last executing test programs: 4m47.087682153s ago: executing program 3 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt(r9, 0x7, 0x2, &(0x7f0000000040)=""/26, &(0x7f00000000c0)=0x1a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x12100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt(r9, 0x7, 0x2, &(0x7f0000000040)=""/26, &(0x7f00000000c0)=0x1a) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x12100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) 4m46.549018569s ago: executing program 2 (id=1525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) 4m46.449215359s ago: executing program 3 (id=1527): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xdcb, 0x4) r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={r1, r2, 0xee01}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x44, 0xb2}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x1, 0x4, 0x5ec6}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r4, 0x0, 0x5, &(0x7f00000002c0)=',.#:\x00'}, 0x30) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x300440c0}, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000440)={{0x32, @private=0xa010100, 0x4e23, 0x0, 'lc\x00', 0x2, 0x0, 0x76}, {@private=0xa010101, 0x4e24, 0x3, 0x616, 0x4, 0x200}}, 0x44) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xa8, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xfc}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x82, 0x3, "e70e72ef5a8e455c6ca9d12f0656933eed0643e8563abd1e4ebfe90d50023a38a134fb5cb5a8409ba11b8c131f9db865cc81c85a18da148ed6af56566c20729dd45867d352c3c1a19de60610d22a7197f03379229d35780b9ca93a4dbd98b029722deba422a9fa6eb97254b51c018219130dadb03c7b3f1856536781d2e9"}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xfff8}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff06}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfffa}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xfd}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xf001}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7cf0}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x3ebdc4aa96b23b32}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@bridge_setlink={0x44, 0x13, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x3800, 0x20200}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x8f}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4627e}]}, 0x44}}, 0x24028080) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000840)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000008c0)={0x0, @hci={0x1f, 0x4}, @ethernet={0x300, @random="9ad812beb58e"}, @nfc={0x27, r6, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)='veth0_virt_wifi\x00', 0x0, 0x7fff, 0x5}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000940)=0xe60800, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40c5}, 0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008880) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6044002}, 0x20008880) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc5) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r10, &(0x7f0000001380)={&(0x7f0000000f80)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @local}, 0x4, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001000)="5267147feb58d8f3368a1910e69a8a325e455413faa45fca66cc92441870112808baf5b09648d58a7d84e7c270e447250d0a375a", 0x34}, {&(0x7f0000001040)="360732206e9b316986d026441d7b7b054aad075830753c096f177485f8f8ab5d4fe778bd7d05ef431d0edada41ca75a38ec414fb8f89355ce0ef41ba7316d2e3d3fc9ac926174ef09a45ca2294a1219d2590302532075e4e35067de0d931a2747b36615a03d64daabeb506db28580126f42c86d9ec99e48dcc8a76c5d0be199f4fd016b86aa610c5b1067baf3197fa316b402b9b7a35a08a5f8d83157e", 0x9d}, {&(0x7f0000001100)="33b01379fd305480adddba8022877b1d820e093ed287c06d5c3ee639524395d9cbe77c1c436cdb43048d7cdc5d1732e2f6b5227dca1056057c96cdcd697d76e1beddf927ed1edbcc8411e50221902b526565", 0x52}, {&(0x7f0000001180)="4984bb1b1aa0b97ece823f831b02721a2804827416edea99cd9d5509f716a3693c9a7812eddaff28e409539e3bb8285d790808a43fa790b1c2199c0ed17b6cea9cfe22a1bb364850a0c320be76704bc3e7ad8dd820d73976ffa66f3a639ca7c86ee296df86d73f9e4dc44c90e25f604c792477530f441dead08c9fd77c4003e0c01c3acc852b0614ef65c26960af881d59f4d255ff37c18974971805f7d697331570939599e8fb5d65b35383469639a2b6f7a32de7f4a15ca52a14938256c0a7afa29b10", 0xc4}], 0x4, &(0x7f00000012c0)=[@timestamping={{0x14, 0x1, 0x25, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @mark={{0x14, 0x1, 0x24, 0x200000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}], 0xa8}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x3c, 0x0, 0x1463, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000881) 4m46.344765715s ago: executing program 3 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdb933201}, 0x10) 4m46.289208974s ago: executing program 2 (id=1531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000580)}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 4m45.65203858s ago: executing program 2 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r3, 0x601, 0x70bd25}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="50003080300001800800010000962d1cd11a5c3c18b0c6c8ea912efe430000002400038008000200020000000600010000030000060003"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x44001) 4m45.304313806s ago: executing program 3 (id=1537): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000001c0), 0x4) 4m45.183300384s ago: executing program 2 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x8020) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050050}, 0x20040001) (async) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000340)={'netdevsim0\x00', @ifru_names='batadv_slave_1\x00'}) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x1c) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000400)="348c3c14cd6bf1371cfe386daa09464864ab8f969997fd49f75f71a29a7f3e12c511e3034e14f5e5872f9bb9cd75690df2ab0ff7aa071f98ddb4c694fd308253f4f0bd425b7cf62a64e8db8c5c2c078d6f46db7c0ec2bd606f42de9e9b1a2a5b521b2da472766b398ed6e3a12dea1356dbaa42444428724e13ed80892fc39e60d6cf2a807df74d8d62a800cd34279914c6794246b56e713c1ccdffbb6b90cfca5416811699747b45a9664279ce59d1f59c2d38ed49c384cdad5e72dedfb16556c13a8e20655556a70827afe31e1bb46d5b964120db9663ab8078540ba8db7ade994f7e1e60f8f69c91e6e90a3ae1497b66f637b1dea5a5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000600)={&(0x7f0000000540)=""/148, 0x1118000, 0x0, 0xfff}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x41000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0xcc}}, 0x40000) (async) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000a00), 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x9, 0x8}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xd, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000000bc0)=""/245, 0x27, 0xf5, 0x1, 0xfffffff8}, 0x28) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2d01, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x13, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd96}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='syzkaller\x00', 0x54e37c37, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000d00)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[0xffffffffffffffff, r9, r10, 0x1], 0x0, 0x10, 0x8}, 0x94) getsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f0000001000)={{0x2, 0x4e23, @private=0xa010100}, {0x6, @random="971d7bd9d43c"}, 0x14, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x4000, r8}, 0x18) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r11, 0x20, &(0x7f0000001400)={&(0x7f0000001300)=""/186, 0xba, 0x0, &(0x7f00000013c0)=""/43, 0x2b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x14, 0x25, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @alu={0x4, 0x1, 0x7, 0x1, 0x6, 0xffffffffffffffbe, 0x1}, @jmp={0x5, 0x0, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x9c}, @initr0={0x18, 0x0, 0x0, 0x0, 0xeb6, 0x0, 0x0, 0x0, 0xe5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0xc9f6fef801a451d4, 0x7, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001240)='syzkaller\x00', 0x8b06, 0x50, &(0x7f0000001280)=""/80, 0x41000, 0x10, '\x00', r2, @lirc_mode2=0x10, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r11, 0x2, &(0x7f0000001480), &(0x7f00000014c0)=[{0x1, 0x5, 0xc, 0x5}, {0x1, 0x5, 0x4, 0x2}], 0x10, 0xfff}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=r14, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000001600)={0xa, 0x4e23, 0x2, @private1, 0xd7bf}, 0x1c) 4m45.130931928s ago: executing program 3 (id=1539): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r3, @ANYBLOB="280050800500020002000000090001007ee5d52ffd00000005000900020000000800030004ac0f", @ANYRES16=r0], 0x44}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 4m44.749754993s ago: executing program 2 (id=1542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r0, 0xffffe000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x6, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20f}, @map_val={0x18, 0x4d73b0be184745a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m44.748262734s ago: executing program 3 (id=1543): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000ff000000"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x5, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {0xfff1}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r3, 0x50) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r9, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r9, 0x3) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0xd) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r8, 0x50) 4m44.466571314s ago: executing program 2 (id=1545): unshare(0xc020400) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 4m29.513824525s ago: executing program 32 (id=1543): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000ff000000"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x5, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {0xfff1}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r3, 0x50) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r9, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r9, 0x3) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0xd) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r8, 0x50) 4m29.317405236s ago: executing program 33 (id=1545): unshare(0xc020400) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 14.150978554s ago: executing program 0 (id=3003): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r2, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xcb6d99db30de7131, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="10002ecc9ebf1ed0000000000000d90900000b000100627269646765", @ANYRES16=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="ed609802e01c6a84cf5da5f02807708edc19af388b33ee1be08d5436392297e53a35741b6d865f72ac3107fe22d9ddfec6b352b857e85b3d18a6981a48339afdb505fd0f35d540ee58d8fe42c922fa4b414a68f457a56e286612955956165edaae22537e0fe425010a2df6855d6b5007c7e3b434418aa2e0fc2efece64d00a9984faac89443631625b4854b0413eb0d0d225d86d69e4540e029a9b547265df1c927c99980261531026b778313a11897b5be3a62f71c75235eb02bfd637e021ac98", @ANYRES64=0x0, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f00000000c0), &(0x7f0000000240)=0x14) 14.147838866s ago: executing program 6 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newspdinfo={0x2c, 0x24, 0x20, 0x70bd25, 0x25dfdbff, 0x3851, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4870) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r12, 0x10, 0x7800, 0x1, 0x8, {{0x16, 0x4, 0x3, 0x7, 0x58, 0x65, 0x0, 0xd, 0x4, 0x0, @local, @multicast1, {[@generic={0x88, 0xa, "c10225ba997c5574"}, @ssrr={0x89, 0xf, 0x72, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @empty]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x15, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}]}, @noop, @end]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9651954}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x840) sendmsg$inet(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)="b4c628115997397677ffce3e5a2e1f408bbf2f8f848b3c510269d99ead50800276b99999b93392d0f5cb251cebd27c20993a6b0346c8689fc69cf8861367c938840398af5532aeac05b4ec84ce9c", 0x4e}, {&(0x7f00000007c0)="8dcb9138c3c22eb089efa336561748b9364c83ce1e9098b79f6d23f0879154b0d48680ec43108e1235efba41209e474a5f0f914218b2c3bdf4cf65808e56d11c03f83a091cf340b558d41e706c3681a4766888b59cc901396343b9d855a7fcab5f5c6d9265e2bde886872694302dd75e58cf20d878438533f2b8ccc53489cdde3ca927c93f8607a638a65d0aa5c507172029b32d09df6a7ddb3101c874aa", 0x9e}, {&(0x7f0000000880)="0bf25a237ccfae98e217c985a5eca1347b0b0d23c2c766a391234e61aa3ba4648a5f0b975c6746e941de", 0x2a}, {&(0x7f00000008c0)="c34f3757554fdcd62f3e14e54d95d497a5e33380e45e043e9bfe20337000f8b9e536156a2689eca38a7a271b3437e5ac428d1bac8ad6be9d58f6bd2db330508a6d23207d808c2266afc84b39152c743689a499d677ddf8623a0d94c571e16bfe1c86ef3f4487b22427f13e6d7005a9e7df8955017347dc521a6ba703b882e85dfc1b1b38bf7a0c394962386893696dc1c627a2dbe1e7303a44e5713de1e50f1193708646a84e6524", 0xa8}, {&(0x7f0000000980)="83b67f17d004f28831a635a3a14d87164dd427d7ada29de495b6aa2fcaf2ad8ab51c0bc21ace1af220ff2fd33743859efdd1ef33c3b541eeee2421eb3e0ee20ab4b0ebeb0638cfc072c19ee783b5e52b8b69954a9b2a3c06ee86208ee7dbe83a1d34e05416396e404c488ab6871335cc6070f36a704bec98a74b2e934703cf512467b82b98", 0x85}, {&(0x7f0000000a40)="a6387480c6f626fbf7d5aaa7336108b52c06220f351457c4fc88e24f91162d53b0020bc9736819a2e9e665ac77ac433d338faa70c9580533b0b0445d8b9757f1f3860def51ebc4eac481d8cfe26ce2210557a5f58957cf582cd1559ac6fb8ae6ac71823d3ae9d351dc9eea81b67afd7326aa0077c8f1e352942e697764c167f70632eb5ff337d64840c4d61d5f1a64021a74bee8665e41567cce637da8caa6951e9fd39e707f4a81a9", 0xa9}], 0x6, &(0x7f0000000b80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0xaf, [@rand_addr=0x64010100, @private=0xa010101, @multicast1, @multicast2]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010100, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x98}, 0x40) socket$inet6(0xa, 0x3, 0x4) 13.736703902s ago: executing program 0 (id=3006): socket$rds(0x15, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 13.325029909s ago: executing program 0 (id=3009): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0xd, @private1, 0x16bf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="a8ae1947b9e762fc2bad2e6871451426309924be", 0x14}, {&(0x7f0000000480)="265ef3ddb945e6c1c88291b4b968a02b78fd5e8140ed14711c11eb308461bd929e38c9219f9e24b457028677067aa67e0a4f1697cb23c3fc41399a5a523c0c8418bee4a8b6206e318683c3a49b9d57e3f0eccdf4bbc6aa9fd6ae40547809d4515fca2ce3872cb2e4410d158fe4cf75731c1d8d0f71e4c449ef3176629d21b4256645550347fc62008c85efad0f4967a400c4f2cf9d50515f2b132d832ecc273f78353bd5d6756110cdd6c382397b5614f3beb9bdc56da65782603e810e978e00d5ea12dcb201295cb7638a2c", 0xcc}, {&(0x7f0000000240)="686ac89057a672f8d279bb774e02c5bedd530cd5ef82e9781340d992cf75ab33faeebd", 0x23}], 0x3, &(0x7f0000000580)=[@hopopts_2292={{0xa0, 0x29, 0x36, {0x21, 0x10, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @generic={0xc, 0x57, "bc0ec7f17c8ad214a57d79842675ad4e276aa4959d11495b67bf3d92c031af6005cf6c4cba75a8cc36fc2cc30eae0fd23945ace68cd821d42daeba663deee3d7673d01182060bd4c09f176e11c6badb8c0a7c95f46a160"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x10}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x0, 0xff, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @private0, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x148}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x10001, @empty, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000700)="1a0d50889c7f35fd36a91a35f118199b210c78e2de6ccdbc0499a1949d1fdfdc4427eabfe26fe8ff1d9a088001a492516077e305b0ee6c6da70f6c2e22b081424487df34fab6735501366ffd2c26c450204b65ea", 0x54}, {&(0x7f0000000780)="507a4f44e6ab70ab3b7f67ad1d2ca1fe526e526c3c79091441ca44f647fee12840debdaade8248e4aa1641e7b673b8be713bf6b775ae0861c5c50e2ea3adf5dacbbb12120636bc1cc7b83f952f93d43d878deb765d477414b39d7467ad5a0787ea939259c4f47ad4cf5d15bceaf0d4b0369029901a2298af290f7a5055bb06614974d73cd2972f73ae", 0x89}, {&(0x7f0000000840)="91f5836750945c0fd4de276d1eac03a6ade1eebb8bdce2fb0fc7949bc546cc787dcba74ad64429533117d8b2868fefe3c6eaac4d0cc0b9e3968b060bd754ded1e68835ef2dfb85a739229df4caee20daece83e274b894a55a5a36a0e5be2b71d55fd826828e5f61231edff048d17340ac9ac0df74ce8d1ac1a3026158114d3fa6c7eace356549a4214929190", 0x8c}], 0x3, &(0x7f0000000d00)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0xff00}, @pad1]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x11, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x7, [0x7, 0x6]}}, @generic={0x2, 0x21, "08b5a96b364751b34b2a4b7bf19e8d870d185390db09747630a23294762674038b"}, @pad1]}}}, @hopopts={{0x100, 0x29, 0x36, {0x16, 0x1c, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x0, 0x3a, "fc55ff677ae50fd11b78ac20638e4376f774b597fed0d4e039cf39ef7cad48bda949037f92f3aa25bdc66a12ad5754f71fee56779a8175bb4a4f"}, @generic={0x1, 0x95, "64c3db9fec1d194bf201100b5da753e89fadafa940fcf5f5289fa0c71bef2b5c374faa4540a3be0b360f316574c19a0e4d4ae6ab6b3e541e9a68bda648e20a2df602069d3249c1368d8cb5d8d84c68e7eff52edf33726dd52af1be6e3f3ad9eefc60d8381f46ddc1483397e6613e3e9edd29866582d572dc93f4eed13c3b12155ba076b59e6caf89b2fa1dc469a2a63c600dce8191"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x48, 0x8, 0x2, 0x4, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}], 0x208}}, {{&(0x7f0000000900)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000f40)="36e749833532503ca3c7730dc87982d282540381088a87487f709933319ecac49f0eb20c48707f6ca19672cf60ccb99b7e93068fc5f7e844ae828ed0ad1ba1f9ce4c82b6d67a083e335e72dadc6805d8ae8dfc0cbe98df38a07bfd841ec4e40e7e2fa75295eecbe6da9892a43d2116155f723d0ec77a636d962e517d283c5cf604dea7ac6785623852057ba22da1c07866899568ca662395ef5b7364866289109ebd9bdf3488fae607baa6dcb3", 0xad}, {&(0x7f0000001000)="ac669b704df8fad7a32160122263890d4a8ad52c94695f6ff31d37561e32bca7f65bb75c5f04158a91573c2656206104ade4a5a5cf6ff4d8f698c22878a6098c07d1cf0548c317dce588bae5c458e3ef8030e369e136014b349e5f09be", 0x5d}, {&(0x7f0000001080)="3abdf562d7c60e5ab019f8153f5cf0a94786e055a57ef42c64864d48", 0x1c}, {&(0x7f00000010c0)="dec730e6364645c67fd41c7b81a07c4565bbe2214a05bd6b9edbad5262b1e6eadbe84afacb737fc40bbdc6521dff992f6fea5be45003de8635af3bfc723f68139d058416cd5e2a538ec27a85b0bd891317266ad0e462af", 0x57}], 0x4}}, {{&(0x7f0000001180)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000011c0)="b36e7b9bc6b1b9a4fdf1ce44067dea627ffdeda5ecf09ee97a5012853fe7d835e7ef068255d280f88d7accb8ca0f068265c0482c3c7e34e07bef3fdcbdf59afee13f10f6da119932b356f37e21e1b8e4ca944eac372ed8015903a9cb3a72ab842425ab671a1b67d2179d72d2f3ea70f8f4a4cf005bc076d4216002c6272bba09159442a7d80d6289324e8630422a1805ec15472e968dbb227a3f9578b799863b552e8572527d582bd753416f1aed1509a056b2ba2037ea2e9421c232ce30fec4bb67d331d31a96826cb2c4eeddecdb8a2706a5496f2e100a", 0xd8}, {&(0x7f00000012c0)="b8905f3ede97f5243449e67d762491aa2cf995dc4bf3c793ab111c68141733481982cf12e002f111557122886511865da6d7bceee21054e9781fe4769db27c2175979c6cb548599680492a12b4ffdac2509406613ca27e1e57ff7d0edcee91597365319569bbb8c5c3ce6a20f459e279d445875cbe94d19a845b6074224352148e5d5569b3cbd24ef588ea1c9b5e066a453b886aa65cc7460b793d7ef0df612847fe8753cf68e8c107577a", 0xab}, {&(0x7f0000001380)="17bcba23872fcf93a6ec7fce2f2dc48de0332cd611990cdde2ae0a570e33c5af8110657dff5d9e183bb7405816d63c1a578324d8fb241754d5f411c4de98624bcfdfb794a5f60c1e6c81cb471377872bb438a443826bd0b78b8df39137fc68e9f4e392efd6a5045d6b11a0b6ea62c2dce074cc76ff5248eacf74e6", 0x7b}], 0x3, &(0x7f0000001440)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2f, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @generic={0xd}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x48}}], 0x4, 0x4004045) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000127bd7000fddbdf2508000000140020000004000000000000000000000000000006000300010000000f00"/62], 0x50}}, 0x40890) 12.643594672s ago: executing program 0 (id=3010): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000680)=@null) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.64143932s ago: executing program 6 (id=3011): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'geneve1\x00', {0x2, 0x4e21, @broadcast}}) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'vcan0\x00', 0x4}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b89aa6e92ceb34130001280080001006700e0040001"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 11.358280768s ago: executing program 6 (id=3014): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x52, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) r4 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x100000000, 0x0, [0x5, 0x4, 0x2, 0x7, 0x1], [0xdb66, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x80, 0x4, 0x7, 0x80000001, 0x1ff, 0x6, 0x2, 0x8001, 0x6, 0x8001, 0x8, 0xecbc, 0x9, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x2, 0x4, 0x7, 0xd, 0x5, 0xff, 0xfffffffffffffff9, 0x5f06, 0x3db, 0xffffffff00000001, 0xad25, 0x8, 0x8, 0xfffffffffffffff7, 0x7, 0x80000000, 0x5, 0x8, 0x7, 0x5, 0x4, 0x80, 0x9, 0x6, 0xffffffffffffffff, 0x200, 0x1, 0x1, 0x9, 0x7, 0xffffffffffff9770, 0x0, 0x81, 0xa, 0x78, 0x9, 0x9, 0x0, 0x2, 0xff, 0x40, 0x1, 0x33e, 0x4, 0x2, 0x7, 0x7, 0x1, 0x7db3, 0x1, 0xffffffff, 0xfffffffffffffffe, 0x8000, 0x4, 0x0, 0x100000000, 0x2, 0x10, 0x1, 0x2, 0x4, 0xffffffffffffffff, 0x2, 0x8001, 0xd71, 0x3, 0xfffffffffffffff7, 0x3, 0x66e, 0x2, 0x401, 0xa, 0x8, 0x5592, 0x4, 0x8e5, 0x6c, 0x277, 0xfffffffffffffff8, 0xb68, 0xd737, 0x352280a6, 0x10, 0x7, 0x2edb, 0x4, 0xfd, 0x8, 0x2, 0x7, 0x2, 0x7, 0x4, 0x401, 0xa, 0x4, 0x6, 0x2, 0x6, 0x3]}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000800)={0x1, 0x7a4, @start={r6, 0x1, "fbdb7506710490290833f7dcff1193c92ae0bb1f20680634d7a53ed2177127a196601808e4608e440440ea61383c5c706e9b21b8e75c3b67ba06c7fe359ed9204d9632ac03e268cc42909c73520ac5d41c52976eaef8bad4d42cb53ffd4bd08badee7cbec9077f2137b0b12dd3adc076ab1a725790c2c10834dd2282f158c71339defdb02dc344393ca77365acd25fc3323e53d3e1dadd3c6eba2ad1edeff8657ba01a6931e9d6643dc4e1d9d6f8e19bbd1d3909175448cf3c7cb5c9074f121b3307786e4e731f2448571d2a6d636ea3d582d86019b3b686ef92803dc858f894f721a347cfe3ff6bdf376e0e4b2d80f5be606187d076cf76d7485c0652833bb9b0008846e57f11a33bcdbc70cdd67c9082cd21f7f2d8e8e17e2f5bab85c02b0a9fb4935327d0edade6317040bdd523185f5efddac2175f89d53293ad3639122fc2ecc1fd8c09cee9c7340223257b1df9fda87e76bd97ce0f35ea878ecc77e4a1d65b2a30455c48e3947a0891e575b60077d9722b93487abb37cf5dd1324de72874aa43c95aacf66ae2dd64294c83acaa0279dffd2258e7cb8692325b4d4d3f67aed46c36019d771dff1012a9400808d88c2c80345c463c9bfe638ae792a7e421b417af9506c79fa0c2de3b1a738c5606c94bf93913245328f8520fe1cec6a56eba4d1e3077485a8073ae82712bd61b4764ca9520f911fb128833c18b2eb4322ed3422efa710b410c95a807fc27471eaf745cbfe2e55972a8a6b6504675362c6ac5efd2b4925e165e81207fb344c4cd90f05b15bcf6595bf50354654910b8307bb3a0119c4ea508bf00c59adc3fabc14a54ce911f2e32dba005a9cec49c5b5a19d473aff07b4ec1d6422dc687a05f400e81927a4a994c901f89d34c1f020c174d618fe2568b228c7ffb2230950d8fbe56c395622b259513b171a9dc99c725a3f9413526e2df8b24295b2305856512225cba45421b2fbc714b49b4500ff51193b5c708eb493bdc67734baf915d95531d903b276e3f57c7cfd47de4602d723b9f90e5c6fb27fd575d90d06cb7bcb32e89d7ad0e20ff0b5484c83a9d7f6f61243b97e87f33c609cf7639d66a0d9884104fef4c0c4c464fbada7e894b710f4b3a6252b7edcb0e56057dbaffc3e0bdaae3d902ec9e4feb6749e405f0015e480b3d58c5b293a2e49ff5c53a2d7263b17790aeeedb1427e2121e1be0075cccec5f7a65724bdd14769e3fd5166dc2199b9a19ebdce6f66aa1c863303f059dd84b47cb69dfc314e5a21a86f97750f91309f5252476ab5e69a46debab62b28fcf67ce20be80428493ee35f47fdbe574cd0115e51ea1a1c0ace47aad9b5a14e3b2d1fd49b3f8b7e476887777a006c552463585ab120b8f39337e92b5979f43a981c4ab7d7b923a7ff0c9ec4e32b2b2e20eacb01ee5a20ac4c41e7fe523e42203c70409f39538ac", "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"}, [0x0, 0x5, 0x20400, 0xd5f, 0x5, 0x8, 0xffffffff, 0x2, 0x0, 0x8, 0x8000000000000000, 0x2, 0xfffffffffffffff5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0xffffffffffffff01, 0x2, 0xa2a, 0x0, 0x7, 0x8d37, 0x5, 0xfffffffffffffe01, 0x4, 0x9, 0x99, 0xfffffffffffffffd, 0xfff, 0x7, 0x1, 0x7, 0xffff, 0x5, 0x7ff, 0x7ff8, 0x8001, 0x66, 0x800, 0x9, 0x0, 0x7, 0x2d3, 0x8000000000000001, 0x80000000, 0x8, 0xd, 0x80, 0x9, 0xb6, 0x5, 0x5, 0xa1, 0x4, 0x4d, 0x5, 0x0, 0x4, 0x1, 0x0, 0xe, 0x6, 0x5f, 0xfff]}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r11, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001ffffcffffff000000734646bbe5fa7397fdc3148f0000000000", @ANYRES32=r12, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028006000e000200000008000700ac1e010108000a00", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 11.103560301s ago: executing program 0 (id=3015): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a"], 0x190) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000140)=0xe8) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20}, 0x0) 10.761477452s ago: executing program 0 (id=3017): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) splice(r0, 0x0, r0, 0x0, 0xd, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x30, 0x5, 0x7ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x125}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe10, {0x7, 0x9, 0x101, 0x800}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8081) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 10.41850544s ago: executing program 6 (id=3019): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x98}}, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000300)={@multicast2, @private=0xa010100, 0x0, "00da8c4f987a67739ae58f010407669a7ee2d0228896c206cb9f2bf5a25af7e5", 0x81, 0x6, 0xd, 0x4}, 0x3c) (async) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000300)={@multicast2, @private=0xa010100, 0x0, "00da8c4f987a67739ae58f010407669a7ee2d0228896c206cb9f2bf5a25af7e5", 0x81, 0x6, 0xd, 0x4}, 0x3c) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) sendto(r0, &(0x7f0000000340)="c71b48030c95e6c9eea92b463a78d7e6532591703b23022d5df1f3776101efdfd5b816631c31cdd0618853c40adc125274344ac8fd01bbf3dc27ced0977302012beb0069790c467f9018be8f", 0x4c, 0x4001, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x1, 0x1, 0x1, {0xa, 0x4e20, 0x8001, @local, 0x5}}}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000854) accept$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) (async) r10 = accept$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) getsockname$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) (async) getsockname$packet(r10, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f00000006c0)={@initdev, @initdev, @remote}, &(0x7f0000000700)=0xc) (async) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f00000006c0)={@initdev, @initdev, @remote}, &(0x7f0000000700)=0xc) pipe(&(0x7f0000000740)) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r13, &(0x7f0000000780)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000007c0)=0x1c) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x7f, 0x80000001, 0xa, 0x7, 0x2}, &(0x7f00000008c0)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x7f, 0x80000001, 0xa, 0x7, 0x2}, &(0x7f00000008c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000900)={r14, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000900)={r14, 0x8}, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r8) (async) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r15, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000bc0)=0xe8) sendmsg$nl_route(r13, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@ipv6_newroute={0x50, 0x18, 0x4, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x80, 0xf8, 0x0, 0x0, 0xff, 0x9, 0x300}, [@RTA_PREF={0x5, 0x14, 0x7}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8, 0x4, r11}, @RTA_UID={0x8, 0x19, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) sendmsg$nl_route(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@newnexthop={0x60, 0x68, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x5, 0x0, 0x8}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0xff}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x4}]}, @NHA_FDB={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) 10.066693602s ago: executing program 6 (id=3021): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @dev}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000004c0)={@multicast1, @dev, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x4d, 0x7, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x7, 0x0, 0x7fff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r8, &(0x7f0000000380)={0x1d, r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) r13 = socket(0x200000100000011, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r13, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x17, 0x7, 0x0, 0x101, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x80, 0x20, 0x81, 0x8}}) r18 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r18, &(0x7f00000000c0)={0x1d, r19}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000c00)={0xbc0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x278, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4b}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x9b, 0x71, 0xe0a}, {0x0, 0x10, 0x5, 0x6}, {0x1, 0x0, 0x9, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x401, 0x8, 0x3, 0x5}, {0x8, 0x3, 0x4, 0x5}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x15}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa775}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x28c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0xc, 0x2, 0x9}, {0x2c, 0x1, 0x3, 0x1}, {0xce9d, 0xea, 0x7, 0x6}, {0x9, 0x3, 0x5b, 0x3}, {0x7f, 0xfe, 0xff, 0x1}, {0x0, 0x4, 0x54, 0x10001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8bc9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x0, 0x4, 0x156}, {0x4, 0xcb, 0x4, 0x4}, {0xfffb, 0x5, 0x3, 0x100000}, {0xfffe, 0x18, 0x16, 0x5}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r16}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r21}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}]}, 0xbc0}}, 0x88c0) r22 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r22, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 8.965545505s ago: executing program 6 (id=3024): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$unix(r1, &(0x7f00000000c0)=@abs={0xf0b85fcb3243cb61, 0x0, 0x4e23}, 0x6e) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) (async) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0xf0b85fcb3243cb61, 0x0, 0x4e23}, 0x6e) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) 4.594286785s ago: executing program 5 (id=3041): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e00)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000e40)) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110ae0000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000640)={'nat\x00', 0x0, 0x3, 0x81, [0x1, 0x100000001, 0x0, 0x1, 0x1], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f00000003c0)=""/129}, &(0x7f0000000480)=0x78) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="de1a7948949aafd00004000009d3000000000000b805374f6dddcebddac564a318177463db4cbc19d158913efedc439956211bfa9e4aeb0bf734fc96f9f76a070116abebc4e6db25f0c053d6f16673de9e609febc4531a4fe6c29a790a5754a7c6f601d8c43db60cf3281c3f3812e46b34e936ba88f44e92d952cb373d41e88ffc3205436f0951ee33acf36df2f17df5048642d70acca2ce7d2e687f0714ffb2e38154e19a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r10}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmmsg$alg(r4, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b00)="f1dd25c486a3eed99159cf46983838c207bb1ad74b7d69b8494af43037aabd500cca4868f7f6d24ac95ad7df2c634234de87d4dced61ff21a6db7a9e084d6bd9fadc1dfd18f9bb9dbd3ea49fdb41baad23ba7753d413b1578c3a22542f6058eba75b92c15aa1ac5aba4dd6af5129ecdb93cb0e1318baf7149227acac76552fd4a5cd369c2bcd25b97de47cd2e5cd9525dd8b4f4b89778b73c9838792a2f200356fc629efe9f793f986448ce532897a617ceb3be7f72a6bff3920fed91ca6bae1a3ba65", 0xc3}, {&(0x7f00000006c0)="0eacd00b21e5bf8ced9176203660aa5ddedb948a4b20ef26d3b7814b5bf77e6084a7db2886936bf57aa18b6a30d375a8788fadf0f768b92bfe1428f3ab0472cf92f4cf26a27071ac3d6229157d9b0c47269f43a199401058fda177f9469b05dd09", 0x61}, {&(0x7f0000000c00)="5c0a49dd0adbf1f3", 0x8}, {&(0x7f0000000c40)="b868229722a4226210a1182d8edc0bc373eae198376222e653b90d9e22558201e6c27d221fdaa5669d972faa7bcfd17d09502e16261cfc09a6f50e7bd5bf1520dd52e46133b808f1b45833b4186030d931255cc2a2df4291590b66518876464eb430f5085491b137cfd2490eef02f71b4b41420c1350a6bb130b87ef9287f92a7f5751f381d53da2a7d435530278d9e3bc172e", 0x93}], 0x4, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x96d}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x80}], 0x1, 0x2004c001) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r12, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.514238021s ago: executing program 1 (id=3044): socket(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 3.038005576s ago: executing program 1 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0xf, 0x6, 0x5, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x40, 0x7ff, 0xcb8}}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4009845}, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000003bc0)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x6, 0x4022, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000001840)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x560a, 0x401, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x66, 0x0, 0x6d, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101}}}}) 2.879866134s ago: executing program 5 (id=3047): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x8, {0x15, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x0, [0x4, 0x0, 0x8, 0x7]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r6, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x48}, 0x1, 0x40030000000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}, 0x1000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) 2.854700897s ago: executing program 4 (id=3048): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) 2.405930537s ago: executing program 5 (id=3049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd70090000000000002d0005000d000300000008000700", @ANYRES32=r2, @ANYBLOB="08000500ac1414bb"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x24000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="3bbc86252fc73a99f662a0a6a8b1357d0b4b11bf04c5fd24399f689cb8a6f54da860823620e56d5cf51c57ab71c103e2b22fa5f8a388378d2d8321172d876fe48cf5d4f582777663f04d558581370bec5efc668ed8a19243167bcb3c455982100b68e7d9e1e0aa911e65771bb25138a4f980cd3c609db1c05a556d7f0978df14cb28bf8778b8a82ca96f8a418d97ab712efa89ac17c8ffba05e2a0e8212a9bdf4c7e9573d4e5", 0xa6, 0x10, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x0, @broadcast}, &(0x7f0000000b80)=0x10, 0x80000) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000bc0)) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x5c, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_ID={0x0, 0x3, "66759dea8b32fada52f45e26e56d3e835528c93aca664c6707511856ab4f74444101a1a3295f62189ebe3cad36b2a2840666eaf627368192d99cd780bc95067f853d86ac6e6c1799879ddd495ef23e97a70e115af8ec5bfad4696ac64f1a720e46a752e98e8835bb3b29cf246306e87b44f9ad869ba1bc16da897da6264a079f1a6ba88ec5f5a62afb7cc0f979845a06bc56a9e882ff64ed34d4f3584a2d47a6c0f3ae5911250e55608819995a6953a3"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000441}, 0x4004800) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r9 = accept(r5, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000f80)={0x374, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff49e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x786addba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8727}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff846}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8ca1, @dev={0xfe, 0x80, '\x00', 0x16}, 0xa3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb1b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x4, 0x1, 0x22be}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2fc3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xee9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x40}, 0x44880) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 2.32702388s ago: executing program 1 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)=ANY=[@ANYBLOB="580000000102010100110000000000000a000000060016400007d32027ecdf57de9b20f5390000003c0001802c00018014000300fe88000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) socket$netlink(0x10, 0x3, 0xf) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) (async) r5 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r5, &(0x7f0000000280)="1b780951b3642685992ddc96fb019ba67a536706e73e646f53c2cbbafa351ed37eba", 0x22, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003440)=ANY=[@ANYBLOB="1400000810f500020000000000002a1392001a91ec580000060a0b0400000000000000000200fffe4c2800018007000100637400001c00028008000140010000020844cc2c5c62aa9cbfceb7c63e000240000000160500030000000000200001800700010063740000140002800800024000000004084004400000000c0900010073a7f5068cca5c3c6d75cdc11366315cab2da4372664ff992400020073797a00000000001400000011edd10000000000000000000500000af9ba46b926380b2b75796ebf3cacb89c3d0f8d68dfbe79cdb842359de6760d8efdc471934d142a4445e8b4ab0e08a5e0c18ec18507d7a4b0cce96f44b7f0473104f2a4cb43d40a268c2c50fa2e4b3eaa6bd5180df592128ef8ce28268ab8761c8c72deb514f30c2ff50a94e367dc896f0bce319c00faf1e72e7704384bf0d349420825135174a815d274a05c4fb8ff01000097b0590c33e1043d0d194a9791994601b0dbcf5bbd01c118c2b30cdba1132c4536a50ec6f62e5e00000000855f012291f60000008b609100000000000000000000aa985051200426ae"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) close(r6) r7 = accept4(r5, 0x0, 0x0, 0x800) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0x7, &(0x7f0000000380)=0xcd07, 0x4) (async) sendmmsg$inet(r9, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) (async) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000031c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1000}}, 0x3, 0x9, 0xd52b, 0x9, 0x72, 0xf6, 0xa5}, &(0x7f0000003280)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000032c0)={r10, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x4, 0x3}, &(0x7f0000003380)=0x90) (async) recvmmsg(r2, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000740)=""/4096, 0x1015}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000002740)=""/208, 0xd0}], 0x9}, 0x2}, {{&(0x7f0000002840)=@generic, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000240)=""/15, 0xf}, {&(0x7f00000028c0)=""/124, 0x7c}, {&(0x7f0000002940)=""/118, 0x76}, {&(0x7f00000029c0)=""/8, 0x8}, {&(0x7f0000002a00)=""/115, 0x73}], 0x5, &(0x7f0000002b00)=""/159, 0x9f}, 0x2}, {{&(0x7f0000002bc0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002d40)=""/218, 0xda}], 0x2, &(0x7f0000002e80)=""/146, 0x92}, 0xa}, {{&(0x7f0000002f40)=@can, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/73, 0x49}], 0x1}, 0x1}], 0x5, 0x0, 0x0) 2.322021627s ago: executing program 4 (id=3051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x7) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.840459227s ago: executing program 1 (id=3052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="40002f800c00020000000000010000000800010000120000280003801c00038006000300a3aa00000800010000000000"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a000006001700980a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x3, 0xbe, @local, 0x8003}, 0x1c) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000900)="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", 0xda}], 0x1) pipe(&(0x7f00000004c0)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000030095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="940d000002069800080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="1ca883f6f2a1f19a1ba12e4bffa7db9f6732b1afff837384d3bd0986064f7784", @ANYRES64=0x0], 0x10) close(r9) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5c3dd53", 0x8a, 0x20008040, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "ae0e4861539b86d7dad8ed6ebf38796e"}) splice(r7, 0x0, r7, 0x0, 0x8a, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff03076804268db89e1ff0990047", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.800751284s ago: executing program 5 (id=3053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}}, 0x64000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000100001000000000000ff00000000000a44000000060a0b0400000000000000000200000018000480140001800b0001007461726765740000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r4 = socket(0x8000000010, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) (async) write(r4, &(0x7f00000002c0)="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", 0xfc) (async) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0x0, 0x3}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}, 0x0, 0x4f1}, 0x90) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) 1.204643779s ago: executing program 5 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r7, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 1.201279817s ago: executing program 4 (id=3055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0025145da33fa5202900000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 982.0532ms ago: executing program 1 (id=3056): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000680)={0x80000001, {{0x2, 0x4e24, @multicast1}}}, 0x88) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x421, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7, 0x62c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) sendmsg(r4, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000180)=0x6e, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffa6010000000100000056000000250000001900040004000007fdd411efc4080004000000000000000000", 0x39}], 0x1) sendmmsg(r3, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x19}, 0x10001}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="16391c9bb0d1bd81cb2a8a4490fc2f3c4951a707da05fb420f2f28c5ccb30f48962ffec40ed912fd03a3a8866b3936168b1a25277ed084999ac73d28ca7119d7d031d2f96e1e19c1de912dd31033e43dfe08fba5f733acd85d0c0015d86c016bf49aa04720043bb4cb1ba1c7a733890cde85229c9cb1fc5ed04a5e7be30bfae86f3e93ef186891648f017fcd0f0a7403f17d48ac93a7002b03765570a5321731c615397d960ede0b5a33386f86351063625946169905cc7c00591ceba530c0ac53bb3fb0b60d34fdf6d95cfaf40464a5147a4395b53ca4f384a8e3e153fd0d7531222cc66195be3893acab5817fc", 0xee}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000440)="4ad35aaf3be1d26641da5b16167918296d50f83dacb4a18fc5ae39d67d1e061dbca00a6667a82b9caca1e442d3600649fbdde8be9aa741357e68671cb5cfc60b4d38c14e0fe758d7a2a0c9692d2a8ba936fb7da3948f8ed4406b61b958542382663dd6a70c08cd56c005b29c50efef820c75f51f0c96296d175d2fac15adf175a3c471ae03d3831382048a44c30db166a0026a1c82b0376b83592df8ab2a8c686eaeb350f2a91bbf4d7c6b637b45dacddaf564cae116dfbc726a31497f774782ede3d80a8bfb", 0xc6}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="38000000000000001901000000000000e8f4bc41a070c448f4ca020065f6aaa85cf1e5d8d36dc3ecb5bdeaf3b6611191ac6b2b91d000000071000000000000001501000007000000675964b5af0660349553824d584820aced40ed7cfae905f47a06afb40ba2cc721b828d1ee65ef5cf2205b610e436d2b7240005c1cc14b16ea6f6194e4baa287d479acf00cbf261a92f60376ff316ada5f0fa76e91c54548f24000000000000002000000000000000180100000800000092e714c58462d8f07bf85765fb3aa0b0"], 0xc8}}], 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000880)) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x140b, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x40001) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 901.757533ms ago: executing program 4 (id=3057): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x2001100, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x4000000000000, 0x4044000}, 0x8000) 493.536381ms ago: executing program 4 (id=3058): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="e8d0f06a1f", 0x5}, {&(0x7f0000000300)="48ec5fc1be40e32a1d6bb930a47cb449a6e67660c8ac5a8775e5df47d2eea0815d1eed65de1f1512ec4667e53b5339ca362a027f577ef996f3e5938edb65c4c49ff027ffd07460cfbdc3bbaac52ae5a39c582fb8364784f929995549188e0fba5da32445dd972f3ff48faeef92d903206a775dad3186df45f2d7a9adff5d3e470dce77d9a4ad19d9e7e07fd7563d2f715692cc93e967ab8607cb3c25286748f357bf7954fd748797be7f1a0a358e4549aa43226cbf29fd5084ee773ccca6b4189d263b8f2f1c2623231040df4bd62d2ba3fad3505516ebf7ee0081925cdd40b2e0d2027d47d211fa", 0xe8}, {&(0x7f0000000040)}, {&(0x7f00000000c0)}, {&(0x7f0000000440)="da29c7c1054e83630b9beaaec64b7d2c1a1723ce934441b5074fd2490acff4ff23b5faa8ff16ddab809838ddba6c5aa0ada507f9c597aec57779e2f78897df310383caddd28ce11b62c0700fa3d69976bc9fef9714ea16617369bba4cdf3c7bc6338aceee53c9e0bfd88cf070ca5241bc4f8ba474aee80a82a70bd5c7a1bc8987284a7a34fedf9dd6dffa1ac315cf39db36507", 0x93}, {&(0x7f0000000b40)="1064a6f8605ae86801f2dec587ee05aee1074f3db2230cb3bb0d1e1f0b7319e3a37a657d5f71aadeab5bca3748c6723a712001186d3844fee8be8e84b9faaf28c4dde2aedffe484b2bc0872468b4581608ce1cce6bb2a3ee29eff8957e89d8907f1eb8e9a2148832b06db820897167e1c345b1ec9b59581e4e957424157849b1ab4a7f3b6d950ac41024f0df4a0ee1513ba4f41ec847dd93045806af52c7ec8499b1c63542bd0795b96a5c27183f8548bf40ed925fb4bd87360cb9f547d89772f186a3034507774b59a4a6d0ed09cb68c72d2d0f15f0efb63bb31c24f7edd10f5a0ac42e2d4bbb554b0b9225c066a2d16466877243abfdfc79e686d862c6b961da4045523bf4e6fc931d9f33bc85aaac73f5f834d3c51eac07f219dd96fb4ed46ca4c3f903dd08af", 0x128}], 0x6}}], 0x1, 0x40800) 208.839915ms ago: executing program 4 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x7726b01e75b627f5, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8}, 0xc) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x57f, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x5, 0x3ff, 0x1, 0xa6, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r12 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r10) sendmsg$FOU_CMD_DEL(r10, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="020029bd7000fddbdf250200000014000900fc02000000000000000000000000000014000900000000000000000000000000000000000500030006002e5230c60a004e24000008000600640101000500020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4080) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e000100000000000000000002000000010000070000f6ff08000100000000f708000200ac1414bb"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bind$nfc_llcp(r11, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x6, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r11, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000007000000fffdff7f2d00000000000600", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0200000002000000010000000a00"/28], 0x50) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="08000002", @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000500060003000000060002000100000008000a00feffffff08001800e000000108001900e0000002"], 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000700)={0x0, 0x4, 0x5}, 0x8) 200.318877ms ago: executing program 5 (id=3060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=3061): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4}, 0x8) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'net'}]}, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x5, 0x0, 0x3, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)}, 0x40) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000002c0)=""/25, &(0x7f0000000300)=0x19) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0x0, 0x5, 0x4, 0x1eb, 0x4, 0x0, [{0x3, 0x0, 0x5, '\x00', 0x202}, {0xe1, 0x0, 0x5, '\x00', 0xc00}, {0x7, 0x1, 0x100000001}, {0xf35, 0x7ff, 0x1, '\x00', 0x689}]}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000480)={r2, 0x7, 0xf71, "23eab2dc568608ac864bb784da7b006ccf8b53e71befe0851ad49b2029fcae3154ac9ba8828fba87a26a752257e113df8c83b428abb48f8cabdad324982013e0239fd5452c37bf399b140c39aef866ac4b33e4ec535944df0a24802143ed15e4faa63af1ca12aa9ad278b778a1dd0e60957715c88275e54d81f1c974eb791d8663fadb2058d835c9c54d1619acc0e4cc8d118b5134f4438f3c4d06f8c97e1688d03fe8e4159c2cce49171dcf5fd7124651ad6fc0ff8da161ecf395f748cff0abd08178bb95e3530f4b3df1d89836426fef90c0acb4cfeef3dd"}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000580)={0x1, 0x3f, "b7e9a47aff81fd766a2c26ae338e3ebd1305ace031d003eb1562825796a5703c51076925fb7bca6c182737bd316aa27fc08eaed561cd69898a0eae18a1f8fe"}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000600), 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r5, &(0x7f0000000640)="04a81b599cb21d1bda768171171e03a33a008d5b9d13fa0b95784ea4c720b41ef07e8ed5cf869074fb69e0d8dabadd2b2e3cc798a7bb708108b399cb6bdc442fd8a3380f77d5e2b47aab558e28a45df62e84e212530a49672b039f8878774aec4e7505131c08366dc3b1ec3eafedb0089e5fe5d0b1bbb1fc4a5ff22d1cc78a0c3e38e703b03fc05e87016e7dbb382840bf2d271c23718b81d0aeb1c855ac37fe4fe33fdf7f5d5cd6f35ae9db0214ca69acec021d808c871371a35255f64c2b89b47b5c3c2c1d0d7dc5ae187fdff96e42b9d1bc595dc06cefb2d30bac5b8a8330f76126f0a6ea4a", 0xe7, 0x81, &(0x7f0000000740)=@ethernet={0x6, @remote}, 0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000007c0)="2b74e144e363a8b478c69233c09cd0f7", 0x10) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000800)={0x0, 'wlan1\x00', {0x3}, 0xd}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000008c0)={0x7, {{0xa, 0x4e22, 0xfffffffc, @local, 0x5}}, {{0xa, 0x4e23, 0x2, @mcast1, 0x6}}}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xdc, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000bc0)={0x3e2e, 0x3ff, 0x1000, 0x7, 0x80000001}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000c40)={0x0, {{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {{0xa, 0x4e22, 0x3, @empty, 0x10}}}, 0x108) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup(r0, &(0x7f0000000d80)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000dc0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 78] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 279.595339][ T78] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.715062][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.722261][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.754202][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.761493][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.807767][T11431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1609'. [ 281.014511][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.258847][T11459] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1616'. [ 282.736965][ T78] team0: Port device bridge3 removed [ 283.016504][ T78] bond0 (unregistering): Released all slaves [ 283.300261][ T78] bond1 (unregistering): Released all slaves [ 283.323652][ T78] bond2 (unregistering): Released all slaves [ 283.582257][ T78] tipc: Disabling bearer [ 283.663475][ T78] tipc: Left network mode [ 283.929097][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 283.998844][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1620'. [ 284.163155][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.797615][T11291] veth0_vlan: entered promiscuous mode [ 284.857579][T11291] veth1_vlan: entered promiscuous mode [ 284.925673][T11492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1624'. [ 284.998833][T11291] veth0_macvtap: entered promiscuous mode [ 285.052845][T11291] veth1_macvtap: entered promiscuous mode [ 285.084296][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 285.112040][T11494] netlink: 'syz.4.1625': attribute type 5 has an invalid length. [ 285.127734][T11291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.146701][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1625'. [ 285.168665][T11291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.216950][T11494] geneve2: entered promiscuous mode [ 285.222475][T11494] geneve2: entered allmulticast mode [ 285.255931][ T3501] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 285.302506][ T3501] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 285.573829][ T3501] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 285.619274][ T3501] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 285.817506][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 285.860176][ T78] hsr_slave_0: left promiscuous mode [ 285.884550][ T78] hsr_slave_1: left promiscuous mode [ 285.913748][ T78] batman_adv: batadv0: Removing interface: dummy0 [ 285.938454][T11505] sctp: [Deprecated]: syz.4.1629 (pid 11505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.938454][T11505] Use struct sctp_sack_info instead [ 285.958624][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 286.012740][ T78] vlan0: left allmulticast mode [ 286.036532][ T78] veth0_vlan: left allmulticast mode [ 286.058151][ T78] vlan0: left promiscuous mode [ 286.077710][ T78] veth1_macvtap: left promiscuous mode [ 286.098097][ T78] veth0_macvtap: left promiscuous mode [ 286.122463][ T78] veth1_vlan: left promiscuous mode [ 286.139891][ T78] veth0_vlan: left promiscuous mode [ 288.912832][ T3501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.951408][T11501] xfrm1: entered promiscuous mode [ 288.969425][T11501] xfrm1: entered allmulticast mode [ 288.998658][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.004694][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.056508][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.159680][ T3501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.231558][T11508] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 289.241494][ T3501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.370130][ T3501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.451527][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.528786][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.604907][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.680827][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.700595][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.747460][T11508] hsr0 speed is unknown, defaulting to 1000 [ 289.784206][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.845170][T11508] hsr0 speed is unknown, defaulting to 1000 [ 290.081258][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.170524][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.382287][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1634'. [ 290.700928][T11294] veth0_vlan: entered promiscuous mode [ 290.768676][ T78] IPVS: stop unused estimator thread 0... [ 290.816662][T11294] veth1_vlan: entered promiscuous mode [ 291.104810][T11294] veth0_macvtap: entered promiscuous mode [ 291.188547][T11294] veth1_macvtap: entered promiscuous mode [ 291.269445][T11547] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1636'. [ 291.313691][T11546] gre1: entered promiscuous mode [ 291.381666][T11546] gre1: entered allmulticast mode [ 291.403326][T11550] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1636'. [ 291.463476][T11552] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 291.645618][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.689584][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.832198][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.861155][T11560] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1641'. [ 291.904107][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.970173][T11567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1643'. [ 291.999498][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.059145][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.529693][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.591438][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.789247][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.862802][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.245060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bd30400: rx timeout, send abort [ 293.255278][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd30400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.270380][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad8d400: rx timeout, send abort [ 293.278901][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ad8d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.933824][T11604] bond4: entered promiscuous mode [ 293.954372][T11604] bond4: entered allmulticast mode [ 293.981842][T11604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.118938][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 294.584110][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1658'. [ 294.636261][T11625] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1659'. [ 294.715630][T11627] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 294.723417][T11627] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1660'. [ 294.759639][T11625] vlan2: entered allmulticast mode [ 294.783367][T11625] erspan0: entered allmulticast mode [ 294.856368][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 295.393690][T11642] veth0: mtu less than device minimum [ 296.552554][T11673] netlink: 'syz.1.1674': attribute type 11 has an invalid length. [ 296.598693][T11673] __nla_validate_parse: 1 callbacks suppressed [ 296.598714][T11673] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1674'. [ 296.658699][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1676'. [ 296.897956][T11680] sch_fq: defrate 0 ignored. [ 297.123540][T11694] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 297.196621][T11694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.446478][T11705] netlink: 'syz.6.1684': attribute type 1 has an invalid length. [ 297.515959][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1685'. [ 297.534453][T11705] vlan2: entered promiscuous mode [ 297.579003][T11711] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 297.633331][T11705] veth1: entered promiscuous mode [ 297.693159][T11705] vlan2: entered allmulticast mode [ 297.729271][T11705] veth1: entered allmulticast mode [ 297.877973][ T982] IPVS: starting estimator thread 0... [ 298.015096][T11721] IPVS: using max 26 ests per chain, 62400 per kthread [ 298.604120][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 299.088081][T11748] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1692'. [ 299.702383][T11755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1693'. [ 300.175916][T11766] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.349001][T11768] vlan2: entered promiscuous mode [ 300.378539][T11768] bond0: entered promiscuous mode [ 300.470548][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 300.507598][ T5871] Bluetooth: hci6: command tx timeout [ 300.664451][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1703'. [ 300.778844][T11779] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1703'. [ 301.484172][T11804] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1710'. [ 301.642463][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 301.748074][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 301.871597][T11813] geneve2: entered promiscuous mode [ 301.908882][T11813] geneve2: entered allmulticast mode [ 302.125231][T11823] syzkaller0: mtu less than device minimum [ 302.259424][T11827] syzkaller0: entered allmulticast mode [ 303.027814][T11842] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1719'. [ 303.693553][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 303.872087][T11872] netlink: 'syz.5.1727': attribute type 1 has an invalid length. [ 303.915465][T11872] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1727'. [ 304.325074][T11886] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 304.409117][T11886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 304.495521][T11876] vlan3: entered allmulticast mode [ 304.532288][T11876] bond0: entered allmulticast mode [ 304.573089][T11876] bond_slave_0: entered allmulticast mode [ 304.582644][T11876] bond_slave_1: entered allmulticast mode [ 304.936841][T11892] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1734'. [ 304.980822][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'. [ 305.010190][T11892] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1734'. [ 305.077651][T11892] netlink: 'syz.0.1734': attribute type 3 has an invalid length. [ 305.176168][T11892] netlink: 'syz.0.1734': attribute type 2 has an invalid length. [ 305.226553][T11897] dvmrp0: entered allmulticast mode [ 305.243318][T11901] netlink: 'syz.4.1735': attribute type 2 has an invalid length. [ 305.285230][T11904] netlink: 'syz.4.1735': attribute type 2 has an invalid length. [ 305.302860][T11892] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1734'. [ 305.321714][T11899] dvmrp0: left allmulticast mode [ 305.991470][T11923] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 306.057672][T11923] netlink: 'syz.4.1740': attribute type 2 has an invalid length. [ 307.104702][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1748'. [ 307.410899][T11958] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1746'. [ 307.512307][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1749'. [ 307.653352][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1749'. [ 308.178048][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1752'. [ 308.346427][ T6805] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.864556][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1758'. [ 308.998896][T11999] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 309.147494][T12001] FAULT_INJECTION: forcing a failure. [ 309.147494][T12001] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 309.178134][T12001] CPU: 1 UID: 0 PID: 12001 Comm: syz.1.1761 Not tainted syzkaller #0 PREEMPT(full) [ 309.178178][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.178201][T12001] Call Trace: [ 309.178209][T12001] [ 309.178218][T12001] dump_stack_lvl+0x189/0x250 [ 309.178249][T12001] ? __pfx____ratelimit+0x10/0x10 [ 309.178272][T12001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.178297][T12001] ? __pfx__printk+0x10/0x10 [ 309.178328][T12001] ? fs_reclaim_acquire+0x7d/0x100 [ 309.178358][T12001] should_fail_ex+0x414/0x560 [ 309.178395][T12001] prepare_alloc_pages+0x213/0x610 [ 309.178424][T12001] __alloc_frozen_pages_noprof+0x123/0x370 [ 309.178451][T12001] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 309.178470][T12001] ? __pfx___nf_nat_decode_session+0x10/0x10 [ 309.178511][T12001] ? policy_nodemask+0x27c/0x720 [ 309.178538][T12001] ? __lock_acquire+0xab9/0xd20 [ 309.178574][T12001] alloc_pages_mpol+0x232/0x4a0 [ 309.178610][T12001] vma_alloc_folio_noprof+0xe4/0x200 [ 309.178643][T12001] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 309.178688][T12001] folio_prealloc+0x30/0x180 [ 309.178721][T12001] __handle_mm_fault+0x2ab9/0x5440 [ 309.178768][T12001] ? __pfx___handle_mm_fault+0x10/0x10 [ 309.178825][T12001] ? find_vma+0xe7/0x160 [ 309.178851][T12001] ? __pfx_find_vma+0x10/0x10 [ 309.178875][T12001] ? __lock_acquire+0xab9/0xd20 [ 309.178908][T12001] handle_mm_fault+0x40a/0x8e0 [ 309.178945][T12001] do_user_addr_fault+0x764/0x1390 [ 309.178996][T12001] exc_page_fault+0x76/0xf0 [ 309.179019][T12001] asm_exc_page_fault+0x26/0x30 [ 309.179038][T12001] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 309.179068][T12001] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 309.179086][T12001] RSP: 0018:ffffc900041c72e8 EFLAGS: 00050206 [ 309.179106][T12001] RAX: ffffffff84c88b01 RBX: 0000000000000082 RCX: 0000000000000082 [ 309.179120][T12001] RDX: 0000000000000000 RSI: ffff88802cc4006a RDI: 00002000000017c0 [ 309.179134][T12001] RBP: ffffc900041c74a8 R08: ffff88802cc400eb R09: 1ffff1100598801d [ 309.179149][T12001] R10: dffffc0000000000 R11: ffffed100598801e R12: 0000200000001842 [ 309.179163][T12001] R13: 00007ffffffff000 R14: ffff88802cc4006a R15: 00002000000017c0 [ 309.179187][T12001] ? _copy_to_user+0x51/0xb0 [ 309.179222][T12001] _copy_to_user+0x8a/0xb0 [ 309.179251][T12001] csum_and_copy_to_iter+0x83c/0x1c40 [ 309.179298][T12001] ? __local_bh_enable_ip+0x12d/0x1c0 [ 309.179318][T12001] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 309.179351][T12001] ? __skb_recv_udp+0x4be/0x990 [ 309.179373][T12001] ? __skb_recv_udp+0x890/0x990 [ 309.179395][T12001] __skb_datagram_iter+0x89c/0x990 [ 309.179425][T12001] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 309.179455][T12001] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 309.179474][T12001] ? csum_partial+0x239/0x2c0 [ 309.179503][T12001] skb_copy_and_csum_datagram_msg+0x1b8/0x440 [ 309.179539][T12001] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 309.179568][T12001] ? process_measurement+0x1640/0x1a40 [ 309.179595][T12001] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 309.179636][T12001] udpv6_recvmsg+0x652/0x15f0 [ 309.179687][T12001] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 309.179715][T12001] ? __lock_acquire+0xab9/0xd20 [ 309.179750][T12001] ? aa_sk_perm+0x81e/0x950 [ 309.179810][T12001] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 309.179837][T12001] inet6_recvmsg+0x1ee/0x6b0 [ 309.179863][T12001] ? __pfx_aa_sk_perm+0x10/0x10 [ 309.179897][T12001] ? __pfx_inet6_recvmsg+0x10/0x10 [ 309.179919][T12001] ? __lock_acquire+0xab9/0xd20 [ 309.179952][T12001] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 309.179974][T12001] ? security_socket_recvmsg+0x7e/0x2e0 [ 309.180003][T12001] sock_recvmsg+0x105/0x270 [ 309.180039][T12001] ____sys_recvmsg+0x1c9/0x460 [ 309.180078][T12001] ? __pfx_____sys_recvmsg+0x10/0x10 [ 309.180124][T12001] ? import_iovec+0x74/0xa0 [ 309.180155][T12001] ___sys_recvmsg+0x1b5/0x510 [ 309.180189][T12001] ? __pfx____sys_recvmsg+0x10/0x10 [ 309.180244][T12001] ? __fget_files+0x3a0/0x420 [ 309.180276][T12001] do_recvmmsg+0x307/0x770 [ 309.180313][T12001] ? __pfx_do_recvmmsg+0x10/0x10 [ 309.180355][T12001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.180400][T12001] __x64_sys_recvmmsg+0x190/0x240 [ 309.180431][T12001] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 309.180456][T12001] ? rcu_is_watching+0x15/0xb0 [ 309.180483][T12001] ? do_syscall_64+0xbe/0x3b0 [ 309.180510][T12001] do_syscall_64+0xfa/0x3b0 [ 309.180532][T12001] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.180552][T12001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.180573][T12001] ? clear_bhb_loop+0x60/0xb0 [ 309.180598][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.180617][T12001] RIP: 0033:0x7ff37f58ec29 [ 309.180635][T12001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.180652][T12001] RSP: 002b:00007ff38043d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 309.180673][T12001] RAX: ffffffffffffffda RBX: 00007ff37f7d5fa0 RCX: 00007ff37f58ec29 [ 309.180688][T12001] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003 [ 309.180701][T12001] RBP: 00007ff38043d090 R08: 0000000000000000 R09: 0000000000000000 [ 309.180714][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.180725][T12001] R13: 00007ff37f7d6038 R14: 00007ff37f7d5fa0 R15: 00007ffc83657858 [ 309.180758][T12001] [ 310.223024][T12017] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1764'. [ 310.305350][T12021] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1764'. [ 310.319539][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 310.373297][T12017] gretap0: entered promiscuous mode [ 310.385184][T12021] 0ªî{X¹¦: renamed from gretap0 [ 310.422233][T12021] 0ªî{X¹¦: left promiscuous mode [ 310.453090][T12021] 0ªî{X¹¦: entered allmulticast mode [ 310.510429][T12021] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 311.037074][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1772'. [ 311.372188][T12050] netlink: 'syz.4.1776': attribute type 21 has an invalid length. [ 311.414085][T12054] FAULT_INJECTION: forcing a failure. [ 311.414085][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.484276][T12050] netlink: 'syz.4.1776': attribute type 5 has an invalid length. [ 311.508029][T12054] CPU: 1 UID: 0 PID: 12054 Comm: syz.0.1774 Not tainted syzkaller #0 PREEMPT(full) [ 311.508060][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.508073][T12054] Call Trace: [ 311.508081][T12054] [ 311.508090][T12054] dump_stack_lvl+0x189/0x250 [ 311.508122][T12054] ? __pfx____ratelimit+0x10/0x10 [ 311.508144][T12054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.508169][T12054] ? __pfx__printk+0x10/0x10 [ 311.508211][T12054] should_fail_ex+0x414/0x560 [ 311.508249][T12054] _copy_to_user+0x31/0xb0 [ 311.508278][T12054] csum_and_copy_to_iter+0x83c/0x1c40 [ 311.508327][T12054] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.508350][T12054] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 311.508386][T12054] ? __skb_recv_udp+0x4be/0x990 [ 311.508408][T12054] ? __skb_recv_udp+0x890/0x990 [ 311.508430][T12054] __skb_datagram_iter+0x89c/0x990 [ 311.508460][T12054] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 311.508489][T12054] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 311.508510][T12054] ? csum_partial+0x239/0x2c0 [ 311.508537][T12054] skb_copy_and_csum_datagram_msg+0x1b8/0x440 [ 311.508572][T12054] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 311.508601][T12054] ? process_measurement+0x1640/0x1a40 [ 311.508627][T12054] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 311.508667][T12054] udpv6_recvmsg+0x652/0x15f0 [ 311.508717][T12054] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 311.508744][T12054] ? __lock_acquire+0xab9/0xd20 [ 311.508780][T12054] ? aa_sk_perm+0x81e/0x950 [ 311.508812][T12054] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 311.508845][T12054] inet6_recvmsg+0x1ee/0x6b0 [ 311.508871][T12054] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.508905][T12054] ? __pfx_inet6_recvmsg+0x10/0x10 [ 311.508927][T12054] ? __lock_acquire+0xab9/0xd20 [ 311.508960][T12054] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 311.508982][T12054] ? security_socket_recvmsg+0x7e/0x2e0 [ 311.509015][T12054] sock_recvmsg+0x105/0x270 [ 311.509052][T12054] ____sys_recvmsg+0x1c9/0x460 [ 311.509089][T12054] ? __pfx_____sys_recvmsg+0x10/0x10 [ 311.509133][T12054] ? import_iovec+0x74/0xa0 [ 311.509165][T12054] ___sys_recvmsg+0x1b5/0x510 [ 311.509198][T12054] ? __pfx____sys_recvmsg+0x10/0x10 [ 311.509252][T12054] ? __fget_files+0x3a0/0x420 [ 311.509284][T12054] do_recvmmsg+0x307/0x770 [ 311.509321][T12054] ? __pfx_do_recvmmsg+0x10/0x10 [ 311.509362][T12054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.509406][T12054] __x64_sys_recvmmsg+0x190/0x240 [ 311.509438][T12054] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 311.509463][T12054] ? rcu_is_watching+0x15/0xb0 [ 311.509490][T12054] ? do_syscall_64+0xbe/0x3b0 [ 311.509517][T12054] do_syscall_64+0xfa/0x3b0 [ 311.509539][T12054] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.509560][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.509580][T12054] ? clear_bhb_loop+0x60/0xb0 [ 311.509606][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.509626][T12054] RIP: 0033:0x7fe623d8ec29 [ 311.509644][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.509662][T12054] RSP: 002b:00007fe624c45038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 311.509684][T12054] RAX: ffffffffffffffda RBX: 00007fe623fd5fa0 RCX: 00007fe623d8ec29 [ 311.509699][T12054] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003 [ 311.509712][T12054] RBP: 00007fe624c45090 R08: 0000000000000000 R09: 0000000000000000 [ 311.509725][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.509737][T12054] R13: 00007fe623fd6038 R14: 00007fe623fd5fa0 R15: 00007fff23188188 [ 311.509770][T12054] [ 312.963074][T12098] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 313.625724][T12113] 8021q: VLANs not supported on caif0 [ 313.644667][T12115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.993824][T12125] __nla_validate_parse: 3 callbacks suppressed [ 313.993845][T12125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'. [ 318.696760][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 319.193275][T12159] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 319.248616][T12152] netlink: 'syz.0.1804': attribute type 58 has an invalid length. [ 319.310288][T12152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1804'. [ 319.562272][T12164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1805'. [ 319.672174][T12164] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 319.791362][T12167] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 319.803523][T12164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1805'. [ 319.914665][T12164] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 320.023033][T12164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1805'. [ 320.237417][T12164] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 320.338403][T12164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1805'. [ 320.474691][T12164] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 321.153920][T12199] bridge_slave_0: left allmulticast mode [ 321.188331][T12199] bridge_slave_0: left promiscuous mode [ 321.214597][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.273673][T12199] bridge_slave_1: left allmulticast mode [ 321.300694][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1818'. [ 321.315009][T12199] bridge_slave_1: left promiscuous mode [ 321.335329][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.387272][T12199] bond0: (slave bond_slave_0): Releasing backup interface [ 321.441449][T12199] bond0: (slave bond_slave_1): Releasing backup interface [ 321.511572][T12199] team0: Port device team_slave_0 removed [ 321.567424][T12199] team0: Port device team_slave_1 removed [ 321.582127][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.610135][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.653482][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.686583][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.450906][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.138459][T12219] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 323.353269][T12219] geneve2: left promiscuous mode [ 323.387842][T12219] vlan2: left promiscuous mode [ 323.415933][T12219] veth0_virt_wifi: left promiscuous mode [ 323.439702][T12219] gretap1: left promiscuous mode [ 323.491801][T12219] geneve3: left promiscuous mode [ 323.612745][T12219] gretap3: left promiscuous mode [ 323.629039][T12219] ipvlan2: left promiscuous mode [ 323.666889][T12219] xfrm1: left promiscuous mode [ 323.742996][T12231] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 323.776193][T12231] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1822'. [ 323.847678][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1822'. [ 323.960012][ T6792] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.980528][T12253] netlink: 'syz.4.1826': attribute type 24 has an invalid length. [ 324.021087][ T6792] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 324.054592][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1827'. [ 324.073184][ T6792] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.109756][ T6792] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 324.165408][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 324.191089][ T6792] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.248629][ T6792] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 324.504459][T12252] __nla_validate_parse: 5 callbacks suppressed [ 324.504479][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 324.553083][ T6792] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.600291][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 324.615746][ T6792] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.065992][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'. [ 325.263356][T12284] bridge_slave_0: left allmulticast mode [ 325.361339][T12284] bridge_slave_0: left promiscuous mode [ 325.416564][T12284] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.520501][T12284] bridge_slave_1: left allmulticast mode [ 325.547733][T12284] bridge_slave_1: left promiscuous mode [ 325.566809][T12284] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.639757][T12284] bond0: (slave bond_slave_0): Releasing backup interface [ 325.687742][T12284] bond_slave_0: left allmulticast mode [ 325.710578][T12284] bond0: (slave bond_slave_1): Releasing backup interface [ 325.730432][T12284] bond_slave_1: left allmulticast mode [ 325.773993][T12284] team0: Port device team_slave_0 removed [ 325.814766][T12284] team0: Port device team_slave_1 removed [ 325.829945][T12284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.842449][T12284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.863860][T12284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.911957][T12284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.176303][T12301] netem: change failed [ 326.405807][T12309] openvswitch: netlink: Key type 29 is not supported [ 326.940983][T12323] gretap0: entered promiscuous mode [ 327.019820][T12323] vlan3: entered promiscuous mode [ 327.083429][ T30] audit: type=1800 audit(1758298360.105:2): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1845" name="memory.events" dev="tmpfs" ino=1983 res=0 errno=0 [ 327.670639][T12344] lo speed is unknown, defaulting to 1000 [ 327.795431][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'. [ 327.829521][T12344] hsr0 speed is unknown, defaulting to 1000 [ 327.956101][T12355] netlink: 'syz.4.1851': attribute type 8 has an invalid length. [ 328.022162][T12358] netlink: 'syz.4.1851': attribute type 8 has an invalid length. [ 328.134488][T12355] bridge7: entered promiscuous mode [ 328.203406][T12358] bridge8: entered promiscuous mode [ 328.614159][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 328.695070][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 329.108931][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 329.169588][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 329.280778][T12376] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.460870][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.651561][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.711946][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.805495][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.887533][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.929917][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 329.995613][T12388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1860'. [ 330.015377][T12381] netlink: 'syz.6.1858': attribute type 29 has an invalid length. [ 330.741015][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1866'. [ 331.280831][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1874'. [ 331.336425][T12433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1872'. [ 331.380379][T12433] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 331.414605][T12433] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 331.448563][T12433] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 331.594862][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 332.239040][T12459] Bluetooth: MGMT ver 1.23 [ 332.620298][T12470] tipc: Bearer : already 2 bearers with priority 10 [ 332.645533][T12470] tipc: Bearer : trying with adjusted priority [ 332.685519][T12470] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 332.881438][T12478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1889'. [ 332.915577][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 333.376911][T12492] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1894'. [ 333.506637][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1893'. [ 333.595458][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1893'. [ 333.677275][T12503] validate_nla: 14 callbacks suppressed [ 333.677298][T12503] netlink: 'syz.6.1897': attribute type 1 has an invalid length. [ 333.701222][T12504] netlink: 'syz.6.1897': attribute type 1 has an invalid length. [ 333.817759][T12504] bond2: entered promiscuous mode [ 333.850220][T12504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.123663][T12506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.173344][T12506] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 334.270686][T12506] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 334.425605][T12506] bond2: (slave wireguard0): making interface the new active one [ 334.466972][T12506] wireguard0: entered promiscuous mode [ 334.495831][T12506] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 334.663449][T12523] netlink: 'syz.0.1901': attribute type 5 has an invalid length. [ 334.926668][T12535] netlink: 'syz.6.1905': attribute type 3 has an invalid length. [ 335.151855][T12542] __nla_validate_parse: 1 callbacks suppressed [ 335.151878][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 335.832358][T12552] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 336.053617][T12552] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.073102][T12552] bond5: (slave bond6): making interface the new active one [ 336.091630][T12552] bond5: (slave bond6): Enslaving as an active interface with an up link [ 336.156272][T12569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1915'. [ 336.215657][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1911'. [ 336.383048][T12576] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 336.415854][T12571] bond5: entered promiscuous mode [ 336.420965][T12571] bond6: entered promiscuous mode [ 336.546510][T12571] bond5: entered allmulticast mode [ 336.562380][T12571] bond6: entered allmulticast mode [ 336.586773][T12571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.708100][T12583] netlink: 'syz.6.1918': attribute type 2 has an invalid length. [ 336.720592][T12583] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1918'. [ 336.732057][T12583] nbd: must specify a device to reconfigure [ 337.392506][T12599] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1923'. [ 337.525700][T12599] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1923'. [ 337.709258][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1925'. [ 337.979491][T12612] tipc: Enabling of bearer rejected, failed to enable media [ 338.354246][T12629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1930'. [ 338.458135][T12625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.192350][T12635] IPv6: sit3: Disabled Multicast RS [ 339.236692][T12635] sit3: entered allmulticast mode [ 339.344796][T12637] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 339.377810][T12637] bond7: (slave macvlan4): Enslaving as a backup interface with a down link [ 339.772086][T12653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1936'. [ 339.805492][T12652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1936'. [ 340.312001][T12669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.329499][T12668] __nla_validate_parse: 1 callbacks suppressed [ 340.329520][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 340.401794][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1940'. [ 340.591198][T12669] lo speed is unknown, defaulting to 1000 [ 340.659044][T12669] hsr0 speed is unknown, defaulting to 1000 [ 340.856373][T12677] dvmrp0: left allmulticast mode [ 340.901916][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 341.319062][T12703] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1950'. [ 341.397759][T12703] lo speed is unknown, defaulting to 1000 [ 341.416108][T12703] hsr0 speed is unknown, defaulting to 1000 [ 342.384067][T12721] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 342.397279][T12721] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1955'. [ 342.411785][T12721] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 342.483265][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 342.514717][T12723] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 342.545082][T12723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1955'. [ 342.573177][T12723] block nbd1: not configured, cannot reconfigure [ 343.133614][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 343.360937][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1952'. [ 343.809177][T12758] netlink: 212264 bytes leftover after parsing attributes in process `syz.5.1964'. [ 346.861846][T12751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.929690][T12778] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 347.352503][T12786] Unsupported ieee802154 address type: 0 [ 347.430607][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 347.496610][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 347.929564][T12801] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1978'. [ 349.170251][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1986'. [ 349.251983][T12835] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 349.346503][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 349.366985][T12832] bond0: entered promiscuous mode [ 349.381497][T12827] sctp: [Deprecated]: syz.0.1984 (pid 12827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.381497][T12827] Use struct sctp_sack_info instead [ 349.611813][T12832] bond0: left promiscuous mode [ 349.743323][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 349.978228][T12828] syzkaller1: entered promiscuous mode [ 349.991323][T12828] syzkaller1: entered allmulticast mode [ 350.032954][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1990'. [ 350.102613][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1990'. [ 351.169129][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'. [ 351.245221][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'. [ 351.664590][T12869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.738066][T12871] netem: unknown loss type 0 [ 351.769331][T12871] netem: change failed [ 351.867449][T12874] bridge0: entered promiscuous mode [ 351.894012][T12874] macsec2: entered promiscuous mode [ 351.932732][T12874] macsec2: entered allmulticast mode [ 351.974259][T12874] bridge0: entered allmulticast mode [ 352.020253][T12874] bridge0: port 1(macsec2) entered blocking state [ 352.052605][T12874] bridge0: port 1(macsec2) entered disabled state [ 352.142697][T12887] netlink: 'syz.5.2001': attribute type 39 has an invalid length. [ 352.200473][T12874] bridge0: left allmulticast mode [ 352.208838][T12874] bridge0: left promiscuous mode [ 353.600026][T12923] __nla_validate_parse: 2 callbacks suppressed [ 353.600048][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.717504][T12923] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2009'. [ 353.782689][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 354.537117][T12938] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2014'. [ 355.383245][T12956] openvswitch: netlink: IPv4 tun info is not correct [ 356.143792][T12974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'. [ 356.705516][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 356.851078][ T44] IPVS: starting estimator thread 0... [ 356.976335][T13006] IPVS: using max 24 ests per chain, 57600 per kthread [ 357.292697][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 357.427058][T13008] syzkaller0: entered promiscuous mode [ 357.441158][T13008] syzkaller0: entered allmulticast mode [ 357.522504][T13008] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2035'. [ 357.565542][T13016] team0: Device gtp0 is up. Set it down before adding it as a team port [ 358.161907][T13042] netlink: 'syz.0.2042': attribute type 27 has an invalid length. [ 358.347224][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 358.674185][T13051] netlink: 'syz.1.2045': attribute type 10 has an invalid length. [ 363.867595][T13075] veth1_macvtap: left promiscuous mode [ 363.957063][T13076] veth1_macvtap: entered promiscuous mode [ 364.032368][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 364.148886][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 364.265611][T13082] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2055'. [ 364.328110][T13082] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2055'. [ 364.523025][T13086] netlink: 'syz.5.2056': attribute type 10 has an invalid length. [ 364.752010][T13086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.892219][T13096] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2060'. [ 364.985343][T13098] syz.1.2060: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.038581][T13098] CPU: 0 UID: 0 PID: 13098 Comm: syz.1.2060 Not tainted syzkaller #0 PREEMPT(full) [ 365.038614][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.038631][T13098] Call Trace: [ 365.038640][T13098] [ 365.038649][T13098] dump_stack_lvl+0x189/0x250 [ 365.038685][T13098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.038711][T13098] ? __pfx__printk+0x10/0x10 [ 365.038742][T13098] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 365.038769][T13098] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 365.038796][T13098] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 365.038825][T13098] warn_alloc+0x214/0x310 [ 365.038868][T13098] ? stack_depot_save_flags+0x40/0x860 [ 365.038905][T13098] ? __pfx_warn_alloc+0x10/0x10 [ 365.038939][T13098] ? kasan_save_track+0x4f/0x80 [ 365.038968][T13098] ? xskq_create+0x56/0x170 [ 365.038987][T13098] ? xsk_init_queue+0xb0/0x110 [ 365.039004][T13098] ? xsk_setsockopt+0x4dc/0x8d0 [ 365.039032][T13098] ? do_sock_setsockopt+0x17c/0x1b0 [ 365.039055][T13098] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 365.039078][T13098] ? do_syscall_64+0xfa/0x3b0 [ 365.039099][T13098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.039130][T13098] __vmalloc_node_range_noprof+0x125/0x12f0 [ 365.039194][T13098] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.039234][T13098] ? __kasan_kmalloc+0x93/0xb0 [ 365.039267][T13098] vmalloc_user_noprof+0xad/0xf0 [ 365.039299][T13098] ? xskq_create+0xbf/0x170 [ 365.039319][T13098] xskq_create+0xbf/0x170 [ 365.039344][T13098] xsk_init_queue+0xb0/0x110 [ 365.039367][T13098] xsk_setsockopt+0x4dc/0x8d0 [ 365.039402][T13098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.039434][T13098] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.039471][T13098] ? aa_sock_opt_perm+0xff/0x1b0 [ 365.039497][T13098] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 365.039519][T13098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.039552][T13098] do_sock_setsockopt+0x17c/0x1b0 [ 365.039583][T13098] __x64_sys_setsockopt+0x13f/0x1b0 [ 365.039615][T13098] do_syscall_64+0xfa/0x3b0 [ 365.039637][T13098] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.039657][T13098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.039679][T13098] ? clear_bhb_loop+0x60/0xb0 [ 365.039704][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.039730][T13098] RIP: 0033:0x7ff37f58ec29 [ 365.039750][T13098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.039768][T13098] RSP: 002b:00007ff38041c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.039791][T13098] RAX: ffffffffffffffda RBX: 00007ff37f7d6090 RCX: 00007ff37f58ec29 [ 365.039806][T13098] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 365.039820][T13098] RBP: 00007ff37f611e41 R08: 0000000000000004 R09: 0000000000000000 [ 365.039833][T13098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.039852][T13098] R13: 00007ff37f7d6128 R14: 00007ff37f7d6090 R15: 00007ffc83657858 [ 365.039887][T13098] [ 365.039900][T13098] Mem-Info: [ 365.657540][T13098] active_anon:3913 inactive_anon:0 isolated_anon:0 [ 365.657540][T13098] active_file:3294 inactive_file:39980 isolated_file:0 [ 365.657540][T13098] unevictable:768 dirty:42 writeback:0 [ 365.657540][T13098] slab_reclaimable:11170 slab_unreclaimable:116734 [ 365.657540][T13098] mapped:30066 shmem:1360 pagetables:1100 [ 365.657540][T13098] sec_pagetables:0 bounce:0 [ 365.657540][T13098] kernel_misc_reclaimable:0 [ 365.657540][T13098] free:1282218 free_pcp:22044 free_cma:0 [ 365.814891][T13098] Node 0 active_anon:15564kB inactive_anon:0kB active_file:13176kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120148kB dirty:168kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13304kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.979347][T13098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.150866][T13117] veth1_to_bond: entered allmulticast mode [ 366.166696][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 366.174033][T13098] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.239856][T13098] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 366.292092][T13098] Node 0 DMA32 free:1219200kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15308kB inactive_anon:0kB active_file:13176kB inactive_file:158148kB unevictable:1536kB writepending:188kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:73748kB local_pcp:49844kB free_cma:0kB [ 366.417951][T13098] lowmem_reserve[]: 0 0 1 1 1 [ 366.422749][T13098] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 366.558059][T13098] lowmem_reserve[]: 0 0 0 0 0 [ 366.573445][T13098] Node 1 Normal free:3888260kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19200kB local_pcp:10848kB free_cma:0kB [ 366.725030][T13098] lowmem_reserve[]: 0 0 0 0 0 [ 366.730120][T13098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.759701][T13125] netlink: 'syz.4.2067': attribute type 2 has an invalid length. [ 366.779039][T13125] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2067'. [ 366.799340][T13098] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 6*16kB (ME) 7*32kB (UE) 9*64kB (UME) 26*128kB (UME) 17*256kB (UME) 7*512kB (M) 9*1024kB (UME) 6*2048kB (ME) 289*4096kB (UM) = 1217440kB [ 366.860571][T13125] nbd: must specify at least one socket [ 366.988363][T13098] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 367.025211][T13098] Node 1 Normal: 205*4kB (U) 46*8kB (UME) 38*16kB (UME) 80*32kB (UME) 22*64kB (UM) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888260kB [ 367.108205][T13132] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2069'. [ 367.135280][T13098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.185463][T13098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.210084][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'. [ 367.235032][T13098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.277993][T13098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.332140][T13098] 44628 total pagecache pages [ 367.359220][T13098] 0 pages in swap cache [ 367.378834][T13098] Free swap = 124996kB [ 367.394262][T13098] Total swap = 124996kB [ 367.412296][T13098] 2097051 pages RAM [ 367.444568][T13098] 0 pages HighMem/MovableOnly [ 367.462254][T13098] 425671 pages reserved [ 367.481443][T13098] 0 pages cma reserved [ 367.607458][T13138] netlink: 'syz.5.2070': attribute type 83 has an invalid length. [ 368.093065][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'. [ 368.191883][T13144] gtp0: entered promiscuous mode [ 368.234494][T13144] gtp0: entered allmulticast mode [ 368.280928][T13145] tipc: Started in network mode [ 368.297527][T13145] tipc: Node identity 0a12acab0c01, cluster identity 4711 [ 368.344143][T13145] tipc: Enabled bearer , priority 0 [ 368.373742][T13151] syzkaller0: entered promiscuous mode [ 368.387082][T13151] syzkaller0: entered allmulticast mode [ 368.591245][T13142] tipc: Resetting bearer [ 368.776600][T13142] tipc: Disabling bearer [ 370.121996][T13210] netlink: 'syz.4.2091': attribute type 12 has an invalid length. [ 370.456032][T13226] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.723145][T13230] netlink: 'syz.5.2096': attribute type 1 has an invalid length. [ 370.744533][T13230] __nla_validate_parse: 2 callbacks suppressed [ 370.744554][T13230] netlink: 784 bytes leftover after parsing attributes in process `syz.5.2096'. [ 370.809201][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2096'. [ 370.865784][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2096'. [ 370.950720][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2096'. [ 371.155347][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2101'. [ 371.499069][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 372.236792][T13279] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2112'. [ 373.085613][T13294] team0: Device gtp0 is up. Set it down before adding it as a team port [ 373.219293][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 373.370023][T13308] netlink: 'syz.6.2118': attribute type 21 has an invalid length. [ 373.438801][T13308] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2118'. [ 373.566596][T13308] netlink: 'syz.6.2118': attribute type 5 has an invalid length. [ 373.574385][T13308] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2118'. [ 373.862927][T13316] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 374.493883][T13334] nbd: must specify an index to disconnect [ 374.553881][T13340] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 374.677349][T13338] syzkaller0: entered promiscuous mode [ 374.723798][T13338] syzkaller0: entered allmulticast mode [ 374.863631][T13348] syzkaller0: entered promiscuous mode [ 374.900519][T13348] syzkaller0: entered allmulticast mode [ 374.978439][T13358] FAULT_INJECTION: forcing a failure. [ 374.978439][T13358] name failslab, interval 1, probability 0, space 0, times 1 [ 375.044758][T13358] CPU: 1 UID: 0 PID: 13358 Comm: syz.4.2129 Not tainted syzkaller #0 PREEMPT(full) [ 375.044789][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.044807][T13358] Call Trace: [ 375.044815][T13358] [ 375.044824][T13358] dump_stack_lvl+0x189/0x250 [ 375.044855][T13358] ? __pfx____ratelimit+0x10/0x10 [ 375.044877][T13358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.044902][T13358] ? __pfx__printk+0x10/0x10 [ 375.044943][T13358] ? __pfx___might_resched+0x10/0x10 [ 375.044970][T13358] should_fail_ex+0x414/0x560 [ 375.045006][T13358] should_failslab+0xa8/0x100 [ 375.045038][T13358] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 375.045068][T13358] ? __alloc_skb+0x112/0x2d0 [ 375.045096][T13358] __alloc_skb+0x112/0x2d0 [ 375.045123][T13358] netlink_sendmsg+0x5c6/0xb30 [ 375.045158][T13358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.045184][T13358] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.045207][T13358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.045230][T13358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.045254][T13358] __sock_sendmsg+0x219/0x270 [ 375.045289][T13358] ____sys_sendmsg+0x505/0x830 [ 375.045321][T13358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.045358][T13358] ? import_iovec+0x74/0xa0 [ 375.045389][T13358] ___sys_sendmsg+0x21f/0x2a0 [ 375.045418][T13358] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.045485][T13358] ? __fget_files+0x2a/0x420 [ 375.045502][T13358] ? __fget_files+0x3a0/0x420 [ 375.045533][T13358] __x64_sys_sendmsg+0x19b/0x260 [ 375.045563][T13358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.045601][T13358] ? __pfx_ksys_write+0x10/0x10 [ 375.045626][T13358] ? rcu_is_watching+0x15/0xb0 [ 375.045650][T13358] ? do_syscall_64+0xbe/0x3b0 [ 375.045677][T13358] do_syscall_64+0xfa/0x3b0 [ 375.045695][T13358] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.045716][T13358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.045737][T13358] ? clear_bhb_loop+0x60/0xb0 [ 375.045762][T13358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.045782][T13358] RIP: 0033:0x7fb91138ec29 [ 375.045800][T13358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.045819][T13358] RSP: 002b:00007fb91216a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.045841][T13358] RAX: ffffffffffffffda RBX: 00007fb9115d6090 RCX: 00007fb91138ec29 [ 375.045856][T13358] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000008 [ 375.045869][T13358] RBP: 00007fb91216a090 R08: 0000000000000000 R09: 0000000000000000 [ 375.045881][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.045893][T13358] R13: 00007fb9115d6128 R14: 00007fb9115d6090 R15: 00007ffda129ba88 [ 375.045935][T13358] [ 375.923077][T13373] digital: digital_start_poll: Unknown protocol [ 376.078733][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2136'. [ 376.152740][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2136'. [ 376.341499][T13386] netlink: 'syz.5.2138': attribute type 10 has an invalid length. [ 376.427532][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 376.463407][T13386] team0: Device hsr_slave_0 failed to register rx_handler [ 376.954750][T13404] veth0: entered promiscuous mode [ 377.001520][T13404] veth0: left promiscuous mode [ 377.675884][T13420] xt_time: unknown flags 0xf4 [ 377.695398][T13421] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.850469][T13425] netlink: 'syz.6.2154': attribute type 1 has an invalid length. [ 378.093357][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 378.358676][T13438] bond3: (slave bridge1): making interface the new active one [ 378.409706][T13438] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 378.931705][T13456] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 379.362998][T13467] bond0: (slave vlan0): Opening slave failed [ 379.407998][T13473] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2168'. [ 379.446635][T13475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2168'. [ 379.508258][T13471] macsec1: entered promiscuous mode [ 379.534165][T13471] macsec1: entered allmulticast mode [ 379.571341][T13472] gtp0: entered promiscuous mode [ 379.616814][T13472] gtp0: entered allmulticast mode [ 380.003813][T13487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.230653][T13492] tipc: Enabling of bearer rejected, media not registered [ 380.563318][T13498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.445192][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 381.492545][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'. [ 382.172762][T13543] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2191'. [ 382.405848][T13553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2195'. [ 382.490529][T13545] team0: Device gtp0 is up. Set it down before adding it as a team port [ 382.698576][T13548] bond0: (slave vlan2): Opening slave failed [ 382.777260][T13553] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 382.849770][T13563] tipc: Enabled bearer , priority 0 [ 383.104279][T13563] tipc: Disabling bearer [ 383.217023][T13571] syzkaller1: entered promiscuous mode [ 383.222560][T13571] syzkaller1: entered allmulticast mode [ 383.334449][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 383.394262][ T44] IPVS: starting estimator thread 0... [ 383.418261][T13580] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2202'. [ 383.436468][T13580] netlink: zone id is out of range [ 383.442972][T13580] netlink: zone id is out of range [ 383.458245][T13580] netlink: zone id is out of range [ 383.468414][T13580] netlink: zone id is out of range [ 383.484172][T13580] netlink: zone id is out of range [ 383.491618][T13581] IPVS: using max 29 ests per chain, 69600 per kthread [ 383.501150][T13571] tipc: Bearer : already 2 bearers with priority 10 [ 383.509232][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 383.525364][T13571] tipc: Bearer : trying with adjusted priority [ 383.532433][T13580] netlink: get zone limit has 8 unknown bytes [ 383.550783][T13571] tipc: Enabled bearer , priority 9 [ 383.577884][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2198'. [ 383.877041][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.262375][T13596] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 384.397561][T13598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.404911][T13598] IPv6: NLM_F_CREATE should be set when creating new route [ 384.545750][T13599] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 384.646420][T13601] bond7: (slave gretap4): making interface the new active one [ 384.702495][T13601] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 385.325757][T13623] nbd: must specify an index to disconnect [ 385.506405][T13631] netlink: 'syz.6.2215': attribute type 5 has an invalid length. [ 385.572292][ T3555] tipc: Subscription rejected, illegal request [ 385.609684][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2217'. [ 385.768148][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 386.471767][T13647] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2219'. [ 386.992742][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2223'. [ 387.197610][T13653] bond5: (slave bond6): Releasing backup interface [ 387.251682][T13653] bond6: left promiscuous mode [ 387.280734][T13653] bond6: left allmulticast mode [ 388.222171][T13692] netlink: 'syz.6.2228': attribute type 1 has an invalid length. [ 388.355216][T13699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2230'. [ 388.553541][T13699] bond7: (slave gretap4): Releasing backup interface [ 389.250403][T13727] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 389.906332][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2238'. [ 389.957223][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2238'. [ 390.194304][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2239'. [ 390.717664][T13754] tipc: Bearer : already 2 bearers with priority 10 [ 390.746034][T13754] tipc: Bearer : trying with adjusted priority [ 390.783978][T13754] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 391.124337][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2246'. [ 391.199569][T13764] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2245'. [ 391.431336][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 391.547336][T13779] netlink: 'syz.5.2250': attribute type 10 has an invalid length. [ 391.650763][T13779] veth0_vlan: entered allmulticast mode [ 391.757597][T13779] veth0_vlan: left promiscuous mode [ 391.911026][T13791] IPVS: ip_vs_edit_dest(): server weight less than zero [ 391.997307][T13779] veth0_vlan: entered promiscuous mode [ 392.343524][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 392.495987][T13779] team0: Device veth0_vlan failed to register rx_handler [ 393.224084][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 393.749881][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 393.882506][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 393.894902][ T3555] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.956084][ T3555] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.058496][ T3555] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.125199][ T3555] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.465704][T13854] IPVS: length: 157 != 24 [ 394.577593][T13861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.949002][T13868] batadv_slave_0: entered promiscuous mode [ 395.318743][T13880] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 395.657268][T13880] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.721498][T13884] bond8: (slave gretap2): making interface the new active one [ 395.734558][T13884] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 395.752052][T13866] batadv_slave_0: left promiscuous mode [ 395.994043][T13893] bond0: (slave vlan0): Opening slave failed [ 396.151532][T13898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2281'. [ 396.187428][ T5188] Bluetooth: hci5: command 0x0406 tx timeout [ 396.300858][T13902] openvswitch: netlink: Message has 4 unknown bytes. [ 396.453909][T13898] syzkaller0: entered promiscuous mode [ 396.498932][T13898] syzkaller0: entered allmulticast mode [ 396.525425][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2281'. [ 396.547405][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 403.716615][T13952] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2293'. [ 403.773184][T13952] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 403.859303][T13952] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 404.334592][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2299'. [ 404.463275][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 404.623450][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 404.663839][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 406.183527][T14028] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 407.215485][T14033] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 407.275190][T14034] syzkaller0: entered promiscuous mode [ 407.313852][T14034] syzkaller0: entered allmulticast mode [ 407.616808][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 407.903854][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2320'. [ 408.618215][T14082] tipc: Enabled bearer , priority 0 [ 408.672550][T14082] syzkaller0: entered promiscuous mode [ 408.703574][T14082] syzkaller0: entered allmulticast mode [ 408.752063][T14082] syzkaller0: mtu greater than device maximum [ 408.768588][T14079] tipc: Resetting bearer [ 408.816157][T14083] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2323'. [ 408.837379][T14079] tipc: Disabling bearer [ 408.843793][T14083] unsupported nlmsg_type 40 [ 409.450091][T14103] netlink: 'syz.0.2330': attribute type 16 has an invalid length. [ 410.139924][T14118] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2336'. [ 410.186313][T14118] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2336'. [ 411.103212][T14140] bond7 (unregistering): Released all slaves [ 411.210255][T14146] ip6tnl3: entered promiscuous mode [ 411.246494][T14146] ip6tnl3: entered allmulticast mode [ 411.572547][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.648925][T14148] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.720918][T14148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.966935][T14148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.022362][T14148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.114029][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2350'. [ 412.245634][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 412.637462][T14148] veth1_macvtap: left promiscuous mode [ 412.661623][T14148] veth0_macvtap: left promiscuous mode [ 412.692488][T14148] veth0_macvtap: entered promiscuous mode [ 412.710123][T14148] veth1_macvtap: entered promiscuous mode [ 412.791616][T14148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.808501][T14148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.862107][T14148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.903729][T14148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.040620][T14148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.063693][T14148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.102525][T14148] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check. [ 413.133252][ T5978] lo speed is unknown, defaulting to 1000 [ 413.148159][ T5978] syz2: Port: 1 Link ACTIVE [ 413.424039][T14177] tipc: Enabled bearer , priority 0 [ 413.442000][T14178] syzkaller0: entered promiscuous mode [ 413.464509][T14178] syzkaller0: entered allmulticast mode [ 413.498223][ T6794] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.543087][ T6794] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 256 - 0 [ 413.736685][T14204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2353'. [ 413.843197][ T6794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.859831][ T6794] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 413.916142][T14175] tipc: Resetting bearer [ 414.042347][T14175] tipc: Disabling bearer [ 414.232565][T14210] veth7: entered allmulticast mode [ 414.248983][ T6794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.314707][ T6794] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 414.369900][ T6794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.408644][ T6794] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 414.673528][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2360'. [ 415.026797][T14238] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 415.505530][T14238] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 415.514043][T14238] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 415.629725][T14240] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2365'. [ 416.299873][T14249] netlink: 'syz.4.2369': attribute type 3 has an invalid length. [ 416.364525][T14249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.426627][T14254] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 416.502923][T14254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2369'. [ 416.960407][T14258] lo speed is unknown, defaulting to 1000 [ 417.125514][T14258] hsr0 speed is unknown, defaulting to 1000 [ 417.333121][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2373'. [ 419.956433][T14279] syzkaller1: entered promiscuous mode [ 419.961978][T14279] syzkaller1: entered allmulticast mode [ 421.038996][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 421.105076][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 421.198677][T14301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2381'. [ 421.674440][T14319] netlink: 'syz.5.2387': attribute type 1 has an invalid length. [ 421.715819][T14319] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2387'. [ 424.519926][T14305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.547199][T14305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.564477][T14305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 424.952055][T14333] bond2: (slave wireguard0): Releasing backup interface [ 424.981444][T14333] wireguard0: left promiscuous mode [ 425.077078][T14333] bond3: (slave bridge1): Releasing active interface [ 425.427160][T14354] tipc: Failed to remove unknown binding: 66,1,1/2802438739:1254447787/1254447789 [ 431.373044][T14305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.390232][T14305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.417130][T14305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 431.494279][T14356] dvmrp1: entered allmulticast mode [ 431.531772][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 431.603006][T14362] netlink: 'syz.0.2399': attribute type 20 has an invalid length. [ 432.050849][T14305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.065137][T14305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.082710][T14305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.122200][T14366] netlink: 'syz.5.2400': attribute type 29 has an invalid length. [ 432.133275][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 432.150312][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2400'. [ 432.160442][T14362] netlink: 'syz.0.2399': attribute type 20 has an invalid length. [ 432.201828][T14368] netlink: 'syz.5.2400': attribute type 29 has an invalid length. [ 432.223454][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2400'. [ 432.703000][T14305] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.772361][T14305] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.829633][T14305] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 433.472290][ T3539] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.533040][ T3539] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 433.584485][ T3539] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 433.805000][ T6789] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.846048][ T6789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 433.854197][ T6789] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 433.978903][ T6789] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.022010][ T6789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 434.066971][ T6789] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.217112][T14422] netlink: 'syz.5.2417': attribute type 7 has an invalid length. [ 434.239795][T14422] netlink: 'syz.5.2417': attribute type 8 has an invalid length. [ 434.275582][ T3555] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.304374][ T3555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 434.365107][ T3555] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.462211][T14478] warn_alloc: 2 callbacks suppressed [ 436.462232][T14478] syz.5.2429: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.643057][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2432'. [ 436.671276][T14479] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2429'. [ 436.788459][T14478] CPU: 1 UID: 0 PID: 14478 Comm: syz.5.2429 Not tainted syzkaller #0 PREEMPT(full) [ 436.788489][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.788503][T14478] Call Trace: [ 436.788512][T14478] [ 436.788522][T14478] dump_stack_lvl+0x189/0x250 [ 436.788559][T14478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.788585][T14478] ? __pfx__printk+0x10/0x10 [ 436.788615][T14478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.788640][T14478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.788668][T14478] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 436.788696][T14478] warn_alloc+0x214/0x310 [ 436.788730][T14478] ? stack_depot_save_flags+0x40/0x860 [ 436.788766][T14478] ? __pfx_warn_alloc+0x10/0x10 [ 436.788801][T14478] ? kasan_save_track+0x4f/0x80 [ 436.788829][T14478] ? xskq_create+0x56/0x170 [ 436.788848][T14478] ? xsk_init_queue+0xb0/0x110 [ 436.788864][T14478] ? xsk_setsockopt+0x4dc/0x8d0 [ 436.788893][T14478] ? do_sock_setsockopt+0x17c/0x1b0 [ 436.788918][T14478] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 436.788942][T14478] ? do_syscall_64+0xfa/0x3b0 [ 436.788964][T14478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.788994][T14478] __vmalloc_node_range_noprof+0x125/0x12f0 [ 436.789059][T14478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.789099][T14478] ? __kasan_kmalloc+0x93/0xb0 [ 436.789131][T14478] vmalloc_user_noprof+0xad/0xf0 [ 436.789162][T14478] ? xskq_create+0xbf/0x170 [ 436.789184][T14478] xskq_create+0xbf/0x170 [ 436.789208][T14478] xsk_init_queue+0xb0/0x110 [ 436.789231][T14478] xsk_setsockopt+0x4dc/0x8d0 [ 436.789273][T14478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.789305][T14478] ? __pfx_aa_sk_perm+0x10/0x10 [ 436.789343][T14478] ? aa_sock_opt_perm+0xff/0x1b0 [ 436.789368][T14478] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 436.789391][T14478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.789425][T14478] do_sock_setsockopt+0x17c/0x1b0 [ 436.789461][T14478] __x64_sys_setsockopt+0x13f/0x1b0 [ 436.789492][T14478] do_syscall_64+0xfa/0x3b0 [ 436.789515][T14478] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.789535][T14478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.789556][T14478] ? clear_bhb_loop+0x60/0xb0 [ 436.789582][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.789602][T14478] RIP: 0033:0x7f15cc78ec29 [ 436.789621][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.789639][T14478] RSP: 002b:00007f15ca9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.789662][T14478] RAX: ffffffffffffffda RBX: 00007f15cc9d5fa0 RCX: 00007f15cc78ec29 [ 436.789677][T14478] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 436.789689][T14478] RBP: 00007f15cc811e41 R08: 0000000000000004 R09: 0000000000000000 [ 436.789702][T14478] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.789716][T14478] R13: 00007f15cc9d6038 R14: 00007f15cc9d5fa0 R15: 00007ffc28a43d38 [ 436.789750][T14478] [ 437.092405][T14478] Mem-Info: [ 437.095673][T14478] active_anon:3843 inactive_anon:0 isolated_anon:0 [ 437.095673][T14478] active_file:3291 inactive_file:40004 isolated_file:0 [ 437.095673][T14478] unevictable:768 dirty:57 writeback:0 [ 437.095673][T14478] slab_reclaimable:11167 slab_unreclaimable:119068 [ 437.095673][T14478] mapped:28971 shmem:1360 pagetables:1015 [ 437.095673][T14478] sec_pagetables:0 bounce:0 [ 437.095673][T14478] kernel_misc_reclaimable:0 [ 437.095673][T14478] free:1302335 free_pcp:18189 free_cma:0 [ 437.141411][T14478] Node 0 active_anon:15372kB inactive_anon:0kB active_file:13164kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115884kB dirty:228kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13284kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.175161][T14478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.205550][T14478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.234595][T14478] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 437.240850][T14478] Node 0 DMA32 free:1304912kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15328kB inactive_anon:0kB active_file:13164kB inactive_file:158244kB unevictable:1536kB writepending:228kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:53068kB local_pcp:33712kB free_cma:0kB [ 437.279158][T14478] lowmem_reserve[]: 0 0 1 1 1 [ 437.283944][T14478] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 437.313506][T14478] lowmem_reserve[]: 0 0 0 0 0 [ 437.318338][T14478] Node 1 Normal free:3888260kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19200kB local_pcp:8352kB free_cma:0kB [ 437.350139][T14478] lowmem_reserve[]: 0 0 0 0 0 [ 437.356184][T14478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.369118][T14478] Node 0 DMA32: 286*4kB (UME) 1623*8kB (UME) 788*16kB (UM) 1151*32kB (UME) 655*64kB (UME) 393*128kB (UME) 203*256kB (UME) 101*512kB (UM) 50*1024kB (UME) 15*2048kB (UME) 235*4096kB (UM) = 1303952kB [ 437.389274][T14478] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 437.445452][T14478] Node 1 Normal: 205*4kB (U) 46*8kB (UME) 38*16kB (UME) 80*32kB (UME) 22*64kB (UM) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888260kB [ 437.504481][T14478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.516486][T14494] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2433'. [ 437.553780][T14478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.590848][T14478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.607228][T14478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.619955][T14478] 44658 total pagecache pages [ 437.634552][T14478] 6 pages in swap cache [ 437.639614][T14478] Free swap = 124972kB [ 437.644322][T14478] Total swap = 124996kB [ 437.649372][T14478] 2097051 pages RAM [ 437.653222][T14478] 0 pages HighMem/MovableOnly [ 437.659232][T14478] 425671 pages reserved [ 437.664307][T14478] 0 pages cma reserved [ 438.051912][T14485] vlan1: entered allmulticast mode [ 438.095791][T14485] hsr0: entered allmulticast mode [ 438.157481][T14485] hsr_slave_0: entered allmulticast mode [ 438.163240][T14485] hsr_slave_1: entered allmulticast mode [ 438.379568][T14507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2436'. [ 440.018715][T14563] netlink: 'syz.5.2455': attribute type 1 has an invalid length. [ 440.300414][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2457'. [ 440.858513][T14586] netlink: 'syz.5.2462': attribute type 1 has an invalid length. [ 440.963104][T14576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 440.989447][T14576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.009974][T14576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 441.207427][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 441.360616][T14603] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2465'. [ 441.530679][T14576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 441.544306][T14576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.567206][T14576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 441.616119][T14595] xfrm1: entered promiscuous mode [ 441.621317][T14595] xfrm1: entered allmulticast mode [ 441.680269][T14605] tipc: Enabled bearer , priority 0 [ 441.855157][T14608] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2467'. [ 441.882498][T14576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 441.926027][T14576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.970883][T14576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.042833][T14605] tipc: Disabling bearer [ 442.188480][T14617] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 442.208282][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 442.254229][T14576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 442.308959][T14576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.352762][T14576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.747611][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 442.829033][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 443.092276][T14641] block nbd0: Unsupported socket: shutdown callout must be supported. [ 443.614666][T14645] netlink: 'syz.1.2476': attribute type 4 has an invalid length. [ 443.630665][T14645] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2476'. [ 444.793280][T14669] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2480'. [ 444.908862][ T3539] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 444.950204][ T3539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 444.982902][ T3539] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.014108][ T6799] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 445.041185][ T6799] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 445.061252][ T6799] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.120679][ T3539] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 445.139515][ T3539] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 445.191244][ T3539] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.324420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.630659][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'. [ 445.676636][ T6789] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 445.712854][ T6789] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 445.758501][ T6789] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.127818][T14706] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2493'. [ 446.225311][T14707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2491'. [ 446.265937][T14710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2491'. [ 446.794148][ T6789] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.848430][ T6789] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.035450][ T6789] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.102801][ T6789] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.146413][T14734] __nla_validate_parse: 1 callbacks suppressed [ 447.146436][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 447.239349][T14738] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 447.642881][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 447.667269][T14748] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2504'. [ 447.887677][T14748] vlan3: entered allmulticast mode [ 447.914321][T14748] gretap0: entered allmulticast mode [ 448.264005][T14754] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 448.641335][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2511'. [ 449.026064][T14785] veth0: entered promiscuous mode [ 449.115839][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2516'. [ 450.100987][T14783] bond3: (slave gretap1): Releasing active interface [ 450.208703][T14783] bond4: (slave bridge5): Releasing backup interface [ 450.221033][T14783] bridge5: left promiscuous mode [ 450.310622][T14783] bond7: (slave macvlan4): Releasing backup interface [ 450.422865][T14783] bond8: (slave gretap2): Releasing active interface [ 450.532164][T14807] gtp1: entered promiscuous mode [ 450.557852][T14807] gtp1: entered allmulticast mode [ 450.603148][T14781] veth0: left promiscuous mode [ 450.884146][T14822] netlink: 'syz.0.2523': attribute type 39 has an invalid length. [ 451.348354][T14816] erspan0: entered promiscuous mode [ 452.454478][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 452.504012][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 453.001323][T14856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2534'. [ 454.447354][T14900] netlink: 'syz.0.2546': attribute type 3 has an invalid length. [ 455.103018][T14916] pim6reg: entered allmulticast mode [ 455.399206][T14929] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 455.444442][T14931] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2555'. [ 455.892483][T14947] netlink: 'syz.5.2559': attribute type 12 has an invalid length. [ 455.916619][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2560'. [ 455.965211][T14947] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2559'. [ 456.083702][T14954] netlink: 'syz.4.2561': attribute type 18 has an invalid length. [ 456.208228][T14947] dvmrp0: entered allmulticast mode [ 456.322633][T14960] netlink: 'syz.0.2562': attribute type 4 has an invalid length. [ 456.368298][T14952] pimreg3: entered allmulticast mode [ 456.389435][T14960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2562'. [ 456.494384][T14960] `: renamed from bond0 (while UP) [ 456.614939][ T6789] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 456.685178][ T6789] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 456.848319][T14972] netlink: 'syz.1.2565': attribute type 4 has an invalid length. [ 460.931467][ T6789] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 460.983968][ T6789] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 461.368380][T15000] netlink: 'syz.0.2573': attribute type 10 has an invalid length. [ 461.775401][T15016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2577'. [ 462.124210][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 462.226378][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 462.978013][T15045] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 463.981651][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2592'. [ 464.030766][T15064] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.037850][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2592'. [ 464.177121][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 464.891054][T15071] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.086137][T15084] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 465.981955][ T1150] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1b [ 466.530845][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 466.591238][T15126] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 466.615968][T15108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.668554][T15126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.770675][T15130] pim6reg527: entered allmulticast mode [ 466.917152][T15134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2610'. [ 466.966765][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 467.050232][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 468.411302][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 468.465350][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 468.518256][T15188] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 468.937651][T15190] bond9: (slave ip6gretap2): making interface the new active one [ 468.947168][T15190] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 469.426734][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 469.835102][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2638'. [ 469.900560][T15219] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2638'. [ 471.782166][T15272] netlink: 'syz.4.2654': attribute type 2 has an invalid length. [ 471.828298][T15272] netlink: 'syz.4.2654': attribute type 8 has an invalid length. [ 471.863530][T15272] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.2654'. [ 472.213771][T15281] netlink: 'syz.6.2656': attribute type 1 has an invalid length. [ 472.286158][T15281] netlink: 'syz.6.2656': attribute type 1 has an invalid length. [ 472.294455][T15281] netlink: 'syz.6.2656': attribute type 1 has an invalid length. [ 472.381684][ T30] audit: type=1107 audit(1758298505.415:3): pid=15279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 472.464364][T15288] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 473.355836][T15325] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2666'. [ 474.182649][T15317] bond0: (slave wlan1): Releasing backup interface [ 474.288263][T15319] netlink: 'syz.6.2666': attribute type 29 has an invalid length. [ 475.076587][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 475.351173][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2678'. [ 476.121229][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 476.418532][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2683'. [ 476.613349][T15406] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 476.709280][T15406] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2685'. [ 477.307887][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 477.372540][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 477.716909][T15417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.748104][T15417] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.851825][T15404] veth0_vlan: left allmulticast mode [ 478.141365][T15404] vlan2: left allmulticast mode [ 478.156135][T15404] erspan0: left allmulticast mode [ 478.239766][T15404] vlan3: left allmulticast mode [ 478.249940][T15404] gretap0: left allmulticast mode [ 478.332917][ T6799] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.386068][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 478.424337][ T6799] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.454971][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 478.514239][ T6799] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.592170][ T6799] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.691958][T15439] sctp: [Deprecated]: syz.4.2695 (pid 15439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.691958][T15439] Use struct sctp_sack_info instead [ 478.758743][T15444] netlink: 'syz.6.2697': attribute type 1 has an invalid length. [ 478.826156][T15444] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2697'. [ 479.966158][T15480] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2708'. [ 480.237475][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 480.879110][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2714'. [ 480.935938][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 481.246323][T15515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2717'. [ 481.322893][T15515] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2717'. [ 481.456674][T15515] netlink: 'syz.1.2717': attribute type 6 has an invalid length. [ 481.566946][T15515] netlink: 'syz.1.2717': attribute type 5 has an invalid length. [ 481.639125][T15524] nbd: must specify an index to disconnect [ 481.677796][T15515] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2717'. [ 482.190710][T15541] sctp: [Deprecated]: syz.5.2723 (pid 15541) Use of int in max_burst socket option. [ 482.190710][T15541] Use struct sctp_assoc_value instead [ 482.315816][T15543] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 482.404628][T15542] lo speed is unknown, defaulting to 1000 [ 482.819794][T15542] hsr0 speed is unknown, defaulting to 1000 [ 484.281691][T15602] ip6_vti0: entered promiscuous mode [ 484.427867][T15591] ip6_vti0: left promiscuous mode [ 484.699685][T15608] netlink: 'syz.6.2739': attribute type 83 has an invalid length. [ 484.778812][T15612] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 484.960230][T15612] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 485.330364][T15626] 8021q: VLANs not supported on wg0 [ 485.691568][T15635] __nla_validate_parse: 3 callbacks suppressed [ 485.691589][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2749'. [ 485.808715][T15635] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 486.213581][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2754'. [ 486.286582][T15650] gtp1: entered promiscuous mode [ 486.356414][T15650] gtp1: entered allmulticast mode [ 486.794047][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2756'. [ 487.056349][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2753'. [ 487.171134][T15676] netlink: 'syz.1.2759': attribute type 3 has an invalid length. [ 487.256960][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2756'. [ 487.687145][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 487.709423][T15665] syzkaller1: entered promiscuous mode [ 487.728895][T15665] syzkaller1: entered allmulticast mode [ 487.797108][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 487.990173][T15682] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2761'. [ 488.494058][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 488.630553][T15719] netlink: 'syz.1.2770': attribute type 2 has an invalid length. [ 489.502076][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2774'. [ 489.988177][T15747] netlink: 'syz.6.2778': attribute type 1 has an invalid length. [ 490.117013][T15755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.174635][T15747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.648072][T15752] bond4 (unregistering): Released all slaves [ 491.469717][T15780] veth0_vlan: left promiscuous mode [ 491.475923][T15781] __nla_validate_parse: 4 callbacks suppressed [ 491.475941][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2788'. [ 491.505085][T15780] vlan0: entered allmulticast mode [ 491.512658][T15780] veth0_vlan: entered allmulticast mode [ 491.560463][T15787] syzkaller1: entered promiscuous mode [ 491.603854][T15787] syzkaller1: entered allmulticast mode [ 491.708036][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2789'. [ 491.766813][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2789'. [ 492.872549][T15824] netlink: 'syz.5.2800': attribute type 21 has an invalid length. [ 494.555924][T15870] bond0: (slave vlan2): Opening slave failed [ 496.011080][T15894] nbd: couldn't find a device at index 9158400 [ 496.050024][T15903] netlink: 'syz.0.2826': attribute type 5 has an invalid length. [ 496.168788][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 496.865214][T15911] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2828'. [ 496.918855][T15903] wg2: entered promiscuous mode [ 496.931535][T15903] wg2: entered allmulticast mode [ 497.152727][T15917] Unsupported ieee802154 address type: 0 [ 497.546659][T15927] bond0: (slave vlan5): Opening slave failed [ 497.632581][T15930] netlink: ct family unspecified [ 497.660623][T15930] openvswitch: netlink: Actions may not be safe on all matching packets [ 497.737782][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 497.901328][T15933] netlink: 'syz.4.2835': attribute type 3 has an invalid length. [ 497.925947][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'. [ 497.999935][T15941] netlink: 'syz.0.2836': attribute type 27 has an invalid length. [ 498.247955][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2836'. [ 498.923691][T15964] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2842'. [ 499.121557][T15941] team0 (unregistering): left promiscuous mode [ 499.283160][T15944] veth19: entered allmulticast mode [ 499.603643][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 499.615091][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 499.624012][T15976] netlink: 'syz.0.2847': attribute type 12 has an invalid length. [ 499.632284][T15976] netlink: 'syz.0.2847': attribute type 11 has an invalid length. [ 499.660758][T15960] bond2: entered promiscuous mode [ 499.671085][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 499.680353][T15960] bond2: entered allmulticast mode [ 499.686795][T15960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.695030][ T1150] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.881057][ T1150] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.948682][T15981] bond0: (slave vlan2): Opening slave failed [ 499.990649][T15978] vlan1: entered promiscuous mode [ 500.001227][T15978] bridge0: entered promiscuous mode [ 500.203540][ T1150] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.252933][ T1150] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.749318][T16006] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2856'. [ 500.801855][T16007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2853'. [ 500.897665][T15998] lo speed is unknown, defaulting to 1000 [ 500.928568][T15998] hsr0 speed is unknown, defaulting to 1000 [ 502.077842][T16036] __nla_validate_parse: 1 callbacks suppressed [ 502.077935][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 502.316158][T16042] tap0: tun_chr_ioctl cmd 1074025677 [ 502.322150][T16042] tap0: linktype set to 65534 [ 503.072537][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.725921][T16114] openvswitch: netlink: Tunnel attr 257 out of range max 16 [ 504.758566][T16105] openvswitch: netlink: IP tunnel dst address not specified [ 505.274823][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.341930][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.430361][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.493137][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.545751][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.630215][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.699365][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.774476][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.854317][T16126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'. [ 506.762760][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.359108][T16168] netlink: 'syz.6.2902': attribute type 1 has an invalid length. [ 507.458685][T16170] netlink: 'syz.6.2902': attribute type 10 has an invalid length. [ 507.714605][T16168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.015537][T16180] __nla_validate_parse: 21 callbacks suppressed [ 508.015558][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 508.512406][T16187] netlink: 'syz.6.2908': attribute type 1 has an invalid length. [ 508.596077][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.611236][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.621142][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.633248][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.646720][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.758878][T16194] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2908'. [ 508.867779][T16190] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 509.092810][T16192] veth11: entered promiscuous mode [ 509.133009][T16192] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 509.212181][T16194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.228047][T16202] netlink: 'syz.4.2912': attribute type 11 has an invalid length. [ 509.250773][ T1150] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 509.297078][T16203] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2912'. [ 509.435870][ T6794] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 509.504739][T16189] lo speed is unknown, defaulting to 1000 [ 509.793733][T16189] hsr0 speed is unknown, defaulting to 1000 [ 509.800284][T16211] veth0: entered promiscuous mode [ 509.823450][T16214] veth0: left promiscuous mode [ 509.859127][T16220] netlink: 'syz.0.2918': attribute type 16 has an invalid length. [ 509.970997][T16220] netlink: 'syz.0.2918': attribute type 17 has an invalid length. [ 510.146464][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2920'. [ 510.553375][T16232] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 510.746313][ T5188] Bluetooth: hci1: command tx timeout [ 511.572809][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.622103][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.657163][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.697772][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.784227][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.823124][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.871735][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.913869][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.951280][T16261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 512.162176][T16189] chnl_net:caif_netlink_parms(): no params data found [ 512.329390][T16268] delete_channel: no stack [ 512.354955][T16262] lo speed is unknown, defaulting to 1000 [ 512.416958][T16262] hsr0 speed is unknown, defaulting to 1000 [ 512.825130][ T5188] Bluetooth: hci1: command tx timeout [ 512.853010][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 513.162034][T16189] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.197974][T16189] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.209302][T16292] netlink: 'syz.6.2938': attribute type 19 has an invalid length. [ 513.241921][T16189] bridge_slave_0: entered allmulticast mode [ 513.269190][T16189] bridge_slave_0: entered promiscuous mode [ 513.418258][T16189] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.463798][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.494326][T16189] bridge_slave_1: entered allmulticast mode [ 513.550436][T16189] bridge_slave_1: entered promiscuous mode [ 513.911359][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.030070][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.432832][T16189] team0: Port device team_slave_0 added [ 514.494258][T16189] team0: Port device team_slave_1 added [ 514.544726][T16315] bridge11: entered promiscuous mode [ 514.595898][T16315] bridge11: entered allmulticast mode [ 514.665377][T11999] IPVS: ip_vs_send_async error -19 [ 514.839775][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.899614][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.013137][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.034387][ T5188] Bluetooth: hci1: command tx timeout [ 515.080837][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.110303][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.242921][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.412773][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.479099][T16334] netlink: 'syz.4.2949': attribute type 58 has an invalid length. [ 515.490332][T16334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2949'. [ 515.505512][T16339] netlink: 'syz.6.2948': attribute type 1 has an invalid length. [ 515.513302][T16339] netlink: 784 bytes leftover after parsing attributes in process `syz.6.2948'. [ 515.568967][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.644089][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.673181][T16189] hsr_slave_0: entered promiscuous mode [ 515.693987][T16189] hsr_slave_1: entered promiscuous mode [ 515.715299][T16189] debugfs: 'hsr0' already exists in 'hsr' [ 515.730258][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 515.742629][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.772961][T16189] Cannot create hsr debugfs directory [ 515.812315][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.915636][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 515.993497][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 516.066162][T16338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 516.483624][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2953'. [ 516.495485][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2953'. [ 516.946427][T16365] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2954'. [ 517.065427][ T5188] Bluetooth: hci1: command tx timeout [ 517.753737][T16388] net_ratelimit: 24 callbacks suppressed [ 517.753759][T16388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.809652][T16189] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.831622][T16189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 517.852859][T16189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.149139][T16189] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.197774][T16189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.226561][T16189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.296487][T16400] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 518.511360][T16189] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.566021][T16189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.629516][T16189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.891591][T16189] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.932098][T16189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.971883][T16189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.039597][T16432] Bluetooth: MGMT ver 1.23 [ 519.873342][T16448] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 520.167881][T16189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.249601][T16189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.319046][T16189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.335439][T16430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2972'. [ 520.418242][T16189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 521.122088][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.443873][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.636879][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.644157][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.830706][T16480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2987'. [ 522.032388][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.039673][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.488484][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2992'. [ 522.696182][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'. [ 522.821455][T16502] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 522.906232][T16509] netlink: 'syz.5.2995': attribute type 28 has an invalid length. [ 522.931122][T16509] netlink: 'syz.5.2995': attribute type 3 has an invalid length. [ 522.963670][T16509] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2995'. [ 523.447018][T16518] netlink: 'syz.4.2996': attribute type 32 has an invalid length. [ 523.472047][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.067328][T16189] veth0_vlan: entered promiscuous mode [ 524.165698][T16189] veth1_vlan: entered promiscuous mode [ 524.177102][T16536] openvswitch: netlink: Actions may not be safe on all matching packets [ 524.437479][T16189] veth0_macvtap: entered promiscuous mode [ 524.538489][T16189] veth1_macvtap: entered promiscuous mode [ 524.616100][T16547] netlink: 'syz.6.3004': attribute type 1 has an invalid length. [ 524.692502][T16547] netlink: 'syz.6.3004': attribute type 2 has an invalid length. [ 524.726552][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.799924][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.814305][T16547] netlink: 'syz.6.3004': attribute type 11 has an invalid length. [ 524.875899][T16547] netlink: 'syz.6.3004': attribute type 11 has an invalid length. [ 524.933788][T16547] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3004'. [ 525.057463][ T6799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.123653][ T6799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.176116][ T6799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.382978][ T6799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.714355][T16573] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 525.938764][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3011'. [ 526.941301][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 527.025488][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3010'. [ 527.257685][T16582] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3013'. [ 527.338445][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.401757][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.431798][T16587] netlink: 'syz.6.3014': attribute type 1 has an invalid length. [ 527.582546][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3014'. [ 527.696110][T16587] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.881369][T16596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3017'. [ 527.969838][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.027139][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.637269][T16610] netlink: 'syz.6.3021': attribute type 3 has an invalid length. [ 528.711318][T16610] netlink: 174380 bytes leftover after parsing attributes in process `syz.6.3021'. [ 530.855690][T16632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.905555][T16632] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 530.970568][T16632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.024235][T16632] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 531.926233][T16661] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 532.184331][T16632] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 532.227175][T16632] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 532.253867][T16670] tipc: Enabled bearer , priority 0 [ 532.270374][T16632] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 532.289284][T16672] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3034'. [ 532.301660][T16632] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 532.383060][T16669] tipc: Disabling bearer [ 532.416780][T16675] openvswitch: netlink: IP tunnel TTL not specified. [ 532.625063][T16632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.669674][T16632] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 532.734320][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3036'. [ 532.746280][T16683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3037'. [ 532.779237][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3036'. [ 532.958513][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.969340][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.977727][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.988566][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.999395][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.226136][ T5978] hid (null): unknown global tag 0xe [ 533.237280][T16666] lo speed is unknown, defaulting to 1000 [ 533.252187][ T5978] hid (null): nested delimiters [ 533.262750][T16666] hsr0 speed is unknown, defaulting to 1000 [ 534.276177][T16708] netlink: 'syz.5.3041': attribute type 33 has an invalid length. [ 534.475664][T16708] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 534.842281][T16666] chnl_net:caif_netlink_parms(): no params data found [ 535.081334][ T5871] Bluetooth: hci2: command tx timeout [ 535.160523][ T982] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 535.234949][ T982] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 535.942449][T16666] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.001461][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.046084][T16666] bridge_slave_0: entered allmulticast mode [ 536.135101][T16666] bridge_slave_0: entered promiscuous mode [ 536.216622][T16666] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.223824][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.307203][T16666] bridge_slave_1: entered allmulticast mode [ 536.326002][T16750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3050'. [ 536.348793][T16666] bridge_slave_1: entered promiscuous mode [ 536.476151][T16752] tipc: Invalid UDP bearer configuration [ 536.476259][T16752] tipc: Enabling of bearer rejected, failed to enable media [ 536.646191][T16666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.698995][T16748] syzkaller0: entered promiscuous mode [ 536.711169][T16748] syzkaller0: entered allmulticast mode [ 536.806918][T16666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.154578][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 537.225529][T16666] team0: Port device team_slave_0 added [ 537.342649][T16666] team0: Port device team_slave_1 added [ 537.506136][T16769] netlink: 'syz.5.3054': attribute type 15 has an invalid length. [ 537.717601][T16666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.766323][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.912395][T16666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.981972][T16777] netlink: 'syz.1.3056': attribute type 4 has an invalid length. [ 538.002287][T16666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.053730][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.233196][T16666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.246482][ T5978] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 538.253889][ T5978] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 538.345860][ T5978] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 538.462938][ T982] [ 538.465322][ T982] ====================================================== [ 538.472362][ T982] WARNING: possible circular locking dependency detected [ 538.479405][ T982] syzkaller #0 Not tainted [ 538.483836][ T982] ------------------------------------------------------ [ 538.490860][ T982] kworker/1:2/982 is trying to acquire lock: [ 538.496850][ T982] ffff88807e104840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 538.508375][ T982] [ 538.508375][ T982] but task is already holding lock: [ 538.515751][ T982] ffff88807e104b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 538.524672][ T982] [ 538.524672][ T982] which lock already depends on the new lock. [ 538.524672][ T982] [ 538.535090][ T982] [ 538.535090][ T982] the existing dependency chain (in reverse order) is: [ 538.544119][ T982] [ 538.544119][ T982] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 538.551629][ T982] lock_acquire+0x120/0x360 [ 538.556689][ T982] __mutex_lock+0x187/0x1350 [ 538.561820][ T982] l2cap_info_timeout+0x60/0xa0 [ 538.567216][ T982] process_scheduled_works+0xae1/0x17b0 [ 538.573320][ T982] worker_thread+0x8a0/0xda0 [ 538.578459][ T982] kthread+0x70e/0x8a0 [ 538.583073][ T982] ret_from_fork+0x439/0x7d0 [ 538.588202][ T982] ret_from_fork_asm+0x1a/0x30 [ 538.593517][ T982] [ 538.593517][ T982] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 538.603800][ T982] validate_chain+0xb9b/0x2140 [ 538.609109][ T982] __lock_acquire+0xab9/0xd20 [ 538.614336][ T982] lock_acquire+0x120/0x360 [ 538.619383][ T982] __flush_work+0x6b8/0xbc0 [ 538.624427][ T982] __cancel_work_sync+0xbe/0x110 [ 538.629901][ T982] l2cap_conn_del+0x4f0/0x680 [ 538.635118][ T982] hci_conn_hash_flush+0x10d/0x230 [ 538.640774][ T982] hci_dev_close_sync+0xaef/0x1330 [ 538.646421][ T982] hci_dev_do_close+0x2f/0x90 [ 538.651635][ T982] hci_rfkill_set_block+0x21d/0x2e0 [ 538.657371][ T982] rfkill_set_block+0x1cf/0x440 [ 538.662772][ T982] rfkill_sync_work+0x114/0x200 [ 538.668158][ T982] process_scheduled_works+0xae1/0x17b0 [ 538.674240][ T982] worker_thread+0x8a0/0xda0 [ 538.679375][ T982] kthread+0x70e/0x8a0 [ 538.683988][ T982] ret_from_fork+0x439/0x7d0 [ 538.689121][ T982] ret_from_fork_asm+0x1a/0x30 [ 538.694428][ T982] [ 538.694428][ T982] other info that might help us debug this: [ 538.694428][ T982] [ 538.704767][ T982] Possible unsafe locking scenario: [ 538.704767][ T982] [ 538.712227][ T982] CPU0 CPU1 [ 538.717607][ T982] ---- ---- [ 538.722987][ T982] lock(&conn->lock#2); [ 538.727267][ T982] lock((work_completion)(&(&conn->info_timer)->work)); [ 538.736835][ T982] lock(&conn->lock#2); [ 538.743630][ T982] lock((work_completion)(&(&conn->info_timer)->work)); [ 538.750671][ T982] [ 538.750671][ T982] *** DEADLOCK *** [ 538.750671][ T982] [ 538.758824][ T982] 8 locks held by kworker/1:2/982: [ 538.763946][ T982] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.774947][ T982] #1: ffffc900036d7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.787371][ T982] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 538.797432][ T982] #3: ffff88807fdfcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x27/0x90 [ 538.807054][ T982] #4: ffff88807fdfc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 538.816754][ T982] #5: ffffffff8f69eea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 538.826805][ T982] #6: ffff88807e104b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 538.836169][ T982] #7: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 538.845349][ T982] [ 538.845349][ T982] stack backtrace: [ 538.851256][ T982] CPU: 1 UID: 0 PID: 982 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 538.851288][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.851303][ T982] Workqueue: events rfkill_sync_work [ 538.851327][ T982] Call Trace: [ 538.851335][ T982] [ 538.851345][ T982] dump_stack_lvl+0x189/0x250 [ 538.851373][ T982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.851397][ T982] ? __pfx__printk+0x10/0x10 [ 538.851426][ T982] ? print_lock_name+0xde/0x100 [ 538.851455][ T982] print_circular_bug+0x2ee/0x310 [ 538.851480][ T982] check_noncircular+0x134/0x160 [ 538.851505][ T982] validate_chain+0xb9b/0x2140 [ 538.851526][ T982] ? do_raw_spin_lock+0x121/0x290 [ 538.851554][ T982] ? look_up_lock_class+0x74/0x170 [ 538.851576][ T982] ? register_lock_class+0x51/0x320 [ 538.851608][ T982] __lock_acquire+0xab9/0xd20 [ 538.851642][ T982] ? __flush_work+0xd2/0xbc0 [ 538.851663][ T982] lock_acquire+0x120/0x360 [ 538.851691][ T982] ? __flush_work+0xd2/0xbc0 [ 538.851720][ T982] ? __flush_work+0xd2/0xbc0 [ 538.851742][ T982] __flush_work+0x6b8/0xbc0 [ 538.851763][ T982] ? __flush_work+0xd2/0xbc0 [ 538.851786][ T982] ? __flush_work+0xd2/0xbc0 [ 538.851809][ T982] ? __pfx___flush_work+0x10/0x10 [ 538.851832][ T982] ? __pfx_wq_barrier_func+0x10/0x10 [ 538.851860][ T982] ? __pfx___cancel_work+0x10/0x10 [ 538.851884][ T982] ? hci_conn_drop+0x14d/0x280 [ 538.851915][ T982] __cancel_work_sync+0xbe/0x110 [ 538.851939][ T982] l2cap_conn_del+0x4f0/0x680 [ 538.851965][ T982] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 538.851989][ T982] hci_conn_hash_flush+0x10d/0x230 [ 538.852017][ T982] hci_dev_close_sync+0xaef/0x1330 [ 538.852043][ T982] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 538.852066][ T982] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 538.852101][ T982] hci_dev_do_close+0x2f/0x90 [ 538.852123][ T982] hci_rfkill_set_block+0x21d/0x2e0 [ 538.852143][ T982] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 538.852163][ T982] rfkill_set_block+0x1cf/0x440 [ 538.852197][ T982] rfkill_sync_work+0x114/0x200 [ 538.852216][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 538.852237][ T982] process_scheduled_works+0xae1/0x17b0 [ 538.852278][ T982] ? __pfx_process_scheduled_works+0x10/0x10 [ 538.852307][ T982] worker_thread+0x8a0/0xda0 [ 538.852341][ T982] kthread+0x70e/0x8a0 [ 538.852366][ T982] ? __pfx_worker_thread+0x10/0x10 [ 538.852386][ T982] ? __pfx_kthread+0x10/0x10 [ 538.852411][ T982] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.852440][ T982] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.852459][ T982] ? __pfx_kthread+0x10/0x10 [ 538.852483][ T982] ret_from_fork+0x439/0x7d0 [ 538.852506][ T982] ? __pfx_ret_from_fork+0x10/0x10 [ 538.852529][ T982] ? __switch_to_asm+0x39/0x70 [ 538.852555][ T982] ? __switch_to_asm+0x33/0x70 [ 538.852580][ T982] ? __pfx_kthread+0x10/0x10 [ 538.852604][ T982] ret_from_fork_asm+0x1a/0x30 [ 538.852638][ T982] [ 539.265381][ T5188] Bluetooth: hci2: command 0x041b tx timeout [ 539.351782][T16666] hsr_slave_0: entered promiscuous mode [ 539.362747][T16666] hsr_slave_1: entered promiscuous mode [ 539.369871][T16666] debugfs: 'hsr0' already exists in 'hsr' [ 539.378647][T16666] Cannot create hsr debugfs directory [ 539.543896][T16666] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.560484][T16666] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.620345][T16666] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.633143][T16666] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.703122][T16666] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.718016][T16666] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.823933][T16666] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.835163][T16666] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.979464][T16666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.997033][T16666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.018408][T16666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.044160][T16666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.144391][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.174314][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.186868][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.194023][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.233158][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.240509][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.484366][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.542034][T16666] veth0_vlan: entered promiscuous mode [ 540.558064][T16666] veth1_vlan: entered promiscuous mode [ 540.598572][T16666] veth0_macvtap: entered promiscuous mode [ 540.607937][T16666] veth1_macvtap: entered promiscuous mode [ 540.632186][T16666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.649372][T16666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.663008][ T6792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.693418][ T6792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.713578][ T6792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.736933][ T6792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.307449][ T5188] Bluetooth: hci2: command 0x041b tx timeout [ 543.385360][ T51] Bluetooth: hci2: command 0x041b tx timeout