last executing test programs: 2m42.742853868s ago: executing program 3 (id=752): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0xe20, @multicast1}, 0x10) (async) listen(r0, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x5, 0x3, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x23, 0x24, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x7, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) (async) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r14, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000700)={@private0, 0x0}, &(0x7f0000000740)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000780)={0x7b0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb65}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3967}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffdb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa2e0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x6, 0x8, 0x1}, {0xf800, 0x8, 0x4, 0x200}, {0x80, 0x4, 0x6, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b4e}}}]}}, {{0x8, 0x1, r15}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x7b0}, 0x1, 0x0, 0x0, 0x4}, 0x2000800) (async) listen(r1, 0x0) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) 2m42.016337226s ago: executing program 3 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x773, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x5, 0xe, 0x0, 0x8, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x2}, 0x8) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1}, 0x20040051) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380100003800c00018006000100000000000000018000001d57ed55ce15cd6ec5ec27800200ffff00000000010001000000000002007369743000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m41.759115716s ago: executing program 3 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f27d3e08f90a3ffe32f53baa749fe0790a0d0e1f76d056d656332eca6d822a42983bf3e45b0c80e2d273f6cbc7cb"], 0xfc}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r6, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c00020005000000000000000600050088a80000100004800c"], 0x90}, 0x1, 0xba01}, 0x810) 2m41.679815874s ago: executing program 3 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1a) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000000)="ab", 0xff04, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r2}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="a8000000", @ANYRESDEC, @ANYBLOB="10002abd7000fedbdf25020000000c00060003000000000000000c00060002000000000000000c0006000000000000000000700007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0100000008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x90) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) close(0x4) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="509c000000000000000814006772653000"/28], 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x22, 0xef6, 0x1}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r11, &(0x7f0000000200)={0x2c, 0x0, r12, 0xd, r13}, 0x10) bind$802154_raw(r11, &(0x7f0000000240), 0x14) 2m41.422139078s ago: executing program 3 (id=765): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='rpcb_register\x00', r3}, 0xfffffffffffffda8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r11, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 2m40.451608182s ago: executing program 3 (id=777): bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00028006"], 0x24}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="aaa61953fa29085f369aca4048ace6604764ee3c23b7789362757c769438f9226e2da81561c30e6a6aa310220b36c58ce04fd9c09f199bbc2fb8bbfda2d23c0ddf0cae7311eb89bdf06ad4cf25e24593bd3f935ee801f2b05808f2da1a7d58f69a7d4cd1b73ef7a6270490d5fc99fcf0f5c412c0e61ab4c234a527d57e8a33c952204d378812244c8b80e727c73da666dc7135b9829c89f75f1efec964fcd592fd95442704878b", @ANYRESOCT=r6], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='xen_mmu_set_pud\x00', r7, 0x0, 0xffffffffffff4dad}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m27.751504106s ago: executing program 2 (id=920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m27.568181338s ago: executing program 2 (id=923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000009f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m27.382741227s ago: executing program 2 (id=925): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffff80, 0x18}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x7, 0x1, 0xff, 0x320, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/92, 0x5c, 0x0, &(0x7f00000005c0)=""/16, 0x10}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x82, &(0x7f0000000400)=""/130, 0x40f00, 0x4, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x9, 0x2000}, 0x10, r6, 0x0, 0x0, &(0x7f0000000680)=[r1, r3, r1, r3, r3, 0xffffffffffffffff, r3, r3], 0x0, 0x10, 0x2}, 0x94) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000780)={0x8000, {{0xa, 0x4e23, 0x0, @remote, 0x2}}, {{0xa, 0x4e24, 0xb, @private2, 0x4}}}, 0x108) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000008c0)={"344795215afa6ddceece2b486ed96cf3", 0x0, 0x0, {0xffffffffffffffff, 0xd}, {0x4, 0x6}, 0x2, [0x661, 0x4, 0x4, 0x3, 0x8, 0x5ef1, 0x7, 0xb02, 0x7, 0x2, 0x9, 0x7fffffff, 0xa5c, 0x3, 0x80000000, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f00000009c0)={{r3}, r9, 0x0, @unused=[0xd16, 0xfffffffffffffffc, 0x0, 0x44c], @subvolid=0x1a}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f00000019c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200000, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x30}}, 0x4008010) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) unshare(0x2000e00) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r12, 0x4004743d, &(0x7f0000001bc0)=0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001c40)={'veth0\x00', &(0x7f0000001c00)=@ethtool_sset_info={0x37, 0xfffffff5, 0x3bd07166, [0x8, 0xb, 0x2, 0x80]}}) setsockopt$TIPC_MCAST_BROADCAST(r12, 0x10f, 0x85) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001d00)={r1, &(0x7f0000001c80)="77f310f5683847e0e433a24591cde361eafc2aeb18c80f682e696f8762974d61773fcfd3be33cc8ffd97bb4621f9780fda657ab8bc1d5fca0d6281ff1512b0cb804d2c444fa5e277e9a4e4eef9763a"}, 0x20) sendmsg$nl_route(r12, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@newnexthop={0x2c, 0x68, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4010) r13 = socket$can_bcm(0x1d, 0x2, 0x2) close(r13) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x37b6b000) 2m27.173413062s ago: executing program 2 (id=930): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) unshare(0x24020400) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff0000000069103c7f96446423eb6900000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2m27.017889709s ago: executing program 2 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000040)="4fc681dee3c1e5a021602e52d8746328f5fb855a4c707e8cd88c8c9c08b9b0711ed3ebf98472282d02899f64fef47e363411dbf164185a8cc7796d2d62154e399579439c", 0x44}, {&(0x7f0000000100)="dd6d58b1e74bbbcdb7a374c46e40f642758b7e6e312b0682226f57f7b58519c0aae014ac9a9d9cd66a9b", 0x2a}, {&(0x7f0000000140)="5bf48b2ac8f3f597f2beb70f4c9b7c2404768e0cffb0030360e81df460ac9d8038e18a9e9538a444100af0829dbc079f2a82cf6ba82998321efdf5ab4a94a669cc99d094671493c0326d4977e68c104754e2d04a81475d92962a2fd26aef72db91513fbaf56eb6d324a181bf18b896f961e6a9e588c5c7267f349b1a2700764e4d8ab8dc64b26df0660c7b8bb58672e15bc5254f65a7b44824dae9d2546ad998db43b8343a010d4be15d4aa326bb8efceec33f5629d5e37f12f465b680054cb4f076eb1eb23f8af54a660f21ab622d3639a4cf8b2c6dee91646ca2e71506b312564d4ab25afd555e66837eb3cb7f90987670a5b0cfbace", 0xf7}, {&(0x7f0000000240)="230be90e5ecd1911c6d602b68b86df8f0b4a75d944879e1dead4668e4195842a05b30ab03d73a1214be0fbf44f16cff77b31011b2eba429b71f861948d3b1c321b20eb9710b3f131651160c93730e5d20ff5302ff11854a4ac996c739739f7a10b6d073cd2dd4454bc1acad5b6a5250914d0892afc49c33a9e", 0x79}, {&(0x7f00000002c0)="7646643987c4ae7d3b180faedd911c0aa717e7e2153bcf80a2d41074e9a3fa64f003d4a94aa4c3a4f30ccc5bb973c46c3bb58a8ce2944eb4a09b21987b0d977fbc2e8558e693bdcc731653f3911ad503d5ef519c8ae4145f1b3319c1b8118f6aa94b900311511168a1b30aa65a6ea030cb75899bb1f1ad96e496d43ced6c13894f2dd2c9ab73ae50d9dc09f5fd7d3c5b57d6ddaeea41dfd408e240413ec85fa11b897b5ec5405c50caa89ff8aab14ed4bca3abd2639a2c4e4c3b12cbffb939acdc9bd19daf1fa5c58a6fb18510fc76d0c6", 0xd1}, {&(0x7f00000003c0)="548a78e24d96cdb2dc46250c63d4ccbb3daaf2d7264c0de0cf748d620a8af8aeb158088361d754d261bbcaced9178e42fd747c26ab352a4dd934ace815865054bc2481b61c669ade1986bbb43cc515dc8e5fcf76e96f6ee10850b88e2422711d203031d3ec48ee9ca53bbb21fed2e0ba5f4c83c19031ed6153717c4e53e0cf0618ff4c53c5d4fdfcd81adf9c295524edb6b1e58bae68bdd19e1dc4fd5a1058", 0x9f}, {&(0x7f0000000480)="d8844afd782ff6c0165578f050736e065c872fbfd98d70276d20d4308a1d6dd12f3d4dc8a0484c265220db69cb43656b472c88f8592b60f108e99765f08b8070a38987044c6f84d61f3d65200f4db979a1df60a3885c7e5ab68e0b431e50507b9f355e01df5735e0b744f3c43265aa3d98d6b067a79389defcb1934363d806b284365ec56af7b53503cef88eb4fd62bb0845f602f9a0b35cb01ae4a90f0a73fe90abe1edd09c463ac93a2332b96c75a7bc916a0e9700f07a4ff2e5229824d2bf8ec08f3e141b7a", 0xc7}, {&(0x7f00000007c0)="c71bc47c8a286d04b1309caab76f1072c723dbf58be977800a536c8bd59642f295b71956cbc67c876cd583da8df42486b41138392885328860bedda6759881b5012ebaa2b0526bcb90165832a3ba2c51", 0x50}, {&(0x7f0000000840)="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", 0x1000}], 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001e40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001940)={0x4b8, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "6333139f860869d7a4208f667f913222eab607446ca2b0bba397cb4acc32466f3a3bafbcf1c44e5e67160b060274dfaef6b488abb5855fcaf89b439da93c82b974db9da7746c60b58f4be6a514ccb05cba89b3c3271258c10900b2cf07a3a649c8a584329dc7b4b586729b995fabf4a42016a63c1917b39f4cb35d17c2f6a8026ccfbe951c"}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "944164"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x486}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x32c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "38f32a104088c472326a424e51cd6fa4830b108156b0aaba26fceec164b8cf4f6f23326d6bfb4b974d"}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "f79606a9474f75c15ac54d568525bb93a97b5f5792e31721ee705949d9b036d5c417ee5c27fa2ca7ab8a8eeea75fbc43ca0f6fec27935c32bdc144f3c22e4008bf3d25f7e460aee7b94b98ef486876f9c0f3857e05e73b1dd1785d786b7e10be369df7eb1d5fbcc11f8e46ff6526a23853bb1a4ffb408a7c2ca02f05989abd1fbac426057ce072224a8368b1a11ab50c1df33197c54e9f71ba706ed902d8ba57b31990564b4da95cdbfa76831eabf4712b7d2ee08a1ca4580bd86fadbabfc29f550f51a6f0ea462b2f01238b313055551eec4c"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7650}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '@##/(\xe6:,,%\'C\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb4}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "57dd90724a8b07f3913cdf2c95c6e1134081d50a860b8efb721f8d3b1a6203ce3ad4981cc29c8387782993d6c05dfd6f17144104f6f3d4bb224f1146d6bf1d9507e4006be3c150cf47ebf114560966eb23b3f5f8c92a90daf3f86863a010a5ac16b49f224e5830bb7500b89524938f9874cdf52cee14bb47b9a8d3c21bb011f9febadccded5677414a09d4d973221c868fe4d69adea9fa5ad0ce47529fd6af88172529cbe55f24a1c1139e29138e1b4fa6c335d8f4fec4580e7c5ce3882f23204ab119a661b8e6cf4dc51903"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_OURS={0xa0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "1231028b72ac736deaae010d156f3909de325aa357ec8b44fd71b200bd9d4d5875a3bc75aab4f112bb174822cfc5702265bd1b82ef849ba0298fea13d548d448371ea2ab665be674da0b89ed5a17878819d0757ff16f2f05e344144286c20bf8b2c7c6858b2ab982bbfb1ecd3c395ca19213c4f7d6db03e85a0797c9330982606bed894e39ce1b74ac98ba1cea11aa55d26b4d"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe3}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 2m26.91561689s ago: executing program 2 (id=934): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) 2m25.405733163s ago: executing program 32 (id=777): bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00028006"], 0x24}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="aaa61953fa29085f369aca4048ace6604764ee3c23b7789362757c769438f9226e2da81561c30e6a6aa310220b36c58ce04fd9c09f199bbc2fb8bbfda2d23c0ddf0cae7311eb89bdf06ad4cf25e24593bd3f935ee801f2b05808f2da1a7d58f69a7d4cd1b73ef7a6270490d5fc99fcf0f5c412c0e61ab4c234a527d57e8a33c952204d378812244c8b80e727c73da666dc7135b9829c89f75f1efec964fcd592fd95442704878b", @ANYRESOCT=r6], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='xen_mmu_set_pud\x00', r7, 0x0, 0xffffffffffff4dad}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m11.75876233s ago: executing program 33 (id=934): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) 3.962380217s ago: executing program 6 (id=1233): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e25, @multicast2}, 0x802, 0x4, 0x3, 0x4}}, 0x26) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="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", 0x7c2}, {0x0}], 0x2}}], 0x2, 0xc84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x1b, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x1b, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 3.684973759s ago: executing program 6 (id=1237): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2e, 0x6, 0xc, {0x1, @tcp_ip4_spec={@loopback, @multicast2, 0x4e21, 0x4e21, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0x4bf, 0xc62, [0x101, 0x8cb8]}, @tcp_ip6_spec={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x4e23, 0x10}, {0x0, @local, 0x9, 0x9, [0x2, 0xc10]}, 0x4, 0x6}}}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4300, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0xffffffff, &(0x7f0000000140)="79bcae9403d3012350be60a3c31b0d7a6e56c16392b4637119f46363d5914738fddd07f5f7b6115993fad45927598f82bc679a3cff25ddc3298b8697a403c409c068ec40941c215fa2a4ef8af56655b72144aee1150ff27363e4f1ca778b4a19927621c89bb186ba80a19b4ad43715e1168f9b50822377899eb4b7011a45e2ef460823cc0a7604ec9772b7566cbfd5055603f110e11eea3ed4c346148909503b72ae066a82261f546a9524d0ba95f415ee584fb163ab9cef671121947fadbfd4f6b8eb0faa3ca1b7224f5b00000000000000000000006cbb33e6cd4adfbe03b78d617dd6973dc6f39d9a24e006bf", 0xee) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x6, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x10, 0x80, 0x6, 0x261, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x64, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x40, 0x2, [{0x1, 0x4, "68c5"}, {0x5, 0xf, "042fc6909fd09208a64fd8f624"}, {0x7, 0x11, "1b1467208f35d293d6462ede18f65b"}, {0x5, 0x8, "8642e7679602"}, {0x7, 0x6, "ac9fdaea"}, {0x5, 0x6, "c3fa7b8d"}, {0xb, 0x2}]}, @noop]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f0000000240)=@raw=[@ldst={0x2, 0x2, 0x1, 0xa, 0x2, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xce}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x81}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x537}], &(0x7f0000000280)='GPL\x00', 0xf, 0xf1, &(0x7f00000002c0)=""/241, 0x41000, 0x72, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0xf, 0x7ce9}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x2, 0x8, 0xb}, {0x3, 0x1, 0x0, 0x3}, {0x4, 0x1, 0x9, 0x2}, {0x0, 0x1, 0x6, 0x7}, {0x2, 0x5, 0x8, 0x4}, {0x5, 0x1, 0x5}, {0x4, 0x1, 0x9, 0x7}], 0x10, 0x5}, 0x94) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x840) 3.175391635s ago: executing program 6 (id=1241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2.841604802s ago: executing program 6 (id=1247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x4020400) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000a00)=0x3, 0x4) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004890) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58}, 0x10) unshare(0x62040200) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xdf2, "8e8481"}, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000700000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 2.200252962s ago: executing program 6 (id=1255): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) tee(r1, 0xffffffffffffffff, 0x5, 0xa) (async) sendmsg$netlink(r0, 0x0, 0x0) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x30, r6, 0x8d61ddcfedb48df, 0x0, 0x2, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.10727402s ago: executing program 1 (id=1257): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0x0, 0x7, 0x1, 0xff, 0x3, [0x4b1e5a1e, 0x1c0, 0xb, 0x1]}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000480)={r7, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000000540)=0x84) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x0) (async, rerun: 64) r9 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) recvmmsg(r9, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) (rerun: 32) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x32}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (rerun: 32) 1.574341546s ago: executing program 4 (id=1262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffffffffffff000000000000000000000000000000000000000080bbc5cb324e18f7967ddb35610316ecebbd9391fde34354ab0734c8e8b3722352325a0f3893f99b1c7406eb8d16f6e71a6e72072eb8a8ab8b1871341c13efd9dab54fc469e06d44f7f8394b86b169e82dbcb55f32c296f784667ba3f3233a38776928e08af0835e60a8d1b3e59fefb160f47ccf24f62a90f5dea904f73f0602002edc492c0633e7b76fbb319ef64a5c46eb9484000000000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.522855544s ago: executing program 5 (id=1263): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x1003}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180)='v', 0x0}, 0x20) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@generic={0x0, 0xfffffffffffffffb, 0x8001}) (async) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r8, 0x40049409, r8) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x9, 0xfff3}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) (async) socket$nl_route(0x10, 0x3, 0x0) 1.491583659s ago: executing program 0 (id=1264): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x31) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x328}}, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000580000000000000005000000000000000100000008000b4000000000300004802c00018008000100636d70001c0002800c00038005000100ac000000080001400000000908000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r6, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff", 0x7c}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9", 0xb3}, {&(0x7f0000001400)="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", 0xf9e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}], 0x2}}], 0x2, 0x11) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 32) r9 = accept4(r6, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x8001, 0x37}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000780)={r10}, 0x8) (async) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.448887634s ago: executing program 4 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\t\x00'], 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2008c0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7fff, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x409, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) close(r0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\t\x00'], 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2008c0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x7fff, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x409, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) 1.374952713s ago: executing program 5 (id=1266): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001900)={0x0, 0x16, 0x4, 0x1000, @vifc_lcl_ifindex=r3, @loopback}, 0x10) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000038040000000800"/20, @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', r5, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) (async) socket$igmp6(0xa, 0x3, 0x2) 1.306681978s ago: executing program 0 (id=1267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e3000000000000000000deff0057c2bd837685b5c40000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107c000000000007000000000000009500000000000000c2058b8a6c0bfceb46af027f03bc71e36d8061adc1ef9ded15420ba2e71c5f9c2a0262b002b919d30bf6e40582d9bf2d5297b68be76034a956a2206a6a32739799c21d54fbc5872c160c839bd301d913fb01c103f3b7bd1bfc0b33d8e797b4d1c0c708924d567015fc2e3d41cc5b569e15f4aa714a39ec98610166acc7dac98e463acf5b168653e3f52528e394eaf7786d17e76c6709c15da46117f58366a9b60947ea042a00b313a6dc82"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1fffffc}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="c6d58b4591be9cfa4906bba432a1", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.301936729s ago: executing program 5 (id=1268): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x1d, @multicast2, 0x4e22, 0x1, 'sed\x00', 0x3, 0x6, 0x33}, 0x2c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x69, [0x1, 0x5, 0x4, 0x1, 0x100000000, 0x1], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/105}, &(0x7f0000000280)=0x78) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x404c851) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x50}, 0x4048040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb0, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb0}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff0000000000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x829}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2e}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000740)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c000}, 0x0) r7 = socket(0x3, 0x3, 0x8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r3) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000880), 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x150, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0fde601eff748e4e4d80df85d44abf75d8a8307553c6c5ad4059760fe461b9c70d446f79"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbdc7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x177}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbb5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa4}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff3d13}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x48044}, 0x4000001) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000b00)={0x80, {{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x88) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000c00)={0xff9, 0xb, 0x8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc8, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x24, 0x0, @random="2fef623d5ea10870dd9cf4370f1e7b0e1b49e50588d33e46e5b34fef06424092"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x6, 0x0, @random="cef4"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x46a77a069ffdd620}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8003}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000e80), r11) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000ec0)={0x0, 0x7f}, &(0x7f0000000f00)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000f40)={0x1, 0x3ff, 0x204, 0x9, 0x9, 0x26, 0x80, 0x0, r13}, &(0x7f0000000f80)=0x20) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4c) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000001240)={&(0x7f00000010c0), 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xec, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x21cb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2c95}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xe365}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2b45}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) 1.118984622s ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400ac1cfc94e85c3f35082168cb00000800dd22d37b00007658576f8bf149e2b3c089ec0dfd2abcedc868ad245159014f6fc43d581df235ad49dac0658a67156a9594e4144ecce80e39a75680987d05d14b04275e55285a49fbc9ef54ad2c7a2dd0b05795fb5702150eee07a6fb6113de8ae4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0000000000000000100010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b5090200a3b00000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0aadfb97300bf980000000000003608fffff3ffffff8500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)=@newtaction={0x150, 0x30, 0x53b, 0x1, 0x0, {}, [{0x13c, 0x1, [@m_nat={0x88, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x80000000, 0x20000000, 0x158f590e, 0xf}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x37, 0x6, "aba889fc4c797d665c3057a903a7e220e68ad3f049e6d7bd8ad2d665f5db1a3904c41a820e0a9c844e41cfdb31a0a4b35420a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xb0, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x670f3363}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x10001, 0x20000000, 0x1, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb1, 0x7, 0x0, 0x6f10a2ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x9, 0x0, 0xb3, 0xa6f}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xf, 0x2, 0x2, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x150}}, 0x80) 1.11151869s ago: executing program 5 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) bind$tipc(r1, &(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @dev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000814}, 0x4008001) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000780)={{r0}, "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"}) close(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x6, 0x10c, 0x800, {}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x1, 0x1, 0x0, 0x0, "4c60d68d02a6a234"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000740)) 1.067812902s ago: executing program 4 (id=1271): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 923.17681ms ago: executing program 0 (id=1272): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x1) (async) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x7) (async) accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400"/38], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) 910.898876ms ago: executing program 1 (id=1273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000001"], 0x38, 0x4000001}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x28, r2, 0x5, 0x0, 0x40000000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r10, 0x0, 0xfffffeea) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r11, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x6c, r11, 0x10, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r13}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0xc4) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt(r14, 0xc45, 0xfffffffc, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 910.186018ms ago: executing program 4 (id=1274): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54d58b10", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0004000000000000000c009000730d000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008850) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1f4, r2, 0x8, 0xad2d565, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6e, 0xa8, @random="157a1b244a3fe782e895adae9ee0be3875caad842971e54d4883b61385a93a173bcb857826307ff18470db3a94a68acfbbc36f1d28a42a7735323da89978102be8f38edb0991a37ebf3aa0433dd45a54cbd4e5d7eeafd0c19908bef3eb341e4b9240945e5f5d2dd8ddde"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf2f4}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x32, 0xa8, @random="4783cd704bafa76e8937eee55e82cc245fbdfa89d745fc001e700038c8c613a0e434ec6c744ea8c53f3c2b94bce9"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe5, 0xa8, @random="73ed674b9149437c12d4f80d7fbb954682b6ee46137e8c19258c2a3c675731786b665a16fbe92f4045826501dda6f0fbc12dd9506bc800eb7a664c33553ec989d6b7b17a25d28750c9c553728973b5951a7be36df260ceab5db39ede191cbe7bf08d697e06b276197f83122df4364766d8b4e10a5d68f3d0ef6042635768d91be33841abe5a95a977ab9356194c9ddf284e8307db1d87189d0ab196cdad6097ff1e4ed9cceb18e8ec02559610c6d9d0a0973da0858cc28805feea77546edd47bc813374628fc2d02f91b25e2f04d3908718bb92fdb4766dea9e3e4c84ddff7321f"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1a}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x94b, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x20000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x102a000, 0x1000, 0x4, 0x5}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) 843.23343ms ago: executing program 5 (id=1275): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004e00004c0000000000069078ac1e0001ac1e0001070f05ac1414bb000000000000000044100503000000000000000000000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000002946e600"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 714.99589ms ago: executing program 4 (id=1276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1eddff00000000000c0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x5452, &(0x7f0000000a00)={'geneve1\x00', @remote}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0xfffffc56, 0x0}, 0x2) r6 = accept(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000100)=0x80) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000001c0)=0x10, 0x4) close(r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100001040020b7020000000000000000", @ANYRES32=0x0, @ANYBLOB="244100009ce221b7240012800b00010065727370616e000014000280060002003000000006000e"], 0x44}, 0x1, 0x0, 0x0, 0x10008819}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) 714.055423ms ago: executing program 0 (id=1277): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket(0x840000000002, 0x3, 0xfa) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58) r4 = socket(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x8000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 625.080667ms ago: executing program 6 (id=1278): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000c80)={'ipvlan1\x00', &(0x7f0000000b80)=@ethtool_drvinfo={0x3, "b6a5a4c554b540f610881ddfc60c7c10be18a8a16e1fd36b19b498d996d2e6b1", "a0f5b5b9a6563713536a30f274de5a7be62afd1c93714b68f85659a4f8be4ae1", "53d063674ff30e6064e9f63d13bc359f93623f64dd4b0df3d38ef244e5eb57c4", "a6bceb100f1bcc066a312d29063a1ef04adedf160f1ab07016c4f7465c955a61", "4143967e44cb0bf2bffe750097e64bdeb49558d0cdb6a6324cf75d622f2be2d7", "e48958e49ee4338d590974d4", 0x7fff, 0x9, 0x8a, 0x5}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x3c4, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x3, 0x3, 0x0, 0x8]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38d, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0x7, 0x7}}, 0x6, @default, 0x600, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x6, 0x0, 0x16, 0xfffa}}, @void, @void, @void, @void, [{0xdd, 0x17, "2ef93526f79e50d3deed53741fa317da9f396bc5689395"}, {0xdd, 0xd7, "e00e6ec46dbc728b7f41522465035ec3120496498d0ee83a3677f8f40d9db173be7ba2a74ba275304c5a0dc09c7418c79a973816c6a75b9964d520546fa8266e49aa0dc90137447c6e1a59a7e6ff5fd9306ed921f41078b370a5ea342e9872e413c3535a48dcc577a266699412e0e7de85587b44b19516bfea9776fd008b2aebf6a969662f9abe178ca4aa2caa8f6f0dc5a67fcc1c411b6bba10d40c1656b0b109988dec368b37d9d2576b89d453adc016171d798badff30b0b6cfd8705d18c64ca46228da4076b7e2014d4e5aa49168cb860ddf18c000"}, {0xdd, 0x62, "e0443de58819900a09c3279762f040f8414295beb095eb4b55d3df07e70e637d805474828324d27e3415196337fbbbff379f3750706bba04632f8b1cb5ed00d2dbaf46a1121f3ee03abdee024061dec7b82e311e1da38a4aa2364fcb8ee2915319b3"}, {0xdd, 0x96, "e962ee0b2155418ffebaa505397e4255515bb19a6857d5d22244449349ee2e86e6c1e7645d0e138120bef6e1d790460fe85382caf35c8caa77e68f9dd90d90aefb1b483a53f8102ad38adeb33b14fcae884ed08833c511a6d388aa61ea6bb9f0881ae747097ecf84bcf98d920967657e38fff38cf4d1b551c0c21d18c793d8525c063eb281a5d977910f975cdde788c681a792ec1822"}, {0xdd, 0x58, "084f350397a590f4f6dc5d8389a0483442bda6b22ccce055088b66d33a70332ac692aa886503979b65668c1fc0a28782182b8707568e599d3d6a7333249befeae3332e06169a4efe6a09a535fdf618373130dc2ab30ff269"}, {0xdd, 0xba, "17687323f33fce548500a24d75ce5816203c7dc5c40989f269869d32e75d829122fcf57bfbc422399bbf8ac4355fca760725ca6151649769f84d4df298ea5730f16bf74eb797b6ebee7441bacd63f62a1595d2bdf6d2f450394e25584893545e01fa54a98ea8ab3323e33b6bf7325c9a8a6b098d14eee15147e9ca9321f7f4083b19f783f562e4c2c0a1da4a91fb534ed5d0962cf3272bb22aa87ab7d7b481836416bc99612886945d691273bd2b11f81bb2e07c6f79b27be092"}, {0xdd, 0x14, "9a76a979c4a40c034516cabc08dd7deaed95789d"}, {0xdd, 0x37, "0682321b7fdc12c4aeb282e018cdc0d33838e804f8646e55a642a0924e749a53d1eb318189aba803198477e9bdf6fdbfab731274190f3c"}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x90) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffff800, 0x6}, {0x7c}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 596.246876ms ago: executing program 1 (id=1279): syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="25b80000180c", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @private=0xa010100}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "475cfbcdae09c4723086e5215b8b056cd495721502b6a9b5", "70e01c7f0c0dce5d4a6e924e0680e0395eaf37b60e9797f4c6b67410989e9ad1"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1], 0x1c}}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x800020000000005) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@fwd={0xf}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0xa}, {0x8, 0x5}, {0x7, 0x2}]}, @float={0xd, 0x0, 0x0, 0x10, 0x10}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0xd}]}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0x4, [{0x10, 0x4, 0x4}, {0x7, 0x5, 0x100020}]}]}, {0x0, [0x61, 0x30, 0x0, 0x61]}}, &(0x7f00000000c0)=""/64, 0xbe, 0x40, 0x0, 0x7ee3, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x10001, '\x00', r1, r5, 0x2, 0x3, 0x5}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 359.526608ms ago: executing program 0 (id=1280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x3, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xc8}}, 0x0) 243.284822ms ago: executing program 1 (id=1281): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000076030000fcff00008500000086000000bf09000000000000550901008004000095b7ad4839000000bf91000006000000b70200000300000085000000c2000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 189.809659ms ago: executing program 5 (id=1282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x270bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 142.441951ms ago: executing program 4 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x5, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) (async) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x34, 0x0, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 141.676906ms ago: executing program 0 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x48) close(0x3) (async) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x22, 0x2, 0x3) (async) r4 = socket(0x22, 0x2, 0x3) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2062, 0x0) (async) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2062, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x1c, 0x24, 0x301, 0x70bd2a, 0x8000, {0x1}, [@typed={0x7, 0x133, 0x0, 0x0, @str=')-\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c883}, 0x2000c0c0) sendmmsg$inet(r3, &(0x7f0000006940)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf56}}], 0x18}}], 0x2, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, 0x0, &(0x7f0000000040)=0x6) 0s ago: executing program 1 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x8008) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 83.292049][ T5809] cgroup: Unknown subsys name 'net' [ 83.423335][ T5809] cgroup: Unknown subsys name 'cpuset' [ 83.432783][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.185948][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.006905][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.017937][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.025929][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.034179][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.042496][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.054617][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.063958][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.072496][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.082529][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.107568][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.113159][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.115755][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.122739][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.136924][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.152153][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.152200][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.169100][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.177152][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.177272][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.185930][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.194551][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.199872][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.207110][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.214467][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.234047][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.852707][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.924878][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.034959][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.193069][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.200939][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.208427][ T5833] bridge_slave_0: entered allmulticast mode [ 89.219898][ T5833] bridge_slave_0: entered promiscuous mode [ 89.263983][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.289998][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.297159][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.304566][ T5833] bridge_slave_1: entered allmulticast mode [ 89.311961][ T5833] bridge_slave_1: entered promiscuous mode [ 89.324910][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 89.342024][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.349362][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.356729][ T5824] bridge_slave_0: entered allmulticast mode [ 89.364493][ T5824] bridge_slave_0: entered promiscuous mode [ 89.410730][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.417901][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.425861][ T5824] bridge_slave_1: entered allmulticast mode [ 89.433739][ T5824] bridge_slave_1: entered promiscuous mode [ 89.518453][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.575691][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.591652][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.598986][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.607580][ T5828] bridge_slave_0: entered allmulticast mode [ 89.615036][ T5828] bridge_slave_0: entered promiscuous mode [ 89.631104][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.658547][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.665837][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.673154][ T5828] bridge_slave_1: entered allmulticast mode [ 89.680953][ T5828] bridge_slave_1: entered promiscuous mode [ 89.703222][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.801083][ T5833] team0: Port device team_slave_0 added [ 89.808664][ T5824] team0: Port device team_slave_0 added [ 89.846001][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.855331][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.862926][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.870334][ T5836] bridge_slave_0: entered allmulticast mode [ 89.877927][ T5836] bridge_slave_0: entered promiscuous mode [ 89.887415][ T5833] team0: Port device team_slave_1 added [ 89.895439][ T5824] team0: Port device team_slave_1 added [ 89.915682][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.924121][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.931491][ T5820] bridge_slave_0: entered allmulticast mode [ 89.938722][ T5820] bridge_slave_0: entered promiscuous mode [ 89.948882][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.974720][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.981996][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.989495][ T5836] bridge_slave_1: entered allmulticast mode [ 89.996832][ T5836] bridge_slave_1: entered promiscuous mode [ 90.058894][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.066445][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.074723][ T5820] bridge_slave_1: entered allmulticast mode [ 90.082167][ T5820] bridge_slave_1: entered promiscuous mode [ 90.116576][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.123795][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.150125][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.161175][ T5822] Bluetooth: hci1: command tx timeout [ 90.163875][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.167087][ T5822] Bluetooth: hci0: command tx timeout [ 90.174600][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.205326][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.217345][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.224454][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.250805][ T5822] Bluetooth: hci3: command tx timeout [ 90.257241][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.268712][ T5822] Bluetooth: hci2: command tx timeout [ 90.272052][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.281758][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.307901][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.329591][ T5822] Bluetooth: hci4: command tx timeout [ 90.339918][ T5828] team0: Port device team_slave_0 added [ 90.348922][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.388666][ T5828] team0: Port device team_slave_1 added [ 90.397429][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.438304][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.475872][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.483018][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.509311][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.522888][ T5836] team0: Port device team_slave_0 added [ 90.531798][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.581466][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.588552][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.615133][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.628793][ T5836] team0: Port device team_slave_1 added [ 90.695069][ T5820] team0: Port device team_slave_0 added [ 90.707617][ T5833] hsr_slave_0: entered promiscuous mode [ 90.714497][ T5833] hsr_slave_1: entered promiscuous mode [ 90.726873][ T5824] hsr_slave_0: entered promiscuous mode [ 90.733528][ T5824] hsr_slave_1: entered promiscuous mode [ 90.740090][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 90.745907][ T5824] Cannot create hsr debugfs directory [ 90.782543][ T5820] team0: Port device team_slave_1 added [ 90.831275][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.838286][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.864607][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.925343][ T5828] hsr_slave_0: entered promiscuous mode [ 90.932197][ T5828] hsr_slave_1: entered promiscuous mode [ 90.938335][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.944760][ T5828] Cannot create hsr debugfs directory [ 90.951688][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.958645][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.984787][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.016985][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.024467][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.051697][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.097691][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.105079][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.131264][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.314787][ T5836] hsr_slave_0: entered promiscuous mode [ 91.321746][ T5836] hsr_slave_1: entered promiscuous mode [ 91.328016][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 91.333907][ T5836] Cannot create hsr debugfs directory [ 91.363201][ T5820] hsr_slave_0: entered promiscuous mode [ 91.370470][ T5820] hsr_slave_1: entered promiscuous mode [ 91.377021][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 91.405165][ T5820] Cannot create hsr debugfs directory [ 91.775563][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.793851][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.830610][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.862169][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.966017][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.981092][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.992959][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.012060][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.123708][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.137747][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.155181][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.168169][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.239789][ T5822] Bluetooth: hci0: command tx timeout [ 92.240018][ T5827] Bluetooth: hci1: command tx timeout [ 92.282506][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.309670][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.319650][ T5827] Bluetooth: hci2: command tx timeout [ 92.320466][ T5822] Bluetooth: hci3: command tx timeout [ 92.348665][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.360529][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.374695][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.399305][ T5822] Bluetooth: hci4: command tx timeout [ 92.446848][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.492007][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.503344][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.525630][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.536562][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.554051][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.561545][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.580939][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.618042][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.625332][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.700522][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.709012][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.776754][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.784007][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.796677][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.803905][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.818971][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.936067][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.987061][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.998510][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.005781][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.028700][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.035990][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.088042][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.205599][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.252404][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.325297][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.332642][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.394503][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.422084][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.429409][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.482465][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.489781][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.500652][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.507816][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.545110][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.707712][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.734074][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.825874][ T5833] veth0_vlan: entered promiscuous mode [ 93.895951][ T5833] veth1_vlan: entered promiscuous mode [ 93.943686][ T5824] veth0_vlan: entered promiscuous mode [ 93.994076][ T5824] veth1_vlan: entered promiscuous mode [ 94.013166][ T5828] veth0_vlan: entered promiscuous mode [ 94.100462][ T5833] veth0_macvtap: entered promiscuous mode [ 94.124553][ T5828] veth1_vlan: entered promiscuous mode [ 94.164045][ T5833] veth1_macvtap: entered promiscuous mode [ 94.200209][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.225129][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.258642][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.284261][ T5828] veth0_macvtap: entered promiscuous mode [ 94.293278][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.303673][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.313920][ T5824] veth0_macvtap: entered promiscuous mode [ 94.323843][ T5822] Bluetooth: hci0: command tx timeout [ 94.323853][ T5827] Bluetooth: hci1: command tx timeout [ 94.327490][ T5824] veth1_macvtap: entered promiscuous mode [ 94.346144][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.356673][ T5828] veth1_macvtap: entered promiscuous mode [ 94.366628][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388219][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.399893][ T5822] Bluetooth: hci3: command tx timeout [ 94.400378][ T5827] Bluetooth: hci2: command tx timeout [ 94.464342][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.476835][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.487841][ T5827] Bluetooth: hci4: command tx timeout [ 94.489806][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.522942][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.563172][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595237][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604494][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.616995][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.628519][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.650452][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659456][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.668277][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.692095][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.701713][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.756582][ T5820] veth0_vlan: entered promiscuous mode [ 94.804618][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.819990][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.833482][ T5820] veth1_vlan: entered promiscuous mode [ 94.841552][ T5836] veth0_vlan: entered promiscuous mode [ 94.863246][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.878947][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.920369][ T5836] veth1_vlan: entered promiscuous mode [ 94.937796][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.953378][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.967297][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.033791][ T5820] veth0_macvtap: entered promiscuous mode [ 95.051713][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.068786][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.094585][ T5820] veth1_macvtap: entered promiscuous mode [ 95.129606][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.149804][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.183820][ T5836] veth0_macvtap: entered promiscuous mode [ 95.204489][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.223003][ T5836] veth1_macvtap: entered promiscuous mode [ 95.238280][ T5943] syz_tun: entered allmulticast mode [ 95.251044][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.314092][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.352383][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377464][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.388674][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399040][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.461378][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.515611][ T5942] syz_tun: left allmulticast mode [ 95.546408][ T3519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568486][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.602296][ T3519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.673264][ T3519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.693155][ T32] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.723180][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 96.113475][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.149871][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.346647][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.367535][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.401458][ T5827] Bluetooth: hci1: command tx timeout [ 96.407140][ T5827] Bluetooth: hci0: command tx timeout [ 96.427686][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.436832][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.479687][ T5822] Bluetooth: hci3: command tx timeout [ 96.485163][ T5822] Bluetooth: hci2: command tx timeout [ 96.520428][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.560080][ T5822] Bluetooth: hci4: command tx timeout [ 96.568239][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.573329][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 97.216981][ T24] cfg80211: failed to load regulatory.db [ 97.623493][ T6019] netlink: 248 bytes leftover after parsing attributes in process `syz.3.20'. [ 97.836904][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.965381][ T6025] netlink: 144 bytes leftover after parsing attributes in process `syz.1.22'. [ 98.001007][ T6025] netlink: 'syz.1.22': attribute type 3 has an invalid length. [ 98.045656][ T6025] syz_tun: entered allmulticast mode [ 98.297829][ T6031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.419749][ T6025] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.663997][ T6025] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.863653][ T6024] syz_tun: left allmulticast mode [ 99.021891][ T6026] netlink: 'syz.4.21': attribute type 6 has an invalid length. [ 100.819391][ T6099] warning: `syz.4.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.286894][ T6103] IPv6: addrconf: prefix option has invalid lifetime [ 101.662611][ T6121] netlink: 144 bytes leftover after parsing attributes in process `syz.0.39'. [ 101.751642][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 101.783978][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 101.819732][ T6125] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 101.859404][ T6125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.40'. [ 101.967036][ T6131] trusted_key: syz.4.41 sent an empty control message without MSG_MORE. [ 102.410009][ T6145] ip6t_REJECT: ECHOREPLY is not supported [ 102.432512][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.682904][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 102.715968][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 102.830252][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 103.365097][ T6183] syz_tun: entered allmulticast mode [ 103.381962][ T6185] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 103.400746][ T6182] syz_tun: left allmulticast mode [ 103.559904][ T6185] vlan2: entered allmulticast mode [ 103.562294][ T6198] netlink: 256 bytes leftover after parsing attributes in process `syz.1.59'. [ 103.656887][ T6202] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 103.676064][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.60'. [ 103.796476][ T6202] team0: Port device geneve0 added [ 104.009186][ T6219] syz.0.63 uses obsolete (PF_INET,SOCK_PACKET) [ 104.057879][ T6218] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 104.057898][ T6208] syzkaller1: entered promiscuous mode [ 104.072895][ T6218] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 104.110452][ T6208] syzkaller1: entered allmulticast mode [ 104.897025][ T6233] lo speed is unknown, defaulting to 1000 [ 104.913396][ T6233] lo speed is unknown, defaulting to 1000 [ 104.966850][ T6233] lo speed is unknown, defaulting to 1000 [ 105.122593][ T6233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.267350][ T6233] lo speed is unknown, defaulting to 1000 [ 105.317003][ T6233] lo speed is unknown, defaulting to 1000 [ 105.331351][ T6233] lo speed is unknown, defaulting to 1000 [ 105.394267][ T6233] lo speed is unknown, defaulting to 1000 [ 105.415080][ T6233] lo speed is unknown, defaulting to 1000 [ 105.747413][ T6263] lo speed is unknown, defaulting to 1000 [ 105.919419][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 106.075279][ T6267] vlan2: entered allmulticast mode [ 106.098988][ T6267] veth1: entered allmulticast mode [ 106.309065][ T6286] team_slave_0: entered promiscuous mode [ 106.315043][ T6286] team_slave_1: entered promiscuous mode [ 106.378564][ T6286] vlan2: entered promiscuous mode [ 106.403387][ T6286] team0: entered promiscuous mode [ 106.544410][ T6296] tipc: Failed to remove unknown binding: 66,1,1/0:2441571105/2441571107 [ 106.555426][ T6296] tipc: Failed to remove unknown binding: 66,1,1/0:2441571105/2441571107 [ 106.705408][ T6300] __nla_validate_parse: 8 callbacks suppressed [ 106.705428][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 106.729499][ T6300] netlink: 'syz.1.86': attribute type 20 has an invalid length. [ 106.755861][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 106.816799][ T6300] Zero length message leads to an empty skb [ 107.548247][ T6327] lo speed is unknown, defaulting to 1000 [ 107.928769][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 108.369009][ T6359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.483314][ T6359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.590840][ T6359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.671147][ T6359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.938854][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.988165][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.045931][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.154093][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.175017][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.115'. [ 109.518777][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 109.626376][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 109.741224][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 109.844604][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 109.903418][ T6415] syz_tun: entered allmulticast mode [ 109.940522][ T6413] syz_tun: left allmulticast mode [ 110.086079][ T6435] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 110.120505][ T6435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.128'. [ 110.162591][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 110.293127][ T6430] lo speed is unknown, defaulting to 1000 [ 110.841470][ T6463] pim6reg1: entered promiscuous mode [ 110.919258][ T6463] pim6reg1: entered allmulticast mode [ 111.195570][ T6478] lo speed is unknown, defaulting to 1000 [ 111.586046][ T6493] syzkaller1: entered promiscuous mode [ 111.592158][ T6493] syzkaller1: entered allmulticast mode [ 112.031457][ T6510] __nla_validate_parse: 2 callbacks suppressed [ 112.031477][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 112.053126][ T6510] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 112.107785][ T6510] bond1: (slave geneve2): making interface the new active one [ 112.116910][ T6510] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.127492][ T5924] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.167850][ T5924] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.208921][ T59] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.238839][ T6516] vxcan1: tx address claim with dest, not broadcast [ 112.253488][ T59] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.282912][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'. [ 112.426914][ T6521] sctp: [Deprecated]: syz.4.151 (pid 6521) Use of int in max_burst socket option deprecated. [ 112.426914][ T6521] Use struct sctp_assoc_value instead [ 112.471945][ T6523] tipc: Started in network mode [ 112.489358][ T6523] tipc: Node identity cad81ac2f3ba, cluster identity 4711 [ 112.542707][ T6523] tipc: Enabled bearer , priority 0 [ 112.558095][ T6531] syzkaller0: entered promiscuous mode [ 112.566097][ T6531] syzkaller0: entered allmulticast mode [ 112.828502][ T6539] tipc: Resetting bearer [ 112.910583][ T6522] tipc: Resetting bearer [ 112.956193][ T6522] tipc: Disabling bearer [ 113.237119][ T6556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.159'. [ 113.267471][ T6559] netlink: 'syz.2.163': attribute type 39 has an invalid length. [ 113.302001][ T6556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.159'. [ 113.356760][ T6559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.163'. [ 113.452329][ T6564] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 113.725359][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 113.967148][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 113.981376][ T6584] lo speed is unknown, defaulting to 1000 [ 114.072010][ T6582] bond1: entered promiscuous mode [ 114.128328][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.284726][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.300951][ T6592] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 114.310433][ T6598] netlink: 'syz.3.173': attribute type 8 has an invalid length. [ 114.321110][ T6592] bond1: (slave vcan0): Error -95 calling set_mac_address [ 114.333831][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 114.528022][ T6599] syzkaller0: entered promiscuous mode [ 114.542245][ T6599] syzkaller0: entered allmulticast mode [ 114.601238][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'. [ 114.775503][ T6619] netlink: 'syz.3.177': attribute type 3 has an invalid length. [ 115.045986][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 115.138237][ T6637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.196156][ T6637] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 115.207655][ T6639] Bluetooth: MGMT ver 1.23 [ 115.332255][ T6641] lo speed is unknown, defaulting to 1000 [ 115.712272][ T6667] netlink: 'syz.3.187': attribute type 22 has an invalid length. [ 115.777769][ T6672] netlink: 'syz.3.187': attribute type 22 has an invalid length. [ 115.937846][ T6678] netlink: 'syz.2.189': attribute type 11 has an invalid length. [ 116.018040][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.048012][ T6681] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 116.060796][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.072166][ T6657] bond0 (unregistering): Released all slaves [ 116.343173][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.585108][ T6683] bond1: (slave geneve2): making interface the new active one [ 116.607776][ T6683] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 116.618458][ T5487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.789369][ T6704] lo speed is unknown, defaulting to 1000 [ 117.130961][ T6722] lo speed is unknown, defaulting to 1000 [ 118.009854][ T6750] lo speed is unknown, defaulting to 1000 [ 118.018677][ T6754] lo speed is unknown, defaulting to 1000 [ 118.515488][ T6786] tipc: Started in network mode [ 118.549266][ T6786] tipc: Node identity , cluster identity 4711 [ 118.610380][ T6786] tipc: Failed to obtain node identity [ 118.669669][ T6786] tipc: Enabling of bearer rejected, failed to enable media [ 119.026202][ T6811] __nla_validate_parse: 6 callbacks suppressed [ 119.026223][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 119.408417][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 119.431939][ T6821] veth1_macvtap: left promiscuous mode [ 119.437501][ T6821] macsec0: entered allmulticast mode [ 120.050654][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 120.100633][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'. [ 120.131564][ T6846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'. [ 120.154809][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 120.334389][ T6844] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 120.541268][ T9] IPVS: starting estimator thread 0... [ 120.635941][ T6862] IPVS: using max 29 ests per chain, 69600 per kthread [ 120.685318][ T5995] IPVS: starting estimator thread 0... [ 120.702791][ T6871] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 120.793488][ T6873] IPVS: using max 24 ests per chain, 57600 per kthread [ 120.965752][ T6880] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20003 [ 121.336396][ T6886] tipc: Started in network mode [ 121.344934][ T6886] tipc: Node identity ac14142f, cluster identity 4711 [ 121.352971][ T6886] tipc: New replicast peer: 0.0.0.0 [ 121.364325][ T6886] tipc: Enabled bearer , priority 10 [ 121.372482][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 121.382872][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 121.405094][ T6893] dummy0: entered promiscuous mode [ 121.411488][ T6893] macsec1: entered promiscuous mode [ 121.418702][ T6893] macsec1: entered allmulticast mode [ 121.425180][ T6893] dummy0: entered allmulticast mode [ 121.435324][ T6889] tipc: New replicast peer: 255.255.255.255 [ 121.856434][ T6907] netlink: 'syz.2.234': attribute type 9 has an invalid length. [ 122.101380][ T6917] netlink: 'syz.0.239': attribute type 6 has an invalid length. [ 122.145656][ T6917] netlink: 'syz.0.239': attribute type 9 has an invalid length. [ 122.172725][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 122.234066][ T6927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.241'. [ 122.420444][ T6931] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 122.498512][ T9] tipc: Node number set to 2886997039 [ 122.730763][ T5822] Bluetooth: hci0: command tx timeout [ 122.947288][ T6939] bridge0: entered promiscuous mode [ 122.959605][ T6939] vlan2: entered promiscuous mode [ 123.093127][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.130450][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.150988][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.170437][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.695963][ T6966] lo speed is unknown, defaulting to 1000 [ 124.120386][ T6980] __nla_validate_parse: 9 callbacks suppressed [ 124.120407][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 124.137239][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 124.209459][ T6980] netlink: 'syz.4.253': attribute type 6 has an invalid length. [ 124.542441][ T6992] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 124.606536][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.669969][ T6998] bond2: entered promiscuous mode [ 124.686317][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 124.695966][ T7003] bridge_slave_1: left allmulticast mode [ 124.702289][ T7003] bridge_slave_1: left promiscuous mode [ 124.709652][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.744512][ T7003] bridge_slave_0: left allmulticast mode [ 124.765391][ T7003] bridge_slave_0: left promiscuous mode [ 124.790226][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.692153][ T7037] lo speed is unknown, defaulting to 1000 [ 125.744517][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.273'. [ 125.758137][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 125.767498][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 125.903063][ T7040] lo speed is unknown, defaulting to 1000 [ 126.101971][ T7053] lo speed is unknown, defaulting to 1000 [ 126.540762][ T7060] syzkaller1: entered promiscuous mode [ 126.584641][ T7060] syzkaller1: entered allmulticast mode [ 126.671192][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.279'. [ 126.763196][ T7079] netlink: 'syz.3.279': attribute type 13 has an invalid length. [ 126.810015][ T7079] netlink: 'syz.3.279': attribute type 17 has an invalid length. [ 127.136056][ T7079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.166644][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 127.186675][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 127.201364][ T7074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.310374][ T7081] lo speed is unknown, defaulting to 1000 [ 127.924292][ T7122] lo speed is unknown, defaulting to 1000 [ 127.982930][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 129.014597][ T7159] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 129.531894][ T7178] __nla_validate_parse: 2 callbacks suppressed [ 129.531915][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 129.567523][ T7181] sctp: [Deprecated]: syz.4.304 (pid 7181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.567523][ T7181] Use struct sctp_sack_info instead [ 129.607500][ T7173] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 129.621952][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 129.648551][ T7182] Illegal XDP return value 183 on prog (id 149) dev N/A, expect packet loss! [ 129.662885][ T7173] bond1 (unregistering): Released all slaves [ 129.784098][ T7188] batadv0: entered promiscuous mode [ 129.791142][ T7188] macsec1: entered promiscuous mode [ 129.803899][ T7188] batadv0: left promiscuous mode [ 129.888625][ T7192] pim6reg1: entered allmulticast mode [ 130.381703][ T5911] IPVS: starting estimator thread 0... [ 130.417434][ T7218] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 130.504119][ T7219] IPVS: using max 33 ests per chain, 79200 per kthread [ 130.744446][ T7206] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 130.760334][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.806228][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.920581][ T7232] bridge_slave_0: left promiscuous mode [ 130.945426][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.028870][ T7232] bridge_slave_1: left allmulticast mode [ 131.034998][ T7232] bridge_slave_1: left promiscuous mode [ 131.053268][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.125085][ T7232] team0: Port device team_slave_0 removed [ 131.157536][ T7232] team0: Port device team_slave_1 removed [ 131.167349][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.175681][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.187300][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.195402][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.208820][ T7232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.234052][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 131.547775][ T7243] syzkaller0: entered promiscuous mode [ 131.553843][ T7243] syzkaller0: entered allmulticast mode [ 131.841248][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 132.027477][ T5995] IPVS: starting estimator thread 0... [ 132.128917][ T7284] tipc: Started in network mode [ 132.135331][ T7284] tipc: Node identity ba35d001e081, cluster identity 4711 [ 132.142964][ T7283] IPVS: using max 28 ests per chain, 67200 per kthread [ 132.151194][ T7284] tipc: Enabled bearer , priority 0 [ 132.165849][ T7276] lo speed is unknown, defaulting to 1000 [ 132.240540][ T7286] syzkaller0: entered promiscuous mode [ 132.246503][ T7286] syzkaller0: entered allmulticast mode [ 132.285834][ T7279] lo speed is unknown, defaulting to 1000 [ 132.336867][ T7284] tipc: Resetting bearer [ 132.360713][ T7293] netlink: 'syz.0.332': attribute type 12 has an invalid length. [ 132.378353][ T7282] tipc: Resetting bearer [ 132.471688][ T7282] tipc: Disabling bearer [ 132.479433][ T5822] Bluetooth: hci0: command tx timeout [ 132.594123][ T7299] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 132.594996][ T7297] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.648610][ T7295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.684412][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'. [ 132.708854][ T7298] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 132.772117][ T7295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.861254][ T7295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.023360][ T7319] netlink: 'syz.2.340': attribute type 21 has an invalid length. [ 133.023377][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'. [ 133.057970][ T7319] netlink: 156 bytes leftover after parsing attributes in process `syz.2.340'. [ 133.082741][ T7310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.084576][ T7321] netlink: 'syz.2.340': attribute type 21 has an invalid length. [ 133.098749][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 133.132921][ T7295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.285097][ T7310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.388203][ T7310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.409920][ T1109] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.461405][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.470167][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.611087][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.636141][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.933957][ T7310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.049249][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.084948][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.108763][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.134969][ T7360] __nla_validate_parse: 5 callbacks suppressed [ 137.134992][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 137.151705][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.208945][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.239691][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.271033][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.448518][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.506173][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.526161][ T43] IPVS: starting estimator thread 0... [ 137.556930][ T5924] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.606778][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 137.634377][ T5924] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.649394][ T7378] IPVS: using max 27 ests per chain, 64800 per kthread [ 137.811126][ T7393] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 138.212191][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.319737][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 138.350109][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 138.686691][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.696189][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.736971][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.358'. [ 139.342574][ T7437] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 139.380618][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 139.465240][ T7440] lo speed is unknown, defaulting to 1000 [ 139.473270][ T7445] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.364'. [ 140.100357][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.367'. [ 140.733818][ T7488] lo speed is unknown, defaulting to 1000 [ 140.774088][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 142.005484][ T7541] lo speed is unknown, defaulting to 1000 [ 142.091504][ T7556] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 142.138732][ T7553] bridge1: entered promiscuous mode [ 142.144374][ T7553] bridge1: entered allmulticast mode [ 142.153936][ T7553] team0: Port device bridge1 added [ 142.959480][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 142.972061][ T7595] __nla_validate_parse: 3 callbacks suppressed [ 142.972080][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 143.066746][ T7600] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.087685][ T7606] batadv_slave_0: entered promiscuous mode [ 143.154288][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 143.174490][ T7596] netlink: 428 bytes leftover after parsing attributes in process `syz.2.406'. [ 143.195381][ T7596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.406'. [ 143.478622][ T7612] lo speed is unknown, defaulting to 1000 [ 143.479556][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 143.800021][ T7623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.415'. [ 144.006276][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 144.021741][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 144.055478][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 144.131465][ T7633] lo speed is unknown, defaulting to 1000 [ 144.147591][ T5904] IPVS: starting estimator thread 0... [ 144.253707][ T7646] IPVS: using max 27 ests per chain, 64800 per kthread [ 144.560942][ T6074] IPVS: stop unused estimator thread 0... [ 145.099164][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 145.236517][ T7678] lo speed is unknown, defaulting to 1000 [ 145.968284][ T7730] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 146.024141][ T7730] macsec1: left promiscuous mode [ 146.060334][ T7730] bond2: left promiscuous mode [ 146.068563][ T5883] lo speed is unknown, defaulting to 1000 [ 146.160053][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.178817][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.210802][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.274378][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.215728][ T7751] veth0_to_bridge: entered promiscuous mode [ 147.224270][ T7752] netlink: 'syz.4.447': attribute type 16 has an invalid length. [ 147.255257][ T7752] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 147.337065][ T7763] syzkaller1: entered promiscuous mode [ 147.346697][ T7760] Bluetooth: MGMT ver 1.23 [ 147.362846][ T7763] syzkaller1: entered allmulticast mode [ 147.422379][ T7762] lo speed is unknown, defaulting to 1000 [ 147.643681][ T7749] veth0_to_bridge: left promiscuous mode [ 147.846324][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 148.147511][ T7797] netlink: 'syz.4.459': attribute type 23 has an invalid length. [ 148.214344][ T7799] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 148.344718][ T7804] __nla_validate_parse: 9 callbacks suppressed [ 148.344739][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.461'. [ 148.391828][ T7810] syzkaller0: entered promiscuous mode [ 148.430456][ T7810] syzkaller0: entered allmulticast mode [ 148.647024][ T7813] lo speed is unknown, defaulting to 1000 [ 149.053162][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 149.243064][ T7842] bridge_slave_1: mtu less than device minimum [ 149.386702][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 149.421305][ T7844] netlink: 'syz.4.475': attribute type 39 has an invalid length. [ 150.036499][ T7844] veth0_macvtap: left promiscuous mode [ 150.743365][ T7846] netlink: 'syz.0.474': attribute type 13 has an invalid length. [ 150.852878][ T7846] netlink: 'syz.0.474': attribute type 17 has an invalid length. [ 152.327355][ T7846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.743682][ T7854] lo speed is unknown, defaulting to 1000 [ 153.072780][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 153.536904][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 153.660670][ T7893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.487'. [ 153.910757][ T7901] FAULT_INJECTION: forcing a failure. [ 153.910757][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.989529][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.4.489 Not tainted syzkaller #0 PREEMPT(full) [ 153.989570][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.989597][ T7901] Call Trace: [ 153.989605][ T7901] [ 153.989615][ T7901] dump_stack_lvl+0x189/0x250 [ 153.989658][ T7901] ? __pfx____ratelimit+0x10/0x10 [ 153.989689][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.989711][ T7901] ? __pfx__printk+0x10/0x10 [ 153.989734][ T7901] ? __might_fault+0xb0/0x130 [ 153.989770][ T7901] should_fail_ex+0x414/0x560 [ 153.989798][ T7901] _copy_from_user+0x2d/0xb0 [ 153.989830][ T7901] do_sock_getsockopt+0x17d/0x450 [ 153.989866][ T7901] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 153.989896][ T7901] ? do_syscall_64+0xa0/0xfa0 [ 153.989929][ T7901] ? __fget_files+0x2a/0x420 [ 153.989954][ T7901] ? __fget_files+0x3a0/0x420 [ 153.989977][ T7901] ? __fget_files+0x2a/0x420 [ 153.990009][ T7901] __x64_sys_getsockopt+0x1a5/0x250 [ 153.990039][ T7901] ? do_syscall_64+0xa0/0xfa0 [ 153.990073][ T7901] ? do_syscall_64+0xa0/0xfa0 [ 153.990109][ T7901] do_syscall_64+0xfa/0xfa0 [ 153.990139][ T7901] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.990170][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.990191][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 153.990273][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.990294][ T7901] RIP: 0033:0x7fee8038eec9 [ 153.990321][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.990339][ T7901] RSP: 002b:00007fee811db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 153.990361][ T7901] RAX: ffffffffffffffda RBX: 00007fee805e5fa0 RCX: 00007fee8038eec9 [ 153.990377][ T7901] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 153.990389][ T7901] RBP: 00007fee811db090 R08: 0000200000000100 R09: 0000000000000000 [ 153.990403][ T7901] R10: 00002000000017c0 R11: 0000000000000246 R12: 0000000000000001 [ 153.990415][ T7901] R13: 00007fee805e6038 R14: 00007fee805e5fa0 R15: 00007ffedd3c6df8 [ 153.990450][ T7901] [ 154.242486][ T7907] atomic_op ffff888027583998 conn xmit_atomic 0000000000000000 [ 154.350810][ T7909] dvmrp0: entered allmulticast mode [ 155.100609][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 155.395284][ T7939] lo speed is unknown, defaulting to 1000 [ 155.559381][ T7951] lo speed is unknown, defaulting to 1000 [ 155.737977][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 156.138503][ T7967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.507'. [ 156.343782][ T7974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.509'. [ 156.607145][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 156.690611][ T7984] netlink: 'syz.3.512': attribute type 4 has an invalid length. [ 156.842611][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 156.890069][ T7988] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 157.322848][ T8007] lo speed is unknown, defaulting to 1000 [ 157.323624][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 157.346929][ T8009] lo speed is unknown, defaulting to 1000 [ 157.447378][ T8012] bond2: entered promiscuous mode [ 157.452678][ T8012] bond2: entered allmulticast mode [ 157.462209][ T8012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.505168][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 158.237634][ T8052] vlan2: entered allmulticast mode [ 158.356839][ T8051] IPv6: sit1: Disabled Multicast RS [ 158.400629][ T8056] block nbd0: Unsupported socket: should be TCP or UNIX. [ 158.831431][ T8065] lo speed is unknown, defaulting to 1000 [ 160.081192][ T8109] siw: device registration error -23 [ 160.179500][ T8083] infiniband syz1: set down [ 160.184288][ T8083] infiniband syz1: added syz_tun [ 160.211765][ T8083] syz1: rxe_create_cq: returned err = -12 [ 160.217833][ T8083] infiniband syz1: Couldn't create ib_mad CQ [ 160.270629][ T8083] infiniband syz1: Couldn't open port 1 [ 160.379567][ T8083] RDS/IB: syz1: added [ 160.385727][ T8083] smc: adding ib device syz1 with port count 1 [ 160.402908][ T8106] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 160.451208][ T8083] smc: ib device syz1 port 1 has no pnetid [ 160.482330][ T8114] lo speed is unknown, defaulting to 1000 [ 160.503902][ T8115] lo speed is unknown, defaulting to 1000 [ 160.540077][ T8120] lo speed is unknown, defaulting to 1000 [ 161.967793][ T8130] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 161.992215][ T8130] k›*·: entered promiscuous mode [ 162.058571][ T8130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.288840][ T8133] __nla_validate_parse: 2 callbacks suppressed [ 162.288860][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 162.343733][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 163.873871][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 164.008259][ T8147] netlink: 'syz.3.559': attribute type 3 has an invalid length. [ 164.083573][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.561'. [ 164.105752][ T8154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.560'. [ 164.358818][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 164.438467][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 164.690710][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 164.793356][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 164.849613][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 164.979004][ T8170] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 164.988051][ T8173] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 165.137848][ T8179] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 165.155776][ T8180] lo speed is unknown, defaulting to 1000 [ 165.298966][ T8189] syzkaller0: entered promiscuous mode [ 165.304642][ T8189] syzkaller0: entered allmulticast mode [ 165.320857][ T8190] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 165.360102][ T8190] : entered promiscuous mode [ 166.069381][ T8211] vlan2: entered promiscuous mode [ 166.074625][ T8211] dummy0: entered promiscuous mode [ 166.261754][ T8221] lo speed is unknown, defaulting to 1000 [ 166.900711][ T8223] lo speed is unknown, defaulting to 1000 [ 167.310493][ T8244] __nla_validate_parse: 5 callbacks suppressed [ 167.310515][ T8244] netlink: 1 bytes leftover after parsing attributes in process `syz.1.579'. [ 168.048944][ T8266] syzkaller0: entered promiscuous mode [ 168.055222][ T8266] syzkaller0: entered allmulticast mode [ 168.063755][ T8264] tipc: Started in network mode [ 168.068673][ T8264] tipc: Node identity aec6495462b5, cluster identity 4711 [ 168.081712][ T8264] tipc: Enabled bearer , priority 0 [ 168.093548][ T8261] netlink: 'syz.0.589': attribute type 4 has an invalid length. [ 168.103400][ T8257] tipc: Resetting bearer [ 168.149492][ T8263] netlink: 'syz.0.589': attribute type 4 has an invalid length. [ 168.947164][ T8272] netlink: 88 bytes leftover after parsing attributes in process `syz.3.591'. [ 169.090221][ T43] tipc: Node number set to 3430107476 [ 169.282620][ T8257] tipc: Disabling bearer [ 169.803176][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.0.601'. [ 169.867094][ T8299] macvtap1: entered allmulticast mode [ 169.878356][ T8305] netlink: 'syz.4.603': attribute type 22 has an invalid length. [ 169.886614][ T8299] veth1_vlan: entered allmulticast mode [ 169.903109][ T8299] veth1_vlan: left allmulticast mode [ 169.967098][ T8304] lo speed is unknown, defaulting to 1000 [ 169.983724][ T8302] lo speed is unknown, defaulting to 1000 [ 170.077507][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 170.087424][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.602'. [ 170.102106][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 170.132782][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 170.277228][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.352125][ T8319] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 170.465984][ T8315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.782490][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 171.055694][ T8339] wg1: entered promiscuous mode [ 171.061894][ T8339] wg1: entered allmulticast mode [ 171.075542][ T8339] netlink: 2 bytes leftover after parsing attributes in process `syz.2.611'. [ 172.122845][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 172.191025][ T8380] lo speed is unknown, defaulting to 1000 [ 172.343690][ T8388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.625'. [ 172.386995][ T8390] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 172.395358][ T8390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.626'. [ 172.941374][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 172.990461][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 173.054540][ T8420] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 173.070009][ T8425] netlink: 240 bytes leftover after parsing attributes in process `syz.0.633'. [ 173.107565][ T8420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.157411][ T8425] netlink: 72 bytes leftover after parsing attributes in process `syz.0.633'. [ 173.180348][ T8428] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 173.213376][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 173.250354][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 173.648794][ T8452] netlink: 'syz.1.641': attribute type 21 has an invalid length. [ 173.657369][ T8452] netlink: 128 bytes leftover after parsing attributes in process `syz.1.641'. [ 173.727037][ T8452] netlink: 'syz.1.641': attribute type 4 has an invalid length. [ 173.752831][ T8452] netlink: 'syz.1.641': attribute type 3 has an invalid length. [ 173.772921][ T8452] netlink: 3 bytes leftover after parsing attributes in process `syz.1.641'. [ 174.655031][ T8499] lo speed is unknown, defaulting to 1000 [ 175.410834][ T8520] tipc: Enabled bearer , priority 0 [ 175.428264][ T8510] lo speed is unknown, defaulting to 1000 [ 175.434626][ T8517] syzkaller0: entered promiscuous mode [ 175.456840][ T8517] syzkaller0: entered allmulticast mode [ 175.530025][ T8511] lo speed is unknown, defaulting to 1000 [ 175.546405][ T8517] tipc: Resetting bearer [ 175.566584][ T8516] tipc: Resetting bearer [ 175.585763][ T8516] tipc: Disabling bearer [ 176.010103][ T8532] lo speed is unknown, defaulting to 1000 [ 176.053826][ T8537] netlink: 'syz.1.667': attribute type 3 has an invalid length. [ 177.570829][ T8575] vxcan1: entered allmulticast mode [ 177.879973][ T8575] __nla_validate_parse: 9 callbacks suppressed [ 177.879993][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 177.963276][ T8581] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.680'. [ 178.275413][ T8589] lo speed is unknown, defaulting to 1000 [ 178.539039][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.545089][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.551857][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.588639][ T8581] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.676473][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.692405][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.713720][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.831327][ T8602] lo speed is unknown, defaulting to 1000 [ 178.837226][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.868238][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.891775][ T8581] wg1 speed is unknown, defaulting to 1000 [ 178.900832][ T8581] wg1 speed is unknown, defaulting to 1000 [ 179.321573][ T8618] veth4: entered promiscuous mode [ 179.326678][ T8618] veth4: entered allmulticast mode [ 179.967696][ T8652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.698'. [ 180.212281][ T8665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.698'. [ 180.282087][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 180.537220][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 180.548880][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 180.635235][ T8696] siw: device registration error -23 [ 180.643338][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 180.689660][ T8694] netlink: 100 bytes leftover after parsing attributes in process `syz.0.705'. [ 180.758117][ T8700] netlink: 256 bytes leftover after parsing attributes in process `syz.3.710'. [ 180.781937][ T8658] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 180.845527][ T8701] lo speed is unknown, defaulting to 1000 [ 181.170647][ T8707] lo speed is unknown, defaulting to 1000 [ 181.255649][ T8710] lo speed is unknown, defaulting to 1000 [ 181.335624][ T8701] wg1 speed is unknown, defaulting to 1000 [ 181.733775][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.748032][ T8728] bond0: (slave rose0): Enslaving as an active interface with an up link [ 181.794732][ T8707] wg1 speed is unknown, defaulting to 1000 [ 181.915960][ T8733] netlink: 'syz.0.719': attribute type 14 has an invalid length. [ 181.961487][ T8733] bond1: option xmit_hash_policy: invalid value (11) [ 181.987142][ T8733] bond1 (unregistering): Released all slaves [ 182.224844][ T8710] wg1 speed is unknown, defaulting to 1000 [ 182.402236][ T8745] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 182.813640][ T8753] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 182.829903][ T8753] dvmrp1: linktype set to 768 [ 183.122934][ T8761] __nla_validate_parse: 3 callbacks suppressed [ 183.122954][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 183.227173][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 183.297796][ T8769] syz_tun: entered allmulticast mode [ 183.320570][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 183.353287][ T8769] syz_tun (unregistering): left allmulticast mode [ 183.378959][ T59] smc: removing ib device syz1 [ 183.519019][ T8778] Bluetooth: MGMT ver 1.23 [ 183.583085][ T8778] geneve3: entered promiscuous mode [ 183.604780][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 183.627092][ T8780] lo speed is unknown, defaulting to 1000 [ 183.653062][ T8780] wg1 speed is unknown, defaulting to 1000 [ 183.867326][ T8786] lo speed is unknown, defaulting to 1000 [ 183.882640][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 183.902035][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 184.049149][ T8786] wg1 speed is unknown, defaulting to 1000 [ 184.323259][ T8797] netlink: 'syz.3.740': attribute type 13 has an invalid length. [ 184.366491][ T8797] netlink: 'syz.3.740': attribute type 17 has an invalid length. [ 184.558117][ T8797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.078791][ T8811] openvswitch: netlink: IP tunnel dst address not specified [ 185.265343][ T8813] !: renamed from dummy0 (while UP) [ 185.370192][ T8807] lo speed is unknown, defaulting to 1000 [ 185.451947][ T8807] wg1 speed is unknown, defaulting to 1000 [ 186.524890][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.751'. [ 186.643996][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 186.706315][ T8873] netlink: 14 bytes leftover after parsing attributes in process `syz.1.751'. [ 186.715839][ T8840] lo speed is unknown, defaulting to 1000 [ 187.056173][ T8873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.078074][ T8873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.095617][ T8873] bond0 (unregistering): Released all slaves [ 187.147927][ T8840] wg1 speed is unknown, defaulting to 1000 [ 187.336357][ T8892] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 187.494855][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 187.617187][ T8910] netlink: 'syz.2.759': attribute type 6 has an invalid length. [ 187.972936][ T8922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.980523][ T8922] IPv6: NLM_F_CREATE should be set when creating new route [ 188.022764][ T8922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.030081][ T8922] IPv6: NLM_F_CREATE should be set when creating new route [ 188.430608][ T8939] __nla_validate_parse: 3 callbacks suppressed [ 188.430628][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 189.212373][ T8981] lo speed is unknown, defaulting to 1000 [ 189.242768][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 189.257628][ T8987] netlink: 'syz.4.782': attribute type 83 has an invalid length. [ 189.289692][ T8981] wg1 speed is unknown, defaulting to 1000 [ 189.305215][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 189.417789][ T8975] lo speed is unknown, defaulting to 1000 [ 189.442155][ T8975] wg1 speed is unknown, defaulting to 1000 [ 190.018990][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 190.142016][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 190.197820][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.789'. [ 190.340377][ T9024] netlink: 'syz.4.790': attribute type 13 has an invalid length. [ 190.354060][ T9020] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 190.607753][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.616439][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.821314][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.842623][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.888876][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.797'. [ 191.023754][ T9024] dummy0: left allmulticast mode [ 191.090584][ T5904] lo speed is unknown, defaulting to 1000 [ 191.107411][ T9048] bond0: (slave gre0): Error: Device type is different from other slaves [ 191.116224][ T5904] syz2: Port: 1 Link DOWN [ 191.157925][ T5924] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.178878][ T5924] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 191.199872][ T5924] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.229576][ T30] audit: type=1800 audit(1759847900.304:2): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="memory.events" dev="tmpfs" ino=701 res=0 errno=0 [ 191.261665][ T5924] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 191.288069][ T5924] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.297811][ T5924] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 191.307039][ T5924] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.320064][ T5924] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 191.438828][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 191.533474][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 191.544565][ T9053] syz.1.797 (9053) used greatest stack depth: 17848 bytes left [ 191.544839][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 192.453917][ T9121] wg1 speed is unknown, defaulting to 1000 [ 192.801322][ T9144] netlink: 'syz.4.828': attribute type 10 has an invalid length. [ 192.814442][ T9144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 193.039585][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 193.180585][ T9167] bridge2: port 1(veth5) entered blocking state [ 193.187169][ T9167] bridge2: port 1(veth5) entered disabled state [ 193.194119][ T9167] veth5: entered allmulticast mode [ 193.201290][ T9167] veth5: entered promiscuous mode [ 193.225882][ T9167] bridge2: port 2(veth0_to_bond) entered blocking state [ 193.234239][ T9167] bridge2: port 2(veth0_to_bond) entered disabled state [ 193.241789][ T9167] veth0_to_bond: entered allmulticast mode [ 193.250553][ T9167] veth0_to_bond: entered promiscuous mode [ 193.268129][ T9167] vlan2: entered allmulticast mode [ 193.273515][ T9167] veth1: entered allmulticast mode [ 193.278958][ T9167] bridge2: port 3(vlan2) entered blocking state [ 193.285697][ T9167] bridge2: port 3(vlan2) entered disabled state [ 193.294846][ T9167] vlan2: entered promiscuous mode [ 193.300015][ T9167] veth1: entered promiscuous mode [ 193.551903][ T9179] wg1 speed is unknown, defaulting to 1000 [ 193.591102][ T9183] __nla_validate_parse: 1 callbacks suppressed [ 193.591122][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 193.629026][ T9183] vxcan1 (unregistering): left allmulticast mode [ 193.925965][ T9192] wg1 speed is unknown, defaulting to 1000 [ 194.213300][ T9206] netlink: 'syz.2.847': attribute type 62 has an invalid length. [ 194.365873][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 194.376660][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 194.389899][ T9218] netlink: 336 bytes leftover after parsing attributes in process `syz.4.852'. [ 194.403186][ T9219] netlink: 336 bytes leftover after parsing attributes in process `syz.4.852'. [ 194.505409][ T9218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.778667][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 194.793683][ T9247] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 194.803738][ T9247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 194.815693][ T9247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 194.938088][ T9256] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 194.951108][ T9252] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 194.961309][ T9252] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 194.973100][ T9252] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 195.039793][ T9259] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 195.237304][ T9262] lo: entered allmulticast mode [ 195.245165][ T9262] siw: device registration error -23 [ 195.291419][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.301715][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.320560][ T9262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.350253][ T9261] lo: left allmulticast mode [ 195.908952][ T9282] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 196.083685][ T9290] netlink: 'syz.4.867': attribute type 2 has an invalid length. [ 196.103176][ T9290] netlink: 'syz.4.867': attribute type 8 has an invalid length. [ 196.677764][ T30] audit: type=1800 audit(1759847905.754:3): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.875" name="memory.events" dev="tmpfs" ino=992 res=0 errno=0 [ 196.950721][ T9323] wg1 speed is unknown, defaulting to 1000 [ 197.396484][ T9350] tipc: Invalid UDP bearer configuration [ 197.396580][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 197.676354][ T9357] ip6gretap1: entered promiscuous mode [ 198.721256][ T9386] geneve3: entered promiscuous mode [ 198.941429][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.990669][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.073786][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.105507][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.139874][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.158254][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.176808][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.195743][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.214376][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.232828][ T9391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.131209][ T9431] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 200.182812][ T9427] __nla_validate_parse: 14 callbacks suppressed [ 200.182834][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 200.210875][ T9434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.419287][ T9438] wg1 speed is unknown, defaulting to 1000 [ 200.883631][ T9459] xt_CT: No such helper "netbios-ns" [ 200.914280][ T9460] kthread_run failed with err -4 [ 201.006790][ T9467] netlink: 'syz.1.914': attribute type 9 has an invalid length. [ 201.015923][ T9467] netlink: 'syz.1.914': attribute type 7 has an invalid length. [ 201.051008][ T9467] netlink: 'syz.1.914': attribute type 8 has an invalid length. [ 201.068154][ T9467] netlink: 'syz.1.914': attribute type 9 has an invalid length. [ 201.076101][ T9467] netlink: 'syz.1.914': attribute type 7 has an invalid length. [ 201.084647][ T9467] netlink: 'syz.1.914': attribute type 8 has an invalid length. [ 201.273230][ T9474] wg1 speed is unknown, defaulting to 1000 [ 201.385608][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.398261][ T9479] erspan0: entered promiscuous mode [ 201.406962][ T9479] erspan0: left promiscuous mode [ 201.599995][ T9488] team0: No ports can be present during mode change [ 201.655717][ T9489] wg1 speed is unknown, defaulting to 1000 [ 201.702605][ T9485] macvtap0: entered allmulticast mode [ 201.708160][ T9485] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 201.728872][ T9485] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 202.017527][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.0.928'. [ 202.073959][ T9515] syzkaller1: entered promiscuous mode [ 202.085523][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 202.090038][ T9515] syzkaller1: entered allmulticast mode [ 202.271016][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.932'. [ 202.386593][ T9533] mac80211_hwsim hwsim9 ªªªªª;: renamed from wlan0 [ 202.476863][ T9537] netlink: 'syz.1.936': attribute type 7 has an invalid length. [ 202.484961][ T9537] netlink: 'syz.1.936': attribute type 3 has an invalid length. [ 202.492962][ T9537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.936'. [ 202.626809][ T9549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.940'. [ 202.640386][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.940'. [ 202.772188][ T9554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.941'. [ 202.821829][ T9554] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 202.841767][ T9554] netlink: 208 bytes leftover after parsing attributes in process `syz.1.941'. [ 202.852843][ T9554] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 203.024260][ T9563] wg1 speed is unknown, defaulting to 1000 [ 203.128220][ T9564] wg1 speed is unknown, defaulting to 1000 [ 203.638951][ T9602] wg1 speed is unknown, defaulting to 1000 [ 203.730436][ T9609] sctp: [Deprecated]: syz.1.955 (pid 9609) Use of int in max_burst socket option deprecated. [ 203.730436][ T9609] Use struct sctp_assoc_value instead [ 203.963737][ T9617] n: entered promiscuous mode [ 204.192307][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.231095][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.243149][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.252186][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.262139][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.330959][ T9630] wg1 speed is unknown, defaulting to 1000 [ 204.373763][ T9625] wg1 speed is unknown, defaulting to 1000 [ 204.790757][ T9655] NCSI netlink: No device for ifindex 813332851 [ 205.055907][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 205.251785][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.261714][ T9687] __nla_validate_parse: 8 callbacks suppressed [ 205.261733][ T9687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.974'. [ 205.269517][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.283344][ T9687] block nbd0: not configured, cannot reconfigure [ 205.285714][ T9625] bridge_slave_0: entered allmulticast mode [ 205.303002][ T9625] bridge_slave_0: entered promiscuous mode [ 205.312067][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.319428][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.326702][ T9625] bridge_slave_1: entered allmulticast mode [ 205.334888][ T9625] bridge_slave_1: entered promiscuous mode [ 205.468447][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.492892][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.553791][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 205.572750][ T9625] team0: Port device team_slave_0 added [ 205.590641][ T9625] team0: Port device team_slave_1 added [ 205.658802][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.673100][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.700142][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.719563][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.726639][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.753153][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.927331][ T9625] hsr_slave_0: entered promiscuous mode [ 205.934946][ T9625] hsr_slave_1: entered promiscuous mode [ 205.942116][ T9625] debugfs: 'hsr0' already exists in 'hsr' [ 205.947968][ T9625] Cannot create hsr debugfs directory [ 206.303312][ T9723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.984'. [ 206.314154][ T9625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.321464][ T5827] Bluetooth: hci5: command tx timeout [ 206.354260][ T9625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.374131][ T9625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.388410][ T9625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.396476][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 206.454646][ T9733] netlink: 260 bytes leftover after parsing attributes in process `syz.1.987'. [ 206.481132][ T9733] netlink: 260 bytes leftover after parsing attributes in process `syz.1.987'. [ 206.519782][ T9738] FAULT_INJECTION: forcing a failure. [ 206.519782][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.583957][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.4.988 Not tainted syzkaller #0 PREEMPT(full) [ 206.583986][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.583999][ T9738] Call Trace: [ 206.584007][ T9738] [ 206.584016][ T9738] dump_stack_lvl+0x189/0x250 [ 206.584054][ T9738] ? __pfx____ratelimit+0x10/0x10 [ 206.584084][ T9738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.584105][ T9738] ? __pfx__printk+0x10/0x10 [ 206.584126][ T9738] ? __might_fault+0xb0/0x130 [ 206.584162][ T9738] should_fail_ex+0x414/0x560 [ 206.584188][ T9738] _copy_from_user+0x2d/0xb0 [ 206.584219][ T9738] __sys_bpf+0x1e3/0x860 [ 206.584257][ T9738] ? __pfx___sys_bpf+0x10/0x10 [ 206.584303][ T9738] ? ksys_write+0x22a/0x250 [ 206.584328][ T9738] ? __pfx_ksys_write+0x10/0x10 [ 206.584357][ T9738] __x64_sys_bpf+0x7c/0x90 [ 206.584383][ T9738] do_syscall_64+0xfa/0xfa0 [ 206.584412][ T9738] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.584447][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.584468][ T9738] ? clear_bhb_loop+0x60/0xb0 [ 206.584493][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.584513][ T9738] RIP: 0033:0x7fee8038eec9 [ 206.584537][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.584553][ T9738] RSP: 002b:00007fee811db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.584582][ T9738] RAX: ffffffffffffffda RBX: 00007fee805e5fa0 RCX: 00007fee8038eec9 [ 206.584616][ T9738] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 206.584629][ T9738] RBP: 00007fee811db090 R08: 0000000000000000 R09: 0000000000000000 [ 206.584642][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.584654][ T9738] R13: 00007fee805e6038 R14: 00007fee805e5fa0 R15: 00007ffedd3c6df8 [ 206.584690][ T9738] [ 206.788081][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.838733][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.871543][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.878746][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.923820][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.931270][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.940214][ T9742] validate_nla: 1 callbacks suppressed [ 206.940232][ T9742] netlink: 'syz.1.990': attribute type 9 has an invalid length. [ 207.188314][ T9757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.993'. [ 207.352700][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.680680][ T9780] netlink: 'syz.1.1000': attribute type 12 has an invalid length. [ 207.707160][ T9625] veth0_vlan: entered promiscuous mode [ 207.720909][ T9625] veth1_vlan: entered promiscuous mode [ 207.763551][ T9625] veth0_macvtap: entered promiscuous mode [ 207.775190][ T9625] veth1_macvtap: entered promiscuous mode [ 207.802614][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.821350][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.832740][ T9784] netlink: 'syz.1.1002': attribute type 15 has an invalid length. [ 207.856255][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.868399][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.884544][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.895945][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.026864][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.041600][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.061808][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 208.078451][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.095516][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.118841][ T9794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1004'. [ 208.148759][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 208.162721][ T9794] nbd: must specify a size in bytes for the device [ 208.216780][ T9796] netlink: 'syz.1.1005': attribute type 13 has an invalid length. [ 208.225039][ T9796] netlink: 'syz.1.1005': attribute type 17 has an invalid length. [ 208.301209][ T9796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.321175][ T9802] xfrm0: entered promiscuous mode [ 208.326271][ T9802] xfrm0: entered allmulticast mode [ 208.401584][ T5827] Bluetooth: hci5: command tx timeout [ 208.442227][ T9808] wg1 speed is unknown, defaulting to 1000 [ 208.449713][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058f59800: rx timeout, send abort [ 208.460143][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058f59800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.255055][ T9830] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 209.303108][ T9830] bond0 (unregistering): Released all slaves [ 209.728404][ T9863] wg1 speed is unknown, defaulting to 1000 [ 209.735195][ T9865] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 209.913986][ T9865] bond3: entered promiscuous mode [ 209.985878][ T9865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.124183][ T9877] bond3: (slave bridge4): making interface the new active one [ 210.149598][ T9877] bridge4: entered promiscuous mode [ 210.180061][ T9877] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 210.480162][ T5142] Bluetooth: hci5: command tx timeout [ 210.728778][ T9894] __nla_validate_parse: 5 callbacks suppressed [ 210.728799][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 210.762491][ T9895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1031'. [ 211.276513][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1034'. [ 211.520634][ T9924] netlink: 'syz.1.1036': attribute type 15 has an invalid length. [ 211.528908][ T9925] netlink: 'syz.1.1036': attribute type 15 has an invalid length. [ 211.788416][ T9934] wg1 speed is unknown, defaulting to 1000 [ 211.861984][ T9935] netlink: 'syz.5.1038': attribute type 4 has an invalid length. [ 211.914100][ T9934] netlink: 'syz.5.1038': attribute type 4 has an invalid length. [ 211.922351][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 211.922418][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 211.922456][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 212.570392][ T51] Bluetooth: hci5: command tx timeout [ 212.697472][ T9963] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 212.700936][ T9964] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 213.096849][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 213.149296][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 213.165908][ T9986] netlink: 'syz.1.1050': attribute type 4 has an invalid length. [ 213.201533][ T9990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1050'. [ 213.311823][ T9992] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1051'. [ 213.339361][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1051'. [ 213.364108][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1051'. [ 214.799379][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 214.839899][T10021] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1059'. [ 215.247546][T10042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.254909][T10042] IPv6: NLM_F_CREATE should be set when creating new route [ 215.262245][T10042] IPv6: NLM_F_CREATE should be set when creating new route [ 215.269544][T10042] IPv6: NLM_F_CREATE should be set when creating new route [ 215.294283][T10042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.302793][T10045] tipc: Started in network mode [ 215.307708][T10045] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 215.324739][T10045] tipc: Enabling of bearer rejected, failed to enable media [ 215.538869][T10054] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 215.924432][ T9] IPVS: starting estimator thread 0... [ 216.035788][T10071] IPVS: using max 27 ests per chain, 64800 per kthread [ 216.084696][T10081] __nla_validate_parse: 3 callbacks suppressed [ 216.084715][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1075'. [ 216.109960][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 216.411695][T10088] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1077'. [ 216.505347][T10089] siw: device registration error -23 [ 216.649026][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.760545][T10088] team0 (unregistering): Port device team_slave_0 removed [ 216.772479][T10088] team0 (unregistering): Port device team_slave_1 removed [ 216.846949][T10099] pimreg: entered allmulticast mode [ 216.859518][T10099] pimreg: left allmulticast mode [ 216.941378][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 216.951178][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.958439][T10105] IPv6: NLM_F_CREATE should be set when creating new route [ 217.047281][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 217.078272][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.087401][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 217.104235][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.114576][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 217.127277][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.135052][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 217.144281][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.152101][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 217.188582][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.200493][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.208170][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.216083][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.235930][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.243679][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.251322][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.258920][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.271431][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.278944][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.292869][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.301515][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.309874][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.317506][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.326130][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.379633][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.388192][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.397114][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.405307][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.413028][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.441891][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.467731][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.520638][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.535267][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.550680][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.558169][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.599508][ T5827] Bluetooth: hci0: command tx timeout [ 217.605337][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.625177][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.640608][T10131] delete_channel: no stack [ 217.765649][T10133] netlink: 'syz.5.1091': attribute type 3 has an invalid length. [ 217.790564][T10133] syz_tun: entered allmulticast mode [ 217.801471][T10136] wg1 speed is unknown, defaulting to 1000 [ 217.930724][T10134] 0ªX¹¦À: renamed from caif0 [ 217.938657][T10134] 0ªX¹¦À: entered allmulticast mode [ 217.944213][T10134] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 217.976877][T10133] syz_tun: left allmulticast mode [ 218.019496][T10141] syzkaller0: entered promiscuous mode [ 218.025151][T10141] syzkaller0: entered allmulticast mode [ 218.215537][T10149] syzkaller0: left allmulticast mode [ 218.459516][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.485213][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.494090][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.503665][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.516372][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.618904][T10175] wg1 speed is unknown, defaulting to 1000 [ 218.800667][T10195] netlink: 'syz.5.1102': attribute type 1 has an invalid length. [ 218.932132][T10200] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 218.966639][T10200] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 218.991674][T10200] unsupported nla_type 58 [ 219.028304][T10191] wg1 speed is unknown, defaulting to 1000 [ 219.030255][T10203] vlan0: entered promiscuous mode [ 219.209346][T10207] syzkaller0: entered promiscuous mode [ 219.219206][T10207] syzkaller0: entered allmulticast mode [ 219.610141][T10175] chnl_net:caif_netlink_parms(): no params data found [ 219.816857][T10224] netlink: 'syz.1.1109': attribute type 30 has an invalid length. [ 219.898721][T10224] bond0: option arp_missed_max: invalid value (0) [ 219.908308][T10224] bond0: option arp_missed_max: allowed values 1 - 255 [ 219.917595][T10224] bond0 (unregistering): Released all slaves [ 219.952261][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.959765][T10175] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.966974][T10175] bridge_slave_0: entered allmulticast mode [ 219.984806][T10175] bridge_slave_0: entered promiscuous mode [ 219.997787][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.006577][T10175] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.016560][T10175] bridge_slave_1: entered allmulticast mode [ 220.024713][T10175] bridge_slave_1: entered promiscuous mode [ 220.148449][T10175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.164677][T10175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.215888][T10236] netlink: 'syz.1.1112': attribute type 13 has an invalid length. [ 220.452390][T10248] tipc: Can't bind to reserved service type 1 [ 220.462093][T10248] netlink: 'syz.5.1117': attribute type 39 has an invalid length. [ 220.560090][ T51] Bluetooth: hci6: command tx timeout [ 220.565590][T10251] netlink: 'syz.5.1117': attribute type 5 has an invalid length. [ 220.749159][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.757124][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.091062][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.115115][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.318168][T10175] team0: Port device team_slave_0 added [ 221.382459][T10251] vlan2: entered allmulticast mode [ 221.414894][ T9] wg1 speed is unknown, defaulting to 1000 [ 221.422269][ T49] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.432126][ T9] syz0: Port: 1 Link DOWN [ 221.441261][T10175] team0: Port device team_slave_1 added [ 221.504120][ T49] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.512903][ T49] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.523094][T10250] wg1 speed is unknown, defaulting to 1000 [ 221.545064][ T49] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.571163][T10175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.578916][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.618971][T10175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.664537][T10175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.672818][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.722302][T10175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.892890][T10175] hsr_slave_0: entered promiscuous mode [ 221.900527][T10175] hsr_slave_1: entered promiscuous mode [ 221.907025][T10175] debugfs: 'hsr0' already exists in 'hsr' [ 221.913525][T10175] Cannot create hsr debugfs directory [ 222.425429][T10296] __nla_validate_parse: 39 callbacks suppressed [ 222.425451][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 222.536498][T10175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.565850][T10175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.591778][T10175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.625588][T10175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.639700][ T51] Bluetooth: hci6: command tx timeout [ 222.723017][T10311] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1133'. [ 222.948866][T10175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.004464][T10175] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.078371][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.085601][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.142229][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.149487][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.180457][T10324] bridge0: port 3(veth0_to_bridge) entered blocking state [ 223.188079][T10324] bridge0: port 3(veth0_to_bridge) entered disabled state [ 223.202329][T10324] veth0_to_bridge: entered allmulticast mode [ 223.225184][T10324] veth0_to_bridge: entered promiscuous mode [ 223.659716][T10343] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1141'. [ 223.716737][T10343] veth3: entered promiscuous mode [ 223.845314][T10175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.493597][T10360] syz_tun: entered allmulticast mode [ 224.555706][T10364] syz_tun: left allmulticast mode [ 224.562167][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 224.589379][T10364] netlink: 'syz.5.1147': attribute type 10 has an invalid length. [ 224.603158][T10364] bridge0: port 3(macsec0) entered blocking state [ 224.621673][T10364] bridge0: port 3(macsec0) entered disabled state [ 224.628390][T10364] macsec0: entered allmulticast mode [ 224.665480][T10364] veth1_macvtap: entered allmulticast mode [ 224.689396][T10364] macsec0: entered promiscuous mode [ 224.704257][T10364] bridge0: port 3(macsec0) entered blocking state [ 224.711092][T10364] bridge0: port 3(macsec0) entered forwarding state [ 224.720299][ T51] Bluetooth: hci6: command tx timeout [ 224.853035][T10175] veth0_vlan: entered promiscuous mode [ 224.908238][T10175] veth1_vlan: entered promiscuous mode [ 224.975520][T10175] veth0_macvtap: entered promiscuous mode [ 224.990218][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 225.003014][T10175] veth1_macvtap: entered promiscuous mode [ 225.120694][T10175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.164888][T10175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.219920][ T3519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.234204][ T3519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.252358][ T3519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.292081][ T3519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.314002][T10385] bond0: (slave gre0): Error: Device type is different from other slaves [ 225.448126][T10395] netlink: 'syz.5.1156': attribute type 30 has an invalid length. [ 225.526217][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.550151][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.648101][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.682323][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.942767][ T30] audit: type=1800 audit(1759847935.024:4): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1153" name="memory.events" dev="tmpfs" ino=1303 res=0 errno=0 [ 226.114113][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1089'. [ 226.380985][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1161'. [ 226.408793][T10419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.616576][T10436] netlink: 'syz.4.1163': attribute type 15 has an invalid length. [ 226.743011][T10441] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 226.764995][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'. [ 226.774860][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'. [ 226.799224][ T51] Bluetooth: hci6: command tx timeout [ 226.926790][T10443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1163'. [ 227.333067][T10448] wg1 speed is unknown, defaulting to 1000 [ 227.511164][T10471] __nla_validate_parse: 1 callbacks suppressed [ 227.511184][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1175'. [ 227.639417][T10478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.057628][T10498] geneve2: entered promiscuous mode [ 228.216996][T10497] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.254102][T10493] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1181'. [ 228.465760][T10497] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.596777][T10497] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.674826][T10497] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.832174][ T7413] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.891162][ T5924] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.930154][ T5924] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.051172][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 229.115949][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1189'. [ 229.139282][T10533] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1189'. [ 229.158611][T10533] netlink: 'syz.6.1189': attribute type 6 has an invalid length. [ 229.173424][T10533] netlink: 'syz.6.1189': attribute type 5 has an invalid length. [ 229.181442][T10533] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1189'. [ 229.194369][T10523] bond1 (unregistering): Released all slaves [ 229.309879][T10528] netlink: 'syz.6.1189': attribute type 4 has an invalid length. [ 229.329781][ T3519] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.371362][T10528] netlink: 'syz.6.1189': attribute type 4 has an invalid length. [ 229.617157][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1192'. [ 229.774006][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1194'. [ 229.779713][T10553] netlink: 'syz.1.1191': attribute type 62 has an invalid length. [ 229.786418][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1194'. [ 229.806826][T10549] bridge0: entered promiscuous mode [ 229.816245][T10549] bridge0: left promiscuous mode [ 229.839047][T10551] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 229.851934][T10554] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 229.866258][T10552] vlan2: entered allmulticast mode [ 229.872078][T10556] netlink: 'syz.5.1194': attribute type 16 has an invalid length. [ 229.884018][T10552] veth1: entered allmulticast mode [ 230.004022][T10555] wg1 speed is unknown, defaulting to 1000 [ 314.320116][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 329.681496][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 343.166136][T10589] netlink: 'syz.5.1202': attribute type 1 has an invalid length. [ 343.331968][T10591] bond1: (slave geneve2): making interface the new active one [ 343.376291][T10591] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 343.388051][ T1109] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.410485][ T1109] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.462034][ T1109] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.477149][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1209'. [ 343.507281][ T1109] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.524244][T10615] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 343.547047][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 343.604026][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1207'. [ 343.803252][T10621] tipc: Started in network mode [ 343.873072][T10621] tipc: Node identity , cluster identity 4711 [ 343.889772][T10621] tipc: Failed to obtain node identity [ 343.907248][T10621] tipc: Enabling of bearer rejected, failed to enable media [ 343.954020][T10636] netlink: 'syz.5.1211': attribute type 10 has an invalid length. [ 343.983346][T10635] syzkaller0: entered promiscuous mode [ 343.988898][T10635] syzkaller0: entered allmulticast mode [ 344.144425][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.170265][T10636] bond0: (slave team0): Enslaving as an active interface with an up link [ 344.208978][T10635] tipc: MTU too low for tipc bearer [ 344.221499][T10645] netlink: 'syz.6.1214': attribute type 1 has an invalid length. [ 344.511384][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 344.513463][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1220'. [ 344.526818][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 344.538846][T10663] netlink: 'syz.1.1216': attribute type 6 has an invalid length. [ 344.872648][T10684] netlink: 'syz.6.1226': attribute type 1 has an invalid length. [ 345.141128][T10694] netlink: 'syz.0.1228': attribute type 15 has an invalid length. [ 345.153467][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1229'. [ 345.203215][T10702] Bluetooth: MGMT ver 1.23 [ 345.740325][T10725] tipc: Started in network mode [ 345.758230][T10725] tipc: Node identity , cluster identity 4711 [ 345.787245][T10725] tipc: Failed to obtain node identity [ 345.802660][T10725] tipc: Enabling of bearer rejected, failed to enable media [ 345.883433][T10727] syzkaller0: entered promiscuous mode [ 345.893367][T10727] syzkaller0: entered allmulticast mode [ 346.194513][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1241'. [ 346.219398][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1241'. [ 346.228410][T10737] netlink: 58 bytes leftover after parsing attributes in process `syz.6.1241'. [ 346.330129][T10743] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 346.337942][T10743] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 346.593029][T10762] netlink: 'syz.1.1249': attribute type 12 has an invalid length. [ 346.635198][T10755] wg1 speed is unknown, defaulting to 1000 [ 346.748188][T10763] wg1 speed is unknown, defaulting to 1000 [ 346.890737][T10774] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 346.935349][T10774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.252834][T10791] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.316247][T10795] bond4: (slave gretap1): making interface the new active one [ 347.326668][T10795] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 347.385954][T10792] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.633028][T10792] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.733869][T10792] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.833348][T10792] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.207001][T10839] syzkaller0: entered promiscuous mode [ 348.212957][T10839] syzkaller0: entered allmulticast mode [ 348.379584][ T5924] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.392620][ T5924] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.443247][T10854] validate_nla: 1 callbacks suppressed [ 348.443266][T10854] netlink: 'syz.5.1275': attribute type 8 has an invalid length. [ 348.470879][ T5924] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.488486][ T5924] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.519444][T10854] bond0: entered promiscuous mode [ 348.528147][T10854] bond_slave_0: entered promiscuous mode [ 348.546387][T10860] netlink: 'syz.5.1275': attribute type 8 has an invalid length. [ 348.554331][T10860] __nla_validate_parse: 8 callbacks suppressed [ 348.554347][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 348.554837][T10854] bond_slave_1: entered promiscuous mode [ 348.582810][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 348.607834][T10854] team0: entered promiscuous mode [ 348.629525][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 348.638479][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 348.657036][T10854] team_slave_0: entered promiscuous mode [ 348.665065][T10854] team_slave_1: entered promiscuous mode [ 348.689791][T10854] bond0: left promiscuous mode [ 348.699484][T10854] bond_slave_0: left promiscuous mode [ 348.721459][T10854] bond_slave_1: left promiscuous mode [ 348.735594][T10854] team0: left promiscuous mode [ 348.749327][T10854] team_slave_0: left promiscuous mode [ 348.755166][T10854] team_slave_1: left promiscuous mode [ 348.787308][T10860] bond0: entered promiscuous mode [ 348.795184][T10860] bond_slave_0: entered promiscuous mode [ 348.803229][T10860] bond_slave_1: entered promiscuous mode [ 348.810418][T10860] team0: entered promiscuous mode [ 348.816987][T10860] team_slave_0: entered promiscuous mode [ 348.830216][T10860] team_slave_1: entered promiscuous mode [ 348.840360][T10860] bond0: left promiscuous mode [ 348.845261][T10860] bond_slave_0: left promiscuous mode [ 348.851116][T10860] bond_slave_1: left promiscuous mode [ 348.856666][T10860] team0: left promiscuous mode [ 348.861644][T10860] team_slave_0: left promiscuous mode [ 348.868812][T10860] team_slave_1: left promiscuous mode [ 348.888704][T10877] syz.4.1276 (10877) used obsolete PPPIOCDETACH ioctl [ 348.896067][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1280'. [ 348.915935][T10868] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1278'. [ 348.999629][T10878] wg1 speed is unknown, defaulting to 1000 [ 349.184742][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1281'. [ 349.270383][T10898] netlink: 'syz.0.1284': attribute type 13 has an invalid length. [ 349.282418][T10900] siw: device registration error -23 [ 349.290142][T10901] netlink: 'syz.0.1284': attribute type 13 has an invalid length. [ 349.366733][ T31] INFO: task syz.2.934:9532 blocked for more than 143 seconds. [ 349.386351][ T31] Not tainted syzkaller #0 [ 349.401096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.423735][ T31] task:syz.2.934 state:D stack:27208 pid:9532 tgid:9530 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 349.443954][ T31] Call Trace: [ 349.447652][ T31] [ 349.453327][ T31] __schedule+0x1798/0x4cc0 [ 349.458227][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.464193][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.470243][ T31] ? __pfx___schedule+0x10/0x10 [ 349.475362][ T31] ? schedule+0x91/0x360 [ 349.480262][ T31] schedule+0x165/0x360 [ 349.485715][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.491847][ T31] __mutex_lock+0x7e6/0x1350 [ 349.496565][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.501787][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 349.507797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.513189][ T31] ? __nlmsg_put+0xef/0x1b0 [ 349.518025][ T31] ? genlmsg_put+0x137/0x2e0 [ 349.523555][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 349.529711][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 349.536121][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 349.541759][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 349.547565][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.554023][ T31] ? stack_trace_save+0x9c/0xe0 [ 349.559278][ T31] genl_rcv_msg+0x60e/0x790 [ 349.564117][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.569563][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 349.575975][ T31] netlink_rcv_skb+0x208/0x470 [ 349.582057][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.588588][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.594049][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.600476][ T31] ? down_read+0x1ad/0x2e0 [ 349.605678][ T31] genl_rcv+0x28/0x40 [ 349.609963][ T31] netlink_unicast+0x82f/0x9e0 [ 349.615036][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 349.620683][ T31] ? netlink_sendmsg+0x642/0xb30 [ 349.625948][ T31] ? skb_put+0x11b/0x210 [ 349.630485][ T31] netlink_sendmsg+0x805/0xb30 [ 349.635514][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.641187][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.646420][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.652144][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.657848][ T31] __sock_sendmsg+0x21c/0x270 [ 349.662960][ T31] ____sys_sendmsg+0x505/0x830 [ 349.668139][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.673851][ T31] ? import_iovec+0x74/0xa0 [ 349.678682][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 349.683913][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.690361][ T31] ? __fget_files+0x2a/0x420 [ 349.695441][ T31] ? __fget_files+0x3a0/0x420 [ 349.700479][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 349.705728][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.711569][ T31] ? do_syscall_64+0xbe/0xfa0 [ 349.716542][ T31] do_syscall_64+0xfa/0xfa0 [ 349.721699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.727367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.733867][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.738836][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.745138][ T31] RIP: 0033:0x7f17fe58eec9 [ 349.749981][ T31] RSP: 002b:00007f17fc7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.758651][ T31] RAX: ffffffffffffffda RBX: 00007f17fe7e5fa0 RCX: 00007f17fe58eec9 [ 349.767102][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 349.775817][ T31] RBP: 00007f17fe611f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.784129][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.793462][ T31] R13: 00007f17fe7e6038 R14: 00007f17fe7e5fa0 R15: 00007ffe62bac118 [ 349.801849][ T31] [ 349.805167][ T31] [ 349.805167][ T31] Showing all locks held in the system: [ 349.814521][ T31] 1 lock held by khungtaskd/31: [ 349.850238][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.889296][ T31] 4 locks held by kworker/u8:2/32: [ 349.913649][ T31] #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 349.964968][ T31] #1: ffffc90000a87ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.021215][ T31] #2: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 350.039152][ T31] #3: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 350.049432][ T31] 2 locks held by kworker/u8:3/49: [ 350.055138][ T31] 3 locks held by kworker/u9:0/51: [ 350.060536][ T31] #0: ffff88807c126148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.071703][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.084780][ T31] #2: ffff88802f038dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 350.095058][ T31] 2 locks held by kworker/u8:4/59: [ 350.101541][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.113591][ T31] #1: ffffc9000210fba0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.126083][ T31] 2 locks held by getty/5581: [ 350.131007][ T31] #0: ffff88802ff7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.141139][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 350.151594][ T31] 3 locks held by kworker/0:9/7342: [ 350.156910][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.170317][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 350.177021][ T31] #1: ffffc90003327ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.190033][ T31] #2: ffff88801e3e9240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 350.201216][ T31] 3 locks held by kworker/u8:11/7413: [ 350.206637][ T31] #0: ffff88802f154948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.218553][ T31] #1: ffffc9000aeb7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.231772][ T31] #2: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 350.241540][ T31] 2 locks held by syz.3.777/8969: [ 350.246885][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.255568][ T31] #1: ffffffff8e41f788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 350.266029][ T31] 2 locks held by syz.2.934/9532: [ 350.271244][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.279735][ T31] #1: ffffffff8e41f788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 350.289999][ T31] 3 locks held by kworker/1:14/10256: [ 350.295512][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.306931][ T31] #1: ffffc9000daefba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.318398][ T31] #2: ffffffff8e1402c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 350.330247][ T31] 2 locks held by syz.6.1278/10868: [ 350.335522][ T31] #0: ffff88823bf3acc8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 350.345974][ T31] #1: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 350.357538][ T31] 1 lock held by syz.5.1282/10893: [ 350.363009][ T31] #0: ffff888067e61908 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 350.373841][ T31] 2 locks held by syz.5.1282/10900: [ 350.379149][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 350.388602][ T31] #1: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 350.398817][ T31] 1 lock held by syz.0.1284/10898: [ 350.404763][ T31] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 350.414171][ T31] 2 locks held by syz.0.1284/10901: [ 350.419531][ T31] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 350.428774][ T31] #1: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 350.440014][ T31] 2 locks held by syz.1.1285/10907: [ 350.445286][ T31] #0: ffffffff8f9f1c08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 350.455045][ T31] #1: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 350.464456][ T31] [ 350.466811][ T31] ============================================= [ 350.466811][ T31] [ 350.502997][ T31] NMI backtrace for cpu 1 [ 350.503021][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 350.503045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.503058][ T31] Call Trace: [ 350.503067][ T31] [ 350.503076][ T31] dump_stack_lvl+0x189/0x250 [ 350.503108][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.503131][ T31] ? __pfx__printk+0x10/0x10 [ 350.503168][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 350.503198][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 350.503228][ T31] ? __pfx__printk+0x10/0x10 [ 350.503255][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.503290][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 350.503318][ T31] watchdog+0xf93/0xfe0 [ 350.503349][ T31] ? watchdog+0x1de/0xfe0 [ 350.503386][ T31] kthread+0x711/0x8a0 [ 350.503415][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.503445][ T31] ? __pfx_kthread+0x10/0x10 [ 350.503471][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.503502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.503532][ T31] ? __pfx_kthread+0x10/0x10 [ 350.503565][ T31] ret_from_fork+0x4b9/0x870 [ 350.503602][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.503643][ T31] ? __switch_to_asm+0x39/0x70 [ 350.503667][ T31] ? __switch_to_asm+0x33/0x70 [ 350.503690][ T31] ? __pfx_kthread+0x10/0x10 [ 350.503716][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.503761][ T31] [ 350.503769][ T31] Sending NMI from CPU 1 to CPUs 0: [ 350.658937][ C0] NMI backtrace for cpu 0 [ 350.658954][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 350.658974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.658985][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 350.659023][ C0] Code: 43 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 23 00 f3 0f 1e fa fb f4 18 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 350.659041][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 350.659060][ C0] RAX: 0d71e9a9d2754c00 RBX: ffffffff81958c97 RCX: 0d71e9a9d2754c00 [ 350.659075][ C0] RDX: 0000000000000001 RSI: ffffffff8d7ddcda RDI: ffffffff8bc03b60 [ 350.659088][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 350.659104][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9d4c30 [ 350.659119][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a28 [ 350.659132][ C0] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 350.659149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.659163][ C0] CR2: 00007fa45f9b4198 CR3: 0000000078106000 CR4: 00000000003526f0 [ 350.659181][ C0] Call Trace: [ 350.659189][ C0] [ 350.659197][ C0] default_idle+0x13/0x20 [ 350.659218][ C0] default_idle_call+0x73/0xb0 [ 350.659241][ C0] do_idle+0x1e7/0x510 [ 350.659277][ C0] ? __pfx_do_idle+0x10/0x10 [ 350.659317][ C0] cpu_startup_entry+0x44/0x60 [ 350.659342][ C0] rest_init+0x2de/0x300 [ 350.659365][ C0] start_kernel+0x3ae/0x410 [ 350.659397][ C0] x86_64_start_reservations+0x24/0x30 [ 350.659419][ C0] x86_64_start_kernel+0x143/0x1c0 [ 350.659442][ C0] common_startup_64+0x13e/0x147 [ 350.659475][ C0] [ 350.664219][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 350.664242][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 350.664273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.664289][ T31] Call Trace: [ 350.664299][ T31] [ 350.664321][ T31] dump_stack_lvl+0x99/0x250 [ 350.664352][ T31] ? __asan_memcpy+0x40/0x70 [ 350.664392][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.664419][ T31] ? __pfx__printk+0x10/0x10 [ 350.664462][ T31] vpanic+0x281/0x750 [ 350.664500][ T31] ? __pfx_vpanic+0x10/0x10 [ 350.664535][ T31] ? preempt_schedule+0xae/0xc0 [ 350.664572][ T31] ? preempt_schedule_common+0x83/0xd0 [ 350.664618][ T31] panic+0xb9/0xc0 [ 350.664652][ T31] ? __pfx_panic+0x10/0x10 [ 350.664689][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 350.664733][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 350.664768][ T31] watchdog+0xfd2/0xfe0 [ 350.664811][ T31] ? watchdog+0x1de/0xfe0 [ 350.664855][ T31] kthread+0x711/0x8a0 [ 350.664889][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.664929][ T31] ? __pfx_kthread+0x10/0x10 [ 350.664959][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.664994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.665030][ T31] ? __pfx_kthread+0x10/0x10 [ 350.665061][ T31] ret_from_fork+0x4b9/0x870 [ 350.665102][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.665151][ T31] ? __switch_to_asm+0x39/0x70 [ 350.665178][ T31] ? __switch_to_asm+0x33/0x70 [ 350.665205][ T31] ? __pfx_kthread+0x10/0x10 [ 350.665235][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.665286][ T31] [ 350.992346][ T31] Kernel Offset: disabled [ 350.996681][ T31] Rebooting in 86400 seconds..