last executing test programs: 1m59.276759857s ago: executing program 0 (id=1814): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000009000000070000000000000700000000000000000000000d04000000040000000000000e0400000000000000060000000000000c02000000000000002e002e2e"], 0x0, 0x55}, 0x28) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) 1m59.155388205s ago: executing program 0 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000004000000040000000900000000000200", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0010000000000000001c00000000000000b100"/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x134a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000b00)=ANY=[@ANYRES64=r5, @ANYRES8=r4, @ANYRESHEX=r5, @ANYBLOB="cf2e0e267eab5bd299b4985104178f3e8804886c1d500d1f477980d52571c3c27d3a440d777539f774ae577bd44e34932a7fa72c40170a445a617883ca9be60d632f6187b98d4dd2fb89ac021a35566d702da7cbe5b9edc664acdf4a7e7a1fc12bcfb8c2cb0bbce266b7462a46634f4831fc5e999d56eb6b7af11e1b7bca14de8f6130", @ANYRES32, @ANYRESDEC=r4, @ANYBLOB="b72edd7ce43dd8d4e8ee65c603e4b9ac7ce646fb4670b159b74bb24c8440281d07b78315525db7fb0809c66098a4f2399231047679ea6dddeca433f62a2d7642cc8abd053dcc3ed1ebb832faa5c419f2bd09427133817fc26de97aa59f9ca8c3b392984d7718fbbf7f7b16f21c4a0737572b62bd96d123d24c6f290e43ced676464230dc937909f028728cd919213de08cbbfeaa483de033fa4f596201d5103f2c473143673344367ddebdfc6ae2801989e062fcd7025a354af720ed61ebfe13d94969776045e107a83eee26b885e9ccc2682a1883c1b66a3d1629b0d6e1f61a8f1d9d8e3a98e782"], 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(r2, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m57.195485214s ago: executing program 0 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x65}, @generic="f867fb79"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="620000002f00000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000a00)=@newchain={0x40, 0x64, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x6, 0x4}, {0x2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x88, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1d}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg$kcm(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000b80)=""/199, 0xc7}], 0x2}, 0x22) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1840, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x15}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x600}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x128c, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @from_mac, @initial, {0x5, 0xb5c}}, @a_msdu=[{@broadcast, @broadcast, 0x3a, "4524caa24bff0daa2cbf939244778441b769c2d8f9b3f7e464ed8be42405253515cada3b17657b1c72128a405e452d71d16da5ae220acc2e70af"}, {@broadcast, @device_a, 0x1000, "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"}, {@device_a, @broadcast, 0x29, "2698cde6906c9990f09f1c4b0b25111155cb7305e751547a0acd269841573cf6d004cdff2f2c68e4ae"}, {@broadcast, @device_b, 0xc1, "eca3b82b161f53342f754dbf0480ae6d334059d30f120412014e29c1ffd4134e8d8bfbb20bde5d275e7863e5aad4eb5d4da5301d3834d86d7881a880b6fd563c0104993bc06b38fd38ebcf83830270e019a7e425ef2e784216e1814448a1247de76b7bb4fd6a227d2f6b50eb9be5f21d6721803bda4150e0023e49ae9f69d6c03a84bd944b08a09f96e0314d356838e2c3ce6378fa4115f57084999075ba35f8899cfeaa71bbcf4de625c8ae6c9c4b8791532c486841a558530f0d1a5427e74621"}, {@broadcast, @device_b, 0x5, "60cde1884a"}, {@broadcast, @broadcast, 0xed, "2d9ef572306e6f920caf938430be0ba2475883112bafc2284062378f0edb64457f9311b95dcb2a18b949f439c2c0d882f667ce1f526964eaae21cc911e71718c03170912a0c80cfd0146f8121bd94723400719de7539554bfe8c4aaa68a8cf3e53d1aab93d932cafd84a97f65a0bc86e4310b8ec4fdde60b22e263b69bb40f33218633f1c37e7a18d0d98da1b0a3ab5811e05fa1eebd5d9015889fad624c704380391ea620f3b0e859e3f923262b81e995d314746a80ba90b3b014131462c86c7c1d58c22e8da6d80ff213522bc4962d63df6a0908a3fb525fd35ec4aa258d0c7e372a98a3d98f6a1d6d855105"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x38}, @device_a, @device_b}}, @NL80211_ATTR_FRAME={0x76, 0x33, @ctrl_frame=@ba={{}, {0xce}, @device_a, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x9, {0xa, 0x3}, "aa0233b7ee1ced21"}, {0x0, 0x3, {0x2, 0x6a3}, "9c3f8ac8c49631d1"}, {0x0, 0x8, {0x3, 0x15f}, "24a4306a7049d9d5"}, {0x0, 0x3, {0xf, 0x7f}, "a5713037b148bf3f"}, {0x0, 0x1, {0x7, 0x8}, "9c5344f7adef6690"}, {0x0, 0xa, {0x2, 0xe}, "dafc3f3345fc0348"}, {0x0, 0x6, {0x6, 0x79b}, "39336711695164cd"}], {0x0, 0xb, {0x6, 0x7}, "88ce99824abaddd4"}}}}, @NL80211_ATTR_FRAME={0x4ee, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x17ee}, @broadcast, @random="f18b4e33365a", @broadcast, {0xd, 0x7}, "", @value={0x7, 0x0, 0x0, 0x0, 0x98}, @value=@ver_80211n={0x0, 0x40, 0x1, 0x2, 0x0, 0x3}}, @a_msdu=[{@device_a, @device_b, 0x80, "9d14e59b8ebec57e24a4433ae2d83fa408e818d638a8f8d8be74c8d0d89c919fec4a9b2a8c3b27ea356f0b5fe6ff2c5e6af03c4d17efe3afd2b1c9cdeb00af310a1347742db67119d33974a5d8a27bcba7a0f0aedf34f010343f270d6730218066f4ec874f29cdcce9a4caf5603c1b51f5af365ea2fae7964117f2cbc365abfb"}, {@device_a, @broadcast, 0x80, "f11b90ef2dcde9ec829030f72a73e434e8d9d7f3bc37d39f5b2633e31b1e9cea03c67884855339a8a1427544976b353326b96e64ef1d712abc56dfdbcf6573507e4c596c8d32a6d955886b0a63deb32c2f95c50c7ef8dc914cb1d68bba6b45a22e59f9122a9e3ccc7930ca122af5c82c775a87b8b112a0643492c3e815798cd1"}, {@broadcast, @device_a, 0xbf, "811bc6783f61eabb816aed933fc8c505ab3305fddcbb8be962a6301d1bf5fe337462537220b4237961c8e335c68cbc17a0b91187454ef2e612b29f1aa691a2551373cf1eb79e4ef73569ee2449c231c4b40a3e245754d6628471bf70d0309afc03bd3e393be3d1844d618eae710e3a521999b34f14fedeaf42f582472a51078af1c7cb32477fe0895cdf9a367ed571834d13998d1177d8b1d0e5156c9a21963204148bbcd76bfe9eda29f84560672b70d3ef8ced98f064aa274a438344905a"}, {@device_b, @device_b, 0xe3, "d0bd158b95a6eee611302755abc178a3dd9dda9456a16d813bb40eec26310425de24aa11c5eed3560b7fbdc617e27cffc7a4f65cbabd6bdeef8338c5ca3ae039e77e4ca0bcb9958cba6a620e90f2b6b08199495ca5c48ad431b527ed8d218d6421f8e376bc797b9d62c3c975e23dbf0478ac3bb6d853ac5ed5c114c0f272cca8d91cfbf420f3a9e22617e6db9383e7d9a19f55b23393c328b4a36e6674ff97e27ec8603cee39bd1ab7498ea463cddc59d0d8272e6caeda9db698a67e45b20098e0ad7eee1afc59e565f7fd02d058dcc87b64529227fd89960c4f510fe62825b51458b8"}, {@broadcast, @device_a, 0x19, "067cce61bd3f6b45ac3d3d5fea252952c512490cf566332ca7"}, {@device_b, @broadcast, 0x9, "ca442a1985a84ce198"}, {@device_a, @broadcast, 0xd3, "c29927df02a120552394adfb330e9504083bd6555a13a7cb23f9d1604b1207c63061d8d61d8404431a518a1e423ce88dc7eff192975de728e33c649d90c75a1c062f0a13d814d6ef4136cb0c39eda3ac3a58f1ba6af6c2a5e569b2d915f7849de1021baaf75bd5f4141e0a383442be66aca18023b85c7ac6d393d6003b9c04116dadc5eb373c1fa55daf4a5f18038a10339e8057677c697312a70494bf39544a9e9569db35ac47c219c5214f7a84fba18f359110634354bd1fffc387de2ea06400cd9b748bf79952164328fb8019b34ac891ec"}, {@broadcast, @device_b, 0x16, "c3f1674a0d692e1b9c3a1e20ea3617ca657b7ea48090"}, {@device_b, @device_a, 0x4c, "b4d7c3d44c9c258f198241a61c3de2908c116e7c20109a14accaba0eab922fa2345d5dd813a3a2362e3a0cabe646d5ed5043f07caad9cf38848d38b610a6a05a5a1e3684b075160ade78b732"}, {@device_a, @broadcast, 0x33, "74d728b7fdfdf020355aa552efc2f4161b44006a82b0b9d9a8a91382fa4ea7da2c6e78e3e8d7ea8e91fdc009498cb459272ab5"}]}}]}, 0x1840}, 0x1, 0x0, 0x0, 0x4840}, 0x50) 1m57.107835421s ago: executing program 0 (id=1837): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="81c7e24fa5dde3a573b05fbf8fcae40302742cd6a4a1be390c5f8f8a66a48d629b62377417e5f7eeaa413affc0e2f552373804a4e52a18e998a88061ce183f8d5fce26c8ecdb2e76e573e084a9e8a479", 0x0, 0x0, 0xa}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) socket$netlink(0x10, 0x3, 0x5) 1m56.789467079s ago: executing program 0 (id=1841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r1, &(0x7f0000003200)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}}}, 0x10) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd70000700", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040840) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5959}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x4) unshare(0x22020400) r9 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x100000000}, 0x18) pipe(&(0x7f0000000080)) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$inet(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}, 0x800) bpf$LINK_DETACH(0x22, 0x0, 0x0) 1m56.392375494s ago: executing program 0 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x4, {0x0, 0xf0}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x4, {0x0, 0xf0}}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) (async) 1m41.384853211s ago: executing program 32 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x4, {0x0, 0xf0}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x4, {0x0, 0xf0}}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) (async) 1m10.163366528s ago: executing program 1 (id=2358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) r1 = socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='\a', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}, 0xa}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x2}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, 0x0, 0x0) 1m9.924809103s ago: executing program 1 (id=2361): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@null, @remote, @rose, @bcast, @null, @netrom, @default, @null]}, &(0x7f0000000140)=0x48) connect$netrom(r1, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.227494743s ago: executing program 1 (id=2383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @timestamp, @window={0x3, 0xc2, 0x6}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @mss={0x2, 0xd8}, @mss={0x2, 0x7}, @window={0x3, 0x575, 0x10}, @window={0x3, 0x8, 0xc1c0}], 0xa) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0xc, 0x7100000}) socket$packet(0x11, 0x3, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x844) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r4, 0x0, 0x0) connect$rose(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 1m7.669177687s ago: executing program 4 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x1f}, 0x94) 1m7.585158875s ago: executing program 4 (id=2391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a0001002abd7000fbdbdf250a808000000000000000000008001c00", @ANYRES32=0x0, @ANYBLOB="0800190032"], 0x7a}}, 0x20000050) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @isdn={0x22, 0x10, 0xa, 0x7, 0xd}, @hci={0x1f, 0x3, 0x1}, @ethernet={0x6, @local}, 0x80, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='wlan0\x00', 0x1, 0x4, 0xec}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e0001ffff01000000ac1414bb000000000000"], 0x14) 1m7.369935674s ago: executing program 4 (id=2393): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x5}, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x7}, 0x80000002}], 0x4, 0x0, 0x0) 1m7.063381934s ago: executing program 4 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13b88a8", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r8, 0x25, 0x8, @void}, 0x10) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000180)={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m6.986983286s ago: executing program 1 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe000000008500000009000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1m6.843596345s ago: executing program 1 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005400000009e"], 0xdc}}, 0x13000000) 1m6.724447903s ago: executing program 4 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002100010028bd7000fddbdf250a101407040000021000000014000100fe88edff00000000000000f257550000000001140002002001000000000000000000000400c40000007eadbbb09cceb5d6e7bd0df4d56e5c0132419f22e74fcce31b166ee13fa53da7e4ed94b72df2f6f128f5a98b6b4f14660767b02587a802130f76f581bae10c18cfd8a6adc55fccd61d5b9ad09e12f70f04d76e726149e9c9c464733041bbeb42adb9c4c756ef20b900a9aa4ae64b0a2fe23710acd7b946610735f3c72f5ad507e65241674ed4172e47a9b5b66192eef0927768af68369fc810951d75a1a9c8dffc6264d40a028cae07f981cf2478c0c40046b70f6f0fcf72d296b729dea83b5e99881e13b84f6cd1fc644cfb"], 0x4c}}, 0x0) 1m6.641223119s ago: executing program 1 (id=2404): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r3, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) r5 = socket(0x8, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) connect$rose(0xffffffffffffffff, 0x0, 0x0) 1m5.887932483s ago: executing program 33 (id=2404): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r3, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) r5 = socket(0x8, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) connect$rose(0xffffffffffffffff, 0x0, 0x0) 1m5.873460509s ago: executing program 4 (id=2408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x3}, {0x10, 0xa}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000340)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000300)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x5}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050200000000"], 0x24}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80000) sendmmsg$alg(r12, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) 1m5.871252301s ago: executing program 34 (id=2408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x3}, {0x10, 0xa}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000340)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000300)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x5}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050200000000"], 0x24}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80000) sendmmsg$alg(r12, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) 6.269715119s ago: executing program 3 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000002000000000000000000ff110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, 0x0, 0x0, 0x41, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b70300000040000585000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0xe, 0x0, &(0x7f0000000040)="c674ed63e46033c470d8d400eb00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000840)={@multicast2, @multicast2, 0x0}, &(0x7f0000000880)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x5008000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r9, 0x200, 0x70bd2c, 0x1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008041}, 0x10) r12 = socket$kcm(0x2, 0xa, 0x2) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r13, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40001434}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0xb0, r14, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44840}, 0x20004090) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000002240)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}}, 0x42) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 6.104346154s ago: executing program 3 (id=2924): syz_emit_ethernet(0x9a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x0, 0x7e, "0e", "e034a1adfc6929d55435ff5295f59b63d23d44a939ed2ee9ace791e03ec52e8fd448c12acf6d46dd9e38652d508e5f1888ea46734cde4738ce6c7f85555c52ea854f9886b778584501187eabb416108a095fa62cdd24b8fc25cbc40c64eed0100c6a88bae9244a639b26e1199cda9690402a1be4d250ff25e36d40c0286ff1b00d"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0xf63, 0x8a9, 0x543, 0x551]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ef5, 0x400003a, 0x0, 0x2240, r0, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x205, 0x0, 0x4, 0xe}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r2, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @remote, 0x80, 0x7, 0x2, 0xffffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) 5.94724136s ago: executing program 3 (id=2926): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r2, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x201400, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f0000000240)=0x1c, 0x400) getsockopt$rose(r7, 0x104, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) close(0x3) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000002b00)={'syztnl1\x00', r4, 0x2f, 0xff, 0x0, 0x7, 0x4a, @loopback, @loopback={0x12}, 0x1, 0x8000, 0x38fc5865, 0x810001}}) 5.695793986s ago: executing program 3 (id=2928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.359512184s ago: executing program 3 (id=2933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x32600) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0xd, 0x6}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x0, 0x73, 0x9, 0x5, 0x7}]}]}, 0x13c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r0, 0x0) (async, rerun: 32) write$tcp_mem(r1, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) (rerun: 32) 5.293620336s ago: executing program 3 (id=2935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 2.467475884s ago: executing program 6 (id=2966): syz_emit_ethernet(0x12, &(0x7f0000000040)={@random="dbe79cbd044a", @random="11fd17979701", @void, {@llc={0x4, {@llc={0x42, 0x8e, '\a='}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r4, 0x0, 0x417}, 0x18) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e25, 0x0, 0x3, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@remote, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x601}, "32a53f8ff8ba915e", "c29a7b90ffee36e29bede0278e295c47c50bbd779b2998a9e363a4d2d0a8097b", "860c9097", "3839b55c7b9e30d1"}, 0x38) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000400)={0x6, 'veth0_macvtap\x00', {0x2}, 0x6}) 2.467180521s ago: executing program 7 (id=2967): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.400498528s ago: executing program 7 (id=2968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000000a, 0x3, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0xfffffff9, 0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_deladdr={0x44, 0x15, 0x4, 0x70bd2c, 0x25dfdbff, {0x2, 0x20, 0x4, 0xfd}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LABEL={0x14}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0019000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c0004800800014000000000"], 0x70}}, 0x4008000) 2.263313557s ago: executing program 6 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f, 0x8}, {0xf8, 0x8, 0x0, 0x3}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f, 0x8}, {0xf8, 0x8, 0x0, 0x3}]}, 0x10) 2.151623933s ago: executing program 5 (id=2970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x7e90, 0x1d) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3ff0000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (rerun: 64) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYRESHEX=r0], 0x40}}, 0x0) 2.147815576s ago: executing program 6 (id=2972): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa220180c20000006241000000000000000000119078000000000000000000004e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbf39cb307b3472eb9cdb042d2643fcbb2a110aca88b24967ee8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x53, 0x34, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x8800) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000001980)=""/4091, 0xffb}], 0x2}, 0x10}], 0x1, 0x10000, 0x0) 2.103109392s ago: executing program 7 (id=2973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.619560734s ago: executing program 5 (id=2974): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010400000000000000000a00000004000380300002802c00018014000300fc00000000000000000000000000002014000400fc000000000000000000000000005100"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x1}, {0x4, 0xb}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4044850) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESOCT=r2], 0x48}}, 0x4000800) sendmmsg$alg(r2, &(0x7f0000000000), 0x0, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000001c0)={0x6, 'ip6gre0\x00', {0x200}, 0x240}) 1.581286329s ago: executing program 2 (id=2975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x80}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x3e, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000128c0)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x25dfdc00, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r9, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 1.476369655s ago: executing program 5 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240000000000800054000000000080003400000009c08000640ab"], 0x9c}}, 0x0) 1.1715076s ago: executing program 5 (id=2977): syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x80000) 1.165942453s ago: executing program 7 (id=2978): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="d4070000000000bc61c4d637c6a4f8023a0d00000000000000b2a14c7d453fd557b8ad8376aabe7bb53735aec824b8e1c3b1940aca33ec568de9aca8cd7b3acfdc7d7b434c6161b0a93529f57e685d17d961e295a2ca75507bfad1f363a434668aa626291c1478c812d6e4adc7808126ea61efe12c0563"], 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x7, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xb2a1, 0x9f6}, {0x2, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x1, 0x2, 0x9, 0x7fffffff}, {0x6, 0x7fff, 0x9, 0xb}, {0x1000, 0x3, 0x2e4, 0x9}]}}]}}]}, 0xac}}, 0x24040084) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000020000010900010073797a31000000005400000003"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x14, 0x2, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0xb}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000340)={'syzkaller0\x00'}) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) sendto$inet(r7, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c1141ad", 0x6e, 0x6000c804, 0x0, 0x0) 1.141650901s ago: executing program 5 (id=2979): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.111040694s ago: executing program 6 (id=2980): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280050001000600000008000a000000000008000b00", @ANYRES32=r1], 0x4c}}, 0x28000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x44, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741"}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 827.148989ms ago: executing program 2 (id=2981): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000340)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7a}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 627.37126ms ago: executing program 2 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="df4800000000000000000c0000002c0003802800038069f460340800010002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x4, 0xffffffff, {{0x12, 0x4, 0x3, 0x6, 0x48, 0x68, 0x0, 0xc9, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0xbf, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010101, @local, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x18, 0x2, [{0x6, 0x12, "7f7e1469099be386c6f90b9889b7203d"}]}, @end, @generic={0x7, 0x6, "54ae583c"}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x71c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x450, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "eeac864e952c6d320510c9616dcd19d147ab1ca42a12281dc5237ccf8a48368c6f22"}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "e0fd5f2bcfdb7da02a9939c39daadf32b9179a8635e53b9469dea7bd79872a637f01d3ab68a4ee8ba11f7fe8f24e88c03c161e306fc7cea39d220c78303c5aed8ff7a8e76928103dcce7bed4d2d4a7f53bff187019ea59a9c810a7a2a8ca8e8c9352dba8909d8ef31a4eecaf75d1cf6411093e9414055f1f7b1e4c6ee623b1acf64c596ee235f5159feef23fac593d9e59859701199391971732bb15ae508eaaebe83bca4c6ff7e4d3deb4404f99fc9ff221c0e621d063380d28e48010417dcdd6cc038566a6495507cada08e6ebb37f1dbd0960a9ac44"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "958e2874a3f8de4f6aa28d194e38a900c9819c005d688719627bfddf41fe453ff5a3a447c72a57a7328786b944e0f6fc4a676646c62192f24ebbe6e3262ddbab819c8d3e16334dc0d1378723f5076c22c1c9436737692f6934f437dbedc65858257d28fc8e2bb66673be8478693fd1a9f3dd7afdc526f9473da4aae2e3"}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "92869c94eca061eff87e839599dff29d80613cca11040e32ab691030f91e5786413625e7e9e1f9a02b6c99e0d3f52d0e14f42fc37606e9f8178f2a4dd7b44a8352a9f0d4fc54853030bb16c2be729047f7306d4c8616781e09bcd2ffeb237807254c95e9defa96564e0627e9437b9e8aaaba3a78dff09d7d5c9be3088ef58f15eed5340a17f1f8c60f6e8113162839d0f3c00a093ba31a20d2d7a525107ecf80e257715c48174e7d89585cd5be2886a1e6823ecb500f8f2da0bb2d5cc2f470d3b502487078016b96a09a4a551edadc7550b50ca7a2a5f42534a9439d988ff3cf533198d7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "785db6fe9c002ea68ac5f70209cbbd775df0f6d4c4ddcf431ca789c1eab9cbfc2c0dd17a2735cbcd9f3cfd1cc443719e540ca56eff90b0522a51027f81de939d5f6795aeb78497c237e5ca1c"}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "99eb8644b5dfd664fc217eaa85826a1a09bf55fe4d40d85dbe8c4dfe2399d3d8fde91409926df66c48d0ba888a1163e0aaee3e1a12749b740e0df52895d604291daed4063d6c4fda9062cc93e99b86d74e9da88810f8cb832f64a5d325b82e8a56783387edff8617f4be0d1ec1a2a23e932cac505ca66dd96c173bf55c6de907a472996596f87bc3134776738e90bf63f21dbd5448ceb12cc8eaad02501949945b1244330d736d534467192cf42cbcb9b23a7880e57de13dd0e60e248a0a77cf04e88522ba728780c1416a70118499efe3458fabc0f671f7520a5e77"}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "b2af58c1d40b5ebfe607aba8088476da63376b9e1883aa28fcaadb21c816cd096d3cfc0002098ebdfaa8e0822db623d690302698cbed6e8333633c0b1fff06aa2044f6ccc46df69e7eea7f84d69de902f847b5fc7d2665662841c9c0364ac98be7de457e0e7b47033b043d8906c79f2497cc1ecd969cb144ac4fe5928b5bd3a223d9b9cb0f8d42a1f4ecca55267b106cf15191aad18503183715430e388b1c8ec3039e"}]}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "1a9129ce198fa018869d2d2364257684be87161a56bea0c126a6eee2795ba8d57739d7db6413104a9ca440c610bb9b4d84110c6be61e9cc128e93c1367236c257c2f3a7f29e8c44936259b7acb038619638bfc0d5171e1f83cb0893244ae19e59c771746cd36eec91df514edb5b97a0eac"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "41cde576bf262539f9f5fd8809b1c23037ed114249e860a6a54b515549d9bd1ba7e21795f31afa79c5"}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "ad4e4a3eedb22eae09c3953b1a42dfd197ac4fc046e099e2ce65ff592b03c23ab259465634251d68da72da01360f3b6077bb522214e18774"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "493f04ee5b3d722ba3cbd226cc90f953f0f39356e2c8e21f277f2d46a088da"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xada}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x71c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="df4800000000000000000c0000002c0003802800038069f460340800010002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x4, 0xffffffff, {{0x12, 0x4, 0x3, 0x6, 0x48, 0x68, 0x0, 0xc9, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0xbf, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010101, @local, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x18, 0x2, [{0x6, 0x12, "7f7e1469099be386c6f90b9889b7203d"}]}, @end, @generic={0x7, 0x6, "54ae583c"}]}}}}}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x71c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x450, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "eeac864e952c6d320510c9616dcd19d147ab1ca42a12281dc5237ccf8a48368c6f22"}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "e0fd5f2bcfdb7da02a9939c39daadf32b9179a8635e53b9469dea7bd79872a637f01d3ab68a4ee8ba11f7fe8f24e88c03c161e306fc7cea39d220c78303c5aed8ff7a8e76928103dcce7bed4d2d4a7f53bff187019ea59a9c810a7a2a8ca8e8c9352dba8909d8ef31a4eecaf75d1cf6411093e9414055f1f7b1e4c6ee623b1acf64c596ee235f5159feef23fac593d9e59859701199391971732bb15ae508eaaebe83bca4c6ff7e4d3deb4404f99fc9ff221c0e621d063380d28e48010417dcdd6cc038566a6495507cada08e6ebb37f1dbd0960a9ac44"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "958e2874a3f8de4f6aa28d194e38a900c9819c005d688719627bfddf41fe453ff5a3a447c72a57a7328786b944e0f6fc4a676646c62192f24ebbe6e3262ddbab819c8d3e16334dc0d1378723f5076c22c1c9436737692f6934f437dbedc65858257d28fc8e2bb66673be8478693fd1a9f3dd7afdc526f9473da4aae2e3"}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "92869c94eca061eff87e839599dff29d80613cca11040e32ab691030f91e5786413625e7e9e1f9a02b6c99e0d3f52d0e14f42fc37606e9f8178f2a4dd7b44a8352a9f0d4fc54853030bb16c2be729047f7306d4c8616781e09bcd2ffeb237807254c95e9defa96564e0627e9437b9e8aaaba3a78dff09d7d5c9be3088ef58f15eed5340a17f1f8c60f6e8113162839d0f3c00a093ba31a20d2d7a525107ecf80e257715c48174e7d89585cd5be2886a1e6823ecb500f8f2da0bb2d5cc2f470d3b502487078016b96a09a4a551edadc7550b50ca7a2a5f42534a9439d988ff3cf533198d7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "785db6fe9c002ea68ac5f70209cbbd775df0f6d4c4ddcf431ca789c1eab9cbfc2c0dd17a2735cbcd9f3cfd1cc443719e540ca56eff90b0522a51027f81de939d5f6795aeb78497c237e5ca1c"}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "99eb8644b5dfd664fc217eaa85826a1a09bf55fe4d40d85dbe8c4dfe2399d3d8fde91409926df66c48d0ba888a1163e0aaee3e1a12749b740e0df52895d604291daed4063d6c4fda9062cc93e99b86d74e9da88810f8cb832f64a5d325b82e8a56783387edff8617f4be0d1ec1a2a23e932cac505ca66dd96c173bf55c6de907a472996596f87bc3134776738e90bf63f21dbd5448ceb12cc8eaad02501949945b1244330d736d534467192cf42cbcb9b23a7880e57de13dd0e60e248a0a77cf04e88522ba728780c1416a70118499efe3458fabc0f671f7520a5e77"}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "b2af58c1d40b5ebfe607aba8088476da63376b9e1883aa28fcaadb21c816cd096d3cfc0002098ebdfaa8e0822db623d690302698cbed6e8333633c0b1fff06aa2044f6ccc46df69e7eea7f84d69de902f847b5fc7d2665662841c9c0364ac98be7de457e0e7b47033b043d8906c79f2497cc1ecd969cb144ac4fe5928b5bd3a223d9b9cb0f8d42a1f4ecca55267b106cf15191aad18503183715430e388b1c8ec3039e"}]}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "1a9129ce198fa018869d2d2364257684be87161a56bea0c126a6eee2795ba8d57739d7db6413104a9ca440c610bb9b4d84110c6be61e9cc128e93c1367236c257c2f3a7f29e8c44936259b7acb038619638bfc0d5171e1f83cb0893244ae19e59c771746cd36eec91df514edb5b97a0eac"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "41cde576bf262539f9f5fd8809b1c23037ed114249e860a6a54b515549d9bd1ba7e21795f31afa79c5"}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "ad4e4a3eedb22eae09c3953b1a42dfd197ac4fc046e099e2ce65ff592b03c23ab259465634251d68da72da01360f3b6077bb522214e18774"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "493f04ee5b3d722ba3cbd226cc90f953f0f39356e2c8e21f277f2d46a088da"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xada}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x71c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 625.495347ms ago: executing program 5 (id=2983): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x16, @val=@tcx}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000000000004"], 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000faffffff00000000ffff00001866000007000000000000000153233ea4cbc6256800000000de0000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0xbc, &(0x7f00000006c0)=""/188, 0x41000, 0x26, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x10, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x2, 0x4, 0x1, 0x1}, {0x2, 0x4, 0xb, 0xb}, {0x0, 0x5, 0x8, 0x8}, {0x4, 0x3, 0xf, 0x1}, {0x2, 0x1, 0x0, 0x4}, {0x2, 0x1, 0x0, 0xe}, {0x1, 0x2, 0x0, 0x8}, {0x8, 0x5, 0x3, 0x3}, {0x1, 0x4, 0x7, 0x7}, {0x1, 0x3, 0x8, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r1, r2, 0x4, r3}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) close(r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r11, 0x0, 0x0, 0x40, 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, 0x0, 0x41) syz_80211_inject_frame(0x0, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) 536.382348ms ago: executing program 2 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000050) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 401.339518ms ago: executing program 7 (id=2985): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x6020480) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x93) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) write(r3, &(0x7f0000000280)="4591", 0x2) socket$inet(0x2, 0x2, 0x1) recvmmsg(r2, 0x0, 0x0, 0x40, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4}, 0xe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x41448000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x7}, {0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r0, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) 208.84504ms ago: executing program 2 (id=2986): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8=r2, @ANYRES16=r2, @ANYRES8, @ANYBLOB="6e6563509cd752f5ab7999a7534a467a0d0da2ec56f5fb4c4de27f71132a9dfd5e2405bc86ba37b9544c8c69ae4e2c213120a1e010a948e9e979aafed551f131c318ae6f04d97fede5", @ANYBLOB="6a6732e708adaefa4678bfcc47748a81b0c4356d9de583ab4f69d215292cca4643c959a19188c07e415d93485e148e1448002a44acf6df66bd27"], 0x0, 0x28, 0x0, 0x1, 0x6}, 0x28) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES64=0x0, @ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdae3}, {0xfffffffffffffffe}, 0x0, 0x2000, 0x0, 0x1, 0x3, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}]}, &(0x7f0000000100)=0x10) r8 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000740)={r7, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x5, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 123.412845ms ago: executing program 6 (id=2987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@void, @val={0x1, 0x1, 0xf875, 0x9, 0x4, 0x50e9}, @eth={@link_local, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}], @llc={@llc={0x42, 0x7e, 's', "a7920643442d863add5d70c9cbeb595789a8faf85b2dc6ab3cec189867dec1054a50cf5693d711b7c34c05719ff197ee5a859e279bbe2052df742b135e0432febea65b91a139e450a052540c5ab501c49e18b20492ba432c3c2f7454c87b85834c7fcd60bc4b01f1b67a90d33f8be71a60ca8d76f762b39f80b0363b74de7e486135f97169c808b947cb3325eb9e00e14e0f6f9c73a8481ae9556079acd4653219f74d4c300079d7b846f13428045485c35c19638c0ab6ae0b446e6055a7166abb508e7f020507fde5aee035e7f0d6e59617395036b0a5fc6aa33b1577ed54e802cef9e32de50b035f988fffd1bd"}}}}}}}, 0x111) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0x10, 0xe}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4002) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004880}, 0x40040) (async) sendmsg$can_bcm(r3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x9, 0x8}, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x2c, 0x64, 0xf31, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xbb6c9a60018e59b7}, {0xfff3, 0xfff2}, {0xa, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r6, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 80.879329ms ago: executing program 2 (id=2988): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}]}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) listen(r1, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}]}) (async) 358.114µs ago: executing program 6 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x48040) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500160008000b40000000002c0004802800018008000100667764001c000280080002400000000d0800014000980016080003400000000a0900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4004, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x18, 0x6}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="8de0902fc9698416f237f35b125b9b2b5c0000004f51ba5c9ddf558548c6cc93c062846a857c2d8819df6cb58aec3738ecb9554b8ea02a97a25737d4b44c01c2229a8aa63a87f5106c062c0ed3564cc47f37873cc2d5b88b768586c93ab9a2ee912bb7d83bc0158b728777ca3385223231140c9ce598b2f9117fb34b0abe8bb5c90358fab127ce703e8811db18099f144ba33e43c747e44abdb1e8b1d2e6f1faa0acb4e6af00"/177, @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): er2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.330858][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.454179][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.478459][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.510778][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.655795][T13743] hsr_slave_0: entered promiscuous mode [ 276.673602][T13743] hsr_slave_1: entered promiscuous mode [ 276.690200][T13743] debugfs: 'hsr0' already exists in 'hsr' [ 276.735995][T13743] Cannot create hsr debugfs directory [ 276.851241][T13819] veth0_vlan: left allmulticast mode [ 276.881688][T13819] bond1: left promiscuous mode [ 276.888039][T13819] gretap1: left allmulticast mode [ 276.894816][T13819] bond4: left promiscuous mode [ 276.900000][T13819] batadv1: left promiscuous mode [ 276.919130][T13819] batadv1: left allmulticast mode [ 276.934714][T13819] macvlan2: left promiscuous mode [ 276.953852][T13819] macvtap1: left promiscuous mode [ 276.979713][T13819] macvtap1: left allmulticast mode [ 276.991677][T13819] bridge4: left allmulticast mode [ 277.016580][T13819] bond6: left promiscuous mode [ 277.021372][T13819] bond6: left allmulticast mode [ 277.042763][T13819] bond7: left promiscuous mode [ 277.053246][ T5864] Bluetooth: hci5: command tx timeout [ 277.081255][T13819] wireguard1: left promiscuous mode [ 277.140837][T13842] netlink: 'syz.1.2054': attribute type 30 has an invalid length. [ 277.171041][T13837] IPVS: Scheduler module ip_vs_ not found [ 277.521279][ T5864] block nbd1: Receive control failed (result -32) [ 277.634295][T13743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.743786][T13743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.794540][T13743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.836568][T13743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.997983][T13873] tipc: Enabled bearer , priority 0 [ 278.026950][T13873] syzkaller0: entered promiscuous mode [ 278.038422][T13884] netlink: 'syz.2.2069': attribute type 13 has an invalid length. [ 278.059398][T13873] syzkaller0: entered allmulticast mode [ 278.090405][T13885] nbd: socks must be embedded in a SOCK_ITEM attr [ 278.129385][T13884] netlink: 'syz.2.2069': attribute type 17 has an invalid length. [ 278.172303][T13884] tipc: Resetting bearer [ 278.187556][T13884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.205019][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.672415][T13743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.726851][T13872] tipc: Resetting bearer [ 278.789408][T13872] tipc: Disabling bearer [ 278.811442][T13866] netlink: 'syz.4.2064': attribute type 6 has an invalid length. [ 278.828368][T13743] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.861597][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.868819][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.932378][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.939650][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.133582][ T5864] Bluetooth: hci5: command tx timeout [ 279.214048][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.350487][T13743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.904090][T13932] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.927412][T13932] IPv6: NLM_F_REPLACE set, but no existing node found! [ 280.141097][T13743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.860117][T13743] veth0_vlan: entered promiscuous mode [ 280.885911][T13743] veth1_vlan: entered promiscuous mode [ 280.956427][T13743] veth0_macvtap: entered promiscuous mode [ 280.984401][T13743] veth1_macvtap: entered promiscuous mode [ 280.996341][T13963] netlink: 'syz.3.2084': attribute type 11 has an invalid length. [ 281.035334][T13743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.211524][T13743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.225491][ T5864] Bluetooth: hci5: command tx timeout [ 281.341817][ T1162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.372295][ T1162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.415919][ T1162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.480618][ T1162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.669255][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.682006][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.912922][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.928289][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.948883][T13977] netlink: 'syz.3.2087': attribute type 9 has an invalid length. [ 281.957145][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 282.175167][T13991] __nla_validate_parse: 4 callbacks suppressed [ 282.175185][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2025'. [ 282.586875][T13995] siw: device registration error -23 [ 282.616998][T14006] veth3: entered promiscuous mode [ 282.822435][T14023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2099'. [ 282.854504][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 283.087323][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2100'. [ 283.293705][ T5864] Bluetooth: hci5: command tx timeout [ 283.370014][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2104'. [ 283.478311][T14046] xt_HMARK: spi-set and port-set can't be combined [ 283.521305][T14050] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 283.888763][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 283.932068][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 283.948019][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 283.983629][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2112'. [ 284.069114][ T1162] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.079682][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 284.096909][ T1162] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.106540][ T1162] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.137919][ T1162] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.266419][T14078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.291823][T14078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.456706][T14078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.471673][T14078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.494644][T14089] !: left allmulticast mode [ 284.499506][T14089] bridge0: port 1(0!) entered disabled state [ 284.520250][T14089] bond11: (slave veth1): Releasing active interface [ 284.719133][T14078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.729954][T14078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.838454][T14089] tipc: Enabled bearer , priority 0 [ 284.849295][ T6023] syz2: Port: 1 Link DOWN [ 284.941686][T14078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.961411][T14078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.347974][ T802] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.373414][ T802] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.418694][ T802] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.442604][ T802] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.477729][ T802] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.506365][ T802] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.570038][ T802] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.593298][ T802] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.502267][T14144] tipc: Enabling of bearer rejected, failed to enable media [ 286.771020][T14158] pim6reg1: entered promiscuous mode [ 286.777290][T14158] pim6reg1: entered allmulticast mode [ 287.189742][T14191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.229109][T14194] __nla_validate_parse: 13 callbacks suppressed [ 287.229126][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 287.367621][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2147'. [ 287.529247][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 287.598151][T14215] netlink: 'syz.5.2151': attribute type 13 has an invalid length. [ 287.613391][T14215] netlink: 'syz.5.2151': attribute type 17 has an invalid length. [ 287.700084][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 287.756648][T14215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.820790][T14215] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2151'. [ 287.839605][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 287.880131][T14220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.951060][T14220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.376405][T14237] netlink: 'syz.2.2158': attribute type 4 has an invalid length. [ 288.417501][T14237] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2158'. [ 288.426855][T14237] nbd: must specify a device to reconfigure [ 288.510253][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 288.530663][T14240] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2159'. [ 288.539819][T14240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2159'. [ 288.590985][T14240] bridge0: left promiscuous mode [ 288.618822][T14240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.635921][T14240] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.661990][T14240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.927280][T14251] netlink: 'syz.3.2163': attribute type 9 has an invalid length. [ 289.265123][T14268] netlink: 'syz.1.2169': attribute type 2 has an invalid length. [ 289.302915][T14268] netlink: 'syz.1.2169': attribute type 2 has an invalid length. [ 289.347894][T14274] netlink: 'syz.4.2172': attribute type 5 has an invalid length. [ 289.546108][T14279] netlink: 'syz.3.2174': attribute type 2 has an invalid length. [ 290.244403][T14324] netlink: 'syz.5.2189': attribute type 1 has an invalid length. [ 290.415658][T14326] veth5: entered promiscuous mode [ 290.503958][T14324] erspan0: entered allmulticast mode [ 290.605815][T14333] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 290.791135][T14343] netlink: 'syz.1.2195': attribute type 4 has an invalid length. [ 291.108178][T14351] FAULT_INJECTION: forcing a failure. [ 291.108178][T14351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.153373][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.4.2198 Not tainted syzkaller #0 PREEMPT(full) [ 291.153395][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.153406][T14351] Call Trace: [ 291.153413][T14351] [ 291.153421][T14351] dump_stack_lvl+0x189/0x250 [ 291.153446][T14351] ? __pfx____ratelimit+0x10/0x10 [ 291.153465][T14351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.153484][T14351] ? __pfx__printk+0x10/0x10 [ 291.153521][T14351] should_fail_ex+0x414/0x560 [ 291.153548][T14351] _copy_to_user+0x31/0xb0 [ 291.153570][T14351] simple_read_from_buffer+0xe1/0x170 [ 291.153598][T14351] proc_fail_nth_read+0x1b3/0x220 [ 291.153621][T14351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.153643][T14351] ? rw_verify_area+0x2a6/0x4d0 [ 291.153661][T14351] ? __lock_acquire+0xab9/0xd20 [ 291.153687][T14351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.153708][T14351] vfs_read+0x1fd/0xa30 [ 291.153727][T14351] ? fdget_pos+0x247/0x320 [ 291.153747][T14351] ? __pfx___mutex_lock+0x10/0x10 [ 291.153766][T14351] ? __pfx_vfs_read+0x10/0x10 [ 291.153788][T14351] ? __fget_files+0x2a/0x420 [ 291.153809][T14351] ? __fget_files+0x3a0/0x420 [ 291.153823][T14351] ? __fget_files+0x2a/0x420 [ 291.153848][T14351] ksys_read+0x145/0x250 [ 291.153871][T14351] ? __pfx_ksys_read+0x10/0x10 [ 291.153889][T14351] ? rcu_is_watching+0x15/0xb0 [ 291.153912][T14351] ? do_syscall_64+0xbe/0x3b0 [ 291.153934][T14351] do_syscall_64+0xfa/0x3b0 [ 291.153950][T14351] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.153967][T14351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.153984][T14351] ? clear_bhb_loop+0x60/0xb0 [ 291.154005][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.154022][T14351] RIP: 0033:0x7f005478d5fc [ 291.154038][T14351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.154053][T14351] RSP: 002b:00007f00556ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.154071][T14351] RAX: ffffffffffffffda RBX: 00007f00549c5fa0 RCX: 00007f005478d5fc [ 291.154083][T14351] RDX: 000000000000000f RSI: 00007f00556ed0a0 RDI: 0000000000000003 [ 291.154094][T14351] RBP: 00007f00556ed090 R08: 0000000000000000 R09: 0000000000000000 [ 291.154105][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.154115][T14351] R13: 00007f00549c6038 R14: 00007f00549c5fa0 R15: 00007ffff92cb5b8 [ 291.154147][T14351] [ 291.530714][T14363] netlink: 'syz.1.2201': attribute type 1 has an invalid length. [ 291.676337][T14363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.798448][T14363] vlan3: entered allmulticast mode [ 291.812063][T14363] bond4: (slave vlan3): making interface the new active one [ 291.840888][T14363] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 292.416625][T14389] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 292.483446][T14394] __nla_validate_parse: 8 callbacks suppressed [ 292.483464][T14394] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2209'. [ 292.552435][T14389] bond4: (slave gretap2): making interface the new active one [ 292.563900][T14389] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 292.634604][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2210'. [ 292.636432][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2207'. [ 292.723900][T14389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.884058][T14415] sctp: [Deprecated]: syz.1.2212 (pid 14415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.884058][T14415] Use struct sctp_sack_info instead [ 293.188532][T14423] IPv6: addrconf: prefix option has invalid lifetime [ 293.419533][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2211'. [ 293.519633][T14410] netlink: 'syz.3.2211': attribute type 13 has an invalid length. [ 293.686915][T14440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2220'. [ 293.742550][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2219'. [ 293.818103][T14410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.088937][T14463] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2225'. [ 294.263168][T14463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 295.288076][T14503] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 295.325202][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 295.440974][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 295.569176][ T30] audit: type=1800 audit(1757048271.050:7): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2242" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2275 res=0 errno=0 [ 295.717336][T14531] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 295.725378][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 295.859637][T14543] validate_nla: 2 callbacks suppressed [ 295.859654][T14543] netlink: 'syz.2.2246': attribute type 5 has an invalid length. [ 296.007585][T14551] xt_limit: Overflow, try lower: 604147548/4200216962 [ 296.746095][T14562] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 297.002964][T14585] lo: entered allmulticast mode [ 297.045157][T14585] lo: left allmulticast mode [ 297.252115][T14601] FAULT_INJECTION: forcing a failure. [ 297.252115][T14601] name failslab, interval 1, probability 0, space 0, times 0 [ 297.293315][T14600] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 297.308465][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.2.2263 Not tainted syzkaller #0 PREEMPT(full) [ 297.308489][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.308500][T14601] Call Trace: [ 297.308508][T14601] [ 297.308515][T14601] dump_stack_lvl+0x189/0x250 [ 297.308540][T14601] ? __pfx____ratelimit+0x10/0x10 [ 297.308558][T14601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.308577][T14601] ? __pfx__printk+0x10/0x10 [ 297.308605][T14601] ? __pfx___might_resched+0x10/0x10 [ 297.308627][T14601] should_fail_ex+0x414/0x560 [ 297.308654][T14601] should_failslab+0xa8/0x100 [ 297.308678][T14601] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 297.308701][T14601] ? __get_vm_area_node+0x13f/0x300 [ 297.308728][T14601] __get_vm_area_node+0x13f/0x300 [ 297.308754][T14601] __vmalloc_node_range_noprof+0x301/0x12f0 [ 297.308777][T14601] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.308797][T14601] ? __lock_acquire+0xab9/0xd20 [ 297.308846][T14601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.308867][T14601] ? __might_fault+0xb0/0x130 [ 297.308889][T14601] ? _parse_integer_limit+0x1ae/0x1f0 [ 297.308918][T14601] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.308937][T14601] __vmalloc_noprof+0xb1/0xf0 [ 297.308958][T14601] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.308982][T14601] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.309008][T14601] bpf_prog_alloc+0x3c/0x1a0 [ 297.309032][T14601] bpf_prog_load+0x735/0x1930 [ 297.309071][T14601] ? __pfx_bpf_prog_load+0x10/0x10 [ 297.309116][T14601] ? bpf_lsm_bpf+0x9/0x20 [ 297.309134][T14601] ? security_bpf+0x7e/0x300 [ 297.309158][T14601] __sys_bpf+0x528/0x870 [ 297.309181][T14601] ? __pfx___sys_bpf+0x10/0x10 [ 297.309215][T14601] ? ksys_write+0x22a/0x250 [ 297.309238][T14601] ? __pfx_ksys_write+0x10/0x10 [ 297.309256][T14601] ? rcu_is_watching+0x15/0xb0 [ 297.309281][T14601] __x64_sys_bpf+0x7c/0x90 [ 297.309301][T14601] do_syscall_64+0xfa/0x3b0 [ 297.309318][T14601] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.309334][T14601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.309351][T14601] ? clear_bhb_loop+0x60/0xb0 [ 297.309372][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.309388][T14601] RIP: 0033:0x7f6b62f8ebe9 [ 297.309404][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.309419][T14601] RSP: 002b:00007f6b63ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.309438][T14601] RAX: ffffffffffffffda RBX: 00007f6b631c5fa0 RCX: 00007f6b62f8ebe9 [ 297.309450][T14601] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 297.309462][T14601] RBP: 00007f6b63ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.309473][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.309483][T14601] R13: 00007f6b631c6038 R14: 00007f6b631c5fa0 R15: 00007fff779d3e38 [ 297.309517][T14601] [ 297.311799][T14601] warn_alloc: 1 callbacks suppressed [ 297.311812][T14601] syz.2.2263: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 297.456145][T14607] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 297.550040][T14601] ,cpuset=/,mems_allowed=0-1 [ 297.641319][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.2.2263 Not tainted syzkaller #0 PREEMPT(full) [ 297.641343][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.641353][T14601] Call Trace: [ 297.641359][T14601] [ 297.641367][T14601] dump_stack_lvl+0x189/0x250 [ 297.641392][T14601] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 297.641415][T14601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.641434][T14601] ? __pfx__printk+0x10/0x10 [ 297.641456][T14601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 297.641475][T14601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 297.641502][T14601] warn_alloc+0x214/0x310 [ 297.641532][T14601] ? __pfx_warn_alloc+0x10/0x10 [ 297.641557][T14601] ? __get_vm_area_node+0x13f/0x300 [ 297.641583][T14601] ? __get_vm_area_node+0x2b5/0x300 [ 297.641611][T14601] __vmalloc_node_range_noprof+0x326/0x12f0 [ 297.641633][T14601] ? __lock_acquire+0xab9/0xd20 [ 297.641682][T14601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.641703][T14601] ? __might_fault+0xb0/0x130 [ 297.641726][T14601] ? _parse_integer_limit+0x1ae/0x1f0 [ 297.641755][T14601] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.641775][T14601] __vmalloc_noprof+0xb1/0xf0 [ 297.641795][T14601] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.641820][T14601] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 297.641846][T14601] bpf_prog_alloc+0x3c/0x1a0 [ 297.641870][T14601] bpf_prog_load+0x735/0x1930 [ 297.641903][T14601] ? __pfx_bpf_prog_load+0x10/0x10 [ 297.641949][T14601] ? bpf_lsm_bpf+0x9/0x20 [ 297.641967][T14601] ? security_bpf+0x7e/0x300 [ 297.641991][T14601] __sys_bpf+0x528/0x870 [ 297.642014][T14601] ? __pfx___sys_bpf+0x10/0x10 [ 297.642053][T14601] ? ksys_write+0x22a/0x250 [ 297.642077][T14601] ? __pfx_ksys_write+0x10/0x10 [ 297.642095][T14601] ? rcu_is_watching+0x15/0xb0 [ 297.642119][T14601] __x64_sys_bpf+0x7c/0x90 [ 297.642139][T14601] do_syscall_64+0xfa/0x3b0 [ 297.642156][T14601] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.642173][T14601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.642190][T14601] ? clear_bhb_loop+0x60/0xb0 [ 297.642210][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.642226][T14601] RIP: 0033:0x7f6b62f8ebe9 [ 297.642243][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.642256][T14601] RSP: 002b:00007f6b63ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.642275][T14601] RAX: ffffffffffffffda RBX: 00007f6b631c5fa0 RCX: 00007f6b62f8ebe9 [ 297.642288][T14601] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 297.642299][T14601] RBP: 00007f6b63ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.642310][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.642320][T14601] R13: 00007f6b631c6038 R14: 00007f6b631c5fa0 R15: 00007fff779d3e38 [ 297.642349][T14601] [ 297.642409][T14601] Mem-Info: [ 297.642678][T14609] tipc: Enabling of bearer rejected, already enabled [ 297.654526][T14601] active_anon:6609 inactive_anon:0 isolated_anon:0 [ 297.654526][T14601] active_file:3144 inactive_file:39940 isolated_file:0 [ 297.654526][T14601] unevictable:768 dirty:189 writeback:0 [ 297.654526][T14601] slab_reclaimable:12981 slab_unreclaimable:177239 [ 297.654526][T14601] mapped:37888 shmem:3985 pagetables:1276 [ 297.654526][T14601] sec_pagetables:0 bounce:0 [ 297.654526][T14601] kernel_misc_reclaimable:0 [ 297.654526][T14601] free:1232417 free_pcp:15923 free_cma:0 [ 297.691607][T14607] team0: Failed to send options change via netlink (err -105) [ 297.740397][T14601] Node 0 active_anon:27336kB inactive_anon:0kB active_file:12576kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152452kB dirty:752kB writeback:0kB shmem:15304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 297.813242][T14607] team0: Port device netdevsim0 added [ 297.818828][T14601] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 297.821547][T14611] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 297.823839][T14601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.823891][T14601] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 297.823929][T14601] Node 0 DMA32 free:1024952kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21944kB inactive_anon:0kB active_file:12576kB inactive_file:157992kB unevictable:1536kB writepending:756kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:48388kB local_pcp:25724kB free_cma:0kB [ 298.138117][T14601] lowmem_reserve[]: 0 0 1 1 1 [ 298.145664][T14601] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 298.181075][T14601] lowmem_reserve[]: 0 0 0 0 0 [ 298.185918][T14601] Node 1 Normal free:3892312kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:8064kB free_cma:0kB [ 298.229382][T14601] lowmem_reserve[]: 0 0 0 0 0 [ 298.235551][T14601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.255469][T14601] Node 0 DMA32: 982*4kB (UM) 209*8kB (UME) 259*16kB (UM) 246*32kB (UME) 513*64kB (UM) 526*128kB (UME) 441*256kB (UME) 272*512kB (UM) 137*1024kB (UM) 9*2048kB (UM) 123*4096kB (M) = 1032464kB [ 298.275379][T14609] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.303320][T14601] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 298.318889][T14601] Node 1 Normal: 162*4kB (UME) 54*8kB (UME) 38*16kB (UME) 132*32kB (UME) 37*64kB (UME) 12*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3892312kB [ 298.338590][T14601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.349931][T14614] tipc: Resetting bearer [ 298.356340][T14601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.366026][T14601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.371608][T14613] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 298.375760][T14601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.375780][T14601] 44461 total pagecache pages [ 298.375788][T14601] 0 pages in swap cache [ 298.375795][T14601] Free swap = 124996kB [ 298.375803][T14601] Total swap = 124996kB [ 298.375812][T14601] 2097051 pages RAM [ 298.375820][T14601] 0 pages HighMem/MovableOnly [ 298.375827][T14601] 425669 pages reserved [ 298.375834][T14601] 0 pages cma reserved [ 298.578491][T14629] __nla_validate_parse: 3 callbacks suppressed [ 298.578508][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 298.647600][T14631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.714776][T14638] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 298.827507][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 298.912294][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2280'. [ 298.981483][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2276'. [ 299.008046][T14657] pim6reg: entered allmulticast mode [ 299.013710][T14657] pim6reg: left allmulticast mode [ 299.116387][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 299.226347][T14666] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 299.568046][T14687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2289'. [ 299.597183][T14687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2289'. [ 299.769107][T14687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2289'. [ 299.792308][T14687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2289'. [ 299.857258][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 302.015091][T14745] ksmbd: Unknown IPC event: 3, ignore. [ 303.089439][T14771] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 303.165563][T14797] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 303.182513][T14795] syzkaller1: entered promiscuous mode [ 303.188246][T14795] syzkaller1: entered allmulticast mode [ 303.202442][T14801] xfrm1: entered promiscuous mode [ 303.210900][T14801] xfrm1: entered allmulticast mode [ 303.509881][T14816] nbd: couldn't find a device at index 65546 [ 303.700715][T14806] team0 (unregistering): Port device netdevsim0 removed [ 304.088406][T14842] macvtap1: entered promiscuous mode [ 304.094233][T14842] vlan0: entered promiscuous mode [ 304.118081][T14836] __nla_validate_parse: 15 callbacks suppressed [ 304.118095][T14836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2328'. [ 304.136013][T14842] macvtap1: entered allmulticast mode [ 304.141574][T14842] vlan0: entered allmulticast mode [ 304.146937][T14842] veth0_vlan: entered allmulticast mode [ 304.176678][T14845] macvtap2: entered promiscuous mode [ 304.182620][T14845] macvtap2: entered allmulticast mode [ 304.251141][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 304.305908][T14852] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 304.333605][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 304.538693][T14863] tipc: Enabled bearer , priority 0 [ 304.620584][T14863] tipc: Disabling bearer [ 304.641909][T14877] tipc: Enabling of bearer rejected, failed to enable media [ 304.680081][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2340'. [ 304.971122][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2348'. [ 304.998868][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2348'. [ 305.113023][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2347'. [ 305.187463][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 305.918266][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 305.941447][T14936] nbd: couldn't find a device at index 65546 [ 305.944488][T14941] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 306.085084][T14943] bond12: entered promiscuous mode [ 306.113235][T14943] bond12: entered allmulticast mode [ 306.118887][T14943] 8021q: adding VLAN 0 to HW filter on device bond12 [ 306.232843][T14946] 8021q: adding VLAN 0 to HW filter on device bond13 [ 306.249276][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2364'. [ 306.269327][T14946] bond13: entered promiscuous mode [ 306.278033][T14946] bond13: entered allmulticast mode [ 306.285197][T14946] bond12: (slave bond13): Enslaving as a backup interface with a down link [ 306.632555][T14977] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 306.821637][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 306.876863][T14982] batadv0: entered promiscuous mode [ 306.882286][T14982] macsec1: entered promiscuous mode [ 306.890174][T14982] batadv0: left promiscuous mode [ 307.564454][T15003] netlink: 'syz.2.2379': attribute type 4 has an invalid length. [ 307.599982][T14995] syzkaller1: entered promiscuous mode [ 307.609071][T14995] syzkaller1: entered allmulticast mode [ 308.193004][T15037] syzkaller1: entered promiscuous mode [ 308.219826][T15037] syzkaller1: entered allmulticast mode [ 308.531020][T15046] netlink: 'syz.4.2391': attribute type 28 has an invalid length. [ 308.562814][T15036] IPVS: Scheduler module ip_vs_sip not found [ 308.826077][T15061] tipc: Enabling of bearer rejected, failed to enable media [ 309.006720][T15075] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 309.113670][T15080] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 309.148459][T15080] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 309.163008][T15080] __nla_validate_parse: 3 callbacks suppressed [ 309.163023][T15080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2399'. [ 309.336113][T15077] tipc: Started in network mode [ 309.346513][T15077] tipc: Node identity , cluster identity 4711 [ 309.355179][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2403'. [ 309.356667][T15077] tipc: Failed to obtain node identity [ 309.375569][T15077] tipc: Enabling of bearer rejected, failed to enable media [ 309.397617][T15077] syzkaller0: entered promiscuous mode [ 309.404435][T15077] syzkaller0: entered allmulticast mode [ 310.631130][T15104] netlink: 'syz.5.2413': attribute type 11 has an invalid length. [ 310.675723][T15104] netlink: 'syz.5.2413': attribute type 11 has an invalid length. [ 310.697986][T15104] netlink: 'syz.5.2413': attribute type 11 has an invalid length. [ 310.803731][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.924457][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.933119][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.942559][T10862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.950655][T10862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.960597][T10862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.968059][T10862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.977678][T10862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.984963][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.992862][T10862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.001088][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.390455][ T30] audit: type=1800 audit(1757048286.870:8): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2417" name="cgroup.controllers" dev="tmpfs" ino=2541 res=0 errno=0 [ 312.118106][T15112] chnl_net:caif_netlink_parms(): no params data found [ 312.185661][T15111] chnl_net:caif_netlink_parms(): no params data found [ 312.472722][T15163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2424'. [ 312.765115][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.772458][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.798629][T15112] bridge_slave_0: entered allmulticast mode [ 312.806787][T15112] bridge_slave_0: entered promiscuous mode [ 312.832142][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.850264][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.863588][T15112] bridge_slave_1: entered allmulticast mode [ 312.881803][T15112] bridge_slave_1: entered promiscuous mode [ 312.913882][T15175] tipc: Enabled bearer , priority 0 [ 312.935338][T15178] syzkaller0: entered promiscuous mode [ 312.940810][T15178] syzkaller0: entered allmulticast mode [ 313.054332][ T5864] Bluetooth: hci4: command tx timeout [ 313.060895][ T5184] Bluetooth: hci1: command tx timeout [ 313.114385][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.128783][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.139964][T15175] tipc: Resetting bearer [ 313.170003][T15111] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.178099][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.186035][T15111] bridge_slave_0: entered allmulticast mode [ 313.194268][T15111] bridge_slave_0: entered promiscuous mode [ 313.224620][T15111] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.231849][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.243312][T15111] bridge_slave_1: entered allmulticast mode [ 313.251155][T15111] bridge_slave_1: entered promiscuous mode [ 313.278869][T15178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2428'. [ 313.311345][T15177] ip6tnl4: entered allmulticast mode [ 313.362366][T15174] tipc: Resetting bearer [ 313.389206][T15174] tipc: Disabling bearer [ 313.434535][T15112] team0: Port device team_slave_0 added [ 313.473875][T15111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.495236][T15111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.584398][T15112] team0: Port device team_slave_1 added [ 313.667966][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2431'. [ 313.808337][T15111] team0: Port device team_slave_0 added [ 313.852162][T15111] team0: Port device team_slave_1 added [ 313.874787][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.881741][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.930771][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.949634][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.958042][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.989553][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.165438][T15111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.172413][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.226998][T15111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.268264][T15111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.288544][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.332171][T15111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.363619][T15112] hsr_slave_0: entered promiscuous mode [ 314.371012][T15112] hsr_slave_1: entered promiscuous mode [ 314.389362][T15112] debugfs: 'hsr0' already exists in 'hsr' [ 314.401975][T15112] Cannot create hsr debugfs directory [ 314.776115][T15111] hsr_slave_0: entered promiscuous mode [ 314.783262][T15111] hsr_slave_1: entered promiscuous mode [ 314.789712][T15111] debugfs: 'hsr0' already exists in 'hsr' [ 314.795909][T15111] Cannot create hsr debugfs directory [ 314.801583][T15207] tipc: Started in network mode [ 314.814103][T15207] tipc: Node identity d65178cf4885, cluster identity 4711 [ 314.822318][T15207] tipc: Enabled bearer , priority 0 [ 314.859344][T15206] syzkaller0: entered promiscuous mode [ 314.865476][T15206] syzkaller0: entered allmulticast mode [ 314.890043][T15209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2438'. [ 314.899890][T15209] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2438'. [ 314.936760][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2438'. [ 314.946101][T15210] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2438'. [ 315.056185][T15207] tipc: Resetting bearer [ 315.131823][T15205] tipc: Resetting bearer [ 315.143735][ T5184] Bluetooth: hci1: command tx timeout [ 315.149154][ T5184] Bluetooth: hci4: command tx timeout [ 315.170804][T15205] tipc: Disabling bearer [ 315.420424][T15219] netlink: 'syz.2.2439': attribute type 13 has an invalid length. [ 315.429037][T15219] netlink: 'syz.2.2439': attribute type 17 has an invalid length. [ 315.566352][T15219] tipc: Resetting bearer [ 315.598967][T13051] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.601984][T15225] netlink: 'syz.5.2442': attribute type 12 has an invalid length. [ 315.617241][T15219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.650707][T15225] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2442'. [ 316.007108][T15112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.067694][T15112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.121177][T15112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.148600][T15112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 316.214613][T15111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.261676][T15111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.288021][T15111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.320432][T15111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.495539][ T6023] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 316.700882][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.756234][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.796921][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.804174][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.934935][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.942094][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.954655][T15111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.001222][T15111] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.022196][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.029312][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.050784][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.057962][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.068016][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214011][ T5184] Bluetooth: hci4: command tx timeout [ 317.214018][ T5864] Bluetooth: hci1: command tx timeout [ 317.367091][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.368140][T15266] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2449'. [ 317.567654][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.575347][T15266] nbd2: detected capacity change from 0 to 549764202496 [ 317.618278][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2451'. [ 317.952226][T15290] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2454'. [ 318.044468][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 318.066141][T15112] veth0_vlan: entered promiscuous mode [ 318.119664][T15112] veth1_vlan: entered promiscuous mode [ 318.131843][ T5184] block nbd2: Receive control failed (result -32) [ 318.174354][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 318.206808][T15297] batadv_slave_0: entered promiscuous mode [ 318.212748][T15297] macvlan3: entered promiscuous mode [ 318.223663][T15297] bond0: entered promiscuous mode [ 318.236050][T15297] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 318.339330][T15303] vlan2: entered promiscuous mode [ 318.345100][T15303] macvtap0: entered promiscuous mode [ 318.398311][T15112] veth0_macvtap: entered promiscuous mode [ 318.417087][T15112] veth1_macvtap: entered promiscuous mode [ 318.447876][T15111] veth0_vlan: entered promiscuous mode [ 318.477514][T15111] veth1_vlan: entered promiscuous mode [ 318.509222][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.518230][T15308] netlink: 'syz.2.2460': attribute type 7 has an invalid length. [ 318.526393][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.565938][ T1115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.648857][ T1115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.674970][ T1115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.710459][ T1115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.741956][T15111] veth0_macvtap: entered promiscuous mode [ 318.788805][T15111] veth1_macvtap: entered promiscuous mode [ 318.845657][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.892574][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.902623][T15317] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 318.961773][T15111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.988739][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.992311][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.015420][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.052189][T15322] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 319.076560][ T1115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.102730][T15322] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 319.122378][ T1115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.156859][ T1115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.183582][ T1115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.294330][ T5184] Bluetooth: hci4: command tx timeout [ 319.299855][ T5864] Bluetooth: hci1: command tx timeout [ 319.309997][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.332322][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.369882][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.394381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.606415][T15336] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 319.731494][T15345] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 319.993625][T15356] __nla_validate_parse: 4 callbacks suppressed [ 319.993643][T15356] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2472'. [ 320.255175][T15374] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.261221][T15374] syzkaller1: linktype set to 272 [ 320.480024][T15383] pimreg: entered allmulticast mode [ 320.491899][T15392] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2485'. [ 320.508911][T15392] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2485'. [ 320.545252][T15392] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 320.636052][T15404] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2488'. [ 320.771723][T15406] netlink: 'syz.5.2489': attribute type 7 has an invalid length. [ 320.801721][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 320.838156][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 320.959348][T15406] vlan2: entered promiscuous mode [ 320.971197][T15406] macvtap0: entered promiscuous mode [ 321.074697][T15432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.081963][T15432] IPv6: NLM_F_CREATE should be set when creating new route [ 321.083836][T15423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 321.147384][T15423] batman_adv: batadv0: Adding interface: gretap1 [ 321.177086][T15423] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.209994][T15423] batman_adv: batadv0: Interface activated: gretap1 [ 321.282516][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2498'. [ 321.440884][T15446] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2502'. [ 321.464315][T15452] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2503'. [ 321.475775][T15457] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2505'. [ 321.903244][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.913274][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.921157][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.951733][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.009550][T15493] syzkaller0: entered promiscuous mode [ 322.017585][T15493] syzkaller0: entered allmulticast mode [ 322.700013][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.800264][T15521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.852446][T15522] bond5: (slave macvlan4): Enslaving as a backup interface with an up link [ 323.916196][ T1115] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 324.085845][ T1115] bond5: (slave macvlan4): link status up again after 0 ms [ 324.105422][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 324.115194][ T1115] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 324.231866][T15548] netlink: 'syz.7.2530': attribute type 1 has an invalid length. [ 324.244188][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 324.353241][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 324.525122][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 324.724455][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 324.913663][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 325.220498][T15610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.272587][T15617] netlink: 'syz.7.2550': attribute type 1 has an invalid length. [ 325.297832][T15617] __nla_validate_parse: 12 callbacks suppressed [ 325.297850][T15617] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2550'. [ 325.338968][T15620] _ÐZ`Ô€@S: entered promiscuous mode [ 325.425412][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.450851][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.471483][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.525393][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.547040][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.584860][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.603878][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.778004][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 325.886616][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 326.457487][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.615543][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.742204][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.864199][T15671] tipc: Failed to remove unknown binding: 66,1,1/0:1647502362/1647502364 [ 326.909034][T15671] tipc: Failed to remove unknown binding: 66,1,1/0:1647502362/1647502364 [ 326.946070][T15671] tipc: Failed to remove unknown binding: 66,1,1/0:1647502362/1647502364 [ 327.019169][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.727066][T15686] net_ratelimit: 9 callbacks suppressed [ 327.727085][T15686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.833345][T15688] netlink: 'syz.5.2573': attribute type 5 has an invalid length. [ 328.882764][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.890653][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.002884][T15707] netlink: 'syz.2.2577': attribute type 5 has an invalid length. [ 329.047732][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.096070][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.210139][T15697] vlan0: left allmulticast mode [ 329.218074][T15697] veth0_vlan: left allmulticast mode [ 329.224719][T15697] vlan0: left promiscuous mode [ 329.255603][ T13] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.277506][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.316504][T15721] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 329.338223][T15721] macsec1: entered promiscuous mode [ 329.351310][T15721] mac80211_hwsim hwsim43 wlan1: left promiscuous mode [ 329.420114][ T13] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.447597][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.470934][ T13] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.479709][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.549893][T15726] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 329.572968][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 329.592399][T15733] bridge_slave_0: left allmulticast mode [ 329.607914][T15726] netlink: 'syz.6.2582': attribute type 10 has an invalid length. [ 329.619949][T15733] bridge_slave_0: left promiscuous mode [ 329.638719][T15733] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.656210][T15733] bridge_slave_1: left allmulticast mode [ 329.688235][T15733] bridge_slave_1: left promiscuous mode [ 329.704779][T15733] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.766449][T15733] bond0: (slave bond_slave_0): Releasing backup interface [ 329.799794][T15733] bond0: (slave bond_slave_1): Releasing backup interface [ 329.887771][T15733] team0: Port device team_slave_0 removed [ 329.925388][T15733] team0: Port device team_slave_1 removed [ 329.978349][T15733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.106453][T15733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.138225][T15733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.148124][T15733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.177721][ T13] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.188300][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.215060][ T802] bond5: (slave macvlan4): failed to get link speed/duplex [ 330.246862][T15726] mac80211_hwsim hwsim45 wlan1: left allmulticast mode [ 330.270171][T15726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.282592][T15726] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.345046][ T7663] bond5: (slave macvlan4): failed to get link speed/duplex [ 330.354609][T15752] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 330.370019][T15760] __nla_validate_parse: 23 callbacks suppressed [ 330.370034][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2590'. [ 330.393663][T15752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 330.411898][T15752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 330.500480][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2590'. [ 330.637900][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 330.743016][T15783] nbd: device at index 7 is going down [ 330.754388][ T7663] bond5: (slave macvlan4): failed to get link speed/duplex [ 330.915584][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 330.940921][T15793] FAULT_INJECTION: forcing a failure. [ 330.940921][T15793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.988512][T15793] CPU: 1 UID: 0 PID: 15793 Comm: syz.7.2599 Not tainted syzkaller #0 PREEMPT(full) [ 330.988537][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.988547][T15793] Call Trace: [ 330.988554][T15793] [ 330.988562][T15793] dump_stack_lvl+0x189/0x250 [ 330.988586][T15793] ? __pfx____ratelimit+0x10/0x10 [ 330.988603][T15793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.988622][T15793] ? __pfx__printk+0x10/0x10 [ 330.988652][T15793] ? __might_fault+0xb0/0x130 [ 330.988683][T15793] should_fail_ex+0x414/0x560 [ 330.988709][T15793] _copy_from_user+0x2d/0xb0 [ 330.988728][T15793] ___sys_sendmsg+0x158/0x2a0 [ 330.988750][T15793] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.988804][T15793] ? __fget_files+0x2a/0x420 [ 330.988818][T15793] ? __fget_files+0x3a0/0x420 [ 330.988844][T15793] __x64_sys_sendmsg+0x19b/0x260 [ 330.988865][T15793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.988892][T15793] ? __pfx_ksys_write+0x10/0x10 [ 330.988910][T15793] ? rcu_is_watching+0x15/0xb0 [ 330.988932][T15793] ? do_syscall_64+0xbe/0x3b0 [ 330.988953][T15793] do_syscall_64+0xfa/0x3b0 [ 330.988968][T15793] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.988983][T15793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.988999][T15793] ? clear_bhb_loop+0x60/0xb0 [ 330.989019][T15793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.989034][T15793] RIP: 0033:0x7fea73d8ebe9 [ 330.989050][T15793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.989064][T15793] RSP: 002b:00007fea74cb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.989083][T15793] RAX: ffffffffffffffda RBX: 00007fea73fc5fa0 RCX: 00007fea73d8ebe9 [ 330.989095][T15793] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 330.989106][T15793] RBP: 00007fea74cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 330.989116][T15793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.989125][T15793] R13: 00007fea73fc6038 R14: 00007fea73fc5fa0 R15: 00007ffed5840188 [ 330.989154][T15793] [ 331.033642][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 331.364092][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 331.499805][ T802] bond5: (slave macvlan4): failed to get link speed/duplex [ 331.647814][T15820] erspan0: entered promiscuous mode [ 331.669114][T15820] macsec1: entered promiscuous mode [ 331.699660][T15820] erspan0: left promiscuous mode [ 331.729540][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2608'. [ 331.785420][T15819] netlink: 'syz.7.2606': attribute type 11 has an invalid length. [ 331.856684][T15827] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2608'. [ 332.005130][T15833] netlink: 'syz.3.2611': attribute type 1 has an invalid length. [ 332.100567][T15840] FAULT_INJECTION: forcing a failure. [ 332.100567][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 332.134768][T15840] CPU: 1 UID: 0 PID: 15840 Comm: syz.7.2613 Not tainted syzkaller #0 PREEMPT(full) [ 332.134792][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.134802][T15840] Call Trace: [ 332.134809][T15840] [ 332.134817][T15840] dump_stack_lvl+0x189/0x250 [ 332.134840][T15840] ? __pfx____ratelimit+0x10/0x10 [ 332.134859][T15840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.134877][T15840] ? __pfx__printk+0x10/0x10 [ 332.134905][T15840] ? __pfx___might_resched+0x10/0x10 [ 332.134926][T15840] should_fail_ex+0x414/0x560 [ 332.134953][T15840] should_failslab+0xa8/0x100 [ 332.134978][T15840] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 332.135000][T15840] ? __alloc_skb+0x112/0x2d0 [ 332.135021][T15840] __alloc_skb+0x112/0x2d0 [ 332.135042][T15840] netlink_sendmsg+0x5c6/0xb30 [ 332.135070][T15840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.135091][T15840] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.135110][T15840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.135127][T15840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.135146][T15840] __sock_sendmsg+0x21c/0x270 [ 332.135171][T15840] ____sys_sendmsg+0x505/0x830 [ 332.135194][T15840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.135220][T15840] ? import_iovec+0x74/0xa0 [ 332.135242][T15840] ___sys_sendmsg+0x21f/0x2a0 [ 332.135262][T15840] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.135314][T15840] ? __fget_files+0x2a/0x420 [ 332.135329][T15840] ? __fget_files+0x3a0/0x420 [ 332.135355][T15840] __x64_sys_sendmsg+0x19b/0x260 [ 332.135377][T15840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.135403][T15840] ? __pfx_ksys_write+0x10/0x10 [ 332.135421][T15840] ? rcu_is_watching+0x15/0xb0 [ 332.135443][T15840] ? do_syscall_64+0xbe/0x3b0 [ 332.135465][T15840] do_syscall_64+0xfa/0x3b0 [ 332.135480][T15840] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.135496][T15840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.135511][T15840] ? clear_bhb_loop+0x60/0xb0 [ 332.135537][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.135553][T15840] RIP: 0033:0x7fea73d8ebe9 [ 332.135570][T15840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.135584][T15840] RSP: 002b:00007fea74cb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.135603][T15840] RAX: ffffffffffffffda RBX: 00007fea73fc5fa0 RCX: 00007fea73d8ebe9 [ 332.135615][T15840] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 332.135625][T15840] RBP: 00007fea74cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 332.135635][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.135645][T15840] R13: 00007fea73fc6038 R14: 00007fea73fc5fa0 R15: 00007ffed5840188 [ 332.135675][T15840] [ 332.423540][T15809] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 332.588325][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 332.661705][T15848] netlink: 'syz.2.2616': attribute type 4 has an invalid length. [ 332.943969][ T1147] net_ratelimit: 5 callbacks suppressed [ 332.943987][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.107683][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.233859][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.281587][T15870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2622'. [ 333.327464][T15870] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.2622'. [ 333.343611][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.505798][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.655008][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.795382][ T7663] bond5: (slave macvlan4): failed to get link speed/duplex [ 333.863542][T15893] netlink: 'syz.3.2630': attribute type 1 has an invalid length. [ 334.034262][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 334.144562][ T1147] bond5: (slave macvlan4): failed to get link speed/duplex [ 334.162946][T15906] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.2634'. [ 334.266515][ T7663] bond5: (slave macvlan4): failed to get link speed/duplex [ 334.341003][T15919] FAULT_INJECTION: forcing a failure. [ 334.341003][T15919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.355117][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.3.2638 Not tainted syzkaller #0 PREEMPT(full) [ 334.355141][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.355150][T15919] Call Trace: [ 334.355158][T15919] [ 334.355165][T15919] dump_stack_lvl+0x189/0x250 [ 334.355188][T15919] ? __pfx____ratelimit+0x10/0x10 [ 334.355207][T15919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.355226][T15919] ? __pfx__printk+0x10/0x10 [ 334.355249][T15919] ? __might_fault+0xb0/0x130 [ 334.355281][T15919] should_fail_ex+0x414/0x560 [ 334.355308][T15919] _copy_from_iter+0x1de/0x1790 [ 334.355334][T15919] ? rcu_is_watching+0x15/0xb0 [ 334.355353][T15919] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 334.355376][T15919] ? __pfx__copy_from_iter+0x10/0x10 [ 334.355402][T15919] ? __build_skb_around+0x257/0x3e0 [ 334.355425][T15919] ? netlink_sendmsg+0x642/0xb30 [ 334.355440][T15919] ? skb_put+0x11b/0x210 [ 334.355462][T15919] netlink_sendmsg+0x6b2/0xb30 [ 334.355490][T15919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.355511][T15919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.355530][T15919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.355547][T15919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.355565][T15919] __sock_sendmsg+0x21c/0x270 [ 334.355591][T15919] ____sys_sendmsg+0x505/0x830 [ 334.355616][T15919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.355645][T15919] ? import_iovec+0x74/0xa0 [ 334.355667][T15919] ___sys_sendmsg+0x21f/0x2a0 [ 334.355689][T15919] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.355745][T15919] ? __fget_files+0x2a/0x420 [ 334.355760][T15919] ? __fget_files+0x3a0/0x420 [ 334.355786][T15919] __x64_sys_sendmsg+0x19b/0x260 [ 334.355808][T15919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.355837][T15919] ? __pfx_ksys_write+0x10/0x10 [ 334.355855][T15919] ? rcu_is_watching+0x15/0xb0 [ 334.355877][T15919] ? do_syscall_64+0xbe/0x3b0 [ 334.355898][T15919] do_syscall_64+0xfa/0x3b0 [ 334.355914][T15919] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.355931][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.355947][T15919] ? clear_bhb_loop+0x60/0xb0 [ 334.355968][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.355984][T15919] RIP: 0033:0x7f23e8d8ebe9 [ 334.356000][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.356014][T15919] RSP: 002b:00007f23e9cc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.356032][T15919] RAX: ffffffffffffffda RBX: 00007f23e8fc5fa0 RCX: 00007f23e8d8ebe9 [ 334.356045][T15919] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 334.356056][T15919] RBP: 00007f23e9cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 334.356067][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.356077][T15919] R13: 00007f23e8fc6038 R14: 00007f23e8fc5fa0 R15: 00007ffc541623b8 [ 334.356108][T15919] [ 334.723558][T15925] netlink: 'syz.2.2640': attribute type 10 has an invalid length. [ 334.819694][T15929] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.2642'. [ 334.836991][T15925] team0: Port device 0! added [ 335.221678][T15949] syz_tun: entered allmulticast mode [ 335.298545][T15961] FAULT_INJECTION: forcing a failure. [ 335.298545][T15961] name failslab, interval 1, probability 0, space 0, times 0 [ 335.311475][T15961] CPU: 1 UID: 0 PID: 15961 Comm: syz.6.2651 Not tainted syzkaller #0 PREEMPT(full) [ 335.311498][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.311509][T15961] Call Trace: [ 335.311516][T15961] [ 335.311523][T15961] dump_stack_lvl+0x189/0x250 [ 335.311548][T15961] ? __pfx____ratelimit+0x10/0x10 [ 335.311566][T15961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.311585][T15961] ? __pfx__printk+0x10/0x10 [ 335.311609][T15961] ? __lock_acquire+0xab9/0xd20 [ 335.311641][T15961] should_fail_ex+0x414/0x560 [ 335.311668][T15961] should_failslab+0xa8/0x100 [ 335.311692][T15961] kmem_cache_alloc_noprof+0x73/0x3c0 [ 335.311712][T15961] ? skb_clone+0x212/0x3a0 [ 335.311737][T15961] skb_clone+0x212/0x3a0 [ 335.311761][T15961] __netlink_deliver_tap+0x404/0x850 [ 335.311791][T15961] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.311810][T15961] netlink_deliver_tap+0x19c/0x1b0 [ 335.311829][T15961] netlink_unicast+0x7fa/0x9e0 [ 335.311869][T15961] ? __pfx_netlink_unicast+0x10/0x10 [ 335.311894][T15961] ? netlink_sendmsg+0x642/0xb30 [ 335.311908][T15961] ? skb_put+0x11b/0x210 [ 335.311929][T15961] netlink_sendmsg+0x805/0xb30 [ 335.311962][T15961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.311983][T15961] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.312001][T15961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.312019][T15961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.312037][T15961] __sock_sendmsg+0x21c/0x270 [ 335.312063][T15961] ____sys_sendmsg+0x505/0x830 [ 335.312088][T15961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.312117][T15961] ? import_iovec+0x74/0xa0 [ 335.312140][T15961] ___sys_sendmsg+0x21f/0x2a0 [ 335.312162][T15961] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.312219][T15961] ? __fget_files+0x2a/0x420 [ 335.312233][T15961] ? __fget_files+0x3a0/0x420 [ 335.312261][T15961] __x64_sys_sendmsg+0x19b/0x260 [ 335.312282][T15961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.312312][T15961] ? __pfx_ksys_write+0x10/0x10 [ 335.312330][T15961] ? rcu_is_watching+0x15/0xb0 [ 335.312353][T15961] ? do_syscall_64+0xbe/0x3b0 [ 335.312375][T15961] do_syscall_64+0xfa/0x3b0 [ 335.312391][T15961] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.312408][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.312424][T15961] ? clear_bhb_loop+0x60/0xb0 [ 335.312444][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.312464][T15961] RIP: 0033:0x7f95fcf8ebe9 [ 335.312480][T15961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.312494][T15961] RSP: 002b:00007f95fdead038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.312513][T15961] RAX: ffffffffffffffda RBX: 00007f95fd1c5fa0 RCX: 00007f95fcf8ebe9 [ 335.312525][T15961] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 335.312536][T15961] RBP: 00007f95fdead090 R08: 0000000000000000 R09: 0000000000000000 [ 335.312547][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.312557][T15961] R13: 00007f95fd1c6038 R14: 00007f95fd1c5fa0 R15: 00007ffcb4531da8 [ 335.312588][T15961] [ 335.743871][T15966] netlink: 536 bytes leftover after parsing attributes in process `syz.6.2653'. [ 335.810876][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 335.852434][T15971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2654'. [ 336.238120][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2659'. [ 336.424276][T15993] team0: Port device 0! removed [ 336.437579][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.480172][T15993] bond4: (slave gretap2): Releasing backup interface [ 336.803562][ T1115] tipc: Resetting bearer [ 336.826924][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.039627][T15998] syzkaller0: entered promiscuous mode [ 337.071251][T15998] syzkaller0: entered allmulticast mode [ 337.099563][T15993] tipc: Enabled bearer , priority 0 [ 337.232561][T16009] FAULT_INJECTION: forcing a failure. [ 337.232561][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 337.253591][T16009] CPU: 0 UID: 0 PID: 16009 Comm: syz.6.2664 Not tainted syzkaller #0 PREEMPT(full) [ 337.253615][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.253625][T16009] Call Trace: [ 337.253632][T16009] [ 337.253640][T16009] dump_stack_lvl+0x189/0x250 [ 337.253664][T16009] ? __pfx____ratelimit+0x10/0x10 [ 337.253681][T16009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.253699][T16009] ? __pfx__printk+0x10/0x10 [ 337.253726][T16009] ? __pfx___might_resched+0x10/0x10 [ 337.253741][T16009] ? fs_reclaim_acquire+0x7d/0x100 [ 337.253767][T16009] should_fail_ex+0x414/0x560 [ 337.253794][T16009] should_failslab+0xa8/0x100 [ 337.253818][T16009] kmem_cache_alloc_noprof+0x73/0x3c0 [ 337.253838][T16009] ? skb_clone+0x212/0x3a0 [ 337.253862][T16009] skb_clone+0x212/0x3a0 [ 337.253879][T16009] ? nfnetlink_rcv+0x486/0x2520 [ 337.253904][T16009] nfnetlink_rcv+0x4b4/0x2520 [ 337.253930][T16009] ? __dev_queue_xmit+0x1d79/0x3b50 [ 337.253961][T16009] ? __dev_queue_xmit+0x27b/0x3b50 [ 337.254000][T16009] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 337.254040][T16009] ? ref_tracker_free+0x63a/0x7d0 [ 337.254062][T16009] ? __asan_memcpy+0x40/0x70 [ 337.254079][T16009] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.254115][T16009] ? skb_clone+0x246/0x3a0 [ 337.254137][T16009] ? __netlink_deliver_tap+0x807/0x850 [ 337.254153][T16009] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.254188][T16009] netlink_unicast+0x82f/0x9e0 [ 337.254219][T16009] ? __pfx_netlink_unicast+0x10/0x10 [ 337.254244][T16009] ? netlink_sendmsg+0x642/0xb30 [ 337.254259][T16009] ? skb_put+0x11b/0x210 [ 337.254280][T16009] netlink_sendmsg+0x805/0xb30 [ 337.254308][T16009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.254329][T16009] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.254348][T16009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.254366][T16009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.254384][T16009] __sock_sendmsg+0x21c/0x270 [ 337.254410][T16009] ____sys_sendmsg+0x505/0x830 [ 337.254435][T16009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.254464][T16009] ? import_iovec+0x74/0xa0 [ 337.254487][T16009] ___sys_sendmsg+0x21f/0x2a0 [ 337.254509][T16009] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.254566][T16009] ? __fget_files+0x2a/0x420 [ 337.254581][T16009] ? __fget_files+0x3a0/0x420 [ 337.254607][T16009] __x64_sys_sendmsg+0x19b/0x260 [ 337.254629][T16009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.254659][T16009] ? __pfx_ksys_write+0x10/0x10 [ 337.254677][T16009] ? rcu_is_watching+0x15/0xb0 [ 337.254700][T16009] ? do_syscall_64+0xbe/0x3b0 [ 337.254723][T16009] do_syscall_64+0xfa/0x3b0 [ 337.254739][T16009] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.254754][T16009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.254767][T16009] ? clear_bhb_loop+0x60/0xb0 [ 337.254788][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.254804][T16009] RIP: 0033:0x7f95fcf8ebe9 [ 337.254821][T16009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.254836][T16009] RSP: 002b:00007f95fdead038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.254854][T16009] RAX: ffffffffffffffda RBX: 00007f95fd1c5fa0 RCX: 00007f95fcf8ebe9 [ 337.254867][T16009] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 337.254878][T16009] RBP: 00007f95fdead090 R08: 0000000000000000 R09: 0000000000000000 [ 337.254889][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.254900][T16009] R13: 00007f95fd1c6038 R14: 00007f95fd1c5fa0 R15: 00007ffcb4531da8 [ 337.254930][T16009] [ 337.533325][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.709954][T15992] tipc: Resetting bearer [ 337.815845][T15992] tipc: Disabling bearer [ 337.876855][T16018] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2667'. [ 337.916807][T16018] dummy0: entered promiscuous mode [ 337.922037][T16018] macsec1: entered promiscuous mode [ 337.932340][T16018] macsec1: entered allmulticast mode [ 337.955592][T16018] dummy0: entered allmulticast mode [ 338.021659][T16018] dummy0: left allmulticast mode [ 338.035802][T16018] dummy0: left promiscuous mode [ 338.153743][ T13] net_ratelimit: 15 callbacks suppressed [ 338.153761][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 338.275041][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 338.394158][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 338.504071][ T802] bond5: (slave macvlan4): failed to get link speed/duplex [ 338.531191][T16050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2677'. [ 338.846027][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 338.910642][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 338.942059][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 338.963674][T16067] netlink: 58 bytes leftover after parsing attributes in process `syz.2.2682'. [ 339.000542][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 339.049706][T16075] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2684'. [ 339.154202][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 339.301067][ T802] bond5: (slave macvlan4): failed to get link speed/duplex [ 339.436755][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 339.486928][T16093] netlink: 'syz.5.2690': attribute type 1 has an invalid length. [ 339.487681][T16087] syzkaller1: entered promiscuous mode [ 339.542344][T16087] syzkaller1: entered allmulticast mode [ 339.567727][ T802] bond5: (slave macvlan4): failed to get link speed/duplex [ 339.920224][T16123] netlink: 'syz.5.2698': attribute type 2 has an invalid length. [ 340.316404][T16142] syz.3.2705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.346425][T16142] CPU: 0 UID: 0 PID: 16142 Comm: syz.3.2705 Not tainted syzkaller #0 PREEMPT(full) [ 340.346456][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.346467][T16142] Call Trace: [ 340.346474][T16142] [ 340.346481][T16142] dump_stack_lvl+0x189/0x250 [ 340.346509][T16142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.346528][T16142] ? __pfx__printk+0x10/0x10 [ 340.346550][T16142] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.346568][T16142] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.346592][T16142] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 340.346612][T16142] warn_alloc+0x214/0x310 [ 340.346635][T16142] ? stack_depot_save_flags+0x40/0x860 [ 340.346660][T16142] ? __pfx_warn_alloc+0x10/0x10 [ 340.346683][T16142] ? kasan_save_track+0x4f/0x80 [ 340.346703][T16142] ? xskq_create+0x56/0x170 [ 340.346717][T16142] ? xsk_init_queue+0xb0/0x110 [ 340.346739][T16142] ? xsk_setsockopt+0x4dc/0x8d0 [ 340.346757][T16142] ? do_sock_setsockopt+0x179/0x1b0 [ 340.346774][T16142] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 340.346790][T16142] ? do_syscall_64+0xfa/0x3b0 [ 340.346805][T16142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.346829][T16142] __vmalloc_node_range_noprof+0x125/0x12f0 [ 340.346882][T16142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.346911][T16142] ? __kasan_kmalloc+0x93/0xb0 [ 340.346936][T16142] vmalloc_user_noprof+0xad/0xf0 [ 340.346957][T16142] ? xskq_create+0xbf/0x170 [ 340.346973][T16142] xskq_create+0xbf/0x170 [ 340.346993][T16142] xsk_init_queue+0xb0/0x110 [ 340.347018][T16142] xsk_setsockopt+0x4dc/0x8d0 [ 340.347043][T16142] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.347064][T16142] ? __pfx_aa_sk_perm+0x10/0x10 [ 340.347092][T16142] ? aa_sock_opt_perm+0xff/0x1b0 [ 340.347109][T16142] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 340.347124][T16142] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.347146][T16142] do_sock_setsockopt+0x179/0x1b0 [ 340.347166][T16142] __x64_sys_setsockopt+0x13f/0x1b0 [ 340.347190][T16142] do_syscall_64+0xfa/0x3b0 [ 340.347205][T16142] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.347222][T16142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.347238][T16142] ? clear_bhb_loop+0x60/0xb0 [ 340.347258][T16142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.347274][T16142] RIP: 0033:0x7f23e8d8ebe9 [ 340.347291][T16142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.347305][T16142] RSP: 002b:00007f23e9ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.347323][T16142] RAX: ffffffffffffffda RBX: 00007f23e8fc6090 RCX: 00007f23e8d8ebe9 [ 340.347335][T16142] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 340.347346][T16142] RBP: 00007f23e8e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 340.347355][T16142] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.347366][T16142] R13: 00007f23e8fc6128 R14: 00007f23e8fc6090 R15: 00007ffc541623b8 [ 340.347396][T16142] [ 340.347613][T16142] Mem-Info: [ 340.651241][T16142] active_anon:6866 inactive_anon:0 isolated_anon:0 [ 340.651241][T16142] active_file:3209 inactive_file:39964 isolated_file:0 [ 340.651241][T16142] unevictable:768 dirty:195 writeback:0 [ 340.651241][T16142] slab_reclaimable:13206 slab_unreclaimable:187278 [ 340.651241][T16142] mapped:38140 shmem:4210 pagetables:1279 [ 340.651241][T16142] sec_pagetables:0 bounce:0 [ 340.651241][T16142] kernel_misc_reclaimable:0 [ 340.651241][T16142] free:1221507 free_pcp:14463 free_cma:0 [ 340.697381][T16142] Node 0 active_anon:27464kB inactive_anon:0kB active_file:12836kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152560kB dirty:776kB writeback:0kB shmem:15304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14188kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.697491][T16134] veth5: entered promiscuous mode [ 340.730627][T16142] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.765621][T16142] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.802683][T16142] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 340.865976][T16142] Node 0 DMA32 free:977016kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27500kB inactive_anon:0kB active_file:12836kB inactive_file:158088kB unevictable:1536kB writepending:784kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:41088kB local_pcp:20408kB free_cma:0kB [ 340.911986][T16142] lowmem_reserve[]: 0 0 1 1 1 [ 340.917526][T16142] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 341.022644][T16159] __nla_validate_parse: 1 callbacks suppressed [ 341.022692][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2708'. [ 341.025641][T16142] lowmem_reserve[]: 0 0 0 0 0 [ 341.095474][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2709'. [ 341.096690][T16142] Node 1 Normal free:3893384kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:8768kB free_cma:0kB [ 341.196246][T16142] lowmem_reserve[]: 0 0 0 0 0 [ 341.200998][T16142] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 341.216761][T16142] Node 0 DMA32: 2539*4kB (UM) 510*8kB (UME) 255*16kB (UME) 268*32kB (UME) 105*64kB (UM) 32*128kB (UME) 366*256kB (UM) 309*512kB (UME) 152*1024kB (UM) 12*2048kB (UME) 125*4096kB (UM) = 981836kB [ 341.284110][T16142] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 341.315787][T16142] Node 1 Normal: 158*4kB (UME) 54*8kB (UME) 38*16kB (UME) 154*32kB (UME) 41*64kB (UME) 13*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3893384kB [ 341.351910][T16142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.362054][T16142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.391467][T16142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.420519][T16142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.441166][T16142] 44550 total pagecache pages [ 341.455072][T16142] 0 pages in swap cache [ 341.474065][T16142] Free swap = 124996kB [ 341.487286][T16142] Total swap = 124996kB [ 341.498127][T16142] 2097051 pages RAM [ 341.510804][T16142] 0 pages HighMem/MovableOnly [ 341.542798][T16142] 425669 pages reserved [ 341.570245][T16142] 0 pages cma reserved [ 342.041179][T16205] FAULT_INJECTION: forcing a failure. [ 342.041179][T16205] name failslab, interval 1, probability 0, space 0, times 0 [ 342.096867][T16205] CPU: 1 UID: 0 PID: 16205 Comm: syz.3.2719 Not tainted syzkaller #0 PREEMPT(full) [ 342.096892][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.096902][T16205] Call Trace: [ 342.096909][T16205] [ 342.096916][T16205] dump_stack_lvl+0x189/0x250 [ 342.096939][T16205] ? __pfx____ratelimit+0x10/0x10 [ 342.096957][T16205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.096976][T16205] ? __pfx__printk+0x10/0x10 [ 342.097003][T16205] ? __pfx___might_resched+0x10/0x10 [ 342.097019][T16205] ? fs_reclaim_acquire+0x7d/0x100 [ 342.097047][T16205] should_fail_ex+0x414/0x560 [ 342.097074][T16205] should_failslab+0xa8/0x100 [ 342.097097][T16205] __kmalloc_noprof+0xcb/0x4f0 [ 342.097117][T16205] ? nf_tables_newrule+0x1506/0x2890 [ 342.097135][T16205] ? nla_strcmp+0x106/0x140 [ 342.097153][T16205] nf_tables_newrule+0x1506/0x2890 [ 342.097190][T16205] ? __pfx_nf_tables_newrule+0x10/0x10 [ 342.097212][T16205] ? nfnl_pernet+0x23/0x240 [ 342.097243][T16205] ? __nla_parse+0x40/0x60 [ 342.097277][T16205] nfnetlink_rcv+0x112f/0x2520 [ 342.097334][T16205] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 342.097373][T16205] ? ref_tracker_free+0x63a/0x7d0 [ 342.097426][T16205] ? __netlink_deliver_tap+0x807/0x850 [ 342.097443][T16205] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.097480][T16205] netlink_unicast+0x82f/0x9e0 [ 342.097512][T16205] ? __pfx_netlink_unicast+0x10/0x10 [ 342.097535][T16205] ? netlink_sendmsg+0x642/0xb30 [ 342.097550][T16205] ? skb_put+0x11b/0x210 [ 342.097571][T16205] netlink_sendmsg+0x805/0xb30 [ 342.097598][T16205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.097619][T16205] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.097637][T16205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.097655][T16205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.097673][T16205] __sock_sendmsg+0x21c/0x270 [ 342.097699][T16205] ____sys_sendmsg+0x505/0x830 [ 342.097724][T16205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.097753][T16205] ? import_iovec+0x74/0xa0 [ 342.097776][T16205] ___sys_sendmsg+0x21f/0x2a0 [ 342.097798][T16205] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.097856][T16205] ? __fget_files+0x2a/0x420 [ 342.097870][T16205] ? __fget_files+0x3a0/0x420 [ 342.097900][T16205] __x64_sys_sendmsg+0x19b/0x260 [ 342.097922][T16205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.097949][T16205] ? __pfx_ksys_write+0x10/0x10 [ 342.097967][T16205] ? rcu_is_watching+0x15/0xb0 [ 342.097989][T16205] ? do_syscall_64+0xbe/0x3b0 [ 342.098011][T16205] do_syscall_64+0xfa/0x3b0 [ 342.098027][T16205] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.098044][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.098060][T16205] ? clear_bhb_loop+0x60/0xb0 [ 342.098081][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.098096][T16205] RIP: 0033:0x7f23e8d8ebe9 [ 342.098112][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.098126][T16205] RSP: 002b:00007f23e9cc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.098144][T16205] RAX: ffffffffffffffda RBX: 00007f23e8fc5fa0 RCX: 00007f23e8d8ebe9 [ 342.098157][T16205] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 342.098168][T16205] RBP: 00007f23e9cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 342.098179][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.098189][T16205] R13: 00007f23e8fc6038 R14: 00007f23e8fc5fa0 R15: 00007ffc541623b8 [ 342.098218][T16205] [ 342.677643][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2721'. [ 343.072208][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2727'. [ 343.082776][T16245] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2727'. [ 343.174143][ T1115] net_ratelimit: 13 callbacks suppressed [ 343.174162][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 343.238009][T16253] FAULT_INJECTION: forcing a failure. [ 343.238009][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 343.256902][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.7.2730 Not tainted syzkaller #0 PREEMPT(full) [ 343.256925][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.256935][T16253] Call Trace: [ 343.256942][T16253] [ 343.256950][T16253] dump_stack_lvl+0x189/0x250 [ 343.256974][T16253] ? __pfx____ratelimit+0x10/0x10 [ 343.256992][T16253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.257011][T16253] ? __pfx__printk+0x10/0x10 [ 343.257038][T16253] ? __pfx___might_resched+0x10/0x10 [ 343.257054][T16253] ? fs_reclaim_acquire+0x7d/0x100 [ 343.257083][T16253] should_fail_ex+0x414/0x560 [ 343.257110][T16253] should_failslab+0xa8/0x100 [ 343.257134][T16253] __kmalloc_cache_noprof+0x70/0x3d0 [ 343.257170][T16253] ? nfnetlink_rcv+0xeff/0x2520 [ 343.257197][T16253] nfnetlink_rcv+0xeff/0x2520 [ 343.257253][T16253] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.257293][T16253] ? ref_tracker_free+0x63a/0x7d0 [ 343.257347][T16253] ? __netlink_deliver_tap+0x807/0x850 [ 343.257365][T16253] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.257400][T16253] netlink_unicast+0x82f/0x9e0 [ 343.257432][T16253] ? __pfx_netlink_unicast+0x10/0x10 [ 343.257457][T16253] ? netlink_sendmsg+0x642/0xb30 [ 343.257472][T16253] ? skb_put+0x11b/0x210 [ 343.257495][T16253] netlink_sendmsg+0x805/0xb30 [ 343.257522][T16253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.257544][T16253] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.257562][T16253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.257580][T16253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.257598][T16253] __sock_sendmsg+0x21c/0x270 [ 343.257624][T16253] ____sys_sendmsg+0x505/0x830 [ 343.257649][T16253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.257679][T16253] ? import_iovec+0x74/0xa0 [ 343.257703][T16253] ___sys_sendmsg+0x21f/0x2a0 [ 343.257725][T16253] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.257784][T16253] ? __fget_files+0x2a/0x420 [ 343.257799][T16253] ? __fget_files+0x3a0/0x420 [ 343.257826][T16253] __x64_sys_sendmsg+0x19b/0x260 [ 343.257849][T16253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.257879][T16253] ? __pfx_ksys_write+0x10/0x10 [ 343.257897][T16253] ? rcu_is_watching+0x15/0xb0 [ 343.257920][T16253] ? do_syscall_64+0xbe/0x3b0 [ 343.257942][T16253] do_syscall_64+0xfa/0x3b0 [ 343.257957][T16253] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.257973][T16253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.257990][T16253] ? clear_bhb_loop+0x60/0xb0 [ 343.258010][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.258026][T16253] RIP: 0033:0x7fea73d8ebe9 [ 343.258041][T16253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.258055][T16253] RSP: 002b:00007fea74cb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.258074][T16253] RAX: ffffffffffffffda RBX: 00007fea73fc5fa0 RCX: 00007fea73d8ebe9 [ 343.258086][T16253] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 343.258097][T16253] RBP: 00007fea74cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 343.258107][T16253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.258117][T16253] R13: 00007fea73fc6038 R14: 00007fea73fc5fa0 R15: 00007ffed5840188 [ 343.258153][T16253] [ 343.647420][T16255] dummy0: entered promiscuous mode [ 343.652668][T16255] macsec1: entered promiscuous mode [ 343.671821][T16255] dummy0: left promiscuous mode [ 343.783979][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 343.829879][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2732'. [ 343.903541][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 344.018630][ T1115] bond5: (slave macvlan4): failed to get link speed/duplex [ 344.120361][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 344.251109][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 344.327939][T16287] netlink: 'syz.7.2738': attribute type 10 has an invalid length. [ 344.362579][T16287] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 344.367664][T16284] syzkaller1: entered promiscuous mode [ 344.425157][T16284] syzkaller1: entered allmulticast mode [ 344.488391][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 344.498336][T16293] FAULT_INJECTION: forcing a failure. [ 344.498336][T16293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.516882][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.3.2741 Not tainted syzkaller #0 PREEMPT(full) [ 344.516905][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.516916][T16293] Call Trace: [ 344.516923][T16293] [ 344.516931][T16293] dump_stack_lvl+0x189/0x250 [ 344.516954][T16293] ? __pfx____ratelimit+0x10/0x10 [ 344.516972][T16293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.516991][T16293] ? __pfx__printk+0x10/0x10 [ 344.517038][T16293] should_fail_ex+0x414/0x560 [ 344.517066][T16293] _copy_to_user+0x31/0xb0 [ 344.517087][T16293] simple_read_from_buffer+0xe1/0x170 [ 344.517116][T16293] proc_fail_nth_read+0x1b3/0x220 [ 344.517140][T16293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.517162][T16293] ? rw_verify_area+0x2a6/0x4d0 [ 344.517181][T16293] ? __lock_acquire+0xab9/0xd20 [ 344.517201][T16293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.517222][T16293] vfs_read+0x1fd/0xa30 [ 344.517240][T16293] ? fdget_pos+0x247/0x320 [ 344.517261][T16293] ? __pfx___mutex_lock+0x10/0x10 [ 344.517279][T16293] ? __pfx_vfs_read+0x10/0x10 [ 344.517301][T16293] ? __fget_files+0x2a/0x420 [ 344.517321][T16293] ? __fget_files+0x3a0/0x420 [ 344.517335][T16293] ? __fget_files+0x2a/0x420 [ 344.517360][T16293] ksys_read+0x145/0x250 [ 344.517383][T16293] ? __pfx_ksys_read+0x10/0x10 [ 344.517401][T16293] ? rcu_is_watching+0x15/0xb0 [ 344.517424][T16293] ? do_syscall_64+0xbe/0x3b0 [ 344.517446][T16293] do_syscall_64+0xfa/0x3b0 [ 344.517462][T16293] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.517479][T16293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.517496][T16293] ? clear_bhb_loop+0x60/0xb0 [ 344.517517][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.517533][T16293] RIP: 0033:0x7f23e8d8d5fc [ 344.517548][T16293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.517563][T16293] RSP: 002b:00007f23e9cc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.517581][T16293] RAX: ffffffffffffffda RBX: 00007f23e8fc5fa0 RCX: 00007f23e8d8d5fc [ 344.517594][T16293] RDX: 000000000000000f RSI: 00007f23e9cc20a0 RDI: 0000000000000004 [ 344.517605][T16293] RBP: 00007f23e9cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 344.517616][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.517626][T16293] R13: 00007f23e8fc6038 R14: 00007f23e8fc5fa0 R15: 00007ffc541623b8 [ 344.517657][T16293] [ 344.765117][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 344.801969][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'. [ 344.871139][T16300] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 344.884908][ T13] bond5: (slave macvlan4): failed to get link speed/duplex [ 345.004020][ T36] bond5: (slave macvlan4): failed to get link speed/duplex [ 345.093396][T16314] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2742'. [ 345.165078][T16316] FAULT_INJECTION: forcing a failure. [ 345.165078][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.199145][T16316] CPU: 1 UID: 0 PID: 16316 Comm: syz.7.2747 Not tainted syzkaller #0 PREEMPT(full) [ 345.199171][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.199181][T16316] Call Trace: [ 345.199189][T16316] [ 345.199195][T16316] dump_stack_lvl+0x189/0x250 [ 345.199219][T16316] ? __pfx____ratelimit+0x10/0x10 [ 345.199237][T16316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.199256][T16316] ? __pfx__printk+0x10/0x10 [ 345.199277][T16316] ? __might_fault+0xb0/0x130 [ 345.199310][T16316] should_fail_ex+0x414/0x560 [ 345.199334][T16316] _copy_from_user+0x2d/0xb0 [ 345.199351][T16316] ___sys_sendmsg+0x158/0x2a0 [ 345.199371][T16316] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.199426][T16316] ? __fget_files+0x2a/0x420 [ 345.199441][T16316] ? __fget_files+0x3a0/0x420 [ 345.199473][T16316] __x64_sys_sendmsg+0x19b/0x260 [ 345.199495][T16316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.199522][T16316] ? __pfx_ksys_write+0x10/0x10 [ 345.199539][T16316] ? rcu_is_watching+0x15/0xb0 [ 345.199560][T16316] ? do_syscall_64+0xbe/0x3b0 [ 345.199580][T16316] do_syscall_64+0xfa/0x3b0 [ 345.199595][T16316] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.199610][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.199626][T16316] ? clear_bhb_loop+0x60/0xb0 [ 345.199644][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.199659][T16316] RIP: 0033:0x7fea73d8ebe9 [ 345.199674][T16316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.199688][T16316] RSP: 002b:00007fea74cb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.199705][T16316] RAX: ffffffffffffffda RBX: 00007fea73fc5fa0 RCX: 00007fea73d8ebe9 [ 345.199717][T16316] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 345.199728][T16316] RBP: 00007fea74cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 345.199738][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.199747][T16316] R13: 00007fea73fc6038 R14: 00007fea73fc5fa0 R15: 00007ffed5840188 [ 345.199775][T16316] [ 345.666040][T16322] netlink: 9464 bytes leftover after parsing attributes in process `syz.2.2748'. [ 345.691850][T16320] netlink: 'syz.3.2749': attribute type 58 has an invalid length. [ 345.750671][T16323] netlink: 'syz.7.2750': attribute type 13 has an invalid length. [ 346.142309][T16341] netlink: 'syz.7.2757': attribute type 1 has an invalid length. [ 346.153957][T16341] __nla_validate_parse: 2 callbacks suppressed [ 346.153972][T16341] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2757'. [ 346.356350][T16359] FAULT_INJECTION: forcing a failure. [ 346.356350][T16359] name failslab, interval 1, probability 0, space 0, times 0 [ 346.379735][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.2.2761 Not tainted syzkaller #0 PREEMPT(full) [ 346.379760][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.379770][T16359] Call Trace: [ 346.379777][T16359] [ 346.379784][T16359] dump_stack_lvl+0x189/0x250 [ 346.379807][T16359] ? __pfx____ratelimit+0x10/0x10 [ 346.379826][T16359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.379845][T16359] ? __pfx__printk+0x10/0x10 [ 346.379870][T16359] ? __pfx___might_resched+0x10/0x10 [ 346.379891][T16359] should_fail_ex+0x414/0x560 [ 346.379917][T16359] should_failslab+0xa8/0x100 [ 346.379942][T16359] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 346.379963][T16359] ? __alloc_skb+0x112/0x2d0 [ 346.379982][T16359] __alloc_skb+0x112/0x2d0 [ 346.380002][T16359] netlink_sendmsg+0x5c6/0xb30 [ 346.380032][T16359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.380054][T16359] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.380072][T16359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.380097][T16359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.380115][T16359] __sock_sendmsg+0x21c/0x270 [ 346.380141][T16359] ____sys_sendmsg+0x505/0x830 [ 346.380166][T16359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.380195][T16359] ? import_iovec+0x74/0xa0 [ 346.380219][T16359] ___sys_sendmsg+0x21f/0x2a0 [ 346.380240][T16359] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.380295][T16359] ? __fget_files+0x2a/0x420 [ 346.380310][T16359] ? __fget_files+0x3a0/0x420 [ 346.380335][T16359] __x64_sys_sendmsg+0x19b/0x260 [ 346.380357][T16359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.380386][T16359] ? __pfx_ksys_write+0x10/0x10 [ 346.380404][T16359] ? rcu_is_watching+0x15/0xb0 [ 346.380426][T16359] ? do_syscall_64+0xbe/0x3b0 [ 346.380448][T16359] do_syscall_64+0xfa/0x3b0 [ 346.380464][T16359] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.380480][T16359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.380496][T16359] ? clear_bhb_loop+0x60/0xb0 [ 346.380517][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.380533][T16359] RIP: 0033:0x7f6b62f8ebe9 [ 346.380549][T16359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.380563][T16359] RSP: 002b:00007f6b63ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.380582][T16359] RAX: ffffffffffffffda RBX: 00007f6b631c5fa0 RCX: 00007f6b62f8ebe9 [ 346.380595][T16359] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 346.380606][T16359] RBP: 00007f6b63ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 346.380617][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.380627][T16359] R13: 00007f6b631c6038 R14: 00007f6b631c5fa0 R15: 00007fff779d3e38 [ 346.380657][T16359] [ 346.742268][T13053] IPVS: starting estimator thread 0... [ 346.799339][T16372] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 346.833395][T16371] IPVS: using max 26 ests per chain, 62400 per kthread [ 346.875488][T16372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2764'. [ 346.961228][T16374] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 347.028738][T16369] bond0: (slave batadv_slave_0): Releasing backup interface [ 347.041387][T16369] batadv_slave_0: left promiscuous mode [ 347.075808][T16369] bond7: (slave wireguard1): Releasing backup interface [ 347.100916][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'. [ 347.148503][T16369] bond9: (slave erspan1): Releasing active interface [ 347.179108][T16369] bond5: (slave macvlan4): Removing an active aggregator [ 347.188360][T16369] bond5: (slave macvlan4): Releasing backup interface [ 347.264413][T16382] batadv0: entered promiscuous mode [ 347.281519][T16382] vlan2: entered promiscuous mode [ 347.432821][T16401] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2770'. [ 347.525069][T16401] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2770'. [ 347.899258][T16416] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 347.914531][T16417] tipc: Started in network mode [ 347.938597][T16417] tipc: Node identity c2f4ee3b4622, cluster identity 4711 [ 347.969223][T16417] tipc: Enabled bearer , priority 0 [ 348.035296][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 348.105488][T16425] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2775'. [ 348.114997][T16425] unsupported nlmsg_type 40 [ 348.282699][T16421] tipc: Disabling bearer [ 348.678133][T16434] net_ratelimit: 10 callbacks suppressed [ 348.678151][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.695141][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2778'. [ 348.864485][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 348.950081][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 349.345316][T16468] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2787'. [ 350.105117][T16497] tipc: Enabled bearer , priority 0 [ 350.116937][T16506] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 350.139438][T16516] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2799'. [ 350.244471][T16526] nft_compat: unsupported protocol 0 [ 350.301885][T16497] syzkaller0: entered promiscuous mode [ 350.310298][T16497] syzkaller0: entered allmulticast mode [ 350.318908][T16497] tipc: Resetting bearer [ 350.565220][ T802] tipc: Resetting bearer [ 350.613347][T13053] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.753994][T13053] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.778816][T16494] tipc: Resetting bearer [ 351.071078][T16559] netlink: 'syz.7.2810': attribute type 1 has an invalid length. [ 351.203371][T13053] tipc: Node number set to 2664724687 [ 352.413878][T16494] tipc: Disabling bearer [ 352.475781][T16554] syzkaller0: entered promiscuous mode [ 352.481357][T16554] syzkaller0: entered allmulticast mode [ 352.694480][T16571] netlink: 'syz.7.2813': attribute type 8 has an invalid length. [ 352.728320][T16571] __nla_validate_parse: 3 callbacks suppressed [ 352.728336][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2813'. [ 352.776743][T16571] bond0: entered promiscuous mode [ 352.781797][T16571] bond_slave_0: entered promiscuous mode [ 352.797268][T16571] bond_slave_1: entered promiscuous mode [ 352.816485][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 352.826279][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2814'. [ 352.836023][T16571] bond0: left promiscuous mode [ 352.842538][T16576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2814'. [ 352.843115][T16571] bond_slave_0: left promiscuous mode [ 352.861905][T16571] bond_slave_1: left promiscuous mode [ 354.412552][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.434333][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.528901][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.579477][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.669739][T16589] IPVS: Error connecting to the multicast addr [ 354.825388][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.841501][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.045539][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.067989][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.112306][T16626] veth1: mtu greater than device maximum [ 355.139760][T16625] macsec0: entered promiscuous mode [ 355.159210][T16625] macsec0: entered allmulticast mode [ 355.166468][T16625] veth1_macvtap: entered allmulticast mode [ 355.172767][T16625] macsec0: left promiscuous mode [ 355.200004][T16626] netlink: 'syz.7.2825': attribute type 1 has an invalid length. [ 355.208591][T16625] macsec0: left allmulticast mode [ 355.220841][T16625] veth1_macvtap: left allmulticast mode [ 355.356890][T16630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2827'. [ 355.366564][T16630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2827'. [ 355.479593][T16637] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 355.523924][T16637] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 355.549905][T16637] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.781684][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2831'. [ 356.689021][ T13] bond0 (unregistering): Released all slaves [ 356.789242][ T13] bond1 (unregistering): Released all slaves [ 356.805123][ T13] bond2 (unregistering): Released all slaves [ 356.819904][ T13] bond3 (unregistering): Released all slaves [ 356.929807][ T13] bond4 (unregistering): (slave vlan3): Releasing active interface [ 356.940621][ T13] bond4 (unregistering): Released all slaves [ 356.955838][ T13] bond5 (unregistering): Released all slaves [ 357.057360][ T13] bond6 (unregistering): Released all slaves [ 357.070029][T16650] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 357.105063][T16665] ip6tnl1: entered promiscuous mode [ 357.127382][T16665] ip6tnl1: entered allmulticast mode [ 357.134617][T16665] team0: Device ip6tnl1 is of different type [ 357.216373][T16659] tipc: Enabling of bearer rejected, failed to enable media [ 357.277337][ T13] : left promiscuous mode [ 357.381466][ T13] tipc: Disabling bearer [ 357.403982][ T13] tipc: Left network mode [ 357.740350][ T13] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 357.877571][T16700] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2843'. [ 357.917045][T16700] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2843'. [ 357.937451][T16699] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 357.956987][T16699] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 358.363852][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2845'. [ 358.385674][ T13] batadv_slave_0: left promiscuous mode [ 358.400416][ T13] hsr_slave_0: left promiscuous mode [ 358.411675][ T13] hsr_slave_1: left promiscuous mode [ 358.440794][ T13] veth1_macvtap: left promiscuous mode [ 358.446700][ T13] veth0_macvtap: left promiscuous mode [ 358.452267][ T13] veth1_vlan: left promiscuous mode [ 358.845179][ T802] smc: removing ib device syz0 [ 358.890153][T16718] FAULT_INJECTION: forcing a failure. [ 358.890153][T16718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.906518][T16718] CPU: 1 UID: 0 PID: 16718 Comm: syz.7.2848 Not tainted syzkaller #0 PREEMPT(full) [ 358.906542][T16718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.906552][T16718] Call Trace: [ 358.906569][T16718] [ 358.906577][T16718] dump_stack_lvl+0x189/0x250 [ 358.906601][T16718] ? __pfx____ratelimit+0x10/0x10 [ 358.906618][T16718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.906636][T16718] ? __pfx__printk+0x10/0x10 [ 358.906670][T16718] should_fail_ex+0x414/0x560 [ 358.906695][T16718] _copy_to_user+0x31/0xb0 [ 358.906716][T16718] simple_read_from_buffer+0xe1/0x170 [ 358.906743][T16718] proc_fail_nth_read+0x1b3/0x220 [ 358.906764][T16718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.906785][T16718] ? rw_verify_area+0x2a6/0x4d0 [ 358.906803][T16718] ? __lock_acquire+0xab9/0xd20 [ 358.906823][T16718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.906842][T16718] vfs_read+0x1fd/0xa30 [ 358.906860][T16718] ? fdget_pos+0x247/0x320 [ 358.906879][T16718] ? __pfx___mutex_lock+0x10/0x10 [ 358.906896][T16718] ? __pfx_vfs_read+0x10/0x10 [ 358.906917][T16718] ? __fget_files+0x2a/0x420 [ 358.906935][T16718] ? __fget_files+0x3a0/0x420 [ 358.906949][T16718] ? __fget_files+0x2a/0x420 [ 358.906972][T16718] ksys_read+0x145/0x250 [ 358.906993][T16718] ? __pfx_ksys_read+0x10/0x10 [ 358.907009][T16718] ? rcu_is_watching+0x15/0xb0 [ 358.907030][T16718] ? do_syscall_64+0xbe/0x3b0 [ 358.907051][T16718] do_syscall_64+0xfa/0x3b0 [ 358.907065][T16718] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.907081][T16718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.907097][T16718] ? clear_bhb_loop+0x60/0xb0 [ 358.907117][T16718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.907132][T16718] RIP: 0033:0x7fea73d8d5fc [ 358.907148][T16718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.907162][T16718] RSP: 002b:00007fea74cb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.907180][T16718] RAX: ffffffffffffffda RBX: 00007fea73fc5fa0 RCX: 00007fea73d8d5fc [ 358.907191][T16718] RDX: 000000000000000f RSI: 00007fea74cb40a0 RDI: 0000000000000004 [ 358.907201][T16718] RBP: 00007fea74cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 358.907212][T16718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.907221][T16718] R13: 00007fea73fc6038 R14: 00007fea73fc5fa0 R15: 00007ffed5840188 [ 358.907251][T16718] [ 359.506252][ T5918] syz0: Port: 1 Link DOWN [ 359.931161][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 360.763673][T16744] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.773626][T16747] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 361.678637][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2865'. [ 361.679121][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.737634][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2866'. [ 362.162823][T16795] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2870'. [ 362.656256][ T13] IPVS: stop unused estimator thread 0... [ 362.843313][T16808] !: renamed from dummy0 (while UP) [ 362.935911][T16813] sctp: [Deprecated]: syz.5.2876 (pid 16813) Use of int in max_burst socket option deprecated. [ 362.935911][T16813] Use struct sctp_assoc_value instead [ 363.223919][T16822] tipc: Enabled bearer , priority 0 [ 363.337798][T16808] tipc: Resetting bearer [ 363.344331][T16827] syzkaller0: entered promiscuous mode [ 363.350324][T16827] syzkaller0: entered allmulticast mode [ 363.366609][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 363.409160][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2881'. [ 363.421169][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 363.441872][T16807] tipc: Resetting bearer [ 363.461578][T16807] tipc: Disabling bearer [ 363.501592][T16833] erspan0: left allmulticast mode [ 363.523740][T16833] veth3: left promiscuous mode [ 363.576513][T16839] tipc: Enabled bearer , priority 0 [ 363.589415][T16835] tipc: Resetting bearer [ 363.612835][T16834] tipc: Disabling bearer [ 363.796593][T16849] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2884'. [ 363.850863][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 363.950623][T16842] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 363.989246][T16842] netlink: 'syz.3.2882': attribute type 2 has an invalid length. [ 364.024328][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2885'. [ 364.036319][T16842] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 364.267518][T16863] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 364.576106][T16867] netlink: 'syz.3.2888': attribute type 10 has an invalid length. [ 364.590815][T16867] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 364.603030][T16867] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 364.621593][T16867] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.637915][T16873] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2890'. [ 364.666649][T16873] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2890'. [ 364.692610][T16873] netlink: 'syz.5.2890': attribute type 5 has an invalid length. [ 364.735696][T16873] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2890'. [ 364.815465][T16864] veth0: entered promiscuous mode [ 364.962253][T16891] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2895'. [ 365.084408][T16862] veth0: left promiscuous mode [ 366.245660][T16945] netlink: 'syz.6.2908': attribute type 12 has an invalid length. [ 369.439069][T16958] tipc: Resetting bearer [ 369.517108][T16973] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 369.888437][T16991] dvmrp1: entered allmulticast mode [ 369.907573][T16994] __nla_validate_parse: 2 callbacks suppressed [ 369.907589][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2922'. [ 370.102647][T16991] dvmrp1: left allmulticast mode [ 370.682122][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2932'. [ 370.730792][T17040] netlink: 'syz.2.2934': attribute type 1 has an invalid length. [ 370.859709][T17050] batadv_slave_1: entered promiscuous mode [ 370.866490][T17050] vlan2: entered promiscuous mode [ 370.935097][T17052] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2938'. [ 370.998968][T17055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2940'. [ 371.029142][T17048] bond6: entered promiscuous mode [ 371.034410][T17048] bond6: entered allmulticast mode [ 371.040474][T17048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.180682][T17040] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.226008][T17040] bond7: entered promiscuous mode [ 371.245928][T17040] bond7: entered allmulticast mode [ 371.260995][T17040] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 371.290498][T17055] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 371.435363][T17064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2942'. [ 371.477036][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2942'. [ 371.649016][ T981] IPVS: starting estimator thread 0... [ 371.803692][T17082] IPVS: using max 26 ests per chain, 62400 per kthread [ 371.842937][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.851996][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.864468][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.878034][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.886590][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.100605][T17098] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 372.256875][T17098] bond1: entered promiscuous mode [ 372.262145][T17098] bond1: entered allmulticast mode [ 372.280046][T17099] bridge2: entered promiscuous mode [ 372.285542][T17099] bridge2: entered allmulticast mode [ 372.293765][T17099] bond1: (slave bridge2): making interface the new active one [ 372.301843][T17099] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 372.643964][T17115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.655326][T17124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2952'. [ 372.680824][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2952'. [ 373.028844][T17084] chnl_net:caif_netlink_parms(): no params data found [ 373.347973][T17154] macsec1: entered promiscuous mode [ 373.411555][T17154] team0: entered promiscuous mode [ 373.419681][T17154] team_slave_0: entered promiscuous mode [ 373.427929][T17154] team_slave_1: entered promiscuous mode [ 373.434196][T17154] macsec1: entered allmulticast mode [ 373.439751][T17154] team0: entered allmulticast mode [ 373.445183][T17154] team_slave_0: entered allmulticast mode [ 373.451003][T17154] team_slave_1: entered allmulticast mode [ 373.458005][T17154] team0: Device macsec1 is already an upper device of the team interface [ 373.472646][T17154] team0: left allmulticast mode [ 373.487737][T17154] team_slave_0: left allmulticast mode [ 373.498173][T17154] team_slave_1: left allmulticast mode [ 373.506444][T17154] team0: left promiscuous mode [ 373.511356][T17154] team_slave_0: left promiscuous mode [ 373.611776][T17154] team_slave_1: left promiscuous mode [ 373.925762][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.933438][ T5184] Bluetooth: hci3: command tx timeout [ 373.938748][T17182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2970'. [ 373.955673][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.003259][T17084] bridge_slave_0: entered allmulticast mode [ 374.047555][T17084] bridge_slave_0: entered promiscuous mode [ 374.077198][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.093731][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.112199][T17084] bridge_slave_1: entered allmulticast mode [ 374.136752][T17084] bridge_slave_1: entered promiscuous mode [ 374.417105][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.469591][T17204] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 374.490905][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.703236][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 374.824843][T17084] team0: Port device team_slave_0 added [ 374.886958][T17084] team0: Port device team_slave_1 added [ 374.963811][T17223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.000301][T17226] netlink: 'syz.7.2978': attribute type 83 has an invalid length. [ 375.039784][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.047151][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.073984][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.169311][T17231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.192992][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.211715][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.266133][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.416362][T17084] hsr_slave_0: entered promiscuous mode [ 375.428589][T17084] hsr_slave_1: entered promiscuous mode [ 375.442057][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 375.448591][T17084] Cannot create hsr debugfs directory [ 375.934731][ T56] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 375.945834][T17239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.946648][ T56] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 375.964732][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 375.973921][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.983962][ T56] Workqueue: events l2cap_info_timeout [ 375.989408][ T56] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 375.995292][ T56] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 14 5a 09 cc 66 66 66 66 66 66 2e [ 376.014881][ T56] RSP: 0018:ffffc900013a77a8 EFLAGS: 00010202 [ 376.020929][ T56] RAX: dffffc0000000000 RBX: ffffffff895a4bc8 RCX: 256a42d91eefd600 [ 376.028879][ T56] RDX: 0000000000000000 RSI: ffffffff895a4bc8 RDI: 000000000000004c [ 376.036834][ T56] RBP: ffffffff8a83e4c5 R08: 0000000000000001 R09: 0000000000000000 [ 376.044784][ T56] R10: dffffc0000000000 R11: ffffffff8a83e480 R12: 0000000000000000 [ 376.052742][ T56] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 376.060692][ T56] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 376.069598][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.076161][ T56] CR2: 00007ffcb4530fe8 CR3: 0000000059d26000 CR4: 00000000003526f0 [ 376.084114][ T56] Call Trace: [ 376.087378][ T56] [ 376.090287][ T56] __kasan_check_byte+0x12/0x40 [ 376.095126][ T56] lock_acquire+0x8d/0x360 [ 376.099532][ T56] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.104711][ T56] ? __cancel_work+0x254/0x2e0 [ 376.109459][ T56] lock_sock_nested+0x48/0x100 [ 376.114205][ T56] ? l2cap_sock_ready_cb+0x45/0x140 [ 376.119733][ T56] l2cap_sock_ready_cb+0x45/0x140 [ 376.124740][ T56] l2cap_conn_start+0x76d/0xe50 [ 376.129572][ T56] ? __pfx_l2cap_conn_start+0x10/0x10 [ 376.134921][ T56] ? __lock_acquire+0xab9/0xd20 [ 376.139754][ T56] ? __pfx___mutex_lock+0x10/0x10 [ 376.144763][ T56] ? process_scheduled_works+0x9ef/0x17b0 [ 376.150467][ T56] l2cap_info_timeout+0x68/0xa0 [ 376.155301][ T56] ? process_scheduled_works+0x9ef/0x17b0 [ 376.161017][ T56] process_scheduled_works+0xae1/0x17b0 [ 376.166549][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.172510][ T56] worker_thread+0x8a0/0xda0 [ 376.177089][ T56] kthread+0x70e/0x8a0 [ 376.181141][ T56] ? __pfx_worker_thread+0x10/0x10 [ 376.186229][ T56] ? __pfx_kthread+0x10/0x10 [ 376.190798][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.195987][ T56] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.201169][ T56] ? __pfx_kthread+0x10/0x10 [ 376.205742][ T56] ret_from_fork+0x3f9/0x770 [ 376.210311][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 376.215400][ T56] ? __switch_to_asm+0x39/0x70 [ 376.220148][ T56] ? __switch_to_asm+0x33/0x70 [ 376.224892][ T56] ? __pfx_kthread+0x10/0x10 [ 376.229462][ T56] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.234212][ T56] [ 376.237221][ T56] Modules linked in: [ 376.241319][ T56] ---[ end trace 0000000000000000 ]--- [ 376.248796][ T5184] Bluetooth: hci3: command 0x041b tx timeout [ 376.296593][ T56] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 376.302523][ T56] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 14 5a 09 cc 66 66 66 66 66 66 2e [ 376.322424][ T56] RSP: 0018:ffffc900013a77a8 EFLAGS: 00010202 [ 376.328520][ T56] RAX: dffffc0000000000 RBX: ffffffff895a4bc8 RCX: 256a42d91eefd600 [ 376.336888][ T56] RDX: 0000000000000000 RSI: ffffffff895a4bc8 RDI: 000000000000004c [ 376.346058][ T56] RBP: ffffffff8a83e4c5 R08: 0000000000000001 R09: 0000000000000000 [ 376.354138][T17259] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2988'. [ 376.363602][ T56] R10: dffffc0000000000 R11: ffffffff8a83e480 R12: 0000000000000000 [ 376.371577][ T56] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 376.412592][ T56] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 376.475124][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.481747][ T56] CR2: 000000110c37a945 CR3: 000000007ab56000 CR4: 00000000003526f0 [ 376.525112][ T56] Kernel panic - not syncing: Fatal exception [ 376.531436][ T56] Kernel Offset: disabled [ 376.535744][ T56] Rebooting in 86400 seconds..