last executing test programs: 22.4860701s ago: executing program 4 (id=1469): syz_emit_ethernet(0xcb, &(0x7f0000000040)={@multicast, @random="777de85bf4dd", @void, {@llc={0x4, {@snap={0x0, 0xab, "c7", "f821cf", 0xdada, "470d295481c2ca3d0fcf8a5396325f9e6174e0f0579c93f2020330f631eccf52b9bae8378da77265a91d1e55001de01620c96b790443a6a8964d2d178062d4e967022b13c840020a9bdda6af2fce3078630d23ab7bc66d1ba0ddb03ebda5bd61e2f829b0ea0532eef9ae5e28fecc6d797a5417ae7e01f8257c62897076b2bf7a097501cfb45cf8f1f7a8af367637c989d0d36e258162159a3f5330af94c0aa0ce61f3c514707c1d9d1b77aa43c2f487e45c26c8738"}}}}}, 0x0) 22.351299036s ago: executing program 0 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x79, &(0x7f0000000000)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000080)="a00037bbee9ba1ce", 0x8, 0x200000d4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040099}, 0x4000014) 22.315368844s ago: executing program 4 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x22, 0x2, 0x4) (async) r3 = getpid() write$cgroup_pid(r1, &(0x7f0000000080)=r3, 0x12) (async) ioctl$IMGETDEVINFO(r2, 0x80044944, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340), 0x3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000100003040000000000b30000000400006e65c04ae4731d6ee103c94e567216d2dfd85f11ac8e1d4cdd8ed21ba591f930d2f2d36bfcfe03d4d62d2b2a6139a18ce7d388228a98076aa6aa5076b55e4705aa98d3c940020820bb94418e4037aaa09ca47b0f21f90b37d807ffe35952010fe941876e855b", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES16=r0], 0x44}}, 0x0) (async) r5 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000200)={r4}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1001, 0x1}, {0x6}, {0x0, 0x2}]}]}}, &(0x7f0000000640)=""/204, 0x3e, 0xcc, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 22.147243234s ago: executing program 0 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000eaf866216e0edf10000", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async, rerun: 64) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="de5ee50dd89e30f363689d1131", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async, rerun: 64) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 64) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 22.141880554s ago: executing program 4 (id=1475): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) (async) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x32, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x70}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'vcan0\x00', {0x6c}, 0x9}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x64}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27db92", 0xbd}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r10, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}], 0x2, 0x8008800) syz_emit_ethernet(0xe, &(0x7f0000000ac0)={@local, @broadcast, @void, {@generic={0x8847}}}, 0x0) (async) sendto$inet6(r10, &(0x7f0000000040)='K', 0x1, 0x0, 0x0, 0x0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 21.884827208s ago: executing program 4 (id=1477): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'ipvlan1\x00', {0x7f}, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x33}, 0x2000c000) r1 = socket$netlink(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x11, r1, 0xc98e5000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 21.671028383s ago: executing program 4 (id=1481): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x2000000000000365, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8000}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async, rerun: 32) r7 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x0, 0x3c, 0x0, @private1, @local}}}}, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 20.559389378s ago: executing program 1 (id=1484): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000600)={0x1b, "553536876577f631514b23371343eed3309911a7f0565e10da1625f340041ca89b86c6c55c266c5593ee3dd236dfd4c5940ed00176d24c6b8a75ef5f42d4d78a2233372dd0946a9e26a5926974b51cef5aa8acedf45d2b516cc557b17176992c832abeebd2341a93d64be28a6b89ca49c3f3eb20a8fc1de69313ac3f54535da6"}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x6b3c0fe, '\x00', 0x0, r5, 0x1, 0x0, 0x4}, 0x50) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x0, 0x9}}}, 0x24}}, 0x20040054) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) getpeername$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250900000034000180140002006e723000000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="8400018008000300010000001400020070696d367265670000000000000000000800030002000000140002007663616e30000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="1400025f8665616d5f736c6176655031000000000800ea001200000008000100", @ANYRES32=r9, @ANYBLOB="14000200776731000000000000000000000000000800030000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0xc100) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 19.594536403s ago: executing program 1 (id=1485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x65a0d000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xfffffffffffffdb1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x1c, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x21, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x40000, @local, 0x4000000e}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, 0x0, 0x40851) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f0000000140)="7790acf2a1852772c32781623fc2f52440acff3bc3bda58548560dffa227ea1709304dd9fa02b744d50d13b333c1e8af510e8d3d2970d103779816b629b5ebdff79a96f9514076a4b8f216aa397ccf", 0x4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 19.537287808s ago: executing program 3 (id=1486): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) accept4(r0, 0x0, 0x0, 0x80000) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) (async) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) (async) bind$l2tp(r8, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) 19.487134902s ago: executing program 1 (id=1487): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="4c00001003001e00"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$bt_hci(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000067128041022715553273825d1400006454000000000000f1a987d8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xd0f, 0x4703d30, 0x25dfdbfa, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xaae8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe000001000000000500"], 0xb4}}, 0x24040810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000e40)="9a54aba342f4122918b28741050c8c5d4bacdb0835afa29fa30965bdebce2dd46b01e115031287a7c41db30a7daf0f67d8336a662df4e4cd5a3e1c9b63831bf2d36bb61487af1bf3530d7940a6d6b1b8fe94c1afad3f07fb67cbbb052696c6af532f017ac5f4c218036490234a477889aa9bddb9401665bff0adb029fb79bcaaa8623874e8b6ceb948819150fd8316d8ec2d3cc15b9d1827300e458e05f1ca9170710d83391ea4d96e953355266f36c7eae8f6905ebc0b7c9f847c1cd37c1559b66af5901444823d4b8d9302c570c542a108db069413b41d9088") sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0xfff, @mcast1, 0x40}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000640)="52624d57725e9234a5db8fbf94020bce11644f6d626ee1891f11beb48dec0c5b935a72fb357986cfae9348ab973f356bc297c670d13f7265bbf74cc72e2575ed6212cc85a36df7f8d4938ce25c41ca98dc9486c07b67163d16d545c6d0c583e50b6e43b0a0a05a43facc9a0d13c7a1b485b215c946e35a115836d1bcdebe5f751e0790125507a19d6535d8fbdb4fb6efa27c84f2b0483417ecfa41b1b1b43b38a796487165", 0xa5}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="a00000000900000029000000370000000011000000000000c20400000003010100c910ff010000000000000000000000000001c2040000000507280000000108e00000030000000000000005000000000000000400000000000000310a000000000000c910fe8000000000000000000000000000aac910fc020000000000000000000000000001c910000000000000000000000000000000000502000901010090010000000000002900000037000000332e0000000000000247d6e6226a4e1c9f58199c3917a0db6c5ed9ad60d2b0199ff040a2f1017597db7e161d68dea7a5e8f7ea84e0fac2f109cbcb2d34ca43ad1d8a89fe275d62754d81cc006217148f25c91000000000000000000000000000000000010500000000000502000902f95aa8a969481b767e5a95e69dbb402f88e4dc0fd7f537e8248c1a78c0d7977b05abca9ed2511370f2272081e9cdca3f75f5b439b999c560279ca80f41d095b3ec074535245c8ac1e88439aa3dd0b73b515d18895898f37f1174b03ab094c8c0c844f8e6227be6362a76f73844a675960b56fc5ebddd2d2dfb559137654403094c05d2b97999633efbab5304a035c97842777bafc11368d93b8889e8520ca328b04d04c4f07c6cd354e7431c47a49a150ae5639fb43bef2d2321cc0f7988fa20d87c55ac7c6294727510cccbf6ba4ff9e7fb326efda3a495bfdbe82409e1b0b1230eb3d356a288e6038fc2f33855c2339b8045442e424546a0a3c910200100000000000000000000000000010000000000140000000000000029000000340000000100010000000000980000000000000029000000390000008910010600000000fe8000000000000000000000000000340000000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb0000000000000006000000000000000000000000000000000000000000000000fc010000000000000000f7ff00000001fe8800000000000000000000000001012000000000000000290000003600000062000000000000000100000000000000"], 0x300}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="686741ebd657562e541d834bf9a15191ae071eb6ab1468dbf1b75b8424320093d81665c063aa9106ac9e093f594ca314e8d66c564b3787ec12f799c3f2b529084a0c81dae2c8f5ba953aeaa574db14f0b0e68cac377d3bdeb74b6298c1535eb061f48e8cf26615d262534c5724c5e77579fd270c1d9a0bc2b2483bbd2194ff3d1bc6466ff93d2f294447c7cfbdfc5b4a927a9b16bd434937941368d07bf4d1a902629c0ad5076c01986338055d0689e049392771a9d9a2fa70d9337c", 0xbc}, {&(0x7f00000005c0)="690af17a5cbe0b1048ff1ed8091f274e8a5619df36408a626211dcd30d47922438e2130cd970e2b21b5fc3", 0x2b}, {&(0x7f0000000ac0)="366b174aa76fa3c5e19c2eaaa6937ddb969e3db62b2d339a71b9ba4bfd5fbf783c8c6385a54db2ee8450b0d6fd87cb677020ab2694a4d9f6db9c4db8018f51bb0d578dad51d63c58deaf3dd14a715b52ca3fca346ac039218bac7da14cb1338953ddc6b0594d517095b5fd00cb5e463035c499295a245c6472cf98f640a3fa8b4164d2619ca52255", 0x88}], 0x3, &(0x7f0000000bc0)=[@rthdrdstopts={{0x200, 0x29, 0x37, {0x29, 0x3c, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x610000}, @generic={0x0, 0xfc, "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"}, @pad1, @generic={0x4, 0xce, "1457db61502e0d5368bd206fe6a3353c47eba8ee2a43524e1b143d0b15db96cf9705914ec178a70fc3d01a0d53b4787b58a7d56d4c729e67178195d098cdaf046bdf59137c896340860828d4657b5837f9dc2ed9f238cdddcf700671fc50556b83865561bd11f2f5f7239e2507387706c74f833401ae899e08f3edf5a76c4af0ee8b413315d0502ab7f059568ff3ded4ae2d170e09533522d5c1a695bf150d95f670579e1ef17d7ebb4ea062151a4730fab6d664bdd75210778ed69bee7f7fd1996b20819576e82e8c2cba8dca0d"}, @ra={0x5, 0x2, 0x3}, @ra, @ra={0x5, 0x2, 0x7f}]}}}], 0x200}}], 0x2, 0x400c0) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x158, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000004) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0xd, 0x0, "1499a27a908331f22acb1c08a6cd44fe00a829e500280a1daf5d156caca0fa986f90e546e90294f522d9706e85a5267488c3231a9e67dcdc63200ad8cd8d94f2bc4db0dad2eb1bad706d63bdb94d26b1"}, 0xd8) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 18.612757076s ago: executing program 3 (id=1489): r0 = socket$netlink(0x10, 0x3, 0x9) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc}, 0xa) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008d00), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250161fbe7f2000100fc000002"], 0x1c}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x24004800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd25, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x4000004) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}]}, 0x90) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x4008, 0x2, 0x2, 0xce3}) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40010, 0xffffffffffffffff, 0xefd7000) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff}, 0x28) (async, rerun: 32) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) (async) getsockopt$inet6_int(r8, 0x29, 0x10, 0x0, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x13, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES64=r5], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8810}, 0x10) 18.388688501s ago: executing program 2 (id=1490): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xec, 0x24, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xf, 0x8}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe286}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x17d}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xd7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x78}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf8}]}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xffffffff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x13, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4bfd67da4bc2a8a88b32cebc26dc24fb678025ba3801f529896e1b0dc4f7cb3c9d43da5f5e92967009f2096082e5ddb85960555f0091fd6caabf7f7698e36c727b0a41b97913cd30d0d62557299fe098bb1e9e82f4629b4e907aa5bf9509bcfcc69c7d147e37e7b19ff271a4dcdfa6573b68e997", 0x74}], 0x1}, 0x4008845) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) (async) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) 18.341065586s ago: executing program 3 (id=1491): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000500)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000002c0)={0x4, 0x9, 0x2, 0xffffffff, 0x1}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2c7da669, '\x00', r9, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r13 = socket$inet6(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r15, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r17 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r16}, 0x4) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000040)=r17, 0x4) sendto$inet6(r13, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 18.279246791s ago: executing program 1 (id=1492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) 18.018793498s ago: executing program 0 (id=1493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async) listen(r1, 0x6) (async) socket$kcm(0x21, 0x2, 0x2) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$cgroup_int(r5, &(0x7f0000000280)='memory.min\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) (async) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000007c0)=""/75, &(0x7f00000001c0)=0x4b) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008040000000095000000000000100000ecffffff00000000000000009adfeeaf1d88b4ccc2df97165086b3f2a46f584eb82c32de58685c829a15e894058332a8c3f5e0e2f31ba4af27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x21}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) accept(r0, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000180)={@multicast1, @local, 0x0, "03889ffbb9111d0f51efc18b209190008fb8c91b8340258c3bf932063094c916", 0x3, 0xfffffff2, 0xfff, 0x40}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) 17.899913213s ago: executing program 0 (id=1494): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x26, 0xa, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 17.832933389s ago: executing program 2 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000003c0)=@alg, &(0x7f00000001c0)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x2e0, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_TX_RATES={0x2b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x6, 0x2, 0x96, 0xfff7, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x1400, 0x8, 0x8, 0x4, 0x101, 0x3]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x5, 0x4, 0x16, 0xc, 0x3, 0xb, 0x12, 0xc, 0xc, 0x5, 0x2, 0xc6f41054f80a48b3]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x6, 0xb, 0x5, 0x30, 0x1b, 0x24, 0xb, 0x2, 0xb, 0x6c, 0x36, 0x6c, 0x9, 0x2c, 0x12, 0x16, 0x24, 0x12, 0x36, 0x36, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x1b, 0x18, 0x36, 0x12, 0x12, 0x4, 0xc, 0xb, 0x5, 0x2, 0x4]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {}, {0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x5, 0x2}, {0x2, 0x6}, {0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x6}, {0x1}, {0x0, 0x7}, {0x4, 0x3}, {}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xddbd, 0xfff8, 0x6, 0x6, 0x7ff, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x9, 0x345, 0xe, 0x1, 0x100, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x11}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x3, 0x9}, {0x1}, {0x1, 0x4}, {0x4, 0x6}, {}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x5}, {0x3, 0xa}, {0x3, 0x2}, {0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xca, 0xc4, 0xd8, 0xe11, 0x4, 0x3, 0x1, 0x3bd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x4, 0x6, 0x10, 0x80, 0xb8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xddda, 0x5, 0x7, 0x978c, 0x81, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x6c, 0x30, 0x6c, 0x12, 0x9, 0x1, 0x6c, 0x4, 0x1, 0x5, 0x60, 0x60, 0x1, 0x9, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x15}, {0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x1}, {0x6, 0x3}, {0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff8, 0x2, 0x7ff, 0xca8, 0x8, 0x3656, 0x3]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd, 0xfe, 0x7ff, 0x63, 0x81, 0xd, 0xfff9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x6, 0xa5, 0x5, 0x55, 0x7, 0xf]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x673, 0x0, 0x2, 0x9, 0x2, 0x6, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4}, 0x20048090) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) sendmsg$inet(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, r7, 0x32739000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r8, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r8, r10, 0x2f, 0x2038, 0x4, @void, @void, @value=r11}, 0x20) sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='\v', 0x1}], 0x1, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}, 0x4000081) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000300000000020000100000004cc00000", @ANYRES32, @ANYBLOB='\a\x00'], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 17.83225129s ago: executing program 3 (id=1496): r0 = socket(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff8}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x802}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x40, 0x2, 0x3}, {0x9, 0x8, 0x0, "3c0ee415815eba84"}}}]}]}]}}]}, 0x6c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b44, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000001c0)={0x3, 0x6}) 17.756478479s ago: executing program 1 (id=1497): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000079fa0e8000000000000000000000000000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028005000c0006000000"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000079fa0e8000000000000000000000000000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028005000c0006000000"], 0x3c}}, 0x0) (async) 17.647032834s ago: executing program 0 (id=1498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x3, 0x800, 0xffffff80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-\'#@\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe4, 0x3b}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x31}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="aed40dd8eca0930379af2341e3d02da4f1ad4a112c9921"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "73acddbd5249765096457bccdf87fec7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00'}) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x4008c1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000600)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040005}, 0x1000cc80) bind$alg(r3, &(0x7f0000000800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x50}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2e5b}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x89}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040006) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r12, &(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000b80)=0x1c) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x477b4e7aa893baa9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x20006081) recvmsg$can_bcm(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0)=@ethernet, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/133, 0x85}, {&(0x7f0000000e00)=""/124, 0x7c}], 0x2, &(0x7f0000000ec0)=""/234, 0xea}, 0x40000000) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000010c0)={&(0x7f0000001000), 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xa4, 0x2a, 0x800, 0x70bd26, 0x25dfdbff, {0xd}, [@generic="b6ca3cc27e535be203c776d39cd7017e22fe8262e35d5bceef17d3bb6eb8585964e3ef234205ca772c72e316859d00b6640eda41fe3a81b07082a26f40e3d294a37530e53a8de2e875978363b5b40485c2dbda4f0d70b60d477c9c4ede1c93bbc2b573ddbcbe00472a4a46b586673a219092607edd80ae7e207cdd90d6b2cf5f0afe1aab6bec07ce3474fb6972"]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000012c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@newtclass={0x30, 0x28, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xa}, {0xd, 0x3}, {0xfff3, 0x9}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 17.547230252s ago: executing program 2 (id=1499): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040051) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xfffe, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "2d432d74c04f228a", "d74caab9efff00000100", "018000", "5e33931677e0f2d7"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0xca1) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)=ANY=[@ANYBLOB="280000000d14010025bd7000fcd9df250800030003001b1697c8e130147c000008003e0001000000"], 0x28}}, 0x80) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) 17.538398796s ago: executing program 1 (id=1500): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000200)) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x4, 0x1}) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getpeername(r5, &(0x7f00000007c0)=@ax25={{}, [@null, @remote, @rose, @netrom, @remote, @remote, @rose, @netrom]}, &(0x7f0000000240)=0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x8006, 0x1000}, 0xffffffffffffff8d) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 17.489336084s ago: executing program 0 (id=1501): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x25, "2627d0104b04ae8e597d4375bc0387824900009ae57e72c657f87bd3c697184e79bb918c3c"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x7ffffffe, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) accept4$vsock_stream(r6, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) 17.407040719s ago: executing program 4 (id=1502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc3", 0x6) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff", @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x1, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r10, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1d"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) 17.381295256s ago: executing program 3 (id=1503): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @bcast}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast1}], 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000000000)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff, 0x2}, 0x80) 17.313632197s ago: executing program 2 (id=1504): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.275540599s ago: executing program 3 (id=1505): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x3c, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x10, 0x0, 0x80, 0x0, 0xff, 0x0, 0xddf0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 16.266641457s ago: executing program 2 (id=1506): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000d, 0x100010, r0, 0x1d13c000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000001100)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 15.819057981s ago: executing program 2 (id=1507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000a700000000000000c5c22c18a94f9137ebd3af3f0f066a322548ac969fb457e95e703a6809272f46d15ff33a6297ac5d72158def92e7a2c2c35478cf4e215bb0bd6e7e5c03b3d095a3e5ec1c8fca24360f19faa1b8e44332365e137a7b5ce42b9bb3a2e2253d440352e2d937fd93ddd4ab57adf21a97e3640815e38b011d911471a14f82f74aa56401f5a86aaec6d4ec694d9ad1f6e00461fe1f47aaecc2ff88f06d8e34bc", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.631407978s ago: executing program 32 (id=1501): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x25, "2627d0104b04ae8e597d4375bc0387824900009ae57e72c657f87bd3c697184e79bb918c3c"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x7ffffffe, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) accept4$vsock_stream(r6, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) 1.485574793s ago: executing program 33 (id=1500): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000200)) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x4, 0x1}) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getpeername(r5, &(0x7f00000007c0)=@ax25={{}, [@null, @remote, @rose, @netrom, @remote, @remote, @rose, @netrom]}, &(0x7f0000000240)=0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x8006, 0x1000}, 0xffffffffffffff8d) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 1.431720312s ago: executing program 34 (id=1505): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x3c, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x10, 0x0, 0x80, 0x0, 0xff, 0x0, 0xddf0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 1.34056448s ago: executing program 35 (id=1502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc3", 0x6) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff", @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x1, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r10, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1d"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) 0s ago: executing program 36 (id=1507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000a700000000000000c5c22c18a94f9137ebd3af3f0f066a322548ac969fb457e95e703a6809272f46d15ff33a6297ac5d72158def92e7a2c2c35478cf4e215bb0bd6e7e5c03b3d095a3e5ec1c8fca24360f19faa1b8e44332365e137a7b5ce42b9bb3a2e2253d440352e2d937fd93ddd4ab57adf21a97e3640815e38b011d911471a14f82f74aa56401f5a86aaec6d4ec694d9ad1f6e00461fe1f47aaecc2ff88f06d8e34bc", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): [ 91.140044][ T4045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.148921][ T4045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202103][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.242966][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.263138][ T5975] Zero length message leads to an empty skb [ 91.334044][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.353973][ T4045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.365646][ T4045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.390181][ T5846] Bluetooth: hci1: command tx timeout [ 91.469869][ T5846] Bluetooth: hci0: command tx timeout [ 91.476021][ T5841] Bluetooth: hci3: command tx timeout [ 91.476061][ T5841] Bluetooth: hci2: command tx timeout [ 91.476163][ T5841] Bluetooth: hci4: command tx timeout [ 91.512599][ T5982] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 91.555755][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.709413][ T4883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.723488][ T4883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.788838][ T4045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.798043][ T4045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.940231][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.974985][ T3094] cfg80211: failed to load regulatory.db [ 91.984979][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.155889][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.170736][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.390139][ T6002] batman_adv: batadv0: Adding interface: vlan2 [ 92.440153][ T6002] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.470319][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.518491][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.550640][ T6002] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 92.806788][ T6008] syzkaller1: entered promiscuous mode [ 92.846751][ T6008] syzkaller1: entered allmulticast mode [ 93.021905][ T6024] tipc: Enabling of bearer rejected, failed to enable media [ 93.553052][ T6051] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 93.564956][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 93.587262][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 93.656592][ T6051] bond1 (unregistering): Released all slaves [ 93.675668][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 93.712487][ T6062] bridge_slave_0: left allmulticast mode [ 93.733234][ T6062] bridge_slave_0: left promiscuous mode [ 93.771415][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.788051][ T6067] netlink: 'syz.4.29': attribute type 9 has an invalid length. [ 93.798882][ T6067] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.29'. [ 93.814614][ T6062] bridge_slave_1: left allmulticast mode [ 93.831207][ T6062] bridge_slave_1: left promiscuous mode [ 93.837532][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.852708][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 93.866496][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 93.914249][ T6062] team0: Port device team_slave_0 removed [ 93.929391][ T6062] team0: Port device team_slave_1 removed [ 93.941680][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.954433][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.966138][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.976137][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.992393][ T6062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.027537][ T6064] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 94.383611][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 94.386760][ T6090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.34'. [ 94.829598][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 94.886747][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 94.925592][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 94.957429][ T6120] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.301144][ T6126] bond1: option lacp_active: invalid value (8) [ 95.339083][ T6126] bond1 (unregistering): Released all slaves [ 95.518012][ T6134] : entered promiscuous mode [ 95.671574][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.684430][ T6144] syz_tun: entered allmulticast mode [ 95.730854][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 95.784426][ T6143] syz_tun: left allmulticast mode [ 96.093808][ T6161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.209952][ T6165] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 96.466253][ T6177] FAULT_INJECTION: forcing a failure. [ 96.466253][ T6177] name failslab, interval 1, probability 0, space 0, times 1 [ 96.523218][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) [ 96.523244][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.523262][ T6177] Call Trace: [ 96.523270][ T6177] [ 96.523278][ T6177] dump_stack_lvl+0x189/0x250 [ 96.523308][ T6177] ? __pfx____ratelimit+0x10/0x10 [ 96.523326][ T6177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.523346][ T6177] ? __pfx__printk+0x10/0x10 [ 96.523375][ T6177] ? __pfx___might_resched+0x10/0x10 [ 96.523393][ T6177] ? fs_reclaim_acquire+0x7d/0x100 [ 96.523416][ T6177] should_fail_ex+0x414/0x560 [ 96.523444][ T6177] should_failslab+0xa8/0x100 [ 96.523466][ T6177] __kvmalloc_node_noprof+0x175/0x920 [ 96.523487][ T6177] ? xt_alloc_table_info+0x40/0xb0 [ 96.523512][ T6177] xt_alloc_table_info+0x40/0xb0 [ 96.523530][ T6177] do_ipt_set_ctl+0x881/0xcd0 [ 96.523550][ T6177] ? rcu_is_watching+0x15/0xb0 [ 96.523571][ T6177] ? trace_contention_end+0x39/0x100 [ 96.523592][ T6177] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 96.523637][ T6177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.523665][ T6177] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.523687][ T6177] nf_setsockopt+0x26f/0x290 [ 96.523706][ T6177] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 96.523730][ T6177] do_sock_setsockopt+0x17c/0x1b0 [ 96.523752][ T6177] __x64_sys_setsockopt+0x13f/0x1b0 [ 96.523776][ T6177] do_syscall_64+0xfa/0xf80 [ 96.523794][ T6177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.523810][ T6177] ? clear_bhb_loop+0x60/0xb0 [ 96.523830][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.523845][ T6177] RIP: 0033:0x7eff8138f749 [ 96.523865][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.523876][ T6177] RSP: 002b:00007eff82181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.523891][ T6177] RAX: ffffffffffffffda RBX: 00007eff815e5fa0 RCX: 00007eff8138f749 [ 96.523901][ T6177] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.523908][ T6177] RBP: 00007eff82181090 R08: 0000000000000370 R09: 0000000000000000 [ 96.523917][ T6177] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 96.523926][ T6177] R13: 00007eff815e6038 R14: 00007eff815e5fa0 R15: 00007ffe7c7e0c18 [ 96.523952][ T6177] [ 97.260602][ T6189] ip6t_srh: unknown srh match flags 4000 [ 97.488108][ T6202] bridge0: entered promiscuous mode [ 97.523452][ T6202] bridge0: port 1(macsec1) entered blocking state [ 97.534171][ T6210] xt_hashlimit: max too large, truncated to 1048576 [ 97.543449][ T6202] bridge0: port 1(macsec1) entered disabled state [ 97.562323][ T6210] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.570250][ T6202] macsec1: entered allmulticast mode [ 97.614032][ T6202] bridge0: entered allmulticast mode [ 97.637488][ T6202] macsec1: left allmulticast mode [ 97.646823][ T6202] bridge0: left allmulticast mode [ 97.653743][ T6202] bridge0: left promiscuous mode [ 97.990864][ T6227] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 98.186433][ T6235] veth3: entered promiscuous mode [ 99.068871][ T6275] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 99.118012][ T6275] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 99.127279][ T6275] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 99.136509][ T6282] FAULT_INJECTION: forcing a failure. [ 99.136509][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 99.282111][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.4.89 Not tainted syzkaller #0 PREEMPT(full) [ 99.282136][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.282146][ T6282] Call Trace: [ 99.282154][ T6282] [ 99.282161][ T6282] dump_stack_lvl+0x189/0x250 [ 99.282188][ T6282] ? __pfx____ratelimit+0x10/0x10 [ 99.282205][ T6282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.282225][ T6282] ? __pfx__printk+0x10/0x10 [ 99.282254][ T6282] ? __pfx___might_resched+0x10/0x10 [ 99.282271][ T6282] ? fs_reclaim_acquire+0x7d/0x100 [ 99.282293][ T6282] should_fail_ex+0x414/0x560 [ 99.282322][ T6282] should_failslab+0xa8/0x100 [ 99.282345][ T6282] __kvmalloc_node_noprof+0x175/0x920 [ 99.282362][ T6282] ? do_ipt_set_ctl+0x881/0xcd0 [ 99.282379][ T6282] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 99.282397][ T6282] ? translate_table+0x198/0x2000 [ 99.282419][ T6282] translate_table+0x198/0x2000 [ 99.282486][ T6282] ? __pfx_translate_table+0x10/0x10 [ 99.282505][ T6282] ? __might_fault+0xb0/0x130 [ 99.282546][ T6282] ? _copy_from_user+0x94/0xb0 [ 99.282571][ T6282] do_ipt_set_ctl+0x967/0xcd0 [ 99.282591][ T6282] ? rcu_is_watching+0x15/0xb0 [ 99.282611][ T6282] ? trace_contention_end+0x39/0x100 [ 99.282631][ T6282] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 99.282666][ T6282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.282695][ T6282] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.282723][ T6282] nf_setsockopt+0x26f/0x290 [ 99.282742][ T6282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.282768][ T6282] do_sock_setsockopt+0x17c/0x1b0 [ 99.282790][ T6282] __x64_sys_setsockopt+0x13f/0x1b0 [ 99.282811][ T6282] do_syscall_64+0xfa/0xf80 [ 99.282828][ T6282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.282845][ T6282] ? clear_bhb_loop+0x60/0xb0 [ 99.282864][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.282879][ T6282] RIP: 0033:0x7fdcd258f749 [ 99.282894][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.282906][ T6282] RSP: 002b:00007fdcd3398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.282924][ T6282] RAX: ffffffffffffffda RBX: 00007fdcd27e5fa0 RCX: 00007fdcd258f749 [ 99.282937][ T6282] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 99.282947][ T6282] RBP: 00007fdcd3398090 R08: 0000000000000370 R09: 0000000000000000 [ 99.282958][ T6282] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 99.282969][ T6282] R13: 00007fdcd27e6038 R14: 00007fdcd27e5fa0 R15: 00007fffb3f37cb8 [ 99.282995][ T6282] [ 99.980168][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 100.140714][ T6316] __nla_validate_parse: 2 callbacks suppressed [ 100.140733][ T6316] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.99'. [ 100.177168][ T6316] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 100.356570][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 100.873392][ T6336] syz.2.105 (6336) used greatest stack depth: 17688 bytes left [ 101.033218][ T6370] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 101.066785][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.112'. [ 101.181742][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.215312][ T6370] veth3: entered promiscuous mode [ 101.229538][ T6370] bond1: (slave veth3): Enslaving as an active interface with a down link [ 101.839287][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 101.868636][ T6410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.048875][ T6408] hsr_slave_1 (unregistering): left promiscuous mode [ 103.081329][ T6462] block nbd0: NBD_DISCONNECT [ 103.243988][ T6456] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 103.439924][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.486847][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 103.563973][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.573576][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 103.603372][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.651793][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.076284][ T6514] netlink: 104 bytes leftover after parsing attributes in process `syz.1.150'. [ 104.521179][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 104.553348][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 104.670030][ T5846] Bluetooth: hci4: command tx timeout [ 104.745308][ T6545] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 104.841245][ T6553] netlink: 'syz.2.161': attribute type 10 has an invalid length. [ 104.879246][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.072787][ T6563] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 105.112841][ T6551] bond1 (unregistering): Released all slaves [ 105.133834][ T6553] batadv0: entered promiscuous mode [ 105.140033][ T6553] batadv0: entered allmulticast mode [ 105.147633][ T6553] bridge0: port 3(batadv0) entered blocking state [ 105.155750][ T6553] bridge0: port 3(batadv0) entered disabled state [ 105.166155][ T6553] bridge0: port 3(batadv0) entered blocking state [ 105.174313][ T6553] bridge0: port 3(batadv0) entered forwarding state [ 105.182831][ T6567] __nla_validate_parse: 4 callbacks suppressed [ 105.182849][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 105.250501][ T2898] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 105.260546][ T2898] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 105.301516][ T6561] : entered promiscuous mode [ 105.320430][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 105.449431][ T6563] bond1: entered promiscuous mode [ 105.497218][ T6563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.832628][ T6592] tipc: Started in network mode [ 105.851851][ T6592] tipc: Node identity d6c7b3f999a8, cluster identity 4711 [ 105.880253][ T6592] tipc: Enabled bearer , priority 0 [ 105.958646][ T6599] syzkaller0: entered promiscuous mode [ 105.977657][ T6599] syzkaller0: entered allmulticast mode [ 106.018032][ T6598] netlink: 666 bytes leftover after parsing attributes in process `syz.4.172'. [ 106.138384][ T6592] tipc: Resetting bearer [ 106.178161][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 106.204318][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 106.464154][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.541309][ T6589] tipc: Resetting bearer [ 106.675609][ T6589] tipc: Disabling bearer [ 106.753224][ T6626] netlink: 48 bytes leftover after parsing attributes in process `syz.1.180'. [ 106.790567][ T6632] netlink: 10 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.064882][ T6654] tipc: Enabled bearer , priority 0 [ 107.170563][ T6654] syzkaller0: entered promiscuous mode [ 107.176648][ T6654] syzkaller0: entered allmulticast mode [ 107.350973][ T6677] warning: `syz.4.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.411791][ T6677] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 107.606598][ T6654] tipc: Resetting bearer [ 107.793982][ T6695] netlink: 'syz.0.190': attribute type 11 has an invalid length. [ 107.849975][ T6695] netlink: 'syz.0.190': attribute type 11 has an invalid length. [ 107.876699][ T6695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.190'. [ 107.937685][ T6652] tipc: Resetting bearer [ 108.006491][ T6652] tipc: Disabling bearer [ 108.013525][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.124450][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 108.155222][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 108.261527][ T6719] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.311925][ T6719] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 108.587031][ T6708] macvlan2: entered promiscuous mode [ 108.602050][ T6708] macvlan2: entered allmulticast mode [ 108.612591][ T6708] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 109.503866][ T6766] FAULT_INJECTION: forcing a failure. [ 109.503866][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 109.607142][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT(full) [ 109.607166][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.607177][ T6766] Call Trace: [ 109.607184][ T6766] [ 109.607192][ T6766] dump_stack_lvl+0x189/0x250 [ 109.607217][ T6766] ? __pfx____ratelimit+0x10/0x10 [ 109.607235][ T6766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.607253][ T6766] ? __pfx__printk+0x10/0x10 [ 109.607280][ T6766] ? __pfx___might_resched+0x10/0x10 [ 109.607297][ T6766] ? fs_reclaim_acquire+0x7d/0x100 [ 109.607319][ T6766] should_fail_ex+0x414/0x560 [ 109.607347][ T6766] should_failslab+0xa8/0x100 [ 109.607368][ T6766] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 109.607392][ T6766] ? end_current_label_crit_section+0x146/0x170 [ 109.607413][ T6766] ? sock_alloc_inode+0x28/0xc0 [ 109.607440][ T6766] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.607467][ T6766] sock_alloc_inode+0x28/0xc0 [ 109.607488][ T6766] alloc_inode+0x6a/0x1b0 [ 109.607509][ T6766] __sock_create+0x12d/0x9d0 [ 109.607541][ T6766] __sys_socket+0xd7/0x1b0 [ 109.607560][ T6766] __x64_sys_socket+0x7a/0x90 [ 109.607575][ T6766] do_syscall_64+0xfa/0xf80 [ 109.607592][ T6766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.607606][ T6766] ? clear_bhb_loop+0x60/0xb0 [ 109.607625][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.607639][ T6766] RIP: 0033:0x7fd80f591667 [ 109.607654][ T6766] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.607665][ T6766] RSP: 002b:00007fd8104e7fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 109.607680][ T6766] RAX: ffffffffffffffda RBX: 00007fd80f7e5fa0 RCX: 00007fd80f591667 [ 109.607690][ T6766] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 109.607699][ T6766] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 109.607708][ T6766] R10: 0000200000002a40 R11: 0000000000000286 R12: 0000000000000001 [ 109.607717][ T6766] R13: 00007fd80f7e6038 R14: 00007fd80f7e5fa0 R15: 00007ffc0d0bbe98 [ 109.607743][ T6766] [ 109.607751][ T6766] socket: no more sockets [ 109.961082][ T6179] wlan1: Trigger new scan to find an IBSS to join [ 110.212669][ T6792] __nla_validate_parse: 3 callbacks suppressed [ 110.212687][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 110.429402][ T6807] syzkaller0: entered promiscuous mode [ 110.473376][ T6807] syzkaller0: entered allmulticast mode [ 111.101486][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 111.133161][ T6837] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 111.373411][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 111.465868][ T6849] bond1 (unregistering): Released all slaves [ 111.679476][ T6855] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 111.693809][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 111.858553][ T6876] FAULT_INJECTION: forcing a failure. [ 111.858553][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 111.886591][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 111.886617][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.886627][ T6876] Call Trace: [ 111.886635][ T6876] [ 111.886642][ T6876] dump_stack_lvl+0x189/0x250 [ 111.886667][ T6876] ? __pfx____ratelimit+0x10/0x10 [ 111.886683][ T6876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.886702][ T6876] ? __pfx__printk+0x10/0x10 [ 111.886730][ T6876] ? __pfx___might_resched+0x10/0x10 [ 111.886747][ T6876] ? fs_reclaim_acquire+0x7d/0x100 [ 111.886787][ T6876] should_fail_ex+0x414/0x560 [ 111.886817][ T6876] should_failslab+0xa8/0x100 [ 111.886839][ T6876] __kmalloc_noprof+0xdf/0x800 [ 111.886856][ T6876] ? sk_prot_alloc+0xe7/0x220 [ 111.886880][ T6876] sk_prot_alloc+0xe7/0x220 [ 111.886897][ T6876] ? sk_alloc+0x27/0x390 [ 111.886917][ T6876] sk_alloc+0x3a/0x390 [ 111.886940][ T6876] __netlink_create+0x65/0x260 [ 111.886962][ T6876] ? __pfx_genl_release+0x10/0x10 [ 111.886978][ T6876] netlink_create+0x3ca/0x590 [ 111.887000][ T6876] ? __pfx_genl_unbind+0x10/0x10 [ 111.887013][ T6876] ? __pfx_genl_bind+0x10/0x10 [ 111.887031][ T6876] __sock_create+0x4b3/0x9d0 [ 111.887065][ T6876] __sys_socket+0xd7/0x1b0 [ 111.887085][ T6876] __x64_sys_socket+0x7a/0x90 [ 111.887102][ T6876] do_syscall_64+0xfa/0xf80 [ 111.887122][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.887139][ T6876] ? clear_bhb_loop+0x60/0xb0 [ 111.887160][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.887176][ T6876] RIP: 0033:0x7fd80f591667 [ 111.887193][ T6876] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.887206][ T6876] RSP: 002b:00007fd8104e7fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 111.887224][ T6876] RAX: ffffffffffffffda RBX: 00007fd80f7e5fa0 RCX: 00007fd80f591667 [ 111.887284][ T6876] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 111.887295][ T6876] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 111.887305][ T6876] R10: 0000200000002a40 R11: 0000000000000286 R12: 0000000000000001 [ 111.887315][ T6876] R13: 00007fd80f7e6038 R14: 00007fd80f7e5fa0 R15: 00007ffc0d0bbe98 [ 111.887346][ T6876] [ 112.146136][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 112.156053][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 112.322591][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 112.359152][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 113.171763][ T6910] veth1_macvtap: left promiscuous mode [ 113.199112][ T6910] macsec0: entered promiscuous mode [ 113.390784][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 113.401564][ T6930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.261'. [ 113.541324][ T6933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.735563][ T6939] tipc: Started in network mode [ 113.746765][ T6939] tipc: Node identity f25547c4c90b, cluster identity 4711 [ 113.755519][ T6939] tipc: Enabled bearer , priority 0 [ 113.780857][ T6939] syzkaller0: entered promiscuous mode [ 113.786909][ T6939] syzkaller0: entered allmulticast mode [ 113.902006][ T6939] tipc: Resetting bearer [ 113.923573][ T6939] tipc: Resetting bearer [ 113.972730][ T6939] tipc: Disabling bearer [ 114.213250][ T6959] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 114.241293][ T6959] macsec1: entered promiscuous mode [ 114.398245][ T6959] bridge1: entered promiscuous mode [ 114.404699][ T6959] bridge1: entered allmulticast mode [ 114.666629][ T6987] syzkaller0: entered promiscuous mode [ 114.672711][ T6987] syzkaller0: entered allmulticast mode [ 114.706263][ T6989] netlink: 'syz.1.274': attribute type 6 has an invalid length. [ 114.904625][ T6993] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 114.921424][ T4045] wlan1: Trigger new scan to find an IBSS to join [ 115.334687][ T7009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.759444][ T7025] IPVS: Scheduler module ip_vs_sip not found [ 115.771347][ T7025] IPVS: length: 8 != 38340412664 [ 115.796670][ T7020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.854012][ T2911] wlan1: Creating new IBSS network, BSSID 0e:e9:fb:c4:b7:48 [ 115.896823][ T7031] __nla_validate_parse: 7 callbacks suppressed [ 115.896841][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 116.327431][ T7043] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 116.354359][ T7043] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 116.408557][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 117.334655][ T7106] ip6gretap1: entered allmulticast mode [ 117.491900][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 117.832390][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 117.880021][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 117.913238][ T7135] syzkaller0: entered promiscuous mode [ 117.919213][ T7135] syzkaller0: entered allmulticast mode [ 117.940832][ T7134] tipc: Started in network mode [ 117.942436][ T7137] xt_connbytes: Forcing CT accounting to be enabled [ 117.945824][ T7134] tipc: Node identity 662f5dcd8b11, cluster identity 4711 [ 117.946031][ T7134] tipc: Enabled bearer , priority 0 [ 117.991729][ T7140] netlink: 276 bytes leftover after parsing attributes in process `syz.3.318'. [ 118.022231][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 118.022993][ T7144] netlink: 276 bytes leftover after parsing attributes in process `syz.3.318'. [ 118.059326][ T7133] tipc: Resetting bearer [ 118.087100][ T7132] tipc: Resetting bearer [ 118.121466][ T7132] tipc: Disabling bearer [ 118.145923][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 118.328820][ T7155] batadv1: entered promiscuous mode [ 118.397895][ T7159] syzkaller0: entered promiscuous mode [ 118.419882][ T7159] syzkaller0: entered allmulticast mode [ 118.448880][ T7162] netlink: 140 bytes leftover after parsing attributes in process `syz.4.321'. [ 132.922719][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.948177][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.128911][ T7186] __nla_validate_parse: 3 callbacks suppressed [ 176.128927][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 176.185484][ T7195] tipc: Started in network mode [ 176.198478][ T7195] tipc: Node identity e670af514a3, cluster identity 4711 [ 176.224746][ T7199] netlink: 'syz.2.333': attribute type 13 has an invalid length. [ 176.233354][ T7195] tipc: Enabled bearer , priority 0 [ 176.261139][ T7200] veth0_to_bridge: entered promiscuous mode [ 176.267967][ T7201] syzkaller0: entered promiscuous mode [ 176.285485][ T7201] syzkaller0: entered allmulticast mode [ 176.681572][ T7195] tipc: Resetting bearer [ 176.782960][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.810341][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.837186][ T7195] tipc: Resetting bearer [ 176.857956][ T7195] tipc: Disabling bearer [ 176.873500][ T2911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.887689][ T7188] veth0_to_bridge: left promiscuous mode [ 177.035329][ T7226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.095001][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 177.118394][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.129947][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.147533][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 177.222489][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.342'. [ 177.266892][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.302086][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.450069][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.474356][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.791984][ T7267] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 177.811381][ T7267] bond2 (unregistering): Released all slaves [ 177.987212][ T1100] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.012298][ T1100] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.114941][ T1100] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.142755][ T1100] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.205797][ T7278] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 178.222316][ T6179] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.254059][ T6179] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.270147][ T7278] netlink: 244 bytes leftover after parsing attributes in process `syz.3.353'. [ 178.289664][ T2911] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.323946][ T2911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.588127][ T7295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.647070][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 178.691747][ T7295] netlink: 'syz.3.357': attribute type 5 has an invalid length. [ 179.157271][ T7310] syz_tun: entered allmulticast mode [ 179.228073][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 179.401333][ T7317] macvlan1: entered promiscuous mode [ 179.424897][ T7317] team_slave_0: entered promiscuous mode [ 179.443088][ T7317] team_slave_0: left promiscuous mode [ 179.458246][ T7317] macvlan1: left promiscuous mode [ 179.665302][ T7328] x_tables: duplicate underflow at hook 1 [ 180.115071][ T7346] netlink: 'syz.0.370': attribute type 21 has an invalid length. [ 180.138809][ T7346] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 180.165506][ T7346] netlink: 144 bytes leftover after parsing attributes in process `syz.0.370'. [ 180.535276][ T7376] bond0: option miimon: invalid value (18446744072730617911) [ 180.571202][ T7376] bond0: option miimon: allowed values 0 - 2147483647 [ 180.624139][ T7379] geneve2: entered promiscuous mode [ 181.012426][ T7403] syzkaller1: entered promiscuous mode [ 181.017948][ T7403] syzkaller1: entered allmulticast mode [ 181.103337][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.112096][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.112189][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 181.189662][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.224408][ T7404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.269888][ T30] audit: type=1804 audit(1766374900.694:2): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.384" name="cgroup.controllers" dev="tmpfs" ino=418 res=1 errno=0 [ 181.340122][ T30] audit: type=1800 audit(1766374900.694:3): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.384" name="cgroup.controllers" dev="tmpfs" ino=418 res=0 errno=0 [ 181.375173][ T7404] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.436390][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.445684][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.540564][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.567074][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.591206][ T7404] wg1 speed is unknown, defaulting to 1000 [ 181.821487][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.392'. [ 181.825782][ T7436] netlink: 'syz.2.393': attribute type 3 has an invalid length. [ 181.838122][ T7436] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 181.860172][ T7436] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.393'. [ 181.942907][ T7443] wg1 speed is unknown, defaulting to 1000 [ 182.236202][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 182.245220][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 182.263728][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 182.394322][ T7465] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 182.469019][ T7463] block nbd1: shutting down sockets [ 182.817273][ T7492] wg1 speed is unknown, defaulting to 1000 [ 182.886558][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 182.896056][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 182.960136][ T7502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'. [ 183.247534][ T7516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.412'. [ 183.259151][ T7516] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 183.736853][ T7533] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 183.745078][ T7533] netlink: 2 bytes leftover after parsing attributes in process `syz.1.418'. [ 183.780138][ T7533] batadv_slave_1: entered promiscuous mode [ 183.796875][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.807390][ T7533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.825060][ T7533] bridge0: port 3(batadv_slave_1) entered blocking state [ 183.834966][ T7533] bridge0: port 3(batadv_slave_1) entered disabled state [ 183.843189][ T7533] batadv_slave_1: entered allmulticast mode [ 183.852495][ T7533] bridge0: port 3(batadv_slave_1) entered blocking state [ 183.859793][ T7533] bridge0: port 3(batadv_slave_1) entered forwarding state [ 183.972149][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.343621][ T7575] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 184.412780][ T7575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.466962][ T7583] bond4: (slave ip6gretap1): making interface the new active one [ 184.496861][ T7583] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 184.583108][ T7575] veth3: entered promiscuous mode [ 184.614951][ T7575] bond4: (slave veth3): Enslaving as an active interface with a down link [ 184.648915][ T7593] erspan0: entered allmulticast mode [ 184.673813][ T7593] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 184.702931][ T7583] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 184.931763][ T7606] RDS: rds_bind could not find a transport for 4:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 184.950022][ T7607] RDS: rds_bind could not find a transport for 4:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 185.107727][ T7615] bridge2: entered allmulticast mode [ 185.126300][ T7618] tipc: Can't bind to reserved service type 2 [ 185.168428][ T7599] wg1 speed is unknown, defaulting to 1000 [ 185.206212][ T7618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 185.339844][ T7630] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 185.556620][ T7622] wg1 speed is unknown, defaulting to 1000 [ 185.788151][ T7641] tipc: Enabling of bearer rejected, failed to enable media [ 186.044502][ T7655] syzkaller0: entered promiscuous mode [ 186.060212][ T7655] syzkaller0: entered allmulticast mode [ 186.081848][ T7672] Bluetooth: MGMT ver 1.23 [ 186.195238][ T7667] geneve2: entered promiscuous mode [ 186.403446][ T7678] syzkaller0: entered promiscuous mode [ 186.409038][ T7678] syzkaller0: entered allmulticast mode [ 186.413774][ T7691] Bluetooth: MGMT ver 1.23 [ 186.919382][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.931454][ T7708] __nla_validate_parse: 4 callbacks suppressed [ 186.931472][ T7708] netlink: 640 bytes leftover after parsing attributes in process `syz.1.461'. [ 186.946935][ T7708] netlink: 640 bytes leftover after parsing attributes in process `syz.1.461'. [ 188.120865][ T7692] wg1 speed is unknown, defaulting to 1000 [ 188.132532][ T7708] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 188.279553][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 188.320006][ T7750] netlink: 152 bytes leftover after parsing attributes in process `syz.4.465'. [ 188.381040][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 188.633854][ T7760] nbd3: detected capacity change from 0 to 63 [ 188.638832][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 188.664697][ T7768] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 188.685362][ T7768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.472'. [ 188.723483][ T7769] block nbd3: NBD_DISCONNECT [ 188.745738][ T7769] block nbd3: Disconnected due to user request. [ 188.762626][ T7778] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 188.774414][ T7768] netlink: 'syz.1.472': attribute type 6 has an invalid length. [ 188.782298][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'. [ 188.795880][ T7768] bridge0: port 3(batadv_slave_1) entered disabled state [ 188.803408][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.811942][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.824395][ T7769] block nbd3: shutting down sockets [ 188.925670][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.942657][ T7778] bond0: (slave team0): Enslaving as an active interface with an up link [ 189.064971][ T7787] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 189.142210][ T7787] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.159526][ T7793] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 189.175905][ T7787] team0: Failed to send options change via netlink (err -105) [ 189.190219][ T7787] team0: Port device dummy0 added [ 189.206005][ T7793] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.305535][ T7793] team0: Failed to send options change via netlink (err -105) [ 189.324627][ T7793] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.350646][ T7793] team0: Port device dummy0 removed [ 189.381953][ T7793] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.411077][ T7797] x_tables: duplicate underflow at hook 2 [ 189.761703][ T7798] netlink: 'syz.2.478': attribute type 21 has an invalid length. [ 189.785003][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.478'. [ 189.981293][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 190.086932][ T7807] netlink: 'syz.1.482': attribute type 11 has an invalid length. [ 190.124872][ T7807] netlink: 'syz.1.482': attribute type 11 has an invalid length. [ 190.231402][ T7818] tipc: Enabled bearer , priority 0 [ 190.259325][ T7818] syzkaller0: entered promiscuous mode [ 190.269957][ T7818] syzkaller0: entered allmulticast mode [ 190.337318][ T7818] tipc: Resetting bearer [ 190.363292][ T7822] nbd: couldn't find a device at index 0 [ 190.380131][ T7817] tipc: Resetting bearer [ 190.420699][ T7817] tipc: Disabling bearer [ 190.656987][ T7842] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 190.840666][ T7851] @: renamed from veth0_vlan (while UP) [ 191.020197][ T3094] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 191.350736][ T61] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 191.469639][ T7871] netlink: 'syz.2.500': attribute type 153 has an invalid length. [ 191.710714][ T3094] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 191.787355][ T7880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.845023][ T7892] netlink: 'syz.3.506': attribute type 11 has an invalid length. [ 191.899952][ T7892] netlink: 'syz.3.506': attribute type 11 has an invalid length. [ 191.961752][ T7892] __nla_validate_parse: 7 callbacks suppressed [ 191.961769][ T7892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.506'. [ 192.175248][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.215630][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.242818][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.277628][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 192.289901][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.336845][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.384320][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.435774][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.487159][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.580481][ T7894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.634517][ T7898] sctp: [Deprecated]: syz.4.507 (pid 7898) Use of int in max_burst socket option. [ 192.634517][ T7898] Use struct sctp_assoc_value instead [ 192.749495][ T7880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.833691][ T775] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.853493][ T775] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.897601][ T7912] tipc: Enabled bearer , priority 0 [ 192.902095][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.908059][ T7912] syzkaller0: entered promiscuous mode [ 192.917792][ T7912] syzkaller0: entered allmulticast mode [ 192.964260][ T7880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.142624][ T7880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.189851][ T7912] tipc: Resetting bearer [ 193.210164][ T7920] veth4: entered allmulticast mode [ 193.236400][ T7927] : renamed from team_slave_1 [ 193.253880][ T7911] tipc: Resetting bearer [ 193.288166][ T7911] tipc: Disabling bearer [ 193.611228][ T7935] bond1: entered promiscuous mode [ 193.628198][ T7935] bond1: entered allmulticast mode [ 193.662360][ T7935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.693118][ T2898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.736012][ T7953] bond5 (unregistering): Released all slaves [ 193.818178][ T775] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.947228][ T6179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.979466][ T2898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.326383][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.334329][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.362589][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.437345][ T7980] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 194.529360][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.547699][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.753033][ T7968] ip6gretap1: left allmulticast mode [ 194.759340][ T7968] geneve2: left promiscuous mode [ 194.772214][ T7968] bridge2: left allmulticast mode [ 194.784832][ T7975] hsr_slave_0: left promiscuous mode [ 194.800972][ T7975] hsr_slave_1: left promiscuous mode [ 194.842706][ T9] wg1 speed is unknown, defaulting to 1000 [ 194.849225][ T9] syz0: Port: 1 Link DOWN [ 194.891546][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.911430][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.926862][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.939133][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.217023][ T8001] dummy0: entered promiscuous mode [ 195.244059][ T8001] dummy0: left promiscuous mode [ 195.491805][ T8019] openvswitch: netlink: Key type 80 is out of range max 32 [ 195.576167][ T8020] wg1 speed is unknown, defaulting to 1000 [ 196.014632][ T8031] wg1 speed is unknown, defaulting to 1000 [ 196.375654][ T8060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.400147][ T8047] wg1 speed is unknown, defaulting to 1000 [ 196.921259][ T8082] wg1 speed is unknown, defaulting to 1000 [ 197.036985][ T8052] wg1 speed is unknown, defaulting to 1000 [ 197.181959][ T8094] wg1 speed is unknown, defaulting to 1000 [ 197.432543][ T8109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.565960][ T8116] geneve3: entered promiscuous mode [ 197.678128][ T8119] wg1 speed is unknown, defaulting to 1000 [ 197.989930][ T30] audit: type=1800 audit(1766374917.434:4): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.565" name="memory.events" dev="tmpfs" ino=523 res=0 errno=0 [ 198.383078][ T8155] __nla_validate_parse: 14 callbacks suppressed [ 198.383096][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 198.393359][ T8142] wg1 speed is unknown, defaulting to 1000 [ 198.666617][ T8164] xt_hashlimit: max too large, truncated to 1048576 [ 198.677456][ T8164] xt_bpf: check failed: parse error [ 198.736933][ T8173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.576'. [ 198.919833][ T8183] trusted_key: syz.0.579 sent an empty control message without MSG_MORE. [ 199.118473][ T8194] wg1 speed is unknown, defaulting to 1000 [ 199.824521][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.593'. [ 199.974749][ T8242] netlink: 'syz.1.595': attribute type 5 has an invalid length. [ 199.991418][ T8234] GUP no longer grows the stack in syz.0.592 (8234): 200000003000-20000000a000 (200000001000) [ 200.004622][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.0.592 Not tainted syzkaller #0 PREEMPT(full) [ 200.004649][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.004665][ T8234] Call Trace: [ 200.004673][ T8234] [ 200.004681][ T8234] dump_stack_lvl+0x189/0x250 [ 200.004720][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.004741][ T8234] ? __pfx__printk+0x10/0x10 [ 200.004763][ T8234] ? find_vma+0xe7/0x160 [ 200.004802][ T8234] __get_user_pages+0x2465/0x29f0 [ 200.004825][ T8234] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 200.004855][ T8234] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 200.004900][ T8234] ? rcu_is_watching+0x15/0xb0 [ 200.004926][ T8234] __gup_longterm_locked+0xde4/0x1660 [ 200.004956][ T8234] ? try_grab_folio_fast+0x1bf/0x6a0 [ 200.004990][ T8234] ? gup_fast_fallback+0x1b82/0x22d0 [ 200.005016][ T8234] gup_fast_fallback+0x1d6b/0x22d0 [ 200.005082][ T8234] ? __pfx_gup_fast_fallback+0x10/0x10 [ 200.005104][ T8234] ? __mutex_lock+0x335/0x1350 [ 200.005129][ T8234] ? futex_unqueue+0x22/0x240 [ 200.005168][ T8234] ? futex_unqueue+0x22/0x240 [ 200.005192][ T8234] ? futex_unqueue+0x22/0x240 [ 200.005208][ T8234] ? is_valid_gup_args+0x11f/0x200 [ 200.005234][ T8234] ? get_user_pages_fast+0x4d/0xb0 [ 200.005260][ T8234] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 200.005290][ T8234] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 200.005313][ T8234] ? wait_for_space+0x248/0x2d0 [ 200.005338][ T8234] iov_iter_get_pages2+0x5e/0xa0 [ 200.005363][ T8234] __se_sys_vmsplice+0x548/0x10d0 [ 200.005407][ T8234] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 200.005430][ T8234] ? __pfx_futex_wait+0x10/0x10 [ 200.005524][ T8234] ? do_syscall_64+0xbe/0xf80 [ 200.005547][ T8234] do_syscall_64+0xfa/0xf80 [ 200.005566][ T8234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.005584][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 200.005606][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.005623][ T8234] RIP: 0033:0x7fd80f58f749 [ 200.005645][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.005659][ T8234] RSP: 002b:00007fd8104e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 200.005683][ T8234] RAX: ffffffffffffffda RBX: 00007fd80f7e5fa0 RCX: 00007fd80f58f749 [ 200.005696][ T8234] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 200.005708][ T8234] RBP: 00007fd80f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.005719][ T8234] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 200.005730][ T8234] R13: 00007fd80f7e6038 R14: 00007fd80f7e5fa0 R15: 00007ffc0d0bbe98 [ 200.005763][ T8234] [ 200.706983][ T8282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.605'. [ 200.802811][ T8291] netlink: 'syz.4.606': attribute type 39 has an invalid length. [ 201.030795][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 201.199436][ T4045] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.218432][ T4045] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.260234][ T4045] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.289105][ T4045] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.764236][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 201.840343][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 201.934675][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.619'. [ 202.265482][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 202.323403][ T8341] syzkaller1: entered promiscuous mode [ 202.328991][ T8341] syzkaller1: entered allmulticast mode [ 202.561485][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.632'. [ 202.973364][ T8400] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.257758][ T8416] pimreg: tun_chr_ioctl cmd 2147767506 [ 203.389091][ T8419] vxcan2: entered allmulticast mode [ 203.465932][ T8426] __nla_validate_parse: 3 callbacks suppressed [ 203.465950][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 203.597211][ T8432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.911930][ T8447] wg1 speed is unknown, defaulting to 1000 [ 203.965137][ T8450] netlink: 63 bytes leftover after parsing attributes in process `syz.2.652'. [ 204.072605][ T8450] pim6reg1: entered promiscuous mode [ 204.082499][ T8450] pim6reg1: entered allmulticast mode [ 204.164318][ T8462] tipc: Enabled bearer , priority 0 [ 204.189813][ T8463] tipc: Resetting bearer [ 204.260960][ T8461] tipc: Disabling bearer [ 204.299470][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 204.323460][ T8466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.657'. [ 204.458408][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.471272][ T8477] netlink: 42 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.555328][ T8486] netlink: 72 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.570640][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.581246][ T8486] netlink: 236 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.708285][ T8470] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 204.742337][ T8492] batadv0: mtu less than device minimum [ 204.749833][ T6179] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.758200][ T6179] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.786219][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 204.795253][ T6179] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.819839][ T6179] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.938777][ T8485] bridge_slave_1: left allmulticast mode [ 204.944909][ T8485] bridge_slave_1: left promiscuous mode [ 204.952441][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.967199][ T8485] bridge_slave_0: left allmulticast mode [ 204.973217][ T8485] bridge_slave_0: left promiscuous mode [ 204.979267][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.094061][ T6179] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.104362][ T6179] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.114695][ T6179] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.123527][ T6179] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.353663][ T8507] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 205.436571][ T24] IPVS: starting estimator thread 0... [ 205.550825][ T8517] IPVS: using max 36 ests per chain, 86400 per kthread [ 205.776908][ T8541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.891331][ T8546] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.976508][ T8546] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.045036][ T8561] netlink: 'syz.3.686': attribute type 10 has an invalid length. [ 206.078013][ T8546] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.386642][ T8546] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.673306][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 206.679932][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 206.685995][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 206.692458][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 206.712513][ T1100] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.804374][ T775] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.894279][ T1100] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.956936][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.304772][ T8641] x_tables: duplicate underflow at hook 1 [ 207.437155][ T8650] netlink: 'syz.2.705': attribute type 11 has an invalid length. [ 208.975234][ T8755] netlink: 'syz.4.720': attribute type 2 has an invalid length. [ 209.005211][ T8755] !: entered promiscuous mode [ 209.014003][ T8755] __nla_validate_parse: 9 callbacks suppressed [ 209.020625][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.720'. [ 209.114296][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 209.130396][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 209.288185][ T8771] batman_adv: batadv0: Adding interface: dummy0 [ 209.296643][ T8771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.342057][ T8771] batman_adv: batadv0: Interface activated: dummy0 [ 209.365901][ T8776] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 209.449020][ T8785] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 209.468637][ T8779] wg1 speed is unknown, defaulting to 1000 [ 209.507429][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 209.909588][ T8808] dvmrp0: entered allmulticast mode [ 210.040716][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 210.060995][ T8813] wg1 speed is unknown, defaulting to 1000 [ 210.129862][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.734'. [ 210.142563][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.734'. [ 210.179111][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 210.192955][ T8816] nbd: couldn't find device at index 0 [ 210.571318][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 210.663424][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 210.810440][ T8843] batadv1: entered promiscuous mode [ 211.373390][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.381171][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.458770][ T8833] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.566859][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.582775][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.656825][ T8849] wg1 speed is unknown, defaulting to 1000 [ 211.683097][ T8868] smc: net device hsr0 applied user defined pnetid SYZ2 [ 211.693242][ T8693] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.704345][ T8873] smc: net device hsr0 erased user defined pnetid SYZ2 [ 211.787312][ T8693] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.830146][ T8693] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.839101][ T8693] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.027024][ T8890] C: renamed from team_slave_0 [ 212.033803][ T8893] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 212.044995][ T8890] netlink: 'syz.0.754': attribute type 8 has an invalid length. [ 212.053358][ T8890] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.074163][ T8891] netlink: 'syz.0.754': attribute type 8 has an invalid length. [ 212.082947][ T8891] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.152318][ T8897] wg1 speed is unknown, defaulting to 1000 [ 212.420606][ T8918] veth4: entered allmulticast mode [ 212.740962][ T8937] : entered promiscuous mode [ 212.755870][ T8937] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 212.804396][ T8937] bond2: entered promiscuous mode [ 212.810623][ T8937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.848281][ T8942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.870553][ T8942] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 212.899842][ T8942] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 212.928694][ T8942] bond2: (slave gre1): Opening slave failed [ 213.003411][ T8946] netlink: 'syz.4.769': attribute type 6 has an invalid length. [ 213.016113][ T8944] wg1 speed is unknown, defaulting to 1000 [ 213.318513][ T8954] netlink: zone id is out of range [ 213.328608][ T8954] netlink: zone id is out of range [ 213.338219][ T8954] netlink: zone id is out of range [ 213.354078][ T8954] netlink: zone id is out of range [ 213.405555][ T8954] netlink: zone id is out of range [ 213.435574][ T8954] netlink: zone id is out of range [ 213.443258][ T8956] bridge0: port 1(macsec1) entered blocking state [ 213.454374][ T8954] netlink: zone id is out of range [ 213.459580][ T8954] netlink: zone id is out of range [ 213.486611][ T8956] bridge0: port 1(macsec1) entered disabled state [ 213.500169][ T8956] macsec1: entered allmulticast mode [ 213.510177][ T8956] bridge0: entered allmulticast mode [ 213.520851][ T8956] macsec1: left allmulticast mode [ 213.535268][ T8956] bridge0: left allmulticast mode [ 213.658443][ T8962] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 214.139881][ T8988] __nla_validate_parse: 7 callbacks suppressed [ 214.139897][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 214.378410][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 214.455860][ T9001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.782'. [ 214.468241][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 214.510392][ T9007] wg1 speed is unknown, defaulting to 1000 [ 214.544941][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.609875][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.631037][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.874918][ T9012] infiniband syz2: set down [ 214.879779][ T9012] infiniband syz2: added ip6_vti0 [ 214.891152][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.957030][ T9012] RDS/IB: syz2: added [ 214.968132][ T9012] smc: adding ib device syz2 with port count 1 [ 214.974773][ T9012] smc: ib device syz2 port 1 has no pnetid [ 214.983095][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.995424][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.450066][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.483705][ T903] IPVS: starting estimator thread 0... [ 215.515225][ T9040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 215.523067][ T9043] netlink: 76 bytes leftover after parsing attributes in process `syz.4.793'. [ 215.593162][ T9043] netlink: 76 bytes leftover after parsing attributes in process `syz.4.793'. [ 215.610427][ T9042] IPVS: using max 36 ests per chain, 86400 per kthread [ 215.619079][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 215.852017][ T9049] team0 (unregistering): Port device team_slave_0 removed [ 215.873718][ T9049] team0 (unregistering): Port device team_slave_1 removed [ 215.906546][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.922167][ T9064] tipc: Started in network mode [ 215.928375][ T9064] tipc: Node identity , cluster identity 4711 [ 215.940442][ T9064] tipc: Failed to obtain node identity [ 215.945959][ T9064] tipc: Enabling of bearer rejected, failed to enable media [ 215.989902][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 216.010141][ T9064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.798'. [ 216.019317][ T9064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.798'. [ 216.120221][ T9068] syzkaller0: entered promiscuous mode [ 216.125848][ T9068] syzkaller0: entered allmulticast mode [ 216.154378][ T9068] tipc: Enabled bearer , priority 0 [ 216.162637][ T9066] tipc: Resetting bearer [ 216.201431][ T9066] tipc: Disabling bearer [ 216.333585][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.752651][ T9108] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 216.864930][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.470314][ T9138] netlink: 'syz.2.821': attribute type 8 has an invalid length. [ 217.565407][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.015183][ T9012] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.347739][ T9154] wg1 speed is unknown, defaulting to 1000 [ 218.532612][ T9176] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 218.575164][ T9180] FAULT_INJECTION: forcing a failure. [ 218.575164][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 218.588291][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.2.832 Not tainted syzkaller #0 PREEMPT(full) [ 218.588315][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.588324][ T9180] Call Trace: [ 218.588332][ T9180] [ 218.588341][ T9180] dump_stack_lvl+0x189/0x250 [ 218.588365][ T9180] ? __pfx____ratelimit+0x10/0x10 [ 218.588383][ T9180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.588403][ T9180] ? __pfx__printk+0x10/0x10 [ 218.588427][ T9180] ? __lock_acquire+0x6b6/0x2cf0 [ 218.588455][ T9180] should_fail_ex+0x414/0x560 [ 218.588485][ T9180] should_failslab+0xa8/0x100 [ 218.588507][ T9180] kmem_cache_alloc_noprof+0x88/0x710 [ 218.588530][ T9180] ? __netlink_lookup+0xbd/0x8a0 [ 218.588551][ T9180] ? skb_clone+0x212/0x3a0 [ 218.588576][ T9180] skb_clone+0x212/0x3a0 [ 218.588600][ T9180] __netlink_deliver_tap+0x404/0x850 [ 218.588634][ T9180] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.588656][ T9180] netlink_deliver_tap+0x19c/0x1b0 [ 218.588678][ T9180] netlink_unicast+0x7fa/0x9e0 [ 218.588707][ T9180] ? __pfx_netlink_unicast+0x10/0x10 [ 218.588728][ T9180] ? netlink_sendmsg+0x642/0xb30 [ 218.588746][ T9180] ? skb_put+0x11b/0x210 [ 218.588768][ T9180] netlink_sendmsg+0x805/0xb30 [ 218.588799][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.588824][ T9180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.588847][ T9180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.588863][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.588885][ T9180] __sock_sendmsg+0x21c/0x270 [ 218.588912][ T9180] ____sys_sendmsg+0x505/0x820 [ 218.588938][ T9180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.588968][ T9180] ? import_iovec+0x74/0xa0 [ 218.588992][ T9180] ___sys_sendmsg+0x21f/0x2a0 [ 218.589014][ T9180] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.589042][ T9180] ? rcu_read_lock_any_held+0xb3/0x120 [ 218.589091][ T9180] ? __fget_files+0x2a/0x420 [ 218.589111][ T9180] ? __fget_files+0x3a0/0x420 [ 218.589146][ T9180] __x64_sys_sendmsg+0x19b/0x260 [ 218.589169][ T9180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.589199][ T9180] ? __pfx_ksys_write+0x10/0x10 [ 218.589220][ T9180] ? do_syscall_64+0xbe/0xf80 [ 218.589247][ T9180] do_syscall_64+0xfa/0xf80 [ 218.589266][ T9180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.589283][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 218.589304][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.589321][ T9180] RIP: 0033:0x7f5f04d8f749 [ 218.589336][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.589350][ T9180] RSP: 002b:00007f5f05d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.589368][ T9180] RAX: ffffffffffffffda RBX: 00007f5f04fe5fa0 RCX: 00007f5f04d8f749 [ 218.589380][ T9180] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 218.589392][ T9180] RBP: 00007f5f05d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 218.589402][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.589412][ T9180] R13: 00007f5f04fe6038 R14: 00007f5f04fe5fa0 R15: 00007ffcb2057a48 [ 218.589443][ T9180] [ 219.188132][ T9196] wg1 speed is unknown, defaulting to 1000 [ 219.239958][ T9190] __nla_validate_parse: 4 callbacks suppressed [ 219.239976][ T9190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.835'. [ 219.352104][ T9196] ip6_vti0 speed is unknown, defaulting to 1000 [ 219.398245][ T9198] wg1 speed is unknown, defaulting to 1000 [ 219.699284][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 219.742078][ T9225] net_ratelimit: 46 callbacks suppressed [ 219.742097][ T9225] openvswitch: netlink: Tunnel attr 253 out of range max 16 [ 219.864422][ T9235] geneve2: entered promiscuous mode [ 219.882407][ T8688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.926800][ T8688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.931568][ T9198] ip6_vti0 speed is unknown, defaulting to 1000 [ 219.965653][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 219.975510][ T8688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.010522][ T8688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.110973][ T9249] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 220.122940][ T9249] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.220739][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 220.356592][ T9256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.420039][ T9258] netlink: 108 bytes leftover after parsing attributes in process `syz.3.851'. [ 220.439945][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.851'. [ 220.450394][ T9258] tipc: Invalid UDP bearer configuration [ 220.453655][ T9258] tipc: Enabling of bearer rejected, failed to enable media [ 220.499979][ T9240] wg1 speed is unknown, defaulting to 1000 [ 220.608126][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 220.610470][ T9240] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.617536][ T9262] netlink: 'syz.0.853': attribute type 7 has an invalid length. [ 220.658454][ T9262] netlink: 'syz.0.853': attribute type 8 has an invalid length. [ 220.668402][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 220.679171][ T9264] Bluetooth: MGMT ver 1.23 [ 221.190426][ T9272] gre0: entered promiscuous mode [ 221.195891][ T9272] gre0: entered allmulticast mode [ 221.435875][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 221.680866][ T9285] wg1 speed is unknown, defaulting to 1000 [ 221.808427][ T9285] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.956476][ T9291] wg1 speed is unknown, defaulting to 1000 [ 221.968279][ T9300] tipc: Enabled bearer , priority 0 [ 222.006141][ T9293] tipc: Resetting bearer [ 223.750870][ T9293] tipc: Disabling bearer [ 223.774249][ T9291] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.785828][ T9] tipc: Node number set to 1332720633 [ 223.939367][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 224.298392][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 224.519378][ T9363] netlink: 'syz.4.876': attribute type 13 has an invalid length. [ 224.672310][ T9359] wg1 speed is unknown, defaulting to 1000 [ 224.694079][ T9359] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.850369][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.880'. [ 226.142177][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 226.212661][ T9436] IPv6: sit1: Disabled Multicast RS [ 226.222897][ T9437] netlink: 'syz.0.895': attribute type 30 has an invalid length. [ 226.244380][ T9438] geneve2: entered promiscuous mode [ 226.249631][ T9438] geneve2: entered allmulticast mode [ 226.261621][ T24] IPVS: starting estimator thread 0... [ 226.261666][ T9431] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.292053][ T9442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.894'. [ 226.310990][ T8688] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.330289][ T8688] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.338660][ T8688] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.354256][ T8688] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.379336][ T9432] wg1 speed is unknown, defaulting to 1000 [ 226.387699][ T9432] ip6_vti0 speed is unknown, defaulting to 1000 [ 226.389869][ T9441] IPVS: using max 27 ests per chain, 64800 per kthread [ 226.421264][ T9449] netlink: 324 bytes leftover after parsing attributes in process `syz.1.900'. [ 226.441041][ T9449] netlink: 48 bytes leftover after parsing attributes in process `syz.1.900'. [ 226.776162][ T9467] netlink: 144 bytes leftover after parsing attributes in process `syz.1.904'. [ 226.803773][ T9467] netlink: 7 bytes leftover after parsing attributes in process `syz.1.904'. [ 226.871659][ T9464] wg1 speed is unknown, defaulting to 1000 [ 226.886141][ T9464] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.157586][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 227.191901][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 227.216725][ T9488] netlink: 'syz.4.911': attribute type 2 has an invalid length. [ 227.620793][ T9514] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 227.801955][ T9517] gretap1: entered allmulticast mode [ 227.810515][ T9517] bond5: (slave gretap1): making interface the new active one [ 227.820466][ T9517] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 228.111215][ T9528] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 228.127017][ T9530] wg1 speed is unknown, defaulting to 1000 [ 228.157810][ T9530] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.367671][ T9532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.419322][ T9535] netlink: 'syz.2.922': attribute type 15 has an invalid length. [ 228.444804][ T9534] netlink: 'syz.2.922': attribute type 15 has an invalid length. [ 228.475069][ T9534] netlink: 'syz.2.922': attribute type 15 has an invalid length. [ 228.493228][ T9538] 0{X: renamed from gretap0 (while UP) [ 228.502916][ T9538] 0{X: entered allmulticast mode [ 228.508788][ T9538] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 228.625244][ T9544] wg1 speed is unknown, defaulting to 1000 [ 228.683101][ T9544] ip6_vti0 speed is unknown, defaulting to 1000 [ 229.422307][ T9563] wg1 speed is unknown, defaulting to 1000 [ 229.481223][ T9563] ip6_vti0 speed is unknown, defaulting to 1000 [ 229.489931][ T9566] wg1 speed is unknown, defaulting to 1000 [ 229.891030][ T9566] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.159445][ T9584] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 230.442960][ T9583] gretap1: entered allmulticast mode [ 230.480937][ T9583] bond2: (slave gretap1): making interface the new active one [ 230.489435][ T9583] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 230.941610][ T9593] sctp: [Deprecated]: syz.1.935 (pid 9593) Use of int in maxseg socket option. [ 230.941610][ T9593] Use struct sctp_assoc_value instead [ 231.053455][ T9595] __nla_validate_parse: 11 callbacks suppressed [ 231.053473][ T9595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.935'. [ 231.082307][ T9595] unsupported nlmsg_type 40 [ 231.298878][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 231.325628][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 231.358525][ T9599] netlink: 'syz.2.937': attribute type 20 has an invalid length. [ 231.426407][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 231.439806][ T8685] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.439813][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 231.463335][ T9599] netlink: 'syz.2.937': attribute type 20 has an invalid length. [ 231.473301][ T8685] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.493995][ T8685] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.521114][ T8685] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.767453][ T9623] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 231.878928][ T9630] tipc: Started in network mode [ 231.884135][ T9630] tipc: Node identity 86d6c9f581b5, cluster identity 4711 [ 231.909864][ T9630] tipc: Enabled bearer , priority 0 [ 231.978022][ T9634] syzkaller0: entered promiscuous mode [ 231.988015][ T9634] syzkaller0: entered allmulticast mode [ 232.038453][ T9630] tipc: Resetting bearer [ 232.052151][ T9624] tipc: Resetting bearer [ 232.072928][ T9624] tipc: Disabling bearer [ 232.446011][ T9670] netlink: 'syz.2.960': attribute type 74 has an invalid length. [ 232.498449][ T9672] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 232.552629][ T9672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.574129][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 232.591191][ T9674] bond3: (slave gretap2): making interface the new active one [ 232.602630][ T9674] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 232.614673][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 232.625161][ T9676] netlink: 620 bytes leftover after parsing attributes in process `syz.4.962'. [ 232.665274][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 232.679113][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 232.745321][ T9684] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 232.765531][ T9684] bond0: entered promiscuous mode [ 232.770664][ T9684] bond_slave_0: entered promiscuous mode [ 232.776513][ T9684] bond_slave_1: entered promiscuous mode [ 232.782619][ T9684] team0: entered promiscuous mode [ 232.787720][ T9684] team_slave_0: entered promiscuous mode [ 232.793798][ T9684] team_slave_1: entered promiscuous mode [ 232.800213][ T9684] bridge0: port 4(bond0) entered blocking state [ 232.809726][ T9684] bridge0: port 4(bond0) entered disabled state [ 232.816212][ T9684] bond0: entered allmulticast mode [ 232.821691][ T9684] bond_slave_0: entered allmulticast mode [ 232.827432][ T9684] bond_slave_1: entered allmulticast mode [ 232.833405][ T9684] team0: entered allmulticast mode [ 232.838532][ T9684] team_slave_0: entered allmulticast mode [ 232.844527][ T9684] team_slave_1: entered allmulticast mode [ 232.852846][ T9684] bridge0: port 4(bond0) entered blocking state [ 232.859257][ T9684] bridge0: port 4(bond0) entered forwarding state [ 233.032821][ T5847] block nbd1: Receive control failed (result -32) [ 233.177463][ T9703] bond5: option arp_validate: invalid value (18446744073491447809) [ 233.191109][ T9703] bond5 (unregistering): Released all slaves [ 233.548868][ T9714] netlink: 'syz.2.974': attribute type 16 has an invalid length. [ 233.556904][ T9714] netlink: 'syz.2.974': attribute type 3 has an invalid length. [ 233.587389][ T9719] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 233.597415][ T9719] Cannot find set identified by id 3 to match [ 234.327702][ T9754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.468423][ T9759] wg1 speed is unknown, defaulting to 1000 [ 234.481931][ T9768] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 234.525024][ T9759] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.972246][ T9792] gretap0: entered promiscuous mode [ 234.983812][ T9792] gretap0: left promiscuous mode [ 235.117407][ T9797] 8021q: VLANs not supported on vxcan0 [ 235.474568][ T9812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.629467][ T9819] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.645886][ T9820] validate_nla: 1 callbacks suppressed [ 235.645904][ T9820] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 235.668020][ T9820] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.677009][ T9820] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 235.694490][ T9820] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 235.865653][ T9811] infiniband !yz!: set down [ 235.872638][ T9832] netlink: 'syz.1.1010': attribute type 2 has an invalid length. [ 235.881416][ T9811] infiniband !yz!: added team_slave_0 [ 235.886224][ T9832] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 235.916837][ T9811] RDS/IB: !yz!: added [ 235.921022][ T9832] IPVS: set_ctl: invalid protocol: 185 100.1.1.0:20004 [ 235.921337][ T9811] smc: adding ib device !yz! with port count 1 [ 235.928056][ T49] IPVS: starting estimator thread 0... [ 235.934225][ T9811] smc: ib device !yz! port 1 has no pnetid [ 236.049804][ T9839] IPVS: using max 28 ests per chain, 67200 per kthread [ 236.202795][ T9849] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 236.533764][ T9865] __nla_validate_parse: 14 callbacks suppressed [ 236.533782][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 236.872225][ T9878] macvtap1: entered promiscuous mode [ 236.877851][ T9878] batadv0: entered promiscuous mode [ 236.885454][ T9878] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 236.981287][ T9880] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 236.989209][ T9880] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 237.019817][ T9880] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1020'. [ 237.106925][ T9882] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 237.117535][ T9882] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 237.130061][ T9882] netlink: 'syz.4.1021': attribute type 9 has an invalid length. [ 237.138222][ T9882] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1021'. [ 237.148828][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 237.837128][ T9915] tipc: Enabled bearer , priority 0 [ 237.848368][ T9915] syzkaller0: entered promiscuous mode [ 237.868418][ T9915] syzkaller0: entered allmulticast mode [ 237.882154][ T9915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 237.935553][ T9915] tipc: Resetting bearer [ 237.948909][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 237.965916][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 237.981470][ T9911] tipc: Resetting bearer [ 238.015281][ T9911] tipc: Disabling bearer [ 238.143800][ T9929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.174029][ T9929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1036'. [ 238.489027][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 238.672020][ T9951] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 238.732523][ T9953] netlink: 4316 bytes leftover after parsing attributes in process `syz.2.1044'. [ 238.971848][ T9968] wg1 speed is unknown, defaulting to 1000 [ 238.978789][ T9968] ip6_vti0 speed is unknown, defaulting to 1000 [ 239.024903][ T9976] syzkaller1: entered promiscuous mode [ 239.037834][ T9976] syzkaller1: entered allmulticast mode [ 239.178538][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 239.531618][ T9998] macvlan0: entered promiscuous mode [ 239.537173][ T9998] macvlan0: entered allmulticast mode [ 239.569769][ T9998] veth1_vlan: entered allmulticast mode [ 239.854767][T10016] bond3: (slave bridge3): making interface the new active one [ 239.864780][T10016] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 239.959490][T10019] raw_sendmsg: syz.3.1060 forgot to set AF_INET. Fix it! [ 240.694258][T10051] syzkaller0: entered promiscuous mode [ 240.701280][T10051] syzkaller0: entered allmulticast mode [ 241.012160][T10078] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.025036][T10078] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 241.036066][T10078] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 241.610238][T10110] ip_vti0: entered allmulticast mode [ 241.758591][T10118] tipc: Enabled bearer , priority 0 [ 241.784320][T10118] syzkaller0: entered promiscuous mode [ 241.817539][T10118] syzkaller0: entered allmulticast mode [ 241.884901][T10128] __nla_validate_parse: 5 callbacks suppressed [ 241.884918][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 241.902348][T10118] tipc: Resetting bearer [ 241.922869][T10128] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 241.937705][T10116] tipc: Resetting bearer [ 241.972280][T10116] tipc: Disabling bearer [ 242.060154][T10130] validate_nla: 3 callbacks suppressed [ 242.060171][T10130] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 242.076608][T10130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1081'. [ 242.147098][T10136] wg1 speed is unknown, defaulting to 1000 [ 242.185375][T10136] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.153344][T10188] wg1 speed is unknown, defaulting to 1000 [ 243.194407][T10193] 0{X: left allmulticast mode [ 243.220931][T10193] erspan0: left allmulticast mode [ 243.238253][T10193] bridge0: port 3(batadv_slave_1) entered blocking state [ 243.245542][T10193] bridge0: port 3(batadv_slave_1) entered listening state [ 243.253041][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.260249][T10193] bridge0: port 2(bridge_slave_1) entered listening state [ 243.267688][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.275068][T10193] bridge0: port 1(bridge_slave_0) entered listening state [ 243.287912][T10193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.304561][T10188] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.512183][T10202] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 243.596937][T10202] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.548411][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 244.817671][T10236] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1105'. [ 244.855485][T10246] x_tables: duplicate underflow at hook 1 [ 244.862543][T10236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.894338][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'. [ 244.909101][T10243] syzkaller0: entered promiscuous mode [ 244.953400][T10243] syzkaller0: entered allmulticast mode [ 244.992583][T10236] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 245.004936][T10236] syzkaller1: linktype set to 768 [ 245.194923][T10258] netlink: 'syz.4.1109': attribute type 13 has an invalid length. [ 245.218384][T10256] wg1 speed is unknown, defaulting to 1000 [ 245.229264][T10258] netlink: 'syz.4.1109': attribute type 17 has an invalid length. [ 245.240518][T10256] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.338609][T10258] ip_vti0: left allmulticast mode [ 245.451895][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.493680][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.545775][T10258] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.579843][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.619070][T10258] batman_adv: batadv0: Interface activated: dummy0 [ 245.629888][T10258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.693844][T10264] wg1 speed is unknown, defaulting to 1000 [ 245.703145][T10289] batadv0: mtu less than device minimum [ 245.767313][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 245.802326][T10264] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.951294][T10294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1119'. [ 246.212419][T10303] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 246.229478][T10301] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 246.264024][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 246.320139][T10303] bond4: entered promiscuous mode [ 246.325656][T10303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.337822][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 246.350270][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'. [ 246.414759][T10311] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 247.469343][T10325] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.563538][T10353] tipc: Enabled bearer , priority 0 [ 247.585550][T10356] syzkaller0: entered promiscuous mode [ 247.594727][T10356] syzkaller0: entered allmulticast mode [ 247.602160][T10347] macsec0: entered promiscuous mode [ 247.681631][T10343] tipc: Resetting bearer [ 247.940382][T10340] tipc: Resetting bearer [ 247.966946][T10363] __nla_validate_parse: 2 callbacks suppressed [ 247.966964][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 248.000605][T10340] tipc: Disabling bearer [ 248.145998][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1136'. [ 248.267981][T10372] Bluetooth: MGMT ver 1.23 [ 248.292844][T10372] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.462229][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 248.471674][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 248.481915][T10388] netlink: 'syz.4.1142': attribute type 15 has an invalid length. [ 248.694729][T10400] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 248.897504][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 248.928464][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 248.942064][T10414] bridge0: port 4(bond0) entered disabled state [ 248.949022][T10414] bridge0: port 3(batadv0) entered disabled state [ 248.955711][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.963328][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.995171][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 249.239505][T10424] wg1 speed is unknown, defaulting to 1000 [ 249.253541][T10424] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.266031][T10437] tipc: Enabled bearer , priority 0 [ 249.290827][T10438] tipc: Enabling of bearer rejected, already enabled [ 249.300906][T10433] syzkaller0: entered allmulticast mode [ 249.344240][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1155'. [ 249.408420][T10430] tipc: Disabling bearer [ 249.425127][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 249.690101][T10453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1160'. [ 249.971698][T10470] wg1 speed is unknown, defaulting to 1000 [ 250.033654][ T903] IPVS: starting estimator thread 0... [ 250.056573][T10474] tipc: Enabled bearer , priority 0 [ 250.067264][T10474] syzkaller0: entered promiscuous mode [ 250.073297][T10474] syzkaller0: entered allmulticast mode [ 250.084499][T10470] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.140024][T10475] IPVS: using max 30 ests per chain, 72000 per kthread [ 250.171286][T10474] tipc: Resetting bearer [ 250.305837][T10473] tipc: Resetting bearer [ 250.392409][T10473] tipc: Disabling bearer [ 250.448054][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 250.704142][T10496] netlink: 'syz.2.1173': attribute type 3 has an invalid length. [ 250.759976][T10497] IPv6: sit1: Disabled Multicast RS [ 251.059799][T10509] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 251.357237][T10517] gretap1: entered allmulticast mode [ 251.381615][T10522] nftables ruleset with unbound chain [ 251.388951][T10517] bond5: (slave gretap1): making interface the new active one [ 251.405483][T10517] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 251.866694][T10543] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 252.185379][T10558] bond6: option min_links: invalid value (18446744073709551612) [ 252.202902][T10558] bond6: option min_links: allowed values 0 - 2147483647 [ 252.213496][T10558] bond6 (unregistering): Released all slaves [ 252.450214][T10568] IPVS: length: 35 != 37219324536 [ 252.469218][T10569] netlink: 'syz.4.1190': attribute type 30 has an invalid length. [ 252.526862][T10569] netlink: 'syz.4.1190': attribute type 30 has an invalid length. [ 252.527403][ T4045] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.538970][T10573] syz.3.1191 uses old SIOCAX25GETINFO [ 252.565580][ T4045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.584621][ T4045] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.622563][ T4045] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.796283][T10585] xt_hashlimit: max too large, truncated to 1048576 [ 252.871858][T10581] wg1 speed is unknown, defaulting to 1000 [ 252.890434][T10581] ip6_vti0 speed is unknown, defaulting to 1000 [ 253.130865][T10596] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 253.277705][T10602] gretap1: entered allmulticast mode [ 253.333221][T10609] __nla_validate_parse: 13 callbacks suppressed [ 253.333238][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 253.343560][T10602] bond3: (slave gretap1): making interface the new active one [ 253.357217][T10602] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 273.711507][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 273.719499][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 273.726879][ C0] bridge0: port 3(batadv_slave_1) entered learning state [ 303.789967][ C0] bridge0: port 3(batadv_slave_1) entered forwarding state [ 303.797212][ C0] bridge0: topology change detected, propagating [ 303.803857][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.811090][ C0] bridge0: topology change detected, propagating [ 303.817518][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.824714][ C0] bridge0: topology change detected, propagating [ 373.905220][T10652] pim6reg: entered allmulticast mode [ 373.914741][T10654] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1211'. [ 373.925654][T10654] nbd: couldn't find a device at index 0 [ 373.931558][T10652] pim6reg: left allmulticast mode [ 374.052659][T10659] syzkaller1: entered promiscuous mode [ 374.056436][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 374.058171][T10659] syzkaller1: entered allmulticast mode [ 374.078847][T10652] veth1_vlan: left allmulticast mode [ 374.145312][ T8692] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.160951][ T8692] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.185284][ T8692] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.209276][ T8692] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.380532][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 374.400068][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 374.462018][T10672] netlink: 'syz.4.1217': attribute type 29 has an invalid length. [ 374.488949][T10672] netlink: 'syz.4.1217': attribute type 29 has an invalid length. [ 374.503521][T10672] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1217'. [ 374.716425][T10683] wg1 speed is unknown, defaulting to 1000 [ 374.743138][T10683] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.894069][T10688] batadv1: entered promiscuous mode [ 375.378710][T10687] batadv1: entered promiscuous mode [ 375.634573][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 375.661131][T10694] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 375.867854][T10700] x_tables: duplicate underflow at hook 2 [ 376.092525][T10713] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 376.176264][T10713] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.198159][T10715] bond6: (slave ip6gretap1): making interface the new active one [ 376.223071][T10715] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 376.291966][T10713] veth5: entered promiscuous mode [ 376.312723][T10713] bond6: (slave veth5): Enslaving as an active interface with a down link [ 376.325050][T10715] erspan0: entered allmulticast mode [ 376.348220][T10715] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 376.459774][T10713] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.703474][T10718] bond4: option tlb_dynamic_lb: invalid value (5) [ 376.731489][T10718] bond4 (unregistering): Released all slaves [ 376.828230][T10719] syzkaller1: entered promiscuous mode [ 376.840300][T10719] syzkaller1: entered allmulticast mode [ 376.889899][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 377.168199][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 377.168207][T10736] netlink: 'syz.4.1232': attribute type 1 has an invalid length. [ 377.202228][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 377.224074][T10736] bond4: entered promiscuous mode [ 377.229247][T10736] bond4: entered allmulticast mode [ 377.235127][T10736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.342662][T10736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.353543][T10736] bond5: entered promiscuous mode [ 377.368643][T10736] bond5: entered allmulticast mode [ 377.384925][T10736] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 377.904184][T10779] netlink: 'syz.0.1244': attribute type 23 has an invalid length. [ 377.970986][T10788] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 378.021623][T10781] wg1 speed is unknown, defaulting to 1000 [ 378.029120][T10781] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.064785][T10791] gretap3: entered allmulticast mode [ 378.131826][T10799] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 378.326385][T10794] wg1 speed is unknown, defaulting to 1000 [ 378.522451][T10797] wg1 speed is unknown, defaulting to 1000 [ 378.595132][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 378.623641][T10794] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.642510][T10816] wg1 speed is unknown, defaulting to 1000 [ 378.706319][T10822] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 379.098446][T10797] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.436818][T10848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.614476][T10849] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1257'. [ 379.703732][T10848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.862327][T10848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.902020][T10816] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.997778][T10848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.026858][T10868] No such timeout policy "syz0" [ 380.186218][ T8697] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.234227][ T8697] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.291773][ T8686] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.330998][ T8686] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.413140][T10880] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 380.641413][T10886] nbd2: detected capacity change from 0 to 127 [ 380.650930][ T5847] block nbd2: Receive control failed (result -32) [ 381.295463][T10911] veth1_macvtap: entered promiscuous mode [ 381.302474][T10911] macsec0: left promiscuous mode [ 381.307542][T10911] veth1_macvtap: left promiscuous mode [ 381.485260][T10915] bridge0: entered promiscuous mode [ 381.494820][T10915] macsec1: entered promiscuous mode [ 381.563634][T10919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.571262][T10919] IPv6: NLM_F_CREATE should be set when creating new route [ 381.578546][T10919] IPv6: NLM_F_CREATE should be set when creating new route [ 381.585801][T10919] IPv6: NLM_F_CREATE should be set when creating new route [ 381.616654][T10919] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 381.671549][T10918] wg1 speed is unknown, defaulting to 1000 [ 381.703373][T10918] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.961382][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.570489][T10936] wg1 speed is unknown, defaulting to 1000 [ 382.639448][T10936] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.075755][T10955] syzkaller1: entered promiscuous mode [ 383.108854][T10955] syzkaller1: entered allmulticast mode [ 383.261764][T10958] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 383.340471][T10962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1286'. [ 383.356838][T10963] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1286'. [ 383.409769][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 383.470312][T10962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1286'. [ 383.486005][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 383.786364][T10970] wg1 speed is unknown, defaulting to 1000 [ 383.835348][T10970] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.370951][T10972] wg1 speed is unknown, defaulting to 1000 [ 384.521964][T10972] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.522320][T10977] netlink: 'syz.0.1288': attribute type 6 has an invalid length. [ 384.908106][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 387.181825][T11006] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1295'. [ 387.267642][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'. [ 387.267733][T11011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1299'. [ 387.345146][T11014] siw: device registration error -23 [ 387.486231][T11018] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 387.496122][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'. [ 387.883041][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 387.925616][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 387.943630][T11034] bond0: entered promiscuous mode [ 387.959156][T11034] bond_slave_0: entered promiscuous mode [ 387.972259][T11034] bond_slave_1: entered promiscuous mode [ 387.980428][T11034] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.989070][T11034] bond0: left promiscuous mode [ 387.994128][T11034] bond_slave_0: left promiscuous mode [ 388.023628][T11034] bond_slave_1: left promiscuous mode [ 388.203372][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 388.215317][T11047] netem: change failed [ 388.410031][T11056] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 388.418717][T11055] hsr0: entered promiscuous mode [ 388.440957][T11055] macsec3: entered promiscuous mode [ 388.688154][T11067] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1316'. [ 388.727293][T11069] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 388.802117][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1320'. [ 388.925937][T11073] wg1 speed is unknown, defaulting to 1000 [ 388.933787][T11073] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.068741][T11077] wg1 speed is unknown, defaulting to 1000 [ 389.140937][T11076] wg1 speed is unknown, defaulting to 1000 [ 389.527536][T11077] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.601117][T11094] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 389.839510][T11098] gretap3: entered allmulticast mode [ 389.918475][T11098] bond6: (slave gretap3): making interface the new active one [ 389.968226][T11098] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 390.111620][T11076] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.542629][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 390.546292][T11118] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1330'. [ 390.611086][T11118] netlink: 'syz.2.1330': attribute type 7 has an invalid length. [ 390.619036][T11118] netlink: 'syz.2.1330': attribute type 8 has an invalid length. [ 390.722100][T11121] SET target dimension over the limit! [ 391.258578][T11130] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1332'. [ 391.320221][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 391.363696][T11131] openvswitch: netlink: Flow actions attr not present in new flow. [ 391.390832][T11130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1332'. [ 391.626027][T11133] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1333'. [ 392.014047][T11145] netlink: 'syz.2.1336': attribute type 9 has an invalid length. [ 392.036718][T11145] netlink: 'syz.2.1336': attribute type 11 has an invalid length. [ 392.046399][T11145] netlink: 'syz.2.1336': attribute type 12 has an invalid length. [ 392.057114][T11145] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1336'. [ 392.069388][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 392.146540][T11149] netlink: 'syz.2.1337': attribute type 3 has an invalid length. [ 392.154711][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 392.165620][T11149] netlink: 'syz.2.1337': attribute type 31 has an invalid length. [ 392.183760][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 392.195149][T11142] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 393.128295][T11176] bond8: Removing last ns target with arp_interval on [ 393.660706][T11211] bridge0: port 5(macvtap1) entered blocking state [ 393.683227][T11211] bridge0: port 5(macvtap1) entered disabled state [ 393.690061][T11211] macvtap1: entered allmulticast mode [ 393.699753][T11211] bridge0: entered allmulticast mode [ 393.717284][T11211] macvtap1: left allmulticast mode [ 393.729863][T11211] bridge0: left allmulticast mode [ 394.033711][T11224] wg1 speed is unknown, defaulting to 1000 [ 394.056605][T11224] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.724231][T11253] hsr0: left promiscuous mode [ 394.791837][T11262] validate_nla: 1 callbacks suppressed [ 394.791857][T11262] netlink: 'syz.4.1362': attribute type 3 has an invalid length. [ 395.684811][T11286] nbd: socks must be embedded in a SOCK_ITEM attr [ 395.864143][T11294] syzkaller0: entered promiscuous mode [ 395.881097][T11294] syzkaller0: entered allmulticast mode [ 396.570302][T11307] __nla_validate_parse: 7 callbacks suppressed [ 396.570320][T11307] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1374'. [ 397.110103][T11329] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.442246][T11350] sctp: [Deprecated]: syz.3.1382 (pid 11350) Use of int in max_burst socket option. [ 397.442246][T11350] Use struct sctp_assoc_value instead [ 397.474817][T11341] syzkaller1: entered promiscuous mode [ 397.486078][T11341] syzkaller1: entered allmulticast mode [ 397.505709][T11350] sctp: [Deprecated]: syz.3.1382 (pid 11350) Use of int in max_burst socket option. [ 397.505709][T11350] Use struct sctp_assoc_value instead [ 397.823501][T11362] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1384'. [ 398.001439][T11371] netlink: 'syz.4.1386': attribute type 11 has an invalid length. [ 398.022688][T11371] netlink: 'syz.4.1386': attribute type 11 has an invalid length. [ 398.040773][T11371] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1386'. [ 398.296941][T11391] IPVS: ip_vs_add_dest(): server weight less than zero [ 398.434388][T11387] veth7: entered promiscuous mode [ 398.464597][T11403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1391'. [ 398.527958][T11402] wg1 speed is unknown, defaulting to 1000 [ 398.572303][T11402] ip6_vti0 speed is unknown, defaulting to 1000 [ 398.586675][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 399.612439][T11454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1400'. [ 399.677552][T11457] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 400.094450][T11461] wg1 speed is unknown, defaulting to 1000 [ 400.159316][T11461] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.501750][T11477] sctp: [Deprecated]: syz.2.1403 (pid 11477) Use of int in max_burst socket option. [ 400.501750][T11477] Use struct sctp_assoc_value instead [ 400.682254][T11483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1406'. [ 400.942925][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 401.627696][T11508] netlink: 'syz.2.1411': attribute type 4 has an invalid length. [ 401.635717][T11508] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1411'. [ 401.664986][T11506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1410'. [ 401.723424][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 402.053925][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 403.020981][T11555] wg1 speed is unknown, defaulting to 1000 [ 403.055072][T11555] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.263792][T11561] bond8: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 403.541454][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 404.442701][T11574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1424'. [ 404.581886][T11605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.852642][T11629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 404.905629][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 404.955586][T11629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 405.207717][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 405.236515][T11637] gre0: entered promiscuous mode [ 405.243741][T11637] gre0: entered allmulticast mode [ 405.488229][T11647] netlink: 'syz.2.1436': attribute type 15 has an invalid length. [ 405.500376][T11647] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 405.588304][T11649] x_tables: duplicate underflow at hook 1 [ 405.703595][T11660] netlink: 'syz.1.1439': attribute type 11 has an invalid length. [ 406.049894][T11679] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 406.761911][T11721] __nla_validate_parse: 7 callbacks suppressed [ 406.761928][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 406.812909][T11727] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 406.933946][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.971585][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.156276][T11718] netlink: 'syz.2.1453': attribute type 3 has an invalid length. [ 407.231496][T11733] netlink: 'syz.1.1454': attribute type 4 has an invalid length. [ 407.320857][ T8685] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.338774][ T8685] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.357247][ T8685] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 407.381515][ T8685] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.424461][ T8685] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.439770][ T8685] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 407.479550][ T8685] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.545720][ T8685] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.583293][ T8685] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 407.611517][T11755] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 407.645523][ T8685] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.689935][ T8685] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.714118][ T8685] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 407.911402][T11778] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 407.939164][T11780] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 408.014317][T11775] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.576139][T11783] netlink: 'syz.1.1463': attribute type 13 has an invalid length. [ 408.702549][T11775] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.782824][T11775] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.840539][T11806] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1468'. [ 408.905484][T11775] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.103610][ T8696] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.177327][ T6036] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.260230][ T6036] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.316139][ T8696] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.411504][T11838] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1475'. [ 409.444989][T11842] wg1 speed is unknown, defaulting to 1000 [ 409.484779][T11842] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.513810][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 409.838928][T11867] netlink: 'syz.2.1479': attribute type 5 has an invalid length. [ 410.293853][T11875] wg1 speed is unknown, defaulting to 1000 [ 410.323184][T11875] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.115294][T11900] bridge0: port 3(batadv_slave_1) entered disabled state [ 411.122647][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.129966][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.443643][T11900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.610012][T11900] bond1: left promiscuous mode [ 411.626637][T11900] veth3: left promiscuous mode [ 411.637166][T11900] geneve2: left promiscuous mode [ 411.646114][T11900] geneve3: left promiscuous mode [ 411.661355][T11900] gretap1: left allmulticast mode [ 411.670398][T11900] veth7: left promiscuous mode [ 411.725252][ T8696] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.770141][ T8696] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.784732][ T8696] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.860824][ T8696] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.873415][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 412.122078][T11937] netlink: 'syz.1.1487': attribute type 30 has an invalid length. [ 412.304096][T11936] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1487'. [ 413.174443][T11965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1490'. [ 413.204689][T11970] netlink: 'syz.1.1492': attribute type 11 has an invalid length. [ 413.222728][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 413.250423][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 413.272525][T11977] x_tables: unsorted entry at hook 2 [ 413.476391][T11968] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1491'. [ 413.639041][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 413.690774][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 413.965406][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1499'. [ 430.243568][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.252800][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.261464][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.269350][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.278290][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.360574][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 430.370641][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 430.378540][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 430.386512][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 430.394221][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 430.540690][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.550088][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.558340][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.566927][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.574641][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.610398][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 430.619470][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 430.627445][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 430.635680][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 430.643503][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.570294][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 431.579305][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 431.587271][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 431.595273][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 431.603043][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 432.349836][ T5847] Bluetooth: hci6: command tx timeout [ 432.429831][ T5847] Bluetooth: hci7: command tx timeout [ 432.589735][ T5847] Bluetooth: hci5: command tx timeout [ 432.669859][ T5847] Bluetooth: hci8: command tx timeout [ 433.629749][ T5847] Bluetooth: hci9: command tx timeout [ 434.429836][ T5847] Bluetooth: hci6: command tx timeout [ 434.509877][ T5847] Bluetooth: hci7: command tx timeout [ 434.669740][ T5847] Bluetooth: hci5: command tx timeout [ 434.749810][ T5847] Bluetooth: hci8: command tx timeout [ 435.709718][ T5847] Bluetooth: hci9: command tx timeout [ 436.509853][ T5847] Bluetooth: hci6: command tx timeout [ 436.589785][ T5847] Bluetooth: hci7: command tx timeout [ 436.749856][ T5847] Bluetooth: hci5: command tx timeout [ 436.829851][ T5847] Bluetooth: hci8: command tx timeout [ 437.789866][ T5847] Bluetooth: hci9: command tx timeout [ 438.589779][ T5847] Bluetooth: hci6: command tx timeout [ 438.669866][ T5847] Bluetooth: hci7: command tx timeout [ 438.829765][ T5847] Bluetooth: hci5: command tx timeout [ 438.909885][ T5847] Bluetooth: hci8: command tx timeout [ 439.869934][ T5847] Bluetooth: hci9: command tx timeout [ 490.720557][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 490.740127][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 490.748373][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 490.757971][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 490.765760][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 490.951763][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 490.961208][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 490.969199][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 490.977472][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 490.985753][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 491.040481][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 491.050768][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 491.058815][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 491.067020][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 491.074977][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 491.240581][ T5847] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 491.251504][ T5847] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 491.260541][ T5847] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 491.268573][ T5847] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 491.276523][ T5847] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 492.100599][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 492.112786][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 492.120891][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 492.128857][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 492.137019][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 492.829828][ T5836] Bluetooth: hci10: command tx timeout [ 493.069971][ T5836] Bluetooth: hci11: command tx timeout [ 493.150038][ T5836] Bluetooth: hci12: command tx timeout [ 493.309799][ T5836] Bluetooth: hci13: command tx timeout [ 494.189836][ T5836] Bluetooth: hci14: command tx timeout [ 494.909918][ T5836] Bluetooth: hci10: command tx timeout [ 495.149847][ T5836] Bluetooth: hci11: command tx timeout [ 495.229809][ T5836] Bluetooth: hci12: command tx timeout [ 495.389781][ T5836] Bluetooth: hci13: command tx timeout [ 496.269853][ T5836] Bluetooth: hci14: command tx timeout [ 496.989823][ T5836] Bluetooth: hci10: command tx timeout [ 497.229800][ T5836] Bluetooth: hci11: command tx timeout [ 497.309797][ T5836] Bluetooth: hci12: command tx timeout [ 497.469784][ T5836] Bluetooth: hci13: command tx timeout [ 498.349810][ T5836] Bluetooth: hci14: command tx timeout [ 499.069790][ T5836] Bluetooth: hci10: command tx timeout [ 499.309837][ T5836] Bluetooth: hci11: command tx timeout [ 499.390541][ T5836] Bluetooth: hci12: command tx timeout [ 499.549758][ T5836] Bluetooth: hci13: command tx timeout [ 500.429811][ T5836] Bluetooth: hci14: command tx timeout [ 519.999570][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 520.006206][ C0] rcu: 0-....: (1 GPs behind) idle=59dc/1/0x4000000000000000 softirq=57741/57742 fqs=5246 [ 520.017116][ C0] rcu: hardirqs softirqs csw/system [ 520.023513][ C0] rcu: number: 6042 0 0 [ 520.029904][ C0] rcu: cputime: 140 52358 5 ==> 52510(ms) [ 520.037686][ C0] rcu: (t=10502 jiffies g=45925 q=5395 ncpus=2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 520.044029][ C0] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 520.044054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.044065][ C0] RIP: 0010:taprio_dequeue_from_txq+0x174/0x980 [ 520.044093][ C0] Code: 83 c7 38 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 48 8b 6c 24 28 74 08 4c 89 ff e8 f8 ee b5 f8 4d 8b 1f 48 89 df 2e 2e 2e 41 ff d3 <48> 85 c0 0f 84 0c 03 00 00 49 89 c7 4c 89 e3 4c 8d a0 90 00 00 00 [ 520.044102][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00000246 [ 520.044111][ C0] RAX: 0000000000000000 RBX: ffff888078c8f800 RCX: dffffc0000000000 [ 520.044118][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff888078c8f800 [ 520.044124][ C0] RBP: ffff888079edb000 R08: ffffffff897172b6 R09: ffffffff8df41a20 [ 520.044130][ C0] R10: 0000000000000001 R11: ffffffff8964b5e0 R12: dffffc0000000000 [ 520.044136][ C0] R13: ffff8880328e4000 R14: ffff888078c8f800 R15: ffffffff8f82a838 [ 520.044143][ C0] FS: 000055556702c500(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 520.044151][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.044156][ C0] CR2: 00007fae1b9b42f8 CR3: 00000000640a6000 CR4: 00000000003526f0 [ 520.044165][ C0] Call Trace: [ 520.044170][ C0] [ 520.044180][ C0] taprio_dequeue_tc_priority+0x1ac/0x750 [ 520.044198][ C0] ? taprio_dequeue+0x26/0x550 [ 520.044210][ C0] taprio_dequeue+0x186/0x550 [ 520.044221][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 520.044237][ C0] __qdisc_run+0x23f/0x1510 [ 520.044257][ C0] qdisc_run+0xc7/0x300 [ 520.044272][ C0] net_tx_action+0x7ac/0x9f0 [ 520.044282][ C0] ? net_tx_action+0x617/0x9f0 [ 520.044289][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 520.044300][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 520.044316][ C0] handle_softirqs+0x27d/0x850 [ 520.044328][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 520.044341][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 520.044355][ C0] __irq_exit_rcu+0xca/0x1f0 [ 520.044364][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 520.044378][ C0] irq_exit_rcu+0x9/0x30 [ 520.044385][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 520.044395][ C0] [ 520.044398][ C0] [ 520.044402][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.044412][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x25/0x120 [ 520.044427][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 8b 0d 90 cc d6 10 b0 01 f7 c1 00 00 f0 00 0f 85 d5 00 00 00 83 3d d3 3d da 0d 00 <0f> 84 c8 00 00 00 65 ff 05 6e cc d6 10 e8 59 fa b3 09 89 c3 83 f8 [ 520.044434][ C0] RSP: 0018:ffffc90003fdfc40 EFLAGS: 00000202 [ 520.044441][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 520.044447][ C0] RDX: ffff88802e7e3d00 RSI: ffffffff8bc08340 RDI: ffffffff8bc08300 [ 520.044453][ C0] RBP: ffffc90003fdfcf0 R08: ffffffff81b986b6 R09: ffffffff8df41a20 [ 520.044460][ C0] R10: dffffc0000000000 R11: ffffed1006596385 R12: 1ffff11005cfca13 [ 520.044466][ C0] R13: ffff888030b66800 R14: 1ffff920007fbf8c R15: dffffc0000000000 [ 520.044476][ C0] ? cgroup_sk_alloc+0x26/0x3c0 [ 520.044491][ C0] rcu_read_lock_sched_held+0x74/0x100 [ 520.044503][ C0] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 520.044515][ C0] ? cgroup_sk_alloc+0x26/0x3c0 [ 520.044525][ C0] ? cgroup_sk_alloc+0x26/0x3c0 [ 520.044534][ C0] cgroup_sk_alloc+0x166/0x3c0 [ 520.044545][ C0] sk_alloc+0x25b/0x390 [ 520.044557][ C0] inet_create+0x7a0/0x1000 [ 520.044570][ C0] ? inet_create+0x9c/0x1000 [ 520.044584][ C0] __sock_create+0x4b3/0x9d0 [ 520.044601][ C0] __sys_socket+0xd7/0x1b0 [ 520.044612][ C0] __x64_sys_socket+0x7a/0x90 [ 520.044620][ C0] do_syscall_64+0xfa/0xf80 [ 520.044632][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.044640][ C0] ? clear_bhb_loop+0x60/0xb0 [ 520.044651][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.044660][ C0] RIP: 0033:0x7fae1b791667 [ 520.044669][ C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.044676][ C0] RSP: 002b:00007ffe1dd0d268 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 520.044685][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fae1b791667 [ 520.044690][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 520.044696][ C0] RBP: 00007ffe1dd0d99c R08: 00007ffe1dd0d2bc R09: 00007ffe1dd0d6a7 [ 520.044702][ C0] R10: 00007ffe1dd0d310 R11: 0000000000000202 R12: 00007fae1b9b7e60 [ 520.044708][ C0] R13: 00000000000927c0 R14: 0000000000065180 R15: 00007fae1b9ba020 [ 520.044722][ C0] [ 521.486559][ C0] sched: DL replenish lagged too much