07401ab3b6856b443e601bcd94cc4347ed55cac1520f9495e96008fc580a9e33ec5037a35c8ff51dcad6b79afe53917a5eb59ea7f0e271294e16c044a82061ec40b7d3b438aa8caa943fb25d679fe38ba8c5b2ddf38b119a8ff1ff9dc5b6f063debaaa42c58e0c2a70ee3c4ea6f204b3184e7ac73080a8449e67712fdeeb94b2bab6a2484cbe9772c1dab3c6ada0cbe09ffa169baa81ba87194f3779dd6c9e7b5bd4d0c8e5cd07e595458476745ff60f716955e2b27dd84142ed606ed187e5b90cc4132686fd06f1ebe2f1416a53431fcb336be6c487da91cbdb25f80b2a4be0c7c684975dea2913ed61f77871e07d2d5925fc441f6db3effa63cba83e780baa355f1104473ae02be67b7653f46eb5c16fe0a6da6d06598a9349365cf917f05bd9cbd513ae93a6c3d5599c813570bcbb3fc4cd0212948cca4660073e5c13d78343a9225f76031379218f41f0c62f9238109d35e4d8c86df9543a489cafd47455a30e9aeebe6d6561e7893dd3cf11c5b2d27c6f3cb0bfca9d2af0c14a4f1d37469e5acfffa030025a5dc56fbbec79b883534fad19eaa3b3d66d6a41b597b716d1176f2e7574c7049776800dca6938ea9590f2afc2f76575e0273603e98b5e029cdb34d9059714909b74e4d615330dc253fc5098b5fa589afab5b1fdf98739ba6bae8442d7a65c07cc5a264b459a3d1ebfdf28d03edea871033f39b8fa7b2df4b165b8f5de1161ba468a3427aab5603b8287f3cd6483c5ee8825e5aa55d80e58b005966ee84d00784fac19fa56440270dc1681f7bad3b57909da2032f4a6d1600718ee61a015905f925e52fae4ca5df452f5877da2bdc031a6f463373d5bcf7d99782b50ec6a340cac697ff7dd68e32c51bb7ddffcee52f34ec1f07595ee6d55a2130a1fcbbca5dd9573d29bcf9de08785fc2d02b0d2116940612e0a07ec4e65f94b3703e5b4774e48061fc7b9558b42cf96ca3d220086518489662dd37169acc9403b356540f38fe6de6374badb80111aeb460c09964f693ef2e614b4f0d7c07d1aae98d56481db6cc579889baa431a4a65c51ffd5950d3110b81a028a228b87a84bfe1c60bd68e1658c3a03d4a712d661acb9ba85bf9b30d23fa9309329b193846ab2a54619ab7da7b173714b91b2e23e3617d33701792341ac21205709ff338929b194594fcc9666bc198b4d5240ec92d0532811dd9704a062a0b395cc60839b2069bc4ddadfc28227ab72b9c0190ed8a2f05bdf2c3ceafe59fccf0e5594ef61d90918e909516d8986e71ab069b288576d01c2250496013f57b10e7e37563cb3f1e7c78c3f58a9adfb32ec0277e867696712bdcbe2260a2825ebc678dc9e0f5de31b8eb8f75f8491dc749ece5372c7f35bf67e6251b90bae7afadc3c812d6af75ab35ac49a899b6f462a1f12eb95b23bcc7b87379185838c7172f1052b12421a9944a94c46de859a1094c09519cce496d2472e92b71c6a54c5cad3b8b5d1df8aaf3c132ccfc8527f20a0fd616f4ff1588df6114ad0c857d8c6910ce5e6386dcb83649138f77e3fc6a6617ac329f4fd26172d9f7ee0600089024cc13d2d9d5647212d353f2c8100a7e3dc4b0998848902d7f7b1f9acc36121dccc08f39f4b19673f91742ce7b036ac9eff610f366256588154b6534099ee0f8db53288c76a23173e87021c2afdbce76f05fdb45d7c85952bcb13a48f5ac8efe16e07a9fa5180e91e76d8610baceca227a2c155aba1b9c63be2e973e82b4ca49935d285a3ae93f79557b249bf2a1048d736f4bb45fa8c2cc886c17bdb2e90ae50e7a9e4f84a2966ac0bd6cfac7606e588ec074ab9570bafbe6b64b2b25f261cfceeccd62fe560e84a299c3dcbb689518c11788cb9c77f93ea6fd6772362b881e06bf00ade77209b411b4c5a688795ae71504bb1168bdeca1c82392746298ef7e0a9ec9d4fb19c4825338d5de7c1c58dc40521694f04ff0200dcb2f4da5d543f50137074bb2b09f3b57d3ecba5296a12944e189aa58189507f12c876a50af2e3cdbe576a0e6aeb7f0a16ad061fd700ab29180385c8b3fdf46b6699dfb32f9e1e87229bca14e118a6ffe819ee8452dcef9a5327c7c2092922da7a56059df6aa469ef6b116ea9b0392cf53cbf3c555b5d28cb3e53c372c0600f9587db7e0c16a68f9e5b42c1182ad7e14901201d484dc8be03ce921cc5fb3917869d6b9f5b79e2bd04f65e4e8c9b4efca4d235b1136f103909bbd1f48f7d9bbdfc98beef6d664044c694ef9b924beda4744347001bfd1feac007ddb9f91b3ed17c953dedfec130621635576c359a6780ec6ce8005cbc49f8ca13e066933486f9053c6457952168b5897bed63a2e8eae3f140981bd2ddc74df4d75dfc3ac8496e9c7c80e94fc0231a3a034fed2124c0db4114bbff4e4d199454882815e0c9003ada9958d67206002f7eb5630221efa1f22a0a5c561b3d681fbd22c334f9de4f09eb1e1c6b1e573b9bca347c612dc7168b34ea63db6d4a24946ff06e77940f384e786a60c8cb4654388bf3cada75b444488fc74a8b59da9d96ef79a12a99718d84a2734a25b9c74bdf9e7e6e4724c49d20751cae265e259c6ce92a41085a190efd2b4c10c875edb8a38632061cedbef6f1392134b19061e3b3a402493f34650876109c00f9e916d21e555e47626c8f75ff8ed980055e6d19cf329ad0fcdcf0965e3737880e02ce7c18d58786eecca1c92982d9191fb03a3a29cd023789dbac2791e158b2de475aebddfd0575456e448c6b23621309529aa7381ee524a8ab1dc6990ee3891e983dcb14232e6d132fb54b6373b067c4f2cad24081954a5352221fbfcd5958023b5f327956b47e75f5891996ddc7c86ef1cf80708d43dec489c2cf17b7bc54c48a9b770079d69155165c0fd9b958dc5e38d5f8f5c8b440460a450afaa21dc27d753bc31fc09c1aff3c13e17c06416b8f4388c0f1121afa8ee9c6f234c5d5667d81029f8bd7fa98eab883460439da786613d30673e1e9f588dd4dce8c79149f30d846f1821ef6d3616a1c46417740a94947b1c4d5ecf76b1d6d9596fc8cea68eb7f311a2eb580d95d882bed4b207cf8ab7d12f775c4a78c166c585fb5c231c87675f07ef0ceacadc9c5c950abd52858cecb5735abe5dabf7e509d15f900514001da9"], 0x1010, 0x80}], 0x3, 0x24000801) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$unix(0x1, 0x0, 0x0) write$tun(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004500003c0000000000299078ac1e0001e000000103000000002890780200000000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b1be6e9aa343bc781b9267acb47b3d23b39fe91b65def4623f584e632e4ad950cdd0fbb0116cd2f790f8c4b1766310838163544b3e8fe20ac61c093b10c7111badf349069923668729089731357e8925b68da7dabf3c55535998d7e61241e590000"], 0x4e) r12 = socket(0x1e, 0x4, 0x0) connect$tipc(r12, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) sendmmsg$unix(r12, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x34, 0x29, 0x0, 0xfffff00d}]}, 0x10) 1.347391879s ago: executing program 0 (id=5059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="d02fc9"], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x24, 0xd, 0x200, 0x0, 0x1000, 0x1ff}}, {0x4}}]}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000040)) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) tee(r1, r5, 0x7, 0xb) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r13 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r12, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.31642129s ago: executing program 4 (id=5060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x1418, 0x1, 0xffffffff, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008885}, 0x4008000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 1.215657079s ago: executing program 5 (id=5061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="680a13a5b2ef12f52f79410000000001087dffff9d9908427c5e6312364dce21e3b79ff78bdb1dc6af80edeef33ea8638dbec74132fd91afe08a50306aaf72d88934722b47b7afb1ecccd6e8ffdcab05d0f7002046f8483a4796982e49", @ANYRESOCT=r0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff3f060004280001"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.160371649s ago: executing program 4 (id=5062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x800, 0xfffffffb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f8"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r2}, 0x38) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x12}}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x4, 0x80002}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x20000800) 1.155159285s ago: executing program 0 (id=5063): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x3c, 0x14, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8000, 0x38, 0xdb}}, @IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 1.108881323s ago: executing program 5 (id=5064): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.06633166s ago: executing program 1 (id=5065): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x20060090}, 0x0) 1.016275303s ago: executing program 4 (id=5066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0xd9, 0xca28, 0xc3, 0xfff, 0x2, 0x3, 0xffff2366, {r2, @in={{0x2, 0x4e23, @multicast1}}, 0xbc, 0x3, 0x2, 0xb67, 0x80000001}}, &(0x7f0000000400)=0xb0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a00000a00"/104], 0x68}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) sendto$inet(r5, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000cfde000000000000000000060000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r10}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, &(0x7f00000000c0)) close(0x3) 1.015036549s ago: executing program 0 (id=5067): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000003, 0x3032, r0, 0x2a1cf000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095c1632d378acb16373f9e8d113a7d72574a16b82a9145c521f29fa15a571d00d948a514a20468c55f3bc600264b5655b4a204ce85c98367f5e3bbbb14cebbd397901f7d65ed06941cbe15f839faf30306c092298e451ec7957ac51206b14a44089bd92fce7d4cc6a95f660bf3608761e7a5db4d8986c43d7839597e08a44df9d71565e3655ce58e00682009724a5366dc"], 0x0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a317a00000008000a40fffffffc400000000c0a010100000000797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r4, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000900120800014000000000140003"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) accept4(r5, 0x0, 0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000080)=0x6, 0x4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r8, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x20000000) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/149, 0x95}, 0x6}], 0x1, 0x40000022, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 960.672836ms ago: executing program 1 (id=5068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYRES64=r1, @ANYBLOB="7073bff421f08b0953cc421b7dc98c56e0d1303b704fe8f61e67a5edcad6d1ce8ad447a4dfc739ccb98e05e2991571158f86b8f65f81e2fbcc2d56899e094a348a54133a64883210b28f3d7f578386510f3d71dee8cf692cdf64dc8875ad0d3447cfabe492290563e9620c3eac3e23372a87e0b8790d575d4c299f62", @ANYRES8=r0], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x81e}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004889}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000001c1100001738af293f3d77d33df129cc3381adf1323959b900dd5cda6eae7a9e43156a4706358cc52b000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0x2000) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 701.450671ms ago: executing program 0 (id=5069): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5d}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xdf5}, 0x8) socket$kcm(0x29, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000004a00010000000000fddbdf250a00806e38004380270012803472fe6e3791b7e4a43465bcac4cd110d23f43de72328891362ce804004a8004003580000c00450006000000000000006ef261568a8c8c47982d83311c76ca982db0e3a151852cc2ff522a37ecfe410d4f6d603eb5f0d9a14d003b62e50dc657da7c8612f0c59231fc9afba262217659476a92343e22958e13fc30394701f8221b286dc1e7b280497143dbc1efd943a5f85df18603258479a61ae7047c6fa75d554ad8250927bcf4da909b6bec19f37f2b409e98c1992dd8e0be3c"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000190000042bbd7000fcdbdf25020014070001ff170002000000001d004e200000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8050}, 0x90) 668.257445ms ago: executing program 3 (id=5070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaa2aabbbbbbbbbbbb080046080020650000060201000a010102ac2d14aa940400101200907864010102a4bba477e744e0fcffffffffffffff547c75ce363a42228d42a4d334b3"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 564.357625ms ago: executing program 3 (id=5071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100010000002400048005000300010000000500030000000000050003088000"], 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'batadv_slave_0\x00', 0x2}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010528bd7000fddbdf251a80000000002280040000800400008004000080030000800700210061610000"], 0x30}, 0x1, 0x0, 0x0, 0x20008044}, 0x44) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40844) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x4c}}, 0x80) 563.741001ms ago: executing program 0 (id=5072): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1d, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x1c8, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x32a}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xd6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x5ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5c8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x443}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x24000050}, 0x44004) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x1c8, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x32a}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xd6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x5ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5c8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x443}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x24000050}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf250000000008000100", @ANYRES32=r7, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c000100240001006c625f74795f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="740002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000d00000008000100", @ANYRES32=r3, @ANYBLOB="6801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400e200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x3ec}}, 0x4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="e07dd5840dcdb6a333d75c2f7e89767b824bd649c82b5141a76d4f54683ce63ef043b0178e781af682c8246c8a2b44f4448141887c80cee9afed1f602a964c1c40525ac57988dd75dd0284d24c19eb476dc26140de314a36451918bde13167accb28814e15b60894980abd7c0b8b16ef03f48a34d98a9a12210e4d71d9579fd41b5ca024ffd3722b62e2839cd5348a837738101665310d80b5", @ANYRES16=r2, @ANYBLOB="040026bd7000ffdbdf250800000005002a00010000000500380001000000050030000100000005002d00000000000500300001000000080032000000000008002b00ff7f000005003000000000000800340006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 562.505492ms ago: executing program 5 (id=5073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000040)="0e", 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c) (async) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000020000000060a010400000000000000000b00000808000b400000000004000480140000001100010000000000000000000000000a"], 0x94}}, 0x4008800) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r8, @ANYRESDEC=r10], 0x27) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) (async) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r11, 0x0, 0x25, 0x10, @void}, 0x10) close(r12) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 477.619654ms ago: executing program 5 (id=5074): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x29, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd4e9}]}, {0x4, 0x4}, {0x56}, {0xc}}}]}]}, 0x6c}}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 467.095419ms ago: executing program 0 (id=5075): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000010800450000b000000000011190780a0101000000000000004e20009c907801000000000000007b4b143b7461fd777b4883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594283f251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d209000000000000000900"/190], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000003d40), 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c80)={0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003d00)="32607b20f4ebd4e86c60bfc02d671512b75c7eff8a8e4adbfc89e0e2dab4ea78829a0db8f7fa5abc8a8615c740e99c900b1b696720772d2908992aec54f5b2efdf1cc44fa94c700abe36399c6949e00ce52f6a557eaba68ff6873958a7df59bd6fe08b14cf5f0cceda5ce60c24b4912af4a4170606f75cf78be7c82f18b7d85ac2d7255d26e0dfa436467027ed7e4aa24e9c08", 0x93}, {&(0x7f0000003e00)="4359ae00e2cae11972e25bc7e1576041f2b680087a96f0f55c58a1d94fc16ea42d49990044b5dc5c2330ad8a3a7be11b9cd9c2d20c5da109c6cec75d3abd2bbdafc2148d8c7b7bdb7e5d3c87797b50bd0c46a00624b48c62773068f78744af35c93a64869cffc318c9c583d0d460fa7f7587632e8481057ad354ba74b507e6c45074f42c78b65880ca1a781bbcbfbc7eb09895c288491146af3d6f1c469e9054b9d64636f45d78568cac31bfb668638949b542", 0xb3}], 0x2}}, {{&(0x7f0000003f40)={0xa, 0x4e22, 0x5, @private1, 0x8}, 0x1c, 0x0}}], 0x3, 0x4001c00) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40002140) socket$nl_netfilter(0x10, 0x3, 0xc) 148.442436ms ago: executing program 4 (id=5076): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x2}, 0xe) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x77) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c2080, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) accept$netrom(r3, &(0x7f0000000100)={{}, [@netrom, @netrom, @bcast, @rose, @bcast, @remote, @remote, @rose]}, &(0x7f0000000040)=0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r5, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x6) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 20.294544ms ago: executing program 1 (id=5077): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b34d2ffddefd03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c15de8905e518e8c72584d2007c26fcbf6f548de70f8b", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)="e5399df9a7c5f70a7962136be62e47b046a0701cbe5888cefbb7b54e6228a08f7a2cdd13c7aaf6bd2c1d6ce21cc2f83f0ca3226fce5fa1a1090d11055c18a7adad45", 0x42}, {&(0x7f00000004c0)="38400be7f67dec8d41883554f2ce85b1ccb8899fad3feafc2f5c965d61cb92a6429a10d674a4083b88147b3e39d6de493725babfa8721c3e795c15c23e461ed405bfa3ac58af248a1b519cfcc53b598e4ecca20bab44bfdcb00f68fb3ec25ed04ed6a3b0d226121a257493c1aa", 0x6d}, {&(0x7f0000000600)="c04c014d2da2eac9a108369d9df3b980cafc8a6574469ebca9865f891eb29dbbf276b0525770ca251d7374b797c15664d6bd33081e3ce001ef1c61cf66600ed15aff217cdee4857315760a36da2b20097d4dea254a95f4346c4b2e24af1251d32486b9dcafd81812175e216a8841ef613e00dfbb391dab0fa955353799a081d4856165942751f28505212770375dea531445b50bb9ed1194e69ff3750bef8fe3eba709ed6845127137d2ebde6d", 0xad}, {&(0x7f0000000540)="74fc600b24e53e6f51f162e59e665e1f03dc6a20f1cd32746ffb5fc56b23745f0e34b663ab11859fd72ed62a109bb4a8a63c361f30722307f0000e085eef1f75954450f56d757ee3599d8941e92c91419a308234281a0edcbe4f47", 0x5b}, {&(0x7f00000006c0)="90054c809ca676a29bc5197a6273e4267104f7fe60ad910492ed9d2d6885f5ae4da67bee81a12aa67d6283712911e5b585a9c57f4935e5234c4c85f920bf9825460387c8945ddb0a8b5768c0e2c63c55249f2c0b1103581a8466defccecd46109b0b671a394d9d5bcbb61a68d1da9b6989ebff05c8381f59569a8d5e7fbfc2ac54c660e4d079700128cc044298a09d2d0300717712e9825fe5dcf128852c12059755dbf6206b01d42b41b9e8198c4f8af089e442f717c07247670fe16b8fc3b22d0816c109888dd3e9f46cae0702e8daf2d300af3ec375b16e9d4784db1cfe2909ede8b1242d9c1cff658f265401", 0xee}, {&(0x7f00000007c0)="ec2e1fe4fe345772ae3ff0fbeb0c7cd2d3dbab06f7d9305597f0398d81050c381992e015212f3ca1ba03fb76c39babb85cb58ead3f3a292dc04f3d9b731ef92ce6e9822e72ec6c68d34386d37f692f1b5bf83e71c118bacb2022d2074f8915c2ffc6d32c5f9f5e80baf6d6ee9cb6708549f7d62eec3d85ec80e3cb8e81176c91bd6880e92a8e20699cf2ce5fa9330de775ff5a46b6ee2de620d17daf", 0x9c}, {&(0x7f0000000880)="af5df6743e420e7873cbbe37814d5c9c5c7f779352271f4d353e64d9bbdc95d2d04419e6439fdb52a1cd3eec2e89c3fe31356c82f1bd451905304486b3697b5530d97f59ef16941f3f5fd22e0619b5bbf7b18646543d3afae70b8e0df495f29f8c", 0x61}, {&(0x7f0000000900)="37377b04c133083e15e88f2b08e373c6c49fa2d59a516b9cd5b046ccf7c40ca5c59350fff8a5796b46fce169eb579f31b743f8594c3c6faba1b3f9badc2a80bd7fae4e43871ddfc5d3e0c41367a265cddcccfb2d569465852003029d57356ad4fcc10847e8bab0271f87ec308c649b8ceda6c11243a72bfacdedfc64018adce5745b54c37b9bcd8a467c03b99637", 0x8e}, {&(0x7f00000001c0)="5b54a005", 0x4}], 0x9, &(0x7f0000001ec0)=[{0x50, 0x10a, 0x2, "d7aec50c67d405785adf3cb9e84ddcff25d5b5c9ef5d638c5f5ff57704de724ef6ed9345da6f40d515e2702c10d001ac71b5ed0b562aeb3352fb1d8a8c060f50"}, {0x108, 0x10a, 0x2, "c531024b5d31ae34bd6d63d29f7d2c9f3e579662387dc3660ceda3e3e8ebb65da0619def471f5107534c23912358e0a7eb7b2bdad6a50b31994c7f73b297b9ce59cbae0112749b53e7d3974c6cf53aa5df9dc53c783c1e155875455d9453d72757f82ae54ca5024f1a6abfcbf3f2c4c247be14130dccc8e73ad2673961cb0af977888b01c5354f894df4f2785325c7324a1e44b0ae1ce262cd47a2a2bd6899b5c0b7188a24af848283cad969fe65762f9f80b96a3df0c7bc7449a5f51bfd0e0ec3ec49330df8fba3cfe7df6f248e8e1cdf038d15ad7b5da68fab9fdef91afce5a9ec4e32cab0d3e26d771068f15842a6a0d8adf9"}, {0x50, 0x29, 0x8001, "701ce5d3bdfe7e2326ac2e34d069f9e952bca5408e6caa22ff7ba5e420fb1a881eb6eae88a57caf8a570c65ebf7ebe87a1ba48e18e2271f2d4"}, {0x110, 0x115, 0x5, "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"}, {0x1010, 0x119, 0xae4, "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"}, {0x70, 0x10e, 0x5, "f539583a721a7c20aa95d4fac78cc03d64332659075742c714b98d001824da793de2e30c6799d435a16c4f82f881fe264b174e09e2c4ab4629f262fe4f5d2b0a62c1ea6571761668e0dd3beec4f1a7e5da2f663e3ffcd46eb5d7a33f41bbb0"}, {0x28, 0x117, 0x3, "0526e0324f8fe7b6c9208faa9b52671653cdd7"}, {0x28, 0x10c, 0x0, "823e48f79f3fdd3c48de3f90a597f46bc6becc42"}, {0x90, 0x113, 0x8, "bfaa236d50991b831cdc99fe20d285cde69258341b0ba3b7ef8e1c2850bfd298f650096b412c4129aad09542ef6eec003a5355cb7074c649897a16ae327b0dacb03ad021f0a78f3117e83b47588682fed9526b05fde2ac21d6ed3169891106a95a3c1bec1e82c8c7c80c3cde3323a15243ea6e9a21c5c864ae34b16025"}, {0x50, 0x107, 0xd1, "0ce4fe850309d81a9c056d4da9bfb40199e38955b614189a0a83cd01154feeabbce595c259cccd675ee9e7a97dc8c8c07f264b4a10330d045cc73707fba9"}], 0x1468}, 0x4008010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r3) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7e2f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) r5 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) getpeername$netlink(r5, 0x0, &(0x7f0000000100)) 0s ago: executing program 3 (id=5078): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28000600) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa6}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002400068014000400200100000000000000000000000000010c0003800600010000000000dd23b77260e1d6a020e8dd55947047a37df91ff9b27f67ffe7a52df4b80c49373eacb4be3f526173b9f272b0687f3b1a3026fd1723d1bfe340bfab5f8e9b86586ca93564c58fcc222837dc5187d7ee3eb71412b7de3bdfc0248c9bdbe54e899a04c7e215aa3a717d0a3ab422971928df1871130e907d24b1ef74a8159fb88f8127fea76c34acba4fd3d38310aee23c1db1f58a338cfdc13faa4f234dc976f018383649eb8c0551d0de1afe561903d718bca318b15921e3729189c42b5736b6b51e3244f7f474ba6184119b25cd6df584684cf0"], 0xb8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): xtimer: 0xffff888048373400: abort rx timeout. Force session deactivation [ 453.618544][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888048372400: connection exists (fe ff). last cmd: 20 [ 453.785458][T19816] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 453.868522][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048373800: rx timeout, send abort [ 453.885856][T19819] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 453.894251][T19806] lo speed is unknown, defaulting to 1000 [ 453.895067][T19819] netlink: 'syz.3.3746': attribute type 4 has an invalid length. [ 453.913560][T19819] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.3746'. [ 453.930751][T19822] netlink: 'syz.5.3747': attribute type 6 has an invalid length. [ 453.977133][T19822] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3747'. [ 453.989558][T19822] netlink: 'syz.5.3747': attribute type 6 has an invalid length. [ 454.103149][T19832] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 454.268000][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3752'. [ 454.377344][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048373800: abort rx timeout. Force session deactivation [ 454.432260][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 454.444437][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'. [ 454.453522][T19847] netlink: 'syz.1.3755': attribute type 18 has an invalid length. [ 454.790421][T19854] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 455.013846][T19865] netlink: 'syz.3.3761': attribute type 2 has an invalid length. [ 455.023687][T19867] netlink: 'syz.4.3762': attribute type 29 has an invalid length. [ 455.068504][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3763'. [ 455.228817][T19884] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 455.236912][T19884] netlink: 'syz.4.3769': attribute type 2 has an invalid length. [ 455.244645][T19884] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 455.252567][T19884] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.3769'. [ 455.264600][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3769'. [ 455.374588][T19897] lo speed is unknown, defaulting to 1000 [ 455.597810][T19918] netlink: 'syz.5.3778': attribute type 1 has an invalid length. [ 455.634115][T19918] bond12: entered promiscuous mode [ 455.643332][T19918] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.684871][T19922] bond6: entered promiscuous mode [ 455.690477][T19922] bond6: entered allmulticast mode [ 455.695986][T19922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.713031][T19918] batadv1: entered promiscuous mode [ 455.719814][T19918] batadv1: entered allmulticast mode [ 455.728072][T19918] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 455.736573][T19918] bond12: (slave batadv1): making interface the new active one [ 455.744901][T19918] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 456.069835][T19950] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 456.475229][T19986] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 456.631018][T19989] tipc: Enabling of bearer rejected, failed to enable media [ 456.739362][T20011] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 456.795462][T20016] dvmrp0: entered allmulticast mode [ 456.933119][T20029] IPv6: sit1: Disabled Multicast RS [ 456.967245][T20029] sit1: entered allmulticast mode [ 457.025371][T20030] lo speed is unknown, defaulting to 1000 [ 457.471714][T20061] netlink: 'syz.1.3819': attribute type 29 has an invalid length. [ 457.481353][T20061] netlink: 'syz.1.3819': attribute type 29 has an invalid length. [ 457.775745][T20080] tipc: Enabled bearer , priority 0 [ 457.793744][T20083] netlink: 'syz.5.3824': attribute type 13 has an invalid length. [ 457.802811][T20080] syzkaller0: entered promiscuous mode [ 457.820337][T20080] syzkaller0: entered allmulticast mode [ 457.820369][T20083] netlink: 'syz.5.3824': attribute type 17 has an invalid length. [ 458.259854][T20088] lo speed is unknown, defaulting to 1000 [ 458.319606][T20079] tipc: Resetting bearer [ 458.341347][T20079] tipc: Disabling bearer [ 458.713393][T20143] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 458.734319][T20145] __nla_validate_parse: 15 callbacks suppressed [ 458.734338][T20145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3842'. [ 458.755874][T20141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.767556][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.781546][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.804881][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.830468][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.858014][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.881584][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.914975][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 458.935417][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 459.110733][T20167] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 459.148654][T20167] CPU: 1 UID: 0 PID: 20167 Comm: syz.1.3848 Not tainted syzkaller #0 PREEMPT(full) [ 459.148711][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.148738][T20167] Call Trace: [ 459.148746][T20167] [ 459.148756][T20167] dump_stack_lvl+0x189/0x250 [ 459.148786][T20167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.148807][T20167] ? __pfx__printk+0x10/0x10 [ 459.148831][T20167] ? kernfs_root+0x1c/0x230 [ 459.148853][T20167] ? kernfs_path_from_node+0x2f/0x290 [ 459.148872][T20167] ? kernfs_path_from_node+0x250/0x290 [ 459.148892][T20167] ? kernfs_path_from_node+0x2f/0x290 [ 459.148913][T20167] sysfs_warn_dup+0x8e/0xa0 [ 459.148932][T20167] sysfs_do_create_link_sd+0xc0/0x110 [ 459.148953][T20167] device_add_class_symlinks+0x1cf/0x240 [ 459.148976][T20167] device_add+0x475/0xb50 [ 459.148996][T20167] wiphy_register+0x1ba6/0x28d0 [ 459.149031][T20167] ? __pfx_wiphy_register+0x10/0x10 [ 459.149062][T20167] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 459.149087][T20167] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 459.149110][T20167] ieee80211_register_hw+0x3425/0x4080 [ 459.149140][T20167] ? ieee80211_register_hw+0x14e1/0x4080 [ 459.149164][T20167] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 459.149185][T20167] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.149213][T20167] ? __hrtimer_setup+0x187/0x210 [ 459.149230][T20167] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 459.149256][T20167] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 459.149294][T20167] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 459.149316][T20167] ? trace_kmalloc+0x1f/0xd0 [ 459.149338][T20167] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 459.149363][T20167] ? kstrndup+0xbf/0x160 [ 459.149386][T20167] hwsim_new_radio_nl+0xea4/0x1b10 [ 459.149411][T20167] ? __pfx___nla_validate_parse+0x10/0x10 [ 459.149444][T20167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.149472][T20167] ? __nla_parse+0x40/0x60 [ 459.149499][T20167] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 459.149526][T20167] genl_family_rcv_msg_doit+0x215/0x300 [ 459.149551][T20167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.149580][T20167] ? bpf_lsm_capable+0x9/0x20 [ 459.149602][T20167] ? security_capable+0x7e/0x2e0 [ 459.149630][T20167] genl_rcv_msg+0x60e/0x790 [ 459.149654][T20167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.149673][T20167] ? __kasan_slab_alloc+0x6c/0x80 [ 459.149695][T20167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.149718][T20167] ? __netlink_lookup+0xbd/0x810 [ 459.149734][T20167] ? rcu_is_watching+0x15/0xb0 [ 459.149758][T20167] netlink_rcv_skb+0x205/0x470 [ 459.149784][T20167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.149805][T20167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.149835][T20167] ? lock_release+0x4b/0x3e0 [ 459.149861][T20167] ? down_read+0x1ad/0x2e0 [ 459.149880][T20167] genl_rcv+0x28/0x40 [ 459.149898][T20167] netlink_unicast+0x82c/0x9e0 [ 459.149926][T20167] ? __pfx_netlink_unicast+0x10/0x10 [ 459.149958][T20167] ? netlink_sendmsg+0x642/0xb30 [ 459.149974][T20167] ? skb_put+0x11b/0x210 [ 459.149994][T20167] netlink_sendmsg+0x805/0xb30 [ 459.150015][T20167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.150034][T20167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.150053][T20167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.150078][T20167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.150095][T20167] __sock_sendmsg+0x21c/0x270 [ 459.150121][T20167] ____sys_sendmsg+0x505/0x830 [ 459.150142][T20167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.150166][T20167] ? import_iovec+0x74/0xa0 [ 459.150188][T20167] ___sys_sendmsg+0x21f/0x2a0 [ 459.150207][T20167] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.150230][T20167] ? futex_wake+0x4b2/0x560 [ 459.150262][T20167] ? __fget_files+0x2a/0x420 [ 459.150276][T20167] ? __fget_files+0x3a0/0x420 [ 459.150294][T20167] __x64_sys_sendmsg+0x19b/0x260 [ 459.150315][T20167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.150339][T20167] ? rcu_is_watching+0x15/0xb0 [ 459.150360][T20167] ? rcu_is_watching+0x15/0xb0 [ 459.150378][T20167] do_syscall_64+0xfa/0x3b0 [ 459.150398][T20167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.150417][T20167] ? clear_bhb_loop+0x60/0xb0 [ 459.150438][T20167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.150465][T20167] RIP: 0033:0x7fb8e098ebe9 [ 459.150485][T20167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.150502][T20167] RSP: 002b:00007fb8e173f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.150525][T20167] RAX: ffffffffffffffda RBX: 00007fb8e0bb5fa0 RCX: 00007fb8e098ebe9 [ 459.150540][T20167] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 459.150554][T20167] RBP: 00007fb8e0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 459.150567][T20167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.150579][T20167] R13: 00007fb8e0bb6038 R14: 00007fb8e0bb5fa0 R15: 00007ffe1b281198 [ 459.150602][T20167] [ 459.764930][T20180] team0: Port device dummy0 added [ 459.800648][T20182] lo speed is unknown, defaulting to 1000 [ 459.855622][T20184] team0: Port device dummy0 removed [ 459.879505][T20184] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 460.328446][T20200] lo speed is unknown, defaulting to 1000 [ 460.549204][ T30] audit: type=1800 audit(1756004804.063:7): pid=20206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3858" name="memory.events" dev="tmpfs" ino=2618 res=0 errno=0 [ 460.872799][T20225] þëÿB*: renamed from dummy0 (while UP) [ 461.371730][T20263] validate_nla: 95 callbacks suppressed [ 461.371748][T20263] netlink: 'syz.5.3875': attribute type 11 has an invalid length. [ 461.387706][T20262] netlink: 'syz.5.3875': attribute type 11 has an invalid length. [ 461.519817][T20278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.799315][T20304] netlink: 'syz.1.3883': attribute type 26 has an invalid length. [ 461.917148][T20318] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 461.946077][T20318] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 462.054795][T20333] bridge0: port 1(ipvlan0) entered blocking state [ 462.063763][T20333] bridge0: port 1(ipvlan0) entered disabled state [ 462.075284][T20333] ipvlan0: entered allmulticast mode [ 462.082364][T20333] bridge0: entered allmulticast mode [ 462.091341][T20333] ipvlan0: left allmulticast mode [ 462.098771][T20333] bridge0: left allmulticast mode [ 462.124089][T20331] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 462.325143][T20358] lo speed is unknown, defaulting to 1000 [ 462.371379][T20363] batman_adv: batadv0: Adding interface: ip6gretap2 [ 462.404557][T20363] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.522511][T20363] batman_adv: batadv0: Interface activated: ip6gretap2 [ 462.673381][T20381] netlink: 'syz.1.3907': attribute type 16 has an invalid length. [ 462.696680][T20381] netlink: 'syz.1.3907': attribute type 17 has an invalid length. [ 463.008977][T20405] openvswitch: netlink: Message has 16 unknown bytes. [ 463.057797][T20409] tipc: Enabling of bearer rejected, failed to enable media [ 463.529547][T20435] netlink: 'syz.0.3923': attribute type 12 has an invalid length. [ 463.554925][T20435] netlink: 'syz.0.3923': attribute type 29 has an invalid length. [ 463.565039][T20435] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 463.615686][T20445] ip6tnl1: entered promiscuous mode [ 463.624179][T20445] ip6tnl1: entered allmulticast mode [ 463.635452][T20445] team0: Device ip6tnl1 is of different type [ 463.751940][T20435] netlink: 'syz.0.3923': attribute type 12 has an invalid length. [ 463.761393][T20435] netlink: 'syz.0.3923': attribute type 29 has an invalid length. [ 463.770169][T20435] __nla_validate_parse: 102 callbacks suppressed [ 463.770189][T20435] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3923'. [ 463.813156][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3922'. [ 464.069897][T20474] veth0: entered promiscuous mode [ 464.089867][T20474] pim6reg: entered allmulticast mode [ 464.105015][T20474] pim6reg: left allmulticast mode [ 464.148989][T20480] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3933'. [ 464.171215][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3934'. [ 464.197855][T20473] veth0: left promiscuous mode [ 464.265391][T20484] lo speed is unknown, defaulting to 1000 [ 464.387400][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 464.429488][T20495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3937'. [ 464.450998][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 464.460457][T20495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3937'. [ 464.480926][T20499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3938'. [ 464.584346][T20509] IPVS: length: 129 != 24 [ 464.862896][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3948'. [ 464.867212][T20535] pim6reg: entered allmulticast mode [ 464.883857][T20535] pim6reg: left allmulticast mode [ 465.132236][T20550] dummy0: entered allmulticast mode [ 465.138545][T20550] batman_adv: batadv0: Interface activated: dummy0 [ 465.145592][T20550] batadv0: mtu less than device minimum [ 465.156496][T20550] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.167700][T20550] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.178875][T20550] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.190201][T20550] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.201411][T20550] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.228907][T20550] batman_adv: batadv0: Interface deactivated: dummy0 [ 465.235643][T20550] batman_adv: batadv0: Removing interface: dummy0 [ 465.580040][T20571] lo speed is unknown, defaulting to 1000 [ 465.935341][T20594] 8021q: VLANs not supported on nlmon0 [ 466.108008][ T43] IPVS: starting estimator thread 0... [ 466.131818][T20600] lo speed is unknown, defaulting to 1000 [ 466.206320][T20603] IPVS: using max 41 ests per chain, 98400 per kthread [ 466.452317][T20612] lo speed is unknown, defaulting to 1000 [ 466.600735][T20608] lo speed is unknown, defaulting to 1000 [ 466.892218][T20631] validate_nla: 4 callbacks suppressed [ 466.892237][T20631] netlink: 'syz.1.3978': attribute type 29 has an invalid length. [ 466.911581][T20631] netlink: 'syz.1.3978': attribute type 29 has an invalid length. [ 466.923432][T20631] unsupported nla_type 58 [ 467.212317][T20644] vlan0: entered promiscuous mode [ 467.240367][T20644] macvtap0: entered promiscuous mode [ 467.438036][T20656] net_ratelimit: 18 callbacks suppressed [ 467.438057][T20656] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 467.588075][T20659] tipc: Enabled bearer , priority 0 [ 467.595533][T20659] syzkaller0: entered promiscuous mode [ 467.602127][T20659] syzkaller0: entered allmulticast mode [ 467.637639][T20659] tipc: Resetting bearer [ 467.658607][T20658] tipc: Resetting bearer [ 467.683892][T20658] tipc: Disabling bearer [ 468.281956][ T30] audit: type=1804 audit(1756004811.813:8): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3993" name="/newroot/177/cgroup.controllers" dev="tmpfs" ino=921 res=1 errno=0 [ 468.337741][ T30] audit: type=1800 audit(1756004811.813:9): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3993" name="cgroup.controllers" dev="tmpfs" ino=921 res=0 errno=0 [ 468.390144][T20701] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 468.408418][ T30] audit: type=1800 audit(1756004811.813:10): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3993" name="cgroup.controllers" dev="tmpfs" ino=921 res=0 errno=0 [ 468.857340][T20732] __nla_validate_parse: 20 callbacks suppressed [ 468.857360][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4003'. [ 468.885040][T20730] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 468.918237][T20734] tipc: Enabled bearer , priority 0 [ 468.988874][T20730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.997203][T20734] syzkaller0: entered promiscuous mode [ 469.003584][T20734] syzkaller0: entered allmulticast mode [ 469.015386][T20736] lo speed is unknown, defaulting to 1000 [ 469.031266][T20734] tipc: Resetting bearer [ 469.044816][T20733] tipc: Resetting bearer [ 469.062012][T20733] tipc: Disabling bearer [ 469.205200][T20754] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4008'. [ 469.220514][T20754] þëÿB*: entered promiscuous mode [ 469.225648][T20754] vlan3: entered promiscuous mode [ 469.332668][T20766] netlink: 'syz.5.4013': attribute type 12 has an invalid length. [ 469.525779][T20774] Bluetooth: MGMT ver 1.23 [ 469.664203][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4018'. [ 469.713344][T20784] syz_tun: entered allmulticast mode [ 469.731381][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4018'. [ 469.787432][T20799] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4018'. [ 469.824720][T20783] syz_tun: left allmulticast mode [ 469.979457][T20807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4023'. [ 469.988653][T20807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4023'. [ 470.038675][T20803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.294692][T20813] macsec0: entered promiscuous mode [ 470.301006][T20813] macsec0: entered allmulticast mode [ 470.312728][T20814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4026'. [ 470.383277][T20820] lo speed is unknown, defaulting to 1000 [ 470.411980][T20824] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4030'. [ 470.415784][T20826] netlink: 'syz.1.4031': attribute type 10 has an invalid length. [ 470.434822][T20826] bond0: (slave wlan1): Opening slave failed [ 470.444950][T20826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4031'. [ 470.655797][T20838] veth0: entered promiscuous mode [ 470.665311][T20822] lo speed is unknown, defaulting to 1000 [ 470.703863][T20838] veth0 (unregistering): left promiscuous mode [ 470.806811][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.380192][T20848] netlink: 'syz.5.4037': attribute type 7 has an invalid length. [ 471.388307][T20848] netlink: 'syz.5.4037': attribute type 8 has an invalid length. [ 471.406662][T20848] netlink: 'syz.5.4037': attribute type 4 has an invalid length. [ 471.709151][T20882] netlink: 'syz.1.4049': attribute type 20 has an invalid length. [ 471.740988][T20873] lo speed is unknown, defaulting to 1000 [ 471.900925][T20889] tipc: Enabled bearer , priority 0 [ 471.933044][T20889] syzkaller0: entered promiscuous mode [ 471.949271][T20889] syzkaller0: entered allmulticast mode [ 471.992931][T20895] validate_nla: 1 callbacks suppressed [ 471.992950][T20895] netlink: 'syz.3.4056': attribute type 1 has an invalid length. [ 472.012218][T20889] tipc: Resetting bearer [ 472.075530][T20895] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.574884][T20941] netlink: 'syz.3.4065': attribute type 1 has an invalid length. [ 472.776543][T20945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.804574][T20941] bond9: entered promiscuous mode [ 472.823877][T20941] bond9: entered allmulticast mode [ 472.842303][T20941] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.940836][T20888] tipc: Resetting bearer [ 473.004499][T20888] tipc: Disabling bearer [ 473.219430][T20971] lo speed is unknown, defaulting to 1000 [ 473.502763][T20995] siw: device registration error -23 [ 473.958499][T21032] __nla_validate_parse: 12 callbacks suppressed [ 473.958519][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 474.224895][T21044] lo speed is unknown, defaulting to 1000 [ 474.526780][T21047] lo speed is unknown, defaulting to 1000 [ 474.600352][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4099'. [ 474.626155][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 474.671102][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4094'. [ 474.872645][T21078] lo speed is unknown, defaulting to 1000 [ 474.964604][T21085] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:21 [ 475.220145][T21096] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4107'. [ 475.325948][T21104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4109'. [ 475.399971][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4108'. [ 475.581286][T21107] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 475.593180][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 475.659754][T21113] lo speed is unknown, defaulting to 1000 [ 475.725566][T21120] sit3: entered promiscuous mode [ 475.737088][T21120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4113'. [ 475.873866][T21124] team0: Port device team_slave_0 removed [ 476.083007][T21130] lo speed is unknown, defaulting to 1000 [ 476.272151][T21140] lo speed is unknown, defaulting to 1000 [ 476.737611][T21159] netlink: 'syz.5.4122': attribute type 6 has an invalid length. [ 477.104727][T21174] lo speed is unknown, defaulting to 1000 [ 477.162297][T21188] netlink: 'syz.5.4132': attribute type 6 has an invalid length. [ 477.579921][T21206] bond0: (slave bridge0): Releasing backup interface [ 477.590437][T21206] bridge_slave_0: left allmulticast mode [ 477.596110][T21206] bridge_slave_0: left promiscuous mode [ 477.641216][T21206] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.657407][T21214] netlink: 'syz.5.4138': attribute type 8 has an invalid length. [ 477.701363][T21206] bridge_slave_1: left allmulticast mode [ 477.720189][T21206] bridge_slave_1: left promiscuous mode [ 477.746449][T21206] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.787441][T21220] netlink: 'syz.3.4140': attribute type 10 has an invalid length. [ 477.795884][T21206] bond0: (slave bond_slave_0): Releasing backup interface [ 477.811328][T21206] bond0: (slave bond_slave_1): Releasing backup interface [ 477.822454][T21206] team0: Port device team_slave_0 removed [ 477.829782][T21206] team0: Port device team_slave_1 removed [ 477.835821][T21206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.844138][T21206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.852722][T21206] bond1: (slave gretap1): Releasing active interface [ 477.861304][T21206] bond5: (slave gretap2): Releasing active interface [ 477.898850][T21220] bond0: (slave wlan1): Opening slave failed [ 478.019099][T21226] lo speed is unknown, defaulting to 1000 [ 478.084533][T21233] netlink: 'syz.4.4143': attribute type 15 has an invalid length. [ 478.120591][T21233] netlink: 'syz.4.4143': attribute type 15 has an invalid length. [ 478.193721][T21238] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.201221][T21238] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.250854][T21238] 0ªX¹¦À: left allmulticast mode [ 478.323276][T21238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.337771][T21238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.423114][T21238] bridge1: left promiscuous mode [ 478.435938][T21238] bridge2: left promiscuous mode [ 478.444089][T21238] gretap1: left allmulticast mode [ 478.452866][T21238] erspan0: left allmulticast mode [ 478.460453][T21238] macvtap1: left promiscuous mode [ 478.465661][T21238] macvtap1: left allmulticast mode [ 478.480779][T21238] sit1: left allmulticast mode [ 478.495724][T21241] IPv6: sit2: Disabled Multicast RS [ 478.531541][ T8385] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.546528][T21247] netlink: 'syz.5.4141': attribute type 6 has an invalid length. [ 478.563661][ T8385] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.589060][ T65] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.626925][ T65] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.785614][T21248] syzkaller0: entered promiscuous mode [ 478.803750][T21248] syzkaller0: entered allmulticast mode [ 478.988986][T21263] lo speed is unknown, defaulting to 1000 [ 478.998423][T21278] tipc: Enabled bearer , priority 0 [ 479.033280][T21276] syzkaller0: entered promiscuous mode [ 479.046391][T21276] syzkaller0: entered allmulticast mode [ 479.094142][T21276] tipc: Resetting bearer [ 479.115863][T21275] tipc: Resetting bearer [ 479.144622][T21275] tipc: Disabling bearer [ 479.299919][T21283] tipc: Enabled bearer , priority 0 [ 479.323114][T21283] syzkaller0: entered promiscuous mode [ 479.334643][T21283] syzkaller0: entered allmulticast mode [ 479.356042][T21280] lo speed is unknown, defaulting to 1000 [ 479.407944][T21283] tipc: Resetting bearer [ 479.471560][T21282] tipc: Resetting bearer [ 479.495445][T21282] tipc: Disabling bearer [ 479.748552][T21287] __nla_validate_parse: 11 callbacks suppressed [ 479.748570][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4157'. [ 479.780445][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 479.889515][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 479.910306][T21293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4160'. [ 480.361424][T21317] netlink: zone id is out of range [ 480.370055][T21317] netlink: zone id is out of range [ 480.375654][T21317] netlink: zone id is out of range [ 480.382625][T21317] netlink: zone id is out of range [ 480.391825][T21317] netlink: zone id is out of range [ 480.398819][T21317] netlink: zone id is out of range [ 480.415469][T21317] netlink: zone id is out of range [ 480.434588][T21317] netlink: zone id is out of range [ 480.483342][T21323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4166'. [ 480.512172][T21317] netlink: zone id is out of range [ 480.518350][T21317] netlink: zone id is out of range [ 480.780094][T21344] netlink: 'syz.1.4174': attribute type 1 has an invalid length. [ 480.848519][T21344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.973937][T21344] bond8: (slave gretap3): making interface the new active one [ 480.990740][T21344] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 481.170453][T21368] pim6reg: entered allmulticast mode [ 481.185772][T21367] pim6reg: left allmulticast mode [ 481.303152][T21376] netlink: 'syz.3.4183': attribute type 30 has an invalid length. [ 481.316577][T21376] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 481.325996][T21376] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 481.432961][T21386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4186'. [ 481.805375][T21395] syz.0.4187 uses old SIOCAX25GETINFO [ 482.218371][T21416] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4191'. [ 482.264866][T21416] netlink: 812 bytes leftover after parsing attributes in process `syz.3.4191'. [ 482.312836][T21421] lo speed is unknown, defaulting to 1000 [ 482.319286][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4195'. [ 482.385154][T21427] netlink: 'syz.1.4194': attribute type 1 has an invalid length. [ 482.423789][T21427] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4194'. [ 482.654117][T21436] lo speed is unknown, defaulting to 1000 [ 483.272080][T21469] "syz.5.4204" (21469) uses obsolete ecb(arc4) skcipher [ 483.467347][T21476] bond0: entered promiscuous mode [ 483.483126][T21476] debugfs: 'hsr1' already exists in 'hsr' [ 483.501278][T21476] Cannot create hsr debugfs directory [ 483.512023][T21476] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 483.525620][T21476] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 483.541592][T21476] hsr1: entered allmulticast mode [ 483.568988][T21476] bond0: entered allmulticast mode [ 483.574306][T21476] batadv0: entered allmulticast mode [ 483.609225][T21476] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 483.633112][T21476] bond0: left promiscuous mode [ 483.661785][T21484] netlink: 'syz.4.4207': attribute type 1 has an invalid length. [ 483.678734][T21484] bond4: entered promiscuous mode [ 483.684137][T21484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.727829][T21484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.740176][T21484] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 483.752762][T21484] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 483.765408][T21484] bond4: (slave wireguard0): making interface the new active one [ 483.765761][T21490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.779533][T21484] wireguard0: entered promiscuous mode [ 483.780479][T21490] IPv6: NLM_F_CREATE should be set when creating new route [ 483.793141][T21490] IPv6: NLM_F_CREATE should be set when creating new route [ 483.805477][T21484] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 483.812094][T21490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.063602][T21512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.079870][T21513] sctp: [Deprecated]: syz.4.4211 (pid 21513) Use of int in maxseg socket option. [ 484.079870][T21513] Use struct sctp_assoc_value instead [ 484.106141][T21515] netlink: 'syz.3.4216': attribute type 30 has an invalid length. [ 484.114888][ T6824] lo speed is unknown, defaulting to 1000 [ 484.121119][ T6824] syz0: Port: 1 Link ACTIVE [ 484.125940][ T6822] lo speed is unknown, defaulting to 1000 [ 484.234772][ T30] audit: type=1107 audit(1756004827.763:11): pid=21524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='êZpˆ' [ 484.374866][T21530] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 484.471561][T21547] netlink: 'syz.5.4227': attribute type 4 has an invalid length. [ 484.485801][T21547] netlink: 'syz.5.4227': attribute type 4 has an invalid length. [ 484.487788][ T982] lo speed is unknown, defaulting to 1000 [ 484.501836][T12014] lo speed is unknown, defaulting to 1000 [ 484.513621][ T6824] lo speed is unknown, defaulting to 1000 [ 484.552086][T21552] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 484.591476][T21552] dummy0: left allmulticast mode [ 484.622584][T21556] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 484.657587][T21552] team0: Device dummy0 failed to register rx_handler [ 484.857178][T21570] __nla_validate_parse: 8 callbacks suppressed [ 484.857197][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4232'. [ 484.962211][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 485.025726][T21590] netlink: 648 bytes leftover after parsing attributes in process `syz.5.4232'. [ 485.114264][T21594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4240'. [ 485.125182][T21595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4240'. [ 485.298772][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 485.484181][T21614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4244'. [ 485.497970][T21617] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.532686][T21619] team0: entered promiscuous mode [ 485.538233][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 485.547696][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4245'. [ 485.576724][T21619] team0 (unregistering): left promiscuous mode [ 485.708971][T21629] netlink: 'syz.1.4250': attribute type 21 has an invalid length. [ 485.717330][T21629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4250'. [ 485.874761][T21638] bridge4: entered promiscuous mode [ 486.012655][T21651] lo speed is unknown, defaulting to 1000 [ 486.408154][ T5868] Bluetooth: hci1: command tx timeout [ 486.539080][T21667] bond8: (slave gretap3): Releasing active interface [ 486.984950][T21686] netlink: 'syz.1.4265': attribute type 10 has an invalid length. [ 487.218663][T21700] net_ratelimit: 13 callbacks suppressed [ 487.218683][T21700] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 487.250120][T21700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 487.498408][T21713] lo speed is unknown, defaulting to 1000 [ 487.915420][ T8078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.930260][ T8078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.938853][ T8078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.948004][ T8078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.956791][ T8078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.981998][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.989824][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.997976][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.008499][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.016681][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.106096][T21725] lo speed is unknown, defaulting to 1000 [ 488.225262][T21743] netlink: 'syz.0.4283': attribute type 13 has an invalid length. [ 488.263636][T21743] netlink: 'syz.0.4283': attribute type 17 has an invalid length. [ 488.345974][T21743] erspan0: left promiscuous mode [ 488.384071][T21743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.393590][T21743] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.412320][T21743] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 488.530545][T17486] bond9 (unregistering): (slave erspan0): Releasing active interface [ 488.577481][T17486] dvmrp8 (unregistering): left allmulticast mode [ 488.585455][T17486] dvmrp0 (unregistering): left allmulticast mode [ 488.917117][T17486] bond0 (unregistering): Released all slaves [ 488.932772][T17486] bond1 (unregistering): Released all slaves [ 488.947605][T17486] bond2 (unregistering): Released all slaves [ 488.957528][T17486] bond3 (unregistering): Released all slaves [ 488.967975][T17486] bond4 (unregistering): Released all slaves [ 488.983876][T17486] bond5 (unregistering): Released all slaves [ 489.008570][T17486] bond6 (unregistering): Released all slaves [ 489.021477][T17486] bond7 (unregistering): Released all slaves [ 489.030654][T17486] bond8 (unregistering): Released all slaves [ 489.053130][T17486] bond9 (unregistering): (slave veth7): Releasing active interface [ 489.062308][T17486] bond9 (unregistering): Released all slaves [ 489.074382][T17486] bond10 (unregistering): Released all slaves [ 489.084487][T17486] bond11 (unregistering): Released all slaves [ 489.101087][T17486] bond12 (unregistering): (slave batadv1): Releasing active interface [ 489.112833][T17486] bond12 (unregistering): Released all slaves [ 489.125843][T17486] bond13 (unregistering): Released all slaves [ 489.135335][T17486] bond14 (unregistering): Released all slaves [ 489.199682][T21749] lo speed is unknown, defaulting to 1000 [ 489.254596][T17486] _ÐZ`Ô€@: left promiscuous mode [ 489.344791][T17486] tipc: Left network mode [ 489.395316][T21750] lo speed is unknown, defaulting to 1000 [ 489.618935][T21725] chnl_net:caif_netlink_parms(): no params data found [ 489.901156][T21725] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.922300][T21725] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.934488][T21725] bridge_slave_0: entered allmulticast mode [ 489.951113][T21725] bridge_slave_0: entered promiscuous mode [ 489.963618][T21780] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 489.968190][T21725] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.981990][T21725] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.989482][T21725] bridge_slave_1: entered allmulticast mode [ 490.002227][T21725] bridge_slave_1: entered promiscuous mode [ 490.079821][T21782] __nla_validate_parse: 2 callbacks suppressed [ 490.079841][T21782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4294'. [ 490.102420][ T8078] Bluetooth: hci0: command tx timeout [ 490.144165][T17486] hsr_slave_0: left promiscuous mode [ 490.150949][T17486] hsr_slave_1: left promiscuous mode [ 490.280109][T17323] smc: removing ib device syz0 [ 490.340654][ T6822] lo speed is unknown, defaulting to 1000 [ 490.355077][ T6822] syz0: Port: 1 Link DOWN [ 490.430697][T21725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.457583][T21725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.639257][T21725] team0: Port device team_slave_0 added [ 490.688253][T21725] team0: Port device team_slave_1 added [ 490.939197][T21725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.946177][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.984864][T21725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.046178][T21725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.065714][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.097399][T21725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.251558][T21811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.310529][T21725] hsr_slave_0: entered promiscuous mode [ 491.333846][T21725] hsr_slave_1: entered promiscuous mode [ 491.349155][T21725] debugfs: 'hsr0' already exists in 'hsr' [ 491.365074][T21725] Cannot create hsr debugfs directory [ 491.805709][T17486] IPVS: stop unused estimator thread 0... [ 492.061167][T21827] !: renamed from dummy0 [ 492.166434][ T8078] Bluetooth: hci0: command tx timeout [ 492.201180][T21725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.215062][T21725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.244204][T21725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.256067][T21725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 492.297116][T21846] netlink: 'syz.0.4309': attribute type 3 has an invalid length. [ 492.385001][T21852] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 492.391349][T21725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.420248][T21725] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.440824][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.448009][T17467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.498161][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.505328][T17486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.803318][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4315'. [ 492.842419][T21881] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 493.006124][T21725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.049640][T21908] netlink: 'syz.3.4319': attribute type 13 has an invalid length. [ 493.079658][T21908] netlink: 'syz.3.4319': attribute type 17 has an invalid length. [ 493.084474][T21915] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4321'. [ 493.110782][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 493.139229][T21908] erspan0: left allmulticast mode [ 493.234133][T21908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.254214][T21908] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.338883][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 493.364376][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 493.461844][T21908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.483580][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 493.517287][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 493.548626][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 493.578743][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 493.632354][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 493.658564][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 493.684170][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 493.729655][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 493.781424][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 493.800747][T21948] tun0: tun_chr_ioctl cmd 1074025672 [ 493.806850][T21948] tun0: ignored: set checksum disabled [ 493.843509][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 493.925683][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 493.962270][T21725] veth0_vlan: entered promiscuous mode [ 493.963267][T21952] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4331'. [ 493.992002][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4326'. [ 494.005514][T21725] veth1_vlan: entered promiscuous mode [ 494.051178][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 494.083889][T21725] veth0_macvtap: entered promiscuous mode [ 494.090038][T21931] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 494.105090][T21931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 494.140167][T21725] veth1_macvtap: entered promiscuous mode [ 494.218548][T21725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.234823][T21725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.251730][ T8078] Bluetooth: hci0: command tx timeout [ 494.265180][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.305733][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.340431][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.361857][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.485997][T17486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.494506][T17486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.549907][T17486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.560918][T17486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.782934][T21988] netlink: 'syz.1.4340': attribute type 1 has an invalid length. [ 494.930005][T21994] syzkaller1: entered promiscuous mode [ 494.953154][T21994] syzkaller1: entered allmulticast mode [ 495.184969][T22003] __nla_validate_parse: 6 callbacks suppressed [ 495.184992][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4342'. [ 495.344541][T21999] geneve2: entered promiscuous mode [ 495.363908][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4343'. [ 495.386177][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4343'. [ 495.431157][T17467] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.454360][T17467] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.479880][T17467] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.495265][T17467] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.537436][T17467] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.556686][T17323] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.565469][T17323] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.590205][T17323] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.645988][T22032] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 495.726811][T22038] netlink: 428 bytes leftover after parsing attributes in process `syz.5.4350'. [ 495.820767][T22038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4350'. [ 495.853199][T22038] netlink: 'syz.5.4350': attribute type 27 has an invalid length. [ 495.873338][T22043] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4352'. [ 495.898213][T22046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4354'. [ 495.941339][T22042] bpq0: left promiscuous mode [ 495.958044][T22042] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:19492 [ 496.134872][T22059] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4358'. [ 496.162197][T22056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4357'. [ 496.278685][T22065] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.4360'. [ 496.326733][ T8078] Bluetooth: hci0: command tx timeout [ 496.583834][T22081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.059765][T22126] netlink: 'syz.5.4375': attribute type 1 has an invalid length. [ 497.293849][T22147] TCP: TCP_TX_DELAY enabled [ 497.363695][T22153] netlink: 'syz.5.4384': attribute type 10 has an invalid length. [ 497.380489][T22153] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.390243][T22153] bond0: (slave team0): Enslaving as an active interface with an up link [ 497.460356][T22157] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 497.471922][T22157] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 497.488180][T22158] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 497.516084][T22158] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 497.723592][T22175] FAULT_INJECTION: forcing a failure. [ 497.723592][T22175] name failslab, interval 1, probability 0, space 0, times 0 [ 497.755211][T22175] CPU: 1 UID: 0 PID: 22175 Comm: syz.3.4394 Not tainted syzkaller #0 PREEMPT(full) [ 497.755238][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.755250][T22175] Call Trace: [ 497.755257][T22175] [ 497.755266][T22175] dump_stack_lvl+0x189/0x250 [ 497.755300][T22175] ? __pfx____ratelimit+0x10/0x10 [ 497.755325][T22175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.755343][T22175] ? __pfx__printk+0x10/0x10 [ 497.755364][T22175] ? crng_make_state+0x3fc/0x700 [ 497.755384][T22175] ? crng_make_state+0x13a/0x700 [ 497.755404][T22175] should_fail_ex+0x414/0x560 [ 497.755427][T22175] should_failslab+0xa8/0x100 [ 497.755450][T22175] __kmalloc_cache_noprof+0x70/0x3d0 [ 497.755471][T22175] ? sctp_add_bind_addr+0x8c/0x370 [ 497.755492][T22175] ? __pfx__get_random_bytes+0x10/0x10 [ 497.755509][T22175] sctp_add_bind_addr+0x8c/0x370 [ 497.755533][T22175] sctp_copy_local_addr_list+0x30b/0x4e0 [ 497.755557][T22175] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 497.755578][T22175] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 497.755601][T22175] ? sctp_v6_is_any+0x64/0x80 [ 497.755626][T22175] ? sctp_copy_one_addr+0x93/0x360 [ 497.755649][T22175] sctp_bind_addr_copy+0xb3/0x3c0 [ 497.755672][T22175] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 497.755694][T22175] sctp_connect_new_asoc+0x2e0/0x690 [ 497.755713][T22175] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 497.755734][T22175] ? sctp_get_af_specific+0x29/0x80 [ 497.755754][T22175] ? sctp_inet6_send_verify+0x80/0x300 [ 497.755776][T22175] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 497.755796][T22175] __sctp_connect+0x5ba/0xd50 [ 497.755818][T22175] ? lock_release+0x4b/0x3e0 [ 497.755843][T22175] ? __pfx___sctp_connect+0x10/0x10 [ 497.755858][T22175] ? __might_fault+0xcc/0x130 [ 497.755882][T22175] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 497.755903][T22175] ? security_sctp_bind_connect+0x7e/0x2e0 [ 497.755925][T22175] sctp_getsockopt_connectx3+0x2c4/0x440 [ 497.755949][T22175] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 497.755972][T22175] ? sctp_getsockopt+0x135/0xb60 [ 497.755988][T22175] ? __local_bh_enable_ip+0x12d/0x1c0 [ 497.756004][T22175] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 497.756025][T22175] sctp_getsockopt+0x98a/0xb60 [ 497.756039][T22175] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 497.756063][T22175] do_sock_getsockopt+0x36f/0x450 [ 497.756081][T22175] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 497.756097][T22175] ? rcu_needs_cpu+0xa0/0xb0 [ 497.756112][T22175] ? __fget_files+0x3a0/0x420 [ 497.756127][T22175] ? __fget_files+0x2a/0x420 [ 497.756146][T22175] __x64_sys_getsockopt+0x1a5/0x250 [ 497.756162][T22175] ? rcu_needs_cpu+0xa0/0xb0 [ 497.756179][T22175] ? rcu_needs_cpu+0xa0/0xb0 [ 497.756196][T22175] do_syscall_64+0xfa/0x3b0 [ 497.756216][T22175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.756231][T22175] ? clear_bhb_loop+0x60/0xb0 [ 497.756248][T22175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.756264][T22175] RIP: 0033:0x7f747818ebe9 [ 497.756286][T22175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.756301][T22175] RSP: 002b:00007f74790d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 497.756318][T22175] RAX: ffffffffffffffda RBX: 00007f74783b5fa0 RCX: 00007f747818ebe9 [ 497.756330][T22175] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 497.756341][T22175] RBP: 00007f74790d2090 R08: 0000200000000540 R09: 0000000000000000 [ 497.756353][T22175] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.756365][T22175] R13: 00007f74783b6038 R14: 00007f74783b5fa0 R15: 00007ffc103f2d58 [ 497.756383][T22175] [ 497.789701][T22183] vlan2: entered allmulticast mode [ 498.039872][T22189] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 498.044885][T22183] macvlan0: entered allmulticast mode [ 498.151478][T22183] veth1_vlan: entered allmulticast mode [ 498.451990][T22213] validate_nla: 1 callbacks suppressed [ 498.452008][T22213] netlink: 'syz.3.4405': attribute type 7 has an invalid length. [ 498.461767][T22217] FAULT_INJECTION: forcing a failure. [ 498.461767][T22217] name failslab, interval 1, probability 0, space 0, times 0 [ 498.499657][T22217] CPU: 0 UID: 0 PID: 22217 Comm: syz.5.4406 Not tainted syzkaller #0 PREEMPT(full) [ 498.499682][T22217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.499691][T22217] Call Trace: [ 498.499697][T22217] [ 498.499704][T22217] dump_stack_lvl+0x189/0x250 [ 498.499728][T22217] ? __pfx____ratelimit+0x10/0x10 [ 498.499752][T22217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.499770][T22217] ? __pfx__printk+0x10/0x10 [ 498.499798][T22217] should_fail_ex+0x414/0x560 [ 498.499820][T22217] should_failslab+0xa8/0x100 [ 498.499847][T22217] __kmalloc_cache_noprof+0x70/0x3d0 [ 498.499869][T22217] ? sctp_add_bind_addr+0x8c/0x370 [ 498.499894][T22217] sctp_add_bind_addr+0x8c/0x370 [ 498.499916][T22217] sctp_copy_local_addr_list+0x30b/0x4e0 [ 498.499942][T22217] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 498.499964][T22217] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 498.499989][T22217] ? sctp_v6_is_any+0x64/0x80 [ 498.500013][T22217] ? sctp_copy_one_addr+0x93/0x360 [ 498.500036][T22217] sctp_bind_addr_copy+0xb3/0x3c0 [ 498.500059][T22217] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 498.500082][T22217] sctp_connect_new_asoc+0x2e0/0x690 [ 498.500102][T22217] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 498.500123][T22217] ? sctp_get_af_specific+0x29/0x80 [ 498.500144][T22217] ? sctp_inet6_send_verify+0x80/0x300 [ 498.500172][T22217] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 498.500192][T22217] __sctp_connect+0x5ba/0xd50 [ 498.500214][T22217] ? lock_release+0x4b/0x3e0 [ 498.500239][T22217] ? __pfx___sctp_connect+0x10/0x10 [ 498.500255][T22217] ? __might_fault+0xcc/0x130 [ 498.500278][T22217] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 498.500298][T22217] ? security_sctp_bind_connect+0x7e/0x2e0 [ 498.500321][T22217] sctp_getsockopt_connectx3+0x2c4/0x440 [ 498.500347][T22217] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 498.500369][T22217] ? sctp_getsockopt+0x135/0xb60 [ 498.500384][T22217] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.500400][T22217] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.500419][T22217] sctp_getsockopt+0x98a/0xb60 [ 498.500436][T22217] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 498.500461][T22217] do_sock_getsockopt+0x36f/0x450 [ 498.500481][T22217] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 498.500498][T22217] ? rcu_needs_cpu+0xa0/0xb0 [ 498.500516][T22217] ? __fget_files+0x3a0/0x420 [ 498.500531][T22217] ? __fget_files+0x2a/0x420 [ 498.500550][T22217] __x64_sys_getsockopt+0x1a5/0x250 [ 498.500568][T22217] ? rcu_needs_cpu+0xa0/0xb0 [ 498.500586][T22217] ? rcu_needs_cpu+0xa0/0xb0 [ 498.500604][T22217] do_syscall_64+0xfa/0x3b0 [ 498.500621][T22217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.500639][T22217] ? clear_bhb_loop+0x60/0xb0 [ 498.500658][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.500674][T22217] RIP: 0033:0x7f0ef238ebe9 [ 498.500690][T22217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.500705][T22217] RSP: 002b:00007f0ef325c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 498.500723][T22217] RAX: ffffffffffffffda RBX: 00007f0ef25b5fa0 RCX: 00007f0ef238ebe9 [ 498.500735][T22217] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 498.500745][T22217] RBP: 00007f0ef325c090 R08: 0000200000000540 R09: 0000000000000000 [ 498.500757][T22217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.500768][T22217] R13: 00007f0ef25b6038 R14: 00007f0ef25b5fa0 R15: 00007ffce3dbd498 [ 498.500787][T22217] [ 498.902768][T22224] netlink: 'syz.5.4409': attribute type 4 has an invalid length. [ 498.945176][T22230] netlink: 'syz.3.4405': attribute type 10 has an invalid length. [ 499.027711][T22234] syzkaller0: entered promiscuous mode [ 499.050558][T22234] syzkaller0: entered allmulticast mode [ 499.323487][T22251] tipc: Enabled bearer , priority 0 [ 499.331691][T22251] syzkaller0: entered promiscuous mode [ 499.337244][T22251] syzkaller0: entered allmulticast mode [ 499.351630][T22251] tipc: Resetting bearer [ 499.358972][T22250] tipc: Resetting bearer [ 499.369819][T22258] FAULT_INJECTION: forcing a failure. [ 499.369819][T22258] name failslab, interval 1, probability 0, space 0, times 0 [ 499.387919][T22258] CPU: 0 UID: 0 PID: 22258 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 499.387947][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.387959][T22258] Call Trace: [ 499.387966][T22258] [ 499.387974][T22258] dump_stack_lvl+0x189/0x250 [ 499.388005][T22258] ? __pfx____ratelimit+0x10/0x10 [ 499.388030][T22258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.388050][T22258] ? __pfx__printk+0x10/0x10 [ 499.388078][T22258] should_fail_ex+0x414/0x560 [ 499.388103][T22258] should_failslab+0xa8/0x100 [ 499.388134][T22258] __kmalloc_cache_noprof+0x70/0x3d0 [ 499.388157][T22258] ? sctp_add_bind_addr+0x8c/0x370 [ 499.388182][T22258] sctp_add_bind_addr+0x8c/0x370 [ 499.388206][T22258] sctp_copy_local_addr_list+0x30b/0x4e0 [ 499.388231][T22258] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 499.388254][T22258] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 499.388278][T22258] ? sctp_v6_is_any+0x64/0x80 [ 499.388302][T22258] ? sctp_copy_one_addr+0x93/0x360 [ 499.388326][T22258] sctp_bind_addr_copy+0xb3/0x3c0 [ 499.388349][T22258] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 499.388372][T22258] sctp_connect_new_asoc+0x2e0/0x690 [ 499.388392][T22258] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 499.388413][T22258] ? sctp_get_af_specific+0x29/0x80 [ 499.388435][T22258] ? sctp_inet6_send_verify+0x80/0x300 [ 499.388458][T22258] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 499.388477][T22258] __sctp_connect+0x5ba/0xd50 [ 499.388499][T22258] ? lock_release+0x4b/0x3e0 [ 499.388523][T22258] ? __pfx___sctp_connect+0x10/0x10 [ 499.388540][T22258] ? __might_fault+0xcc/0x130 [ 499.388563][T22258] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 499.388584][T22258] ? security_sctp_bind_connect+0x7e/0x2e0 [ 499.388607][T22258] sctp_getsockopt_connectx3+0x2c4/0x440 [ 499.388633][T22258] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 499.388655][T22258] ? sctp_getsockopt+0x135/0xb60 [ 499.388672][T22258] ? __local_bh_enable_ip+0x12d/0x1c0 [ 499.388691][T22258] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 499.388714][T22258] sctp_getsockopt+0x98a/0xb60 [ 499.388731][T22258] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 499.388755][T22258] do_sock_getsockopt+0x36f/0x450 [ 499.388776][T22258] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 499.388793][T22258] ? rcu_needs_cpu+0xa0/0xb0 [ 499.388810][T22258] ? __fget_files+0x3a0/0x420 [ 499.388826][T22258] ? __fget_files+0x2a/0x420 [ 499.388845][T22258] __x64_sys_getsockopt+0x1a5/0x250 [ 499.388863][T22258] ? rcu_needs_cpu+0xa0/0xb0 [ 499.388880][T22258] ? rcu_needs_cpu+0xa0/0xb0 [ 499.388898][T22258] do_syscall_64+0xfa/0x3b0 [ 499.388915][T22258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.388933][T22258] ? clear_bhb_loop+0x60/0xb0 [ 499.388953][T22258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.388971][T22258] RIP: 0033:0x7f747818ebe9 [ 499.388987][T22258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.389003][T22258] RSP: 002b:00007f74790d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 499.389024][T22258] RAX: ffffffffffffffda RBX: 00007f74783b5fa0 RCX: 00007f747818ebe9 [ 499.389037][T22258] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 499.389049][T22258] RBP: 00007f74790d2090 R08: 0000200000000540 R09: 0000000000000000 [ 499.389061][T22258] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.389073][T22258] R13: 00007f74783b6038 R14: 00007f74783b5fa0 R15: 00007ffc103f2d58 [ 499.389094][T22258] [ 499.389552][T22250] tipc: Disabling bearer [ 499.818408][T22273] !: renamed from dummy0 (while UP) [ 499.848159][T22273] ip6gre1: entered promiscuous mode [ 499.905293][T22277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.912611][T22277] IPv6: NLM_F_CREATE should be set when creating new route [ 500.470748][T22324] netlink: 'syz.3.4435': attribute type 23 has an invalid length. [ 500.874883][T22358] __nla_validate_parse: 13 callbacks suppressed [ 500.874901][T22358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4442'. [ 501.065843][T22372] FAULT_INJECTION: forcing a failure. [ 501.065843][T22372] name failslab, interval 1, probability 0, space 0, times 0 [ 501.096375][T22372] CPU: 0 UID: 0 PID: 22372 Comm: syz.3.4445 Not tainted syzkaller #0 PREEMPT(full) [ 501.096401][T22372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.096412][T22372] Call Trace: [ 501.096419][T22372] [ 501.096426][T22372] dump_stack_lvl+0x189/0x250 [ 501.096449][T22372] ? __pfx____ratelimit+0x10/0x10 [ 501.096472][T22372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.096490][T22372] ? __pfx__printk+0x10/0x10 [ 501.096517][T22372] should_fail_ex+0x414/0x560 [ 501.096538][T22372] should_failslab+0xa8/0x100 [ 501.096561][T22372] __kmalloc_cache_noprof+0x70/0x3d0 [ 501.096584][T22372] ? sctp_add_bind_addr+0x8c/0x370 [ 501.096608][T22372] sctp_add_bind_addr+0x8c/0x370 [ 501.096631][T22372] sctp_copy_local_addr_list+0x30b/0x4e0 [ 501.096655][T22372] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 501.096678][T22372] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 501.096700][T22372] ? sctp_v6_is_any+0x64/0x80 [ 501.096721][T22372] ? sctp_copy_one_addr+0x93/0x360 [ 501.096742][T22372] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.096761][T22372] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.096782][T22372] sctp_connect_new_asoc+0x2e0/0x690 [ 501.096801][T22372] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 501.096820][T22372] ? sctp_get_af_specific+0x29/0x80 [ 501.096841][T22372] ? sctp_inet6_send_verify+0x80/0x300 [ 501.096863][T22372] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 501.096882][T22372] __sctp_connect+0x5ba/0xd50 [ 501.096903][T22372] ? lock_release+0x4b/0x3e0 [ 501.096926][T22372] ? __pfx___sctp_connect+0x10/0x10 [ 501.096942][T22372] ? __might_fault+0xcc/0x130 [ 501.096964][T22372] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 501.096984][T22372] ? security_sctp_bind_connect+0x7e/0x2e0 [ 501.097014][T22372] sctp_getsockopt_connectx3+0x2c4/0x440 [ 501.097039][T22372] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 501.097061][T22372] ? sctp_getsockopt+0x135/0xb60 [ 501.097074][T22372] ? __local_bh_enable_ip+0x12d/0x1c0 [ 501.097091][T22372] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.097110][T22372] sctp_getsockopt+0x98a/0xb60 [ 501.097125][T22372] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 501.097148][T22372] do_sock_getsockopt+0x36f/0x450 [ 501.097167][T22372] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 501.097184][T22372] ? rcu_needs_cpu+0xa0/0xb0 [ 501.097199][T22372] ? __fget_files+0x3a0/0x420 [ 501.097213][T22372] ? __fget_files+0x2a/0x420 [ 501.097231][T22372] __x64_sys_getsockopt+0x1a5/0x250 [ 501.097248][T22372] ? rcu_needs_cpu+0xa0/0xb0 [ 501.097266][T22372] ? rcu_needs_cpu+0xa0/0xb0 [ 501.097282][T22372] do_syscall_64+0xfa/0x3b0 [ 501.097299][T22372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.097315][T22372] ? clear_bhb_loop+0x60/0xb0 [ 501.097334][T22372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.097350][T22372] RIP: 0033:0x7f747818ebe9 [ 501.097367][T22372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.097384][T22372] RSP: 002b:00007f74790d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 501.097403][T22372] RAX: ffffffffffffffda RBX: 00007f74783b5fa0 RCX: 00007f747818ebe9 [ 501.097417][T22372] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 501.097428][T22372] RBP: 00007f74790d2090 R08: 0000200000000540 R09: 0000000000000000 [ 501.097441][T22372] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.097452][T22372] R13: 00007f74783b6038 R14: 00007f74783b5fa0 R15: 00007ffc103f2d58 [ 501.097473][T22372] [ 501.148900][T22371] ip6tnl1: entered promiscuous mode [ 501.495599][T22381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.533245][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.547503][T22390] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 501.715620][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 501.731529][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 501.802174][T22411] FAULT_INJECTION: forcing a failure. [ 501.802174][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 501.816192][T22411] CPU: 0 UID: 0 PID: 22411 Comm: syz.1.4457 Not tainted syzkaller #0 PREEMPT(full) [ 501.816220][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.816231][T22411] Call Trace: [ 501.816238][T22411] [ 501.816245][T22411] dump_stack_lvl+0x189/0x250 [ 501.816269][T22411] ? __pfx____ratelimit+0x10/0x10 [ 501.816291][T22411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.816310][T22411] ? __pfx__printk+0x10/0x10 [ 501.816337][T22411] should_fail_ex+0x414/0x560 [ 501.816362][T22411] should_failslab+0xa8/0x100 [ 501.816386][T22411] __kmalloc_cache_noprof+0x70/0x3d0 [ 501.816409][T22411] ? sctp_add_bind_addr+0x8c/0x370 [ 501.816434][T22411] sctp_add_bind_addr+0x8c/0x370 [ 501.816458][T22411] sctp_copy_local_addr_list+0x30b/0x4e0 [ 501.816483][T22411] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 501.816505][T22411] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 501.816539][T22411] ? sctp_v6_is_any+0x64/0x80 [ 501.816563][T22411] ? sctp_copy_one_addr+0x93/0x360 [ 501.816587][T22411] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.816619][T22411] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.816642][T22411] sctp_connect_new_asoc+0x2e0/0x690 [ 501.816662][T22411] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 501.816683][T22411] ? sctp_get_af_specific+0x29/0x80 [ 501.816703][T22411] ? sctp_inet6_send_verify+0x80/0x300 [ 501.816726][T22411] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 501.816744][T22411] __sctp_connect+0x5ba/0xd50 [ 501.816762][T22411] ? lock_release+0x4b/0x3e0 [ 501.816783][T22411] ? __pfx___sctp_connect+0x10/0x10 [ 501.816798][T22411] ? __might_fault+0xcc/0x130 [ 501.816821][T22411] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 501.816840][T22411] ? security_sctp_bind_connect+0x7e/0x2e0 [ 501.816863][T22411] sctp_getsockopt_connectx3+0x2c4/0x440 [ 501.816889][T22411] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 501.816912][T22411] ? sctp_getsockopt+0x135/0xb60 [ 501.816929][T22411] ? __local_bh_enable_ip+0x12d/0x1c0 [ 501.816947][T22411] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.816969][T22411] sctp_getsockopt+0x98a/0xb60 [ 501.816986][T22411] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 501.817010][T22411] do_sock_getsockopt+0x36f/0x450 [ 501.817028][T22411] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 501.817044][T22411] ? rcu_needs_cpu+0xa0/0xb0 [ 501.817060][T22411] ? __fget_files+0x3a0/0x420 [ 501.817075][T22411] ? __fget_files+0x2a/0x420 [ 501.817094][T22411] __x64_sys_getsockopt+0x1a5/0x250 [ 501.817112][T22411] ? rcu_needs_cpu+0xa0/0xb0 [ 501.817130][T22411] ? rcu_needs_cpu+0xa0/0xb0 [ 501.817148][T22411] do_syscall_64+0xfa/0x3b0 [ 501.817166][T22411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.817184][T22411] ? clear_bhb_loop+0x60/0xb0 [ 501.817204][T22411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.817222][T22411] RIP: 0033:0x7fb8e098ebe9 [ 501.817239][T22411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.817256][T22411] RSP: 002b:00007fb8e173f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 501.817276][T22411] RAX: ffffffffffffffda RBX: 00007fb8e0bb5fa0 RCX: 00007fb8e098ebe9 [ 501.817291][T22411] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 501.817303][T22411] RBP: 00007fb8e173f090 R08: 0000200000000540 R09: 0000000000000000 [ 501.817315][T22411] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.817328][T22411] R13: 00007fb8e0bb6038 R14: 00007fb8e0bb5fa0 R15: 00007ffe1b281198 [ 501.817350][T22411] [ 501.919386][T22412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4453'. [ 502.375554][T22435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4464'. [ 502.621727][T22464] FAULT_INJECTION: forcing a failure. [ 502.621727][T22464] name failslab, interval 1, probability 0, space 0, times 0 [ 502.638817][T22429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4462'. [ 502.648150][T22464] CPU: 1 UID: 0 PID: 22464 Comm: syz.4.4471 Not tainted syzkaller #0 PREEMPT(full) [ 502.648176][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.648188][T22464] Call Trace: [ 502.648195][T22464] [ 502.648204][T22464] dump_stack_lvl+0x189/0x250 [ 502.648230][T22464] ? __pfx____ratelimit+0x10/0x10 [ 502.648255][T22464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.648275][T22464] ? __pfx__printk+0x10/0x10 [ 502.648304][T22464] should_fail_ex+0x414/0x560 [ 502.648329][T22464] should_failslab+0xa8/0x100 [ 502.648353][T22464] __kmalloc_cache_noprof+0x70/0x3d0 [ 502.648376][T22464] ? sctp_add_bind_addr+0x8c/0x370 [ 502.648401][T22464] sctp_add_bind_addr+0x8c/0x370 [ 502.648426][T22464] sctp_copy_local_addr_list+0x30b/0x4e0 [ 502.648452][T22464] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 502.648475][T22464] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 502.648507][T22464] ? sctp_v6_is_any+0x64/0x80 [ 502.648532][T22464] ? sctp_copy_one_addr+0x93/0x360 [ 502.648556][T22464] sctp_bind_addr_copy+0xb3/0x3c0 [ 502.648579][T22464] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 502.648602][T22464] sctp_connect_new_asoc+0x2e0/0x690 [ 502.648622][T22464] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 502.648643][T22464] ? sctp_get_af_specific+0x29/0x80 [ 502.648665][T22464] ? sctp_inet6_send_verify+0x80/0x300 [ 502.648688][T22464] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 502.648707][T22464] __sctp_connect+0x5ba/0xd50 [ 502.648727][T22464] ? lock_release+0x4b/0x3e0 [ 502.648750][T22464] ? __pfx___sctp_connect+0x10/0x10 [ 502.648766][T22464] ? __might_fault+0xcc/0x130 [ 502.648790][T22464] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 502.648811][T22464] ? security_sctp_bind_connect+0x7e/0x2e0 [ 502.648835][T22464] sctp_getsockopt_connectx3+0x2c4/0x440 [ 502.648861][T22464] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 502.648884][T22464] ? sctp_getsockopt+0x135/0xb60 [ 502.648901][T22464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.648918][T22464] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 502.648941][T22464] sctp_getsockopt+0x98a/0xb60 [ 502.648957][T22464] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 502.648982][T22464] do_sock_getsockopt+0x36f/0x450 [ 502.649001][T22464] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 502.649018][T22464] ? rcu_needs_cpu+0xa0/0xb0 [ 502.649035][T22464] ? __fget_files+0x3a0/0x420 [ 502.649051][T22464] ? __fget_files+0x2a/0x420 [ 502.649070][T22464] __x64_sys_getsockopt+0x1a5/0x250 [ 502.649087][T22464] ? rcu_needs_cpu+0xa0/0xb0 [ 502.649105][T22464] ? rcu_needs_cpu+0xa0/0xb0 [ 502.649123][T22464] do_syscall_64+0xfa/0x3b0 [ 502.649140][T22464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.649158][T22464] ? clear_bhb_loop+0x60/0xb0 [ 502.649177][T22464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.649194][T22464] RIP: 0033:0x7f487e78ebe9 [ 502.649210][T22464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.649226][T22464] RSP: 002b:00007f487f5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 502.649245][T22464] RAX: ffffffffffffffda RBX: 00007f487e9b5fa0 RCX: 00007f487e78ebe9 [ 502.649259][T22464] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 502.649271][T22464] RBP: 00007f487f5fb090 R08: 0000200000000540 R09: 0000000000000000 [ 502.649284][T22464] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.649296][T22464] R13: 00007f487e9b6038 R14: 00007f487e9b5fa0 R15: 00007ffdec759d38 [ 502.649317][T22464] [ 503.360233][T22495] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4478'. [ 503.379607][T22495] bond0 (unregistering): Released all slaves [ 503.663131][T22510] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 503.727545][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 504.234237][T22524] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 504.287810][T22526] tipc: Enabled bearer , priority 0 [ 504.306001][T22526] syzkaller0: entered promiscuous mode [ 504.325529][T22526] syzkaller0: entered allmulticast mode [ 504.368591][T22526] tipc: Resetting bearer [ 504.392016][T22526] tipc: Disabling bearer [ 504.445081][T22541] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 504.501600][T22546] FAULT_INJECTION: forcing a failure. [ 504.501600][T22546] name failslab, interval 1, probability 0, space 0, times 0 [ 504.536484][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.1.4494 Not tainted syzkaller #0 PREEMPT(full) [ 504.536509][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.536520][T22546] Call Trace: [ 504.536528][T22546] [ 504.536536][T22546] dump_stack_lvl+0x189/0x250 [ 504.536561][T22546] ? __pfx____ratelimit+0x10/0x10 [ 504.536585][T22546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.536605][T22546] ? __pfx__printk+0x10/0x10 [ 504.536631][T22546] should_fail_ex+0x414/0x560 [ 504.536655][T22546] should_failslab+0xa8/0x100 [ 504.536679][T22546] __kmalloc_cache_noprof+0x70/0x3d0 [ 504.536702][T22546] ? sctp_add_bind_addr+0x8c/0x370 [ 504.536727][T22546] sctp_add_bind_addr+0x8c/0x370 [ 504.536748][T22546] sctp_copy_local_addr_list+0x30b/0x4e0 [ 504.536771][T22546] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 504.536797][T22546] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 504.536819][T22546] ? sctp_v6_is_any+0x64/0x80 [ 504.536840][T22546] ? sctp_copy_one_addr+0x93/0x360 [ 504.536861][T22546] sctp_bind_addr_copy+0xb3/0x3c0 [ 504.536882][T22546] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 504.536904][T22546] sctp_connect_new_asoc+0x2e0/0x690 [ 504.536924][T22546] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 504.536944][T22546] ? sctp_get_af_specific+0x29/0x80 [ 504.536966][T22546] ? sctp_inet6_send_verify+0x80/0x300 [ 504.536988][T22546] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 504.537008][T22546] __sctp_connect+0x5ba/0xd50 [ 504.537029][T22546] ? lock_release+0x4b/0x3e0 [ 504.537053][T22546] ? __pfx___sctp_connect+0x10/0x10 [ 504.537067][T22546] ? __might_fault+0xcc/0x130 [ 504.537090][T22546] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 504.537109][T22546] ? security_sctp_bind_connect+0x7e/0x2e0 [ 504.537130][T22546] sctp_getsockopt_connectx3+0x2c4/0x440 [ 504.537152][T22546] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 504.537169][T22546] ? sctp_getsockopt+0x135/0xb60 [ 504.537182][T22546] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.537196][T22546] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.537212][T22546] sctp_getsockopt+0x98a/0xb60 [ 504.537225][T22546] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 504.537244][T22546] do_sock_getsockopt+0x36f/0x450 [ 504.537260][T22546] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 504.537273][T22546] ? rcu_needs_cpu+0xa0/0xb0 [ 504.537285][T22546] ? __fget_files+0x3a0/0x420 [ 504.537297][T22546] ? __fget_files+0x2a/0x420 [ 504.537311][T22546] __x64_sys_getsockopt+0x1a5/0x250 [ 504.537325][T22546] ? rcu_needs_cpu+0xa0/0xb0 [ 504.537338][T22546] ? rcu_needs_cpu+0xa0/0xb0 [ 504.537352][T22546] do_syscall_64+0xfa/0x3b0 [ 504.537365][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.537379][T22546] ? clear_bhb_loop+0x60/0xb0 [ 504.537400][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.537413][T22546] RIP: 0033:0x7fb8e098ebe9 [ 504.537427][T22546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.537440][T22546] RSP: 002b:00007fb8e173f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 504.537456][T22546] RAX: ffffffffffffffda RBX: 00007fb8e0bb5fa0 RCX: 00007fb8e098ebe9 [ 504.537467][T22546] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 504.537476][T22546] RBP: 00007fb8e173f090 R08: 0000200000000540 R09: 0000000000000000 [ 504.537485][T22546] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.537495][T22546] R13: 00007fb8e0bb6038 R14: 00007fb8e0bb5fa0 R15: 00007ffe1b281198 [ 504.537511][T22546] [ 504.990240][T22552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4497'. [ 505.246571][T22583] batman_adv: batadv0: Adding interface: gretap2 [ 505.265357][T22583] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.297596][T22583] batman_adv: batadv0: Interface activated: gretap2 [ 505.317576][T22588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4507'. [ 505.373787][T22590] netlink: 'syz.0.4508': attribute type 5 has an invalid length. [ 505.439875][T22596] FAULT_INJECTION: forcing a failure. [ 505.439875][T22596] name failslab, interval 1, probability 0, space 0, times 0 [ 505.469038][T22598] lo: entered allmulticast mode [ 505.475228][T22596] CPU: 0 UID: 0 PID: 22596 Comm: syz.3.4510 Not tainted syzkaller #0 PREEMPT(full) [ 505.475255][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.475265][T22596] Call Trace: [ 505.475273][T22596] [ 505.475280][T22596] dump_stack_lvl+0x189/0x250 [ 505.475305][T22596] ? __pfx____ratelimit+0x10/0x10 [ 505.475330][T22596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.475349][T22596] ? __pfx__printk+0x10/0x10 [ 505.475377][T22596] should_fail_ex+0x414/0x560 [ 505.475407][T22596] should_failslab+0xa8/0x100 [ 505.475432][T22596] __kmalloc_cache_noprof+0x70/0x3d0 [ 505.475461][T22596] ? sctp_add_bind_addr+0x8c/0x370 [ 505.475485][T22596] sctp_add_bind_addr+0x8c/0x370 [ 505.475509][T22596] sctp_copy_local_addr_list+0x30b/0x4e0 [ 505.475535][T22596] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 505.475557][T22596] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 505.475577][T22596] ? sctp_v6_is_any+0x64/0x80 [ 505.475600][T22596] ? sctp_copy_one_addr+0x93/0x360 [ 505.475623][T22596] sctp_bind_addr_copy+0xb3/0x3c0 [ 505.475646][T22596] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 505.475668][T22596] sctp_connect_new_asoc+0x2e0/0x690 [ 505.475689][T22596] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 505.475709][T22596] ? sctp_get_af_specific+0x29/0x80 [ 505.475730][T22596] ? sctp_inet6_send_verify+0x80/0x300 [ 505.475753][T22596] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 505.475773][T22596] __sctp_connect+0x5ba/0xd50 [ 505.475795][T22596] ? lock_release+0x4b/0x3e0 [ 505.475818][T22596] ? __pfx___sctp_connect+0x10/0x10 [ 505.475838][T22596] ? __might_fault+0xcc/0x130 [ 505.475862][T22596] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 505.475882][T22596] ? security_sctp_bind_connect+0x7e/0x2e0 [ 505.475905][T22596] sctp_getsockopt_connectx3+0x2c4/0x440 [ 505.475930][T22596] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 505.475953][T22596] ? sctp_getsockopt+0x135/0xb60 [ 505.475970][T22596] ? __local_bh_enable_ip+0x12d/0x1c0 [ 505.475987][T22596] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.476009][T22596] sctp_getsockopt+0x98a/0xb60 [ 505.476026][T22596] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 505.476051][T22596] do_sock_getsockopt+0x36f/0x450 [ 505.476070][T22596] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 505.476087][T22596] ? rcu_needs_cpu+0xa0/0xb0 [ 505.476103][T22596] ? __fget_files+0x3a0/0x420 [ 505.476119][T22596] ? __fget_files+0x2a/0x420 [ 505.476138][T22596] __x64_sys_getsockopt+0x1a5/0x250 [ 505.476155][T22596] ? rcu_needs_cpu+0xa0/0xb0 [ 505.476173][T22596] ? rcu_needs_cpu+0xa0/0xb0 [ 505.476191][T22596] do_syscall_64+0xfa/0x3b0 [ 505.476207][T22596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.476223][T22596] ? clear_bhb_loop+0x60/0xb0 [ 505.476240][T22596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.476258][T22596] RIP: 0033:0x7f747818ebe9 [ 505.476275][T22596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.476291][T22596] RSP: 002b:00007f74790d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 505.476310][T22596] RAX: ffffffffffffffda RBX: 00007f74783b5fa0 RCX: 00007f747818ebe9 [ 505.476322][T22596] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 505.476333][T22596] RBP: 00007f74790d2090 R08: 0000200000000540 R09: 0000000000000000 [ 505.476344][T22596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.476356][T22596] R13: 00007f74783b6038 R14: 00007f74783b5fa0 R15: 00007ffc103f2d58 [ 505.476375][T22596] [ 505.601103][T22598] dvmrp8: entered allmulticast mode [ 505.840202][ T30] audit: type=1800 audit(1756004849.373:12): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4513" name="memory.events" dev="tmpfs" ino=1770 res=0 errno=0 [ 505.906394][ T30] audit: type=1804 audit(1756004849.373:13): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4513" name="memory.events" dev="tmpfs" ino=1770 res=1 errno=0 [ 505.983165][T22597] lo: left allmulticast mode [ 505.992951][T22597] dvmrp8: left allmulticast mode [ 506.084355][T22621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.113803][T22612] syzkaller0: entered promiscuous mode [ 506.147920][T22612] syzkaller0: entered allmulticast mode [ 506.192795][T22612] __nla_validate_parse: 4 callbacks suppressed [ 506.192817][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4514'. [ 506.236089][T22625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4517'. [ 506.246863][T22624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 506.388358][T22627] batman_adv: batadv0: Interface deactivated: gretap2 [ 506.474847][T22633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 506.491135][T22633] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 506.603754][T22649] FAULT_INJECTION: forcing a failure. [ 506.603754][T22649] name failslab, interval 1, probability 0, space 0, times 0 [ 506.617560][T22649] CPU: 0 UID: 0 PID: 22649 Comm: syz.4.4523 Not tainted syzkaller #0 PREEMPT(full) [ 506.617585][T22649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.617596][T22649] Call Trace: [ 506.617603][T22649] [ 506.617609][T22649] dump_stack_lvl+0x189/0x250 [ 506.617634][T22649] ? __pfx____ratelimit+0x10/0x10 [ 506.617657][T22649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.617676][T22649] ? __pfx__printk+0x10/0x10 [ 506.617698][T22649] should_fail_ex+0x414/0x560 [ 506.617722][T22649] should_failslab+0xa8/0x100 [ 506.617742][T22649] __kmalloc_cache_noprof+0x70/0x3d0 [ 506.617760][T22649] ? sctp_add_bind_addr+0x8c/0x370 [ 506.617780][T22649] sctp_add_bind_addr+0x8c/0x370 [ 506.617799][T22649] sctp_copy_local_addr_list+0x30b/0x4e0 [ 506.617818][T22649] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 506.617836][T22649] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 506.617855][T22649] ? sctp_v6_is_any+0x64/0x80 [ 506.617875][T22649] ? sctp_copy_one_addr+0x93/0x360 [ 506.617893][T22649] sctp_bind_addr_copy+0xb3/0x3c0 [ 506.617911][T22649] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 506.617928][T22649] sctp_connect_new_asoc+0x2e0/0x690 [ 506.617943][T22649] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 506.617959][T22649] ? sctp_get_af_specific+0x29/0x80 [ 506.617976][T22649] ? sctp_inet6_send_verify+0x80/0x300 [ 506.617993][T22649] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 506.618008][T22649] __sctp_connect+0x5ba/0xd50 [ 506.618024][T22649] ? lock_release+0x4b/0x3e0 [ 506.618042][T22649] ? __pfx___sctp_connect+0x10/0x10 [ 506.618054][T22649] ? __might_fault+0xcc/0x130 [ 506.618074][T22649] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 506.618090][T22649] ? security_sctp_bind_connect+0x7e/0x2e0 [ 506.618108][T22649] sctp_getsockopt_connectx3+0x2c4/0x440 [ 506.618128][T22649] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 506.618145][T22649] ? sctp_getsockopt+0x135/0xb60 [ 506.618158][T22649] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.618172][T22649] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 506.618195][T22649] sctp_getsockopt+0x98a/0xb60 [ 506.618207][T22649] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 506.618227][T22649] do_sock_getsockopt+0x36f/0x450 [ 506.618241][T22649] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 506.618255][T22649] ? rcu_needs_cpu+0xa0/0xb0 [ 506.618267][T22649] ? __fget_files+0x3a0/0x420 [ 506.618279][T22649] ? __fget_files+0x2a/0x420 [ 506.618293][T22649] __x64_sys_getsockopt+0x1a5/0x250 [ 506.618306][T22649] ? rcu_needs_cpu+0xa0/0xb0 [ 506.618319][T22649] ? rcu_needs_cpu+0xa0/0xb0 [ 506.618332][T22649] do_syscall_64+0xfa/0x3b0 [ 506.618345][T22649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.618358][T22649] ? clear_bhb_loop+0x60/0xb0 [ 506.618373][T22649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.618386][T22649] RIP: 0033:0x7f487e78ebe9 [ 506.618399][T22649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.618411][T22649] RSP: 002b:00007f487f5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 506.618427][T22649] RAX: ffffffffffffffda RBX: 00007f487e9b5fa0 RCX: 00007f487e78ebe9 [ 506.618439][T22649] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 506.618447][T22649] RBP: 00007f487f5fb090 R08: 0000200000000540 R09: 0000000000000000 [ 506.618457][T22649] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.618466][T22649] R13: 00007f487e9b6038 R14: 00007f487e9b5fa0 R15: 00007ffdec759d38 [ 506.618482][T22649] [ 562.968066][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 598.793348][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4528'. [ 598.829299][T22670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4528'. [ 598.847842][T22672] netlink: 'syz.0.4526': attribute type 12 has an invalid length. [ 598.862413][T22672] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4526'. [ 599.011728][T22684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4531'. [ 599.025348][T22684] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 599.171361][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'. [ 599.715738][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4535'. [ 599.762354][T22705] netlink: 'syz.5.4538': attribute type 1 has an invalid length. [ 599.774242][T22706] FAULT_INJECTION: forcing a failure. [ 599.774242][T22706] name failslab, interval 1, probability 0, space 0, times 0 [ 599.802074][T22706] CPU: 1 UID: 0 PID: 22706 Comm: syz.4.4537 Not tainted syzkaller #0 PREEMPT(full) [ 599.802102][T22706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.802114][T22706] Call Trace: [ 599.802122][T22706] [ 599.802130][T22706] dump_stack_lvl+0x189/0x250 [ 599.802158][T22706] ? __pfx____ratelimit+0x10/0x10 [ 599.802183][T22706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.802203][T22706] ? __pfx__printk+0x10/0x10 [ 599.802267][T22706] should_fail_ex+0x414/0x560 [ 599.802291][T22706] should_failslab+0xa8/0x100 [ 599.802315][T22706] __kmalloc_cache_noprof+0x70/0x3d0 [ 599.802338][T22706] ? sctp_add_bind_addr+0x8c/0x370 [ 599.802363][T22706] sctp_add_bind_addr+0x8c/0x370 [ 599.802387][T22706] sctp_copy_local_addr_list+0x30b/0x4e0 [ 599.802412][T22706] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 599.802434][T22706] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 599.802458][T22706] ? sctp_v6_is_any+0x64/0x80 [ 599.802483][T22706] ? sctp_copy_one_addr+0x93/0x360 [ 599.802508][T22706] sctp_bind_addr_copy+0xb3/0x3c0 [ 599.802531][T22706] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 599.802554][T22706] sctp_connect_new_asoc+0x2e0/0x690 [ 599.802574][T22706] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 599.802594][T22706] ? sctp_get_af_specific+0x29/0x80 [ 599.802616][T22706] ? sctp_inet6_send_verify+0x80/0x300 [ 599.802638][T22706] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 599.802657][T22706] __sctp_connect+0x5ba/0xd50 [ 599.802678][T22706] ? lock_release+0x4b/0x3e0 [ 599.802701][T22706] ? __pfx___sctp_connect+0x10/0x10 [ 599.802718][T22706] ? __might_fault+0xcc/0x130 [ 599.802741][T22706] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 599.802760][T22706] ? security_sctp_bind_connect+0x7e/0x2e0 [ 599.802783][T22706] sctp_getsockopt_connectx3+0x2c4/0x440 [ 599.802808][T22706] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 599.802831][T22706] ? sctp_getsockopt+0x135/0xb60 [ 599.802848][T22706] ? __local_bh_enable_ip+0x12d/0x1c0 [ 599.802866][T22706] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 599.802914][T22706] sctp_getsockopt+0x98a/0xb60 [ 599.802931][T22706] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 599.802956][T22706] do_sock_getsockopt+0x36f/0x450 [ 599.802972][T22706] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 599.802985][T22706] ? rcu_needs_cpu+0xa0/0xb0 [ 599.802997][T22706] ? __fget_files+0x3a0/0x420 [ 599.803009][T22706] ? __fget_files+0x2a/0x420 [ 599.803023][T22706] __x64_sys_getsockopt+0x1a5/0x250 [ 599.803036][T22706] ? rcu_needs_cpu+0xa0/0xb0 [ 599.803053][T22706] ? rcu_needs_cpu+0xa0/0xb0 [ 599.803071][T22706] do_syscall_64+0xfa/0x3b0 [ 599.803088][T22706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.803106][T22706] ? clear_bhb_loop+0x60/0xb0 [ 599.803124][T22706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.803142][T22706] RIP: 0033:0x7f487e78ebe9 [ 599.803159][T22706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.803175][T22706] RSP: 002b:00007f487f5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 599.803194][T22706] RAX: ffffffffffffffda RBX: 00007f487e9b5fa0 RCX: 00007f487e78ebe9 [ 599.803209][T22706] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 599.803226][T22706] RBP: 00007f487f5fb090 R08: 0000200000000540 R09: 0000000000000000 [ 599.803239][T22706] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.803251][T22706] R13: 00007f487e9b6038 R14: 00007f487e9b5fa0 R15: 00007ffdec759d38 [ 599.803272][T22706] [ 600.305022][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4540'. [ 600.314371][T22709] netlink: 'syz.4.4540': attribute type 5 has an invalid length. [ 600.335478][T22711] syzkaller0: entered promiscuous mode [ 600.336024][T22709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4540'. [ 600.341308][T22711] syzkaller0: entered allmulticast mode [ 600.403699][T22709] geneve3: entered promiscuous mode [ 600.416058][T22709] geneve3: entered allmulticast mode [ 600.429946][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 600.446818][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 600.475008][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 600.485343][T17483] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 601.029429][T22767] tap0: tun_chr_ioctl cmd 1074025680 [ 601.062191][T22767] D: renamed from syzkaller0 [ 601.104785][T22773] tipc: Enabled bearer , priority 0 [ 601.396093][T22792] netlink: 'syz.5.4563': attribute type 3 has an invalid length. [ 601.409992][T22792] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4563'. [ 601.796696][T22772] tipc: Resetting bearer [ 601.811926][T22772] tipc: Disabling bearer [ 601.882336][T22829] C: renamed from lo (while UP) [ 601.892971][T22829] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 602.320520][T17483] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.331586][T17483] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.348686][T17483] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.397174][T17483] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.670908][T22871] sctp: [Deprecated]: syz.1.4587 (pid 22871) Use of int in max_burst socket option. [ 602.670908][T22871] Use struct sctp_assoc_value instead [ 602.798652][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 602.950757][T22894] vlan2: entered promiscuous mode [ 602.962060][T22894] erspan0: entered promiscuous mode [ 603.029825][T22897] sit0: entered promiscuous mode [ 603.034971][T22897] netlink: 'syz.1.4596': attribute type 1 has an invalid length. [ 603.742717][T22954] netlink: 'syz.4.4613': attribute type 10 has an invalid length. [ 603.779504][T22954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.805070][T22954] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 604.002346][T22966] __nla_validate_parse: 10 callbacks suppressed [ 604.002366][T22966] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4616'. [ 604.033195][T22968] tipc: Enabled bearer , priority 0 [ 604.042379][T22968] syzkaller0: entered promiscuous mode [ 604.048064][T22968] syzkaller0: entered allmulticast mode [ 604.067157][T22968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 604.088474][T22968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 604.101040][T22968] tipc: Resetting bearer [ 604.113554][T22967] tipc: Resetting bearer [ 604.141493][T22967] tipc: Disabling bearer [ 604.366393][T22995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'. [ 604.375642][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'. [ 604.420933][T22997] openvswitch: netlink: Message has 16 unknown bytes. [ 604.466034][T22999] : entered promiscuous mode [ 604.549573][T23007] FAULT_INJECTION: forcing a failure. [ 604.549573][T23007] name failslab, interval 1, probability 0, space 0, times 0 [ 604.562675][T23007] CPU: 0 UID: 0 PID: 23007 Comm: syz.4.4632 Not tainted syzkaller #0 PREEMPT(full) [ 604.562700][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.562710][T23007] Call Trace: [ 604.562717][T23007] [ 604.562725][T23007] dump_stack_lvl+0x189/0x250 [ 604.562749][T23007] ? __pfx____ratelimit+0x10/0x10 [ 604.562773][T23007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.562791][T23007] ? __pfx__printk+0x10/0x10 [ 604.562818][T23007] should_fail_ex+0x414/0x560 [ 604.562841][T23007] should_failslab+0xa8/0x100 [ 604.562864][T23007] __kmalloc_cache_noprof+0x70/0x3d0 [ 604.562887][T23007] ? sctp_add_bind_addr+0x8c/0x370 [ 604.562910][T23007] sctp_add_bind_addr+0x8c/0x370 [ 604.562933][T23007] sctp_copy_local_addr_list+0x30b/0x4e0 [ 604.562959][T23007] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 604.562980][T23007] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 604.563012][T23007] ? sctp_v6_is_any+0x64/0x80 [ 604.563037][T23007] ? sctp_copy_one_addr+0x93/0x360 [ 604.563059][T23007] sctp_bind_addr_copy+0xb3/0x3c0 [ 604.563081][T23007] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 604.563103][T23007] sctp_connect_new_asoc+0x2e0/0x690 [ 604.563122][T23007] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 604.563142][T23007] ? sctp_get_af_specific+0x29/0x80 [ 604.563163][T23007] ? sctp_inet6_send_verify+0x80/0x300 [ 604.563184][T23007] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 604.563203][T23007] __sctp_connect+0x5ba/0xd50 [ 604.563224][T23007] ? lock_release+0x4b/0x3e0 [ 604.563247][T23007] ? __pfx___sctp_connect+0x10/0x10 [ 604.563263][T23007] ? __might_fault+0xcc/0x130 [ 604.563285][T23007] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 604.563304][T23007] ? security_sctp_bind_connect+0x7e/0x2e0 [ 604.563326][T23007] sctp_getsockopt_connectx3+0x2c4/0x440 [ 604.563351][T23007] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 604.563373][T23007] ? sctp_getsockopt+0x135/0xb60 [ 604.563390][T23007] ? __local_bh_enable_ip+0x12d/0x1c0 [ 604.563406][T23007] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 604.563427][T23007] sctp_getsockopt+0x98a/0xb60 [ 604.563455][T23007] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 604.563480][T23007] do_sock_getsockopt+0x36f/0x450 [ 604.563499][T23007] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 604.563516][T23007] ? rcu_needs_cpu+0xa0/0xb0 [ 604.563533][T23007] ? __fget_files+0x3a0/0x420 [ 604.563547][T23007] ? __fget_files+0x2a/0x420 [ 604.563565][T23007] __x64_sys_getsockopt+0x1a5/0x250 [ 604.563582][T23007] ? rcu_needs_cpu+0xa0/0xb0 [ 604.563599][T23007] ? rcu_needs_cpu+0xa0/0xb0 [ 604.563617][T23007] do_syscall_64+0xfa/0x3b0 [ 604.563634][T23007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.563656][T23007] ? clear_bhb_loop+0x60/0xb0 [ 604.563674][T23007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.563692][T23007] RIP: 0033:0x7f487e78ebe9 [ 604.563708][T23007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.563724][T23007] RSP: 002b:00007f487f5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 604.563743][T23007] RAX: ffffffffffffffda RBX: 00007f487e9b5fa0 RCX: 00007f487e78ebe9 [ 604.563756][T23007] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 604.563767][T23007] RBP: 00007f487f5fb090 R08: 0000200000000540 R09: 0000000000000000 [ 604.563779][T23007] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.563790][T23007] R13: 00007f487e9b6038 R14: 00007f487e9b5fa0 R15: 00007ffdec759d38 [ 604.563810][T23007] [ 604.981630][T23011] batadv_slave_0: entered promiscuous mode [ 604.994409][T23011] netlink: 576 bytes leftover after parsing attributes in process `syz.5.4633'. [ 605.023762][T23013] netlink: 576 bytes leftover after parsing attributes in process `syz.5.4633'. [ 605.076621][T23014] batadv_slave_0: left promiscuous mode [ 605.146988][ T6803] IPVS: starting estimator thread 0... [ 605.211043][T23030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4641'. [ 605.248158][T23026] IPVS: using max 40 ests per chain, 96000 per kthread [ 605.279177][T23035] vlan0: entered promiscuous mode [ 605.284343][T23035] team0: entered promiscuous mode [ 605.298771][T23035] team_slave_1: entered promiscuous mode [ 605.409151][T23040] netlink: 'syz.5.4644': attribute type 1 has an invalid length. [ 605.439131][T23040] bond1: entered promiscuous mode [ 605.444440][T23040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.464054][T23040] bond1: (slave bridge1): making interface the new active one [ 605.471806][T23040] bridge1: entered promiscuous mode [ 605.478217][T23040] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 605.546011][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4647'. [ 605.932172][T23077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4656'. [ 605.978440][T23090] netlink: 'syz.4.4658': attribute type 21 has an invalid length. [ 605.987112][T23090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4658'. [ 606.030426][T23095] netlink: 'syz.4.4660': attribute type 3 has an invalid length. [ 606.107286][T23103] _ÐZ`Ô€@S: entered promiscuous mode [ 606.152376][T23108] netlink: 'syz.3.4665': attribute type 2 has an invalid length. [ 606.200561][T23115] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 606.231260][T23118] macvlan2: entered allmulticast mode [ 606.239241][T23118] veth1_vlan: entered allmulticast mode [ 606.245907][T23118] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 606.605609][T23154] netlink: 'syz.1.4677': attribute type 1 has an invalid length. [ 606.630627][T23154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.668894][T23154] bond0: (slave veth1): Enslaving as an active interface with a down link [ 607.764649][T23198] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 607.855806][T23211] netlink: 'syz.3.4691': attribute type 16 has an invalid length. [ 607.868084][T23211] netlink: 'syz.3.4691': attribute type 17 has an invalid length. [ 608.323688][T23211] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 608.462089][T23229] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 608.684193][T23241] netlink: 'syz.1.4701': attribute type 13 has an invalid length. [ 608.781471][T23255] syzkaller0: entered promiscuous mode [ 608.797939][T23255] syzkaller0: entered allmulticast mode [ 608.811623][T23253] syzkaller1: entered promiscuous mode [ 608.820703][T23253] syzkaller1: entered allmulticast mode [ 608.844127][ T8388] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 608.844624][T23253] openvswitch: netlink: Key type 4118 is out of range max 32 [ 608.852811][ T8388] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 608.874122][ T8388] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 608.883871][ T8388] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 609.074249][T23274] 8021q: adding VLAN 0 to HW filter on device bond12 [ 609.086999][T23280] tipc: Failed to remove unknown binding: 66,1,1/0:376437084/376437086 [ 609.098162][T23280] tipc: Failed to remove unknown binding: 66,1,1/0:376437084/376437086 [ 609.107554][T23280] tipc: Failed to remove unknown binding: 66,1,1/0:376437084/376437086 [ 609.110671][T23281] __nla_validate_parse: 16 callbacks suppressed [ 609.110688][T23281] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4709'. [ 609.139888][T23281] tipc: Invalid UDP bearer configuration [ 609.139925][T23281] tipc: Enabling of bearer rejected, failed to enable media [ 609.155024][T23280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4712'. [ 609.171594][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4712'. [ 609.182698][T23284] 8021q: adding VLAN 0 to HW filter on device bond12 [ 609.190568][T23284] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 609.202364][T23284] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 609.278662][T23274] veth7: entered promiscuous mode [ 609.299466][T23274] bond12: (slave veth7): Enslaving as an active interface with a down link [ 609.311420][T23291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4714'. [ 609.320714][T23291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4714'. [ 609.328723][T23294] macsec1: entered promiscuous mode [ 609.352349][T23294] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 609.382247][T23294] macsec1: entered allmulticast mode [ 609.390127][T23294] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 609.402516][T23284] erspan0: entered allmulticast mode [ 609.444298][T23306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.605071][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4724'. [ 609.622846][T23313] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.635362][T23313] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.655485][T23313] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 609.745927][T23322] syz_tun: left promiscuous mode [ 609.765180][T23322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.780623][T23322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 609.824787][T23313] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.835682][T23313] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.850954][T23313] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 609.900902][T23313] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.911360][T23313] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.922137][T23313] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 609.975174][T23313] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.985876][T23313] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.000261][T23313] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 610.040584][T23336] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4725'. [ 610.200257][T17467] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.286335][T17467] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 610.301298][T17467] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 610.364878][T17467] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.416221][T17467] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 610.476337][T17467] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 610.500418][ T65] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.534163][ T65] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 610.562892][ T65] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 610.617137][ T8377] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.647252][ T8377] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 610.676403][ T8377] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 611.085043][T23361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 611.105370][T23355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4735'. [ 611.116020][T23361] validate_nla: 4 callbacks suppressed [ 611.116040][T23361] netlink: 'syz.3.4738': attribute type 1 has an invalid length. [ 611.410876][T23389] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 611.426431][T23389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4748'. [ 611.435862][T23389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4748'. [ 611.968157][T23428] netlink: 'syz.3.4758': attribute type 3 has an invalid length. [ 611.987676][T23428] netlink: 'syz.3.4758': attribute type 3 has an invalid length. [ 613.422808][T23490] netlink: 'syz.1.4774': attribute type 4 has an invalid length. [ 613.446593][T23490] netlink: 'syz.1.4774': attribute type 4 has an invalid length. [ 613.601040][T23502] netlink: 'syz.3.4777': attribute type 83 has an invalid length. [ 613.609467][T23503] netlink: 'syz.0.4779': attribute type 10 has an invalid length. [ 613.629331][T23505] syz_tun: entered promiscuous mode [ 613.635692][T23505] batadv_slave_1: entered promiscuous mode [ 613.642388][T23505] debugfs: 'hsr1' already exists in 'hsr' [ 613.652388][T23505] Cannot create hsr debugfs directory [ 613.661664][T23503] team0: Failed to send port change of device þëÿB* via netlink (err -105) [ 613.699216][T23503] team0: Failed to send options change via netlink (err -105) [ 613.726344][T23503] team0: Port device þëÿB* added [ 613.764820][T23502] x_tables: ip_tables: udp match: only valid for protocol 17 [ 613.775271][T23513] tipc: Enabling of bearer rejected, failed to enable media [ 613.793982][T23513] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.892942][T23517] veth0_virt_wifi: renamed from veth0_macvtap [ 613.910066][T23520] netlink: 'syz.5.4784': attribute type 3 has an invalid length. [ 614.061858][T23532] netlink: 'syz.5.4788': attribute type 1 has an invalid length. [ 614.092629][T23522] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 614.120371][T23532] __nla_validate_parse: 13 callbacks suppressed [ 614.120389][T23532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4788'. [ 614.136126][T23535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4790'. [ 614.140869][T23532] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 614.215538][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4790'. [ 614.441055][T23556] netlink: 'syz.0.4796': attribute type 21 has an invalid length. [ 614.444770][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4797'. [ 614.592280][T23562] netlink: 464 bytes leftover after parsing attributes in process `syz.0.4798'. [ 614.604417][T23562] netlink: 464 bytes leftover after parsing attributes in process `syz.0.4798'. [ 614.636981][T23569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4799'. [ 614.656701][T23570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4799'. [ 614.678443][T23572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4802'. [ 614.695751][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4799'. [ 615.218039][T23605] sit0: left promiscuous mode [ 615.233655][T23605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.884539][T23633] veth1_vlan: left allmulticast mode [ 616.026724][T23635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.077547][T17483] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.112514][T17483] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 616.135816][T17483] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.155568][T17483] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.173701][T17483] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 616.199186][T17483] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.223563][T17483] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.253976][T17483] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 616.277764][T17483] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.297646][T17483] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.317025][T17483] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 616.335493][T17483] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.534387][T23674] : renamed from bond_slave_0 [ 616.561798][T23678] bridge5: entered promiscuous mode [ 616.567564][T23678] bridge5: entered allmulticast mode [ 616.588571][T23680] validate_nla: 2 callbacks suppressed [ 616.588589][T23680] netlink: 'syz.4.4831': attribute type 27 has an invalid length. [ 616.589591][T23685] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 616.622142][T23685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.651218][T23686] netlink: zone id is out of range [ 616.656661][T23686] netlink: zone id is out of range [ 616.680403][T23686] netlink: set zone limit has 4 unknown bytes [ 616.803532][T23709] gtp0: entered promiscuous mode [ 617.010358][T23724] tc_dump_action: action bad kind [ 617.022743][T23729] tipc: Enabled bearer , priority 0 [ 617.034383][T23729] syzkaller0: entered promiscuous mode [ 617.050213][T23729] syzkaller0: entered allmulticast mode [ 617.057674][T23735] openvswitch: netlink: Message has 4 unknown bytes. [ 617.085754][T23729] tipc: Resetting bearer [ 617.105901][T23729] tipc: Disabling bearer [ 617.298801][T23748] netlink: 'syz.5.4850': attribute type 2 has an invalid length. [ 617.546068][T23768] sock: sock_timestamping_bind_phc: sock not bind to device [ 617.692733][T23781] lo speed is unknown, defaulting to 1000 [ 617.701306][T23781] lo speed is unknown, defaulting to 1000 [ 617.708089][T23781] lo speed is unknown, defaulting to 1000 [ 617.729396][T23781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 617.765218][T23781] lo speed is unknown, defaulting to 1000 [ 617.801961][T23781] lo speed is unknown, defaulting to 1000 [ 617.809317][T23781] lo speed is unknown, defaulting to 1000 [ 617.839690][T23781] lo speed is unknown, defaulting to 1000 [ 617.851726][T23781] lo speed is unknown, defaulting to 1000 [ 617.860459][T23781] lo speed is unknown, defaulting to 1000 [ 617.872658][T23781] lo speed is unknown, defaulting to 1000 [ 617.882362][T23781] lo speed is unknown, defaulting to 1000 [ 617.907251][T23781] lo speed is unknown, defaulting to 1000 [ 618.099397][T23821] tipc: Enabling of bearer rejected, failed to enable media [ 618.237588][T23821] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 618.270802][T23821] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 618.311753][T23821] macsec1: left promiscuous mode [ 618.337154][T23821] macsec1: left allmulticast mode [ 618.383642][T17483] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.400895][T17483] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 618.414144][T23844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.421110][T17483] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.442835][T17483] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 618.463751][T23827] tipc: Enabling of bearer rejected, failed to enable media [ 618.474333][T23830] hsr_slave_0: left promiscuous mode [ 618.534520][T17483] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.562264][T17483] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 618.591903][T17483] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.618419][T17483] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 618.737857][T23858] netlink: 'syz.1.4886': attribute type 16 has an invalid length. [ 618.786578][T23843] lo speed is unknown, defaulting to 1000 [ 618.859762][T23872] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 618.901559][T23870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.918911][T23870] bond6: entered promiscuous mode [ 618.924805][T23870] team0: Port device bond6 added [ 618.942212][T23876] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 618.998796][T23881] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 619.183810][T23901] syzkaller0: entered promiscuous mode [ 619.219624][T23901] syzkaller0: entered allmulticast mode [ 619.429342][T23924] __nla_validate_parse: 28 callbacks suppressed [ 619.429361][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 619.650688][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4911'. [ 619.679237][T23943] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4911'. [ 619.835175][T23954] dvmrp8: entered allmulticast mode [ 619.850312][T23953] dvmrp8: left allmulticast mode [ 620.107517][T23959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4916'. [ 620.229673][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4918'. [ 620.635958][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 620.684283][T23981] lo speed is unknown, defaulting to 1000 [ 620.833687][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4927'. [ 620.882212][T23984] lo speed is unknown, defaulting to 1000 [ 620.892210][T24007] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4927'. [ 620.903253][T23997] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4927'. [ 621.088782][T24003] lo speed is unknown, defaulting to 1000 [ 621.242728][T24032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4937'. [ 621.409507][T24017] lo speed is unknown, defaulting to 1000 [ 621.813804][T24068] netlink: 'syz.4.4947': attribute type 64 has an invalid length. [ 621.841576][T24068] netlink: 'syz.4.4947': attribute type 64 has an invalid length. [ 621.913938][T24048] lo speed is unknown, defaulting to 1000 [ 621.963747][T24079] netlink: 'syz.3.4949': attribute type 5 has an invalid length. [ 622.191648][T24091] IPVS: set_ctl: invalid protocol: 10233 100.1.1.2:19999 [ 622.221889][T24065] lo speed is unknown, defaulting to 1000 [ 622.478916][T24095] lo speed is unknown, defaulting to 1000 [ 622.683706][T24110] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 622.769231][T24114] tap1: tun_chr_ioctl cmd 1074812118 [ 623.324208][T24159] erspan0: left allmulticast mode [ 623.373883][T24159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.392017][T24159] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.405638][T24159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.691580][T24176] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000 [ 623.835144][T24189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.411712][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.429567][T24217] netlink: 'syz.3.4991': attribute type 1 has an invalid length. [ 624.464591][T24217] 8021q: adding VLAN 0 to HW filter on device bond15 [ 624.545435][T24225] dvmrp0: entered allmulticast mode [ 624.552132][T24220] netlink: 'syz.1.4992': attribute type 2 has an invalid length. [ 624.609713][T24231] syzkaller1: entered promiscuous mode [ 624.614317][T24234] __nla_validate_parse: 11 callbacks suppressed [ 624.614334][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'. [ 624.615326][T24231] syzkaller1: entered allmulticast mode [ 624.650899][T24237] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 624.793017][T24245] sctp: [Deprecated]: syz.0.5000 (pid 24245) Use of int in maxseg socket option. [ 624.793017][T24245] Use struct sctp_assoc_value instead [ 624.876766][T24241] lo speed is unknown, defaulting to 1000 [ 625.066765][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5003'. [ 625.153867][T24266] siw: device registration error -23 [ 625.177650][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5006'. [ 625.511681][T24280] ip6erspan0: entered allmulticast mode [ 625.534896][T24268] lo speed is unknown, defaulting to 1000 [ 625.619567][T24290] netlink: 'syz.4.5011': attribute type 3 has an invalid length. [ 625.930802][T24299] lo speed is unknown, defaulting to 1000 [ 626.241662][T24306] lo speed is unknown, defaulting to 1000 [ 626.266524][T24304] lo speed is unknown, defaulting to 1000 [ 626.367465][T24314] netlink: 'syz.3.5016': attribute type 1 has an invalid length. [ 626.484479][T24314] netlink: 'syz.3.5016': attribute type 1 has an invalid length. [ 626.779761][T24338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 626.793764][T24338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5023'. [ 626.881438][T24341] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5024'. [ 627.076886][T24346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5025'. [ 627.090631][T24346] tap1: tun_chr_ioctl cmd 1074025677 [ 627.096979][T24346] tap1: linktype set to 780 [ 627.826594][ T6809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 627.875610][T24407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5034'. [ 627.924569][T24412] netlink: 'syz.4.5040': attribute type 1 has an invalid length. [ 628.049184][T24426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5043'. [ 628.139422][T24436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.190680][T24444] netlink: 'syz.5.5049': attribute type 21 has an invalid length. [ 628.198962][T24444] netlink: 'syz.5.5049': attribute type 1 has an invalid length. [ 628.247085][T24446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5052'. [ 628.271507][T24448] team_slave_1: left promiscuous mode [ 628.277224][ T6809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.290951][T24448] team0 (unregistering): Port device team_slave_1 removed [ 628.300530][T24448] bond6: left promiscuous mode [ 628.312167][T24448] team0 (unregistering): Port device bond6 removed [ 628.331427][T24452] bridge0: entered allmulticast mode [ 628.339711][T24452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 628.472578][T24446] lo speed is unknown, defaulting to 1000 [ 628.591031][ T8377] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.610669][T24477] : entered promiscuous mode [ 628.629708][T24476] Bluetooth: MGMT ver 1.23 [ 628.640920][T24472] syzkaller0: entered promiscuous mode [ 628.643736][T24479] netlink: 'syz.4.5060': attribute type 1 has an invalid length. [ 628.646769][T24472] syzkaller0: entered allmulticast mode [ 628.675436][T24479] 8021q: adding VLAN 0 to HW filter on device bond8 [ 628.701096][T24479] bond8: (slave gretap1): making interface the new active one [ 628.709526][T24479] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 628.958480][T24469] lo speed is unknown, defaulting to 1000 [ 629.032893][T24499] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 629.528429][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.633220][T24525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.645730][T24525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.664557][T24527] __nla_validate_parse: 5 callbacks suppressed [ 629.664575][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5074'. [ 629.683903][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5074'. [ 629.694251][T24512] lo speed is unknown, defaulting to 1000 [ 629.694527][T17486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.715255][T17486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.735293][T24525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.746059][T24525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.804735][T24525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.815945][T24525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.908037][ T13] ------------[ cut here ]------------ [ 629.913636][ T13] WARNING: CPU: 1 PID: 13 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 629.923377][ T13] Modules linked in: [ 629.927307][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 629.936624][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.946733][ T13] Workqueue: netns cleanup_net [ 629.951520][ T13] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 629.957819][ T13] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d 20 f2 f7 e9 78 fe ff ff e8 03 b5 8e f7 eb 05 e8 fc b4 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 c4 4b 01 [ 629.977477][ T13] RSP: 0018:ffffc90000126fc0 EFLAGS: 00010293 [ 629.983572][ T13] RAX: ffffffff8a30f62d RBX: dffffc0000000000 RCX: ffff88801ce98000 [ 629.991598][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.999621][ T13] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 630.007625][ T13] R10: dffffc0000000000 R11: fffff52000024df0 R12: ffff8880596188de [ 630.015612][ T13] R13: ffff888057f95490 R14: 0000000000000000 R15: 1ffff1100aff2a92 [ 630.023631][ T13] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 630.032604][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.039224][ T13] CR2: 000000110c2ff602 CR3: 00000000442f6000 CR4: 00000000003526f0 [ 630.047241][ T13] Call Trace: [ 630.050550][ T13] [ 630.053490][ T13] fib6_ifdown+0x401/0x4c0 [ 630.057952][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.062908][ T13] fib6_clean_node+0x24d/0x590 [ 630.067714][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 630.073016][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.077826][ T13] fib6_walk_continue+0x67b/0x910 [ 630.082889][ T13] fib6_walk+0x149/0x290 [ 630.087176][ T13] __fib6_clean_all+0x234/0x380 [ 630.092049][ T13] ? __fib6_clean_all+0x9b/0x380 [ 630.097033][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.102005][ T13] ? __pfx___fib6_clean_all+0x10/0x10 [ 630.107431][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 630.112736][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.117734][ T13] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 630.123391][ T13] ? __mutex_trylock_common+0x153/0x260 [ 630.128993][ T13] rt6_disable_ip+0x120/0x720 [ 630.133710][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.138516][ T13] ? trace_contention_end+0x39/0x120 [ 630.143816][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 630.149061][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.153838][ T13] addrconf_ifdown+0x15d/0x1880 [ 630.158730][ T13] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 630.164386][ T13] ? tls_dev_event+0x717/0xec0 [ 630.169199][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 630.174494][ T13] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.180527][ T13] ? net_generic+0x1e/0x240 [ 630.185044][ T13] ? __pfx_tls_dev_event+0x10/0x10 [ 630.190195][ T13] addrconf_notify+0x1bc/0x1010 [ 630.195067][ T13] notifier_call_chain+0x1b3/0x3e0 [ 630.200221][ T13] netif_close_many+0x29c/0x410 [ 630.205091][ T13] ? __pfx_netif_close_many+0x10/0x10 [ 630.210516][ T13] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 630.216879][ T13] ? mutex_is_locked+0x17/0x50 [ 630.221651][ T13] ? rtnl_is_locked+0x15/0x20 [ 630.221804][T24543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5078'. [ 630.226371][ T13] ? unregister_netdevice_queue+0x1b3/0x380 [ 630.226397][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 630.226419][ T13] ? __pfx_call_rcu+0x10/0x10 [ 630.226435][ T13] ? sysfs_remove_group+0x236/0x2c0 [ 630.226457][ T13] ? remove_nexthop+0xdf/0x180 [ 630.226479][ T13] ops_undo_list+0x3dc/0x990 [ 630.226499][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 630.226518][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 630.226541][ T13] cleanup_net+0x4c5/0x800 [ 630.226559][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 630.226577][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.226593][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 630.226612][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 630.226631][ T13] process_scheduled_works+0xae1/0x17b0 [ 630.226663][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 630.226689][ T13] worker_thread+0x8a0/0xda0 [ 630.226720][ T13] kthread+0x70e/0x8a0 [ 630.226743][ T13] ? __pfx_worker_thread+0x10/0x10 [ 630.226761][ T13] ? __pfx_kthread+0x10/0x10 [ 630.226783][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.226807][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.226831][ T13] ? __pfx_kthread+0x10/0x10 [ 630.226851][ T13] ret_from_fork+0x3f9/0x770 [ 630.226872][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 630.226893][ T13] ? __switch_to_asm+0x39/0x70 [ 630.226915][ T13] ? __switch_to_asm+0x33/0x70 [ 630.226935][ T13] ? __pfx_kthread+0x10/0x10 [ 630.226955][ T13] ret_from_fork_asm+0x1a/0x30 [ 630.306450][ T5926] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.309055][ T13] [ 630.309069][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.309082][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 630.309100][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.309113][ T13] Workqueue: netns cleanup_net [ 630.309135][ T13] Call Trace: [ 630.309143][ T13] [ 630.309151][ T13] dump_stack_lvl+0x99/0x250 [ 630.309175][ T13] ? __asan_memcpy+0x40/0x70 [ 630.309196][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.309215][ T13] ? __pfx__printk+0x10/0x10 [ 630.309245][ T13] vpanic+0x281/0x750 [ 630.309264][ T13] ? __pfx__printk+0x10/0x10 [ 630.309286][ T13] ? __pfx_vpanic+0x10/0x10 [ 630.309305][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 630.309335][ T13] panic+0xb9/0xc0 [ 630.309353][ T13] ? __pfx_panic+0x10/0x10 [ 630.309379][ T13] __warn+0x31b/0x4b0 [ 630.309398][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 630.309423][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 630.309446][ T13] report_bug+0x2be/0x4f0 [ 630.309468][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 630.309491][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 630.309514][ T13] ? rt6_multipath_rebalance+0x457/0x8b0 [ 630.309537][ T13] handle_bug+0x84/0x160 [ 630.309554][ T13] exc_invalid_op+0x1a/0x50 [ 630.309572][ T13] asm_exc_invalid_op+0x1a/0x20 [ 630.309589][ T13] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 630.309614][ T13] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d 20 f2 f7 e9 78 fe ff ff e8 03 b5 8e f7 eb 05 e8 fc b4 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 c4 4b 01 [ 630.309629][ T13] RSP: 0018:ffffc90000126fc0 EFLAGS: 00010293 [ 630.309645][ T13] RAX: ffffffff8a30f62d RBX: dffffc0000000000 RCX: ffff88801ce98000 [ 630.309659][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.309671][ T13] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 630.309684][ T13] R10: dffffc0000000000 R11: fffff52000024df0 R12: ffff8880596188de [ 630.309698][ T13] R13: ffff888057f95490 R14: 0000000000000000 R15: 1ffff1100aff2a92 [ 630.309714][ T13] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 630.309743][ T13] fib6_ifdown+0x401/0x4c0 [ 630.309768][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.309790][ T13] fib6_clean_node+0x24d/0x590 [ 630.309813][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 630.309839][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.309858][ T13] fib6_walk_continue+0x67b/0x910 [ 630.309887][ T13] fib6_walk+0x149/0x290 [ 630.309908][ T13] __fib6_clean_all+0x234/0x380 [ 630.309929][ T13] ? __fib6_clean_all+0x9b/0x380 [ 630.309950][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.309979][ T13] ? __pfx___fib6_clean_all+0x10/0x10 [ 630.310002][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 630.310024][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 630.310046][ T13] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 630.310073][ T13] ? __mutex_trylock_common+0x153/0x260 [ 630.310095][ T13] rt6_disable_ip+0x120/0x720 [ 630.310118][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.310136][ T13] ? trace_contention_end+0x39/0x120 [ 630.310154][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 630.310177][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.310197][ T13] addrconf_ifdown+0x15d/0x1880 [ 630.310217][ T13] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 630.310245][ T13] ? tls_dev_event+0x717/0xec0 [ 630.310263][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 630.310282][ T13] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.310308][ T13] ? net_generic+0x1e/0x240 [ 630.310331][ T13] ? __pfx_tls_dev_event+0x10/0x10 [ 630.310350][ T13] addrconf_notify+0x1bc/0x1010 [ 630.310376][ T13] notifier_call_chain+0x1b3/0x3e0 [ 630.310399][ T13] netif_close_many+0x29c/0x410 [ 630.310425][ T13] ? __pfx_netif_close_many+0x10/0x10 [ 630.310454][ T13] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 630.310478][ T13] ? mutex_is_locked+0x17/0x50 [ 630.310494][ T13] ? rtnl_is_locked+0x15/0x20 [ 630.310515][ T13] ? unregister_netdevice_queue+0x1b3/0x380 [ 630.310536][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 630.310559][ T13] ? __pfx_call_rcu+0x10/0x10 [ 630.310576][ T13] ? sysfs_remove_group+0x236/0x2c0 [ 630.310598][ T13] ? remove_nexthop+0xdf/0x180 [ 630.310619][ T13] ops_undo_list+0x3dc/0x990 [ 630.310639][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 630.310656][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 630.310679][ T13] cleanup_net+0x4c5/0x800 [ 630.310696][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 630.310714][ T13] ? rcu_is_watching+0x15/0xb0 [ 630.310730][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 630.310748][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 630.310767][ T13] process_scheduled_works+0xae1/0x17b0 [ 630.310796][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 630.310822][ T13] worker_thread+0x8a0/0xda0 [ 630.310851][ T13] kthread+0x70e/0x8a0 [ 630.310874][ T13] ? __pfx_worker_thread+0x10/0x10 [ 630.310891][ T13] ? __pfx_kthread+0x10/0x10 [ 630.310912][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.310934][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.310958][ T13] ? __pfx_kthread+0x10/0x10 [ 630.310985][ T13] ret_from_fork+0x3f9/0x770 [ 630.311005][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 630.311025][ T13] ? __switch_to_asm+0x39/0x70 [ 630.311046][ T13] ? __switch_to_asm+0x33/0x70 [ 630.311067][ T13] ? __pfx_kthread+0x10/0x10 [ 630.311088][ T13] ret_from_fork_asm+0x1a/0x30 [ 630.311117][ T13] [ 630.315294][ T13] Kernel Offset: disabled