last executing test programs: 5.83899295s ago: executing program 1 (id=2676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX], 0x24}}, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x6, 0xffffffff}}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="460809000000008028001280090001c0fa0d464ba35055995bc3385385ac00766c616e00000000180002800c0002001f0000001f000000060001000100000008000500b5fa18926cca7bd0f3eb61999f1e70e39f4ffe9040251db055d7bf8c9a9b4b", @ANYBLOB="21803e18f117120b4b07bca8aea7f03fda2c0dfcb9c5a777981f8570bb3485c00a67512735d651343aca9b4e906747b5c18330f791bddcdfae0f70f9f97cf173a49c92ca02b22d5d8683d6ae5f5027810265bdcee0fb28c8069a27b32649e97007123cb3d39a7e45e56bac74e1993782ea87c8d12c5e1f4e12ccc770c02dd31637526965d1538bc89f20b84cd0295d518921734b0f570ad3049f708f0778888309d7971a1eef2feb38bb124640230bb9c0804eed20f879ad48d60f795448cd3e43dabe206cb76cfccfd1268ce46e1f5b2a8aa01aa64687e769e04a55dbfd17861fb33f888ffffd771a76903ccd52ef212f3f8dd619d673d9", @ANYRES16, @ANYRESOCT=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r10, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r11 = epoll_create(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r15, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb24592d", 0x4}], 0x1}}], 0x2, 0x4044805) (async) splice(r14, 0x0, r13, 0x0, 0x10000008ebc, 0x0) (async) splice(r12, 0x0, r15, 0x0, 0x8000000000025a5, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r1, &(0x7f0000000340)={0x6}) 5.427177365s ago: executing program 1 (id=2680): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) listen(r1, 0x1ad72f7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080052804e67000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r6 = accept4(r1, 0x0, 0x0, 0x80000) socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500f7ff00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70307000e00060000009500000000000000c46ce94717400085787185f1e0390f0e81"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r8, 0x7, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'ip6_vti0\x00', {'ip6gre0\x00'}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) 4.765062517s ago: executing program 0 (id=2689): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x7, 0x4e, @loopback, @loopback, 0x80, 0x40, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 4.363452305s ago: executing program 0 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @local}}}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)="26c19899ea38a52cc76ff1648ea13c1507601e4e70329c0c4523c0123a334bd517dc5292", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40), 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], 0x18}}], 0x3, 0x48800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x4}}, {0xc, 0x2, [0x9, 0x200, 0x5, 0x0]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 4.34823716s ago: executing program 1 (id=2694): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x20) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="141bc855", @ANYRES16=0x0, @ANYBLOB="000000000000020000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000024000000d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37b"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0x4f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e22, 0x20ce, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x11, r2, r10}, {0x7, 0xffffffff, 0x1, 0x2, 0x6, 0x4, 0x4, 0xffff}, {0x5, 0x1000, 0x4, 0x6}, 0x7f, 0x6e6bb7, 0x2, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x33}, 0x2, @in6=@private0, 0x34ff, 0x0, 0x1, 0x8, 0x6b0c, 0x1ff}}, 0xe8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r12 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r12}, 0x20) close(r11) 4.199061984s ago: executing program 0 (id=2695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000001080003400000001408000240000000020800044000d400150900010073797a30000000000900020073797a320000000014000000110001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 3.916369255s ago: executing program 1 (id=2698): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.915496376s ago: executing program 0 (id=2699): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYBLOB="bdd84e7cf0d5a551647184c1479291ea66af0fc21897be4b3f37d8d832154ebb3559d4d5d09c22a179248817d28130da2d4db2eab4e789da3f212974a234cd841281ebe0bd52cc256ada8694431c1d6288be8eff7b41339ac30ab5b07ec6628cb527e620be479703aad641fe5fbfd6a7b1784114537aa7169228f3579658569f2231c7cd574939fba7f009c9460c32be2808f77772e0683795af86e07b3bd67341e0303b11c44590f7e395250b2e4661052f2a0ee157ad838b48436b1b62074c36e5ac30aafb10aacbe2a6d88ea2f38ccbf2386b506140ba01ae450676", @ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1}, 0xd}], 0x1, 0x40000100, 0x0) shutdown(r5, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) 3.726035064s ago: executing program 1 (id=2702): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3ff}, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0xffffffffffffffff, {[0x0, 0x7, 0x2, 0x1000000, 0x2, 0x7, 0x0, 0x4000000]}}, 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x200}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r2, 0x7}, 0x8) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @empty, 0x6a20}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "684fc398584628763b4b06f28b9abb33"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="a7f400e8696099988c441728179168550fa9cc4442f8b7076cbd5e81382b394afc14ae7236bb9ee824e0270456c26c464d860e72accea2e648eabd800f5026c592df85cc9da6ac3e6a703b247c117c043a0bd4278f61fcc8e07d054f6990f2", 0x5f}, {&(0x7f0000000580)="ae438ce5ca8a04ef48def628ad55198f66cf3da18e20ebcc12b324412697c472fcd835b512affa4fd51e8c977db4c849cdd4ef720aa26582dc5ac559869b0ae4a297150ff845d2de16a094eafc1f381082c6a063c6fe59fbe9b2c9c7e49cfe69f57a6957eefa2d9c8b1eb1ea443ee93d1546f5971fef053735f7c96d2202299ac4c22230196219c5e5d9cf0eed4543256094a4035a48484b3fc0f7f7cd7c16bde7db4d8d4a7a4bb7ee717d4d5de4c024ed1939565bd135c4bfa1f2a6d4c78e385445f4f80faa27b5711b9511b2bcce8ddfaf188a0a2b15afa4f07c4a5af1bb531320b93ecd448b794401", 0xea}, {&(0x7f0000000680)="247204299d00a4e8dab611fff5b1cd28b5cd223e5f6c3414b53537692003fd65983e06877019e5cf22b45acdb12dbac0069b4205a21b43931abaa6ffe44ed12505a23089f74af95e099ff3daf79c52026b2f", 0x52}], 0x3, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x4008) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={0xffffffffffffffff, &(0x7f00000009c0)="011002485d4ac3dd062562a7570bc302ae3cf3e53b26846b4ccbd8cdb9937bc5fbb7163a233d59fa4ff477eff94b755b4fe160f91972ed93fe993c741ece3917861923385e99678157233c807394b8a14b3c4862aded78bd2cb7cef302db5f237499000d8caab4b270bd2adc0478270f347497b8e428fd269ef637c879db17560819573c7703211e106dcaa9905010fbc2ea979a346a8864e5576fbf85c0d0", &(0x7f0000000a80)=""/67}, 0x20) r8 = socket(0x23, 0x4, 0x7) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000000b40)=0x1, 0x4) sendto$l2tp6(r8, &(0x7f0000000b80)="021f5eca6a5537e01c273c77c4248258ad29e988a55f92652f910de4be74f97c379efce6c42a49980b663992b5da4745d967b45da4bfa191b88a77270c24122ce3210ce50e1f877b", 0x48, 0x4000, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) writev(r0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="a8acc6211e068b26e9596a7239de702cbd5ae1b270b3df5c7967cd6336e4b04eb3fdf816f08c9c914836e2e3a2a7cbdb6ece8abb609fca6ef13e01b5564879b50f879809bd0dc6fecb86d1eed978d0c92431ce245fb5628d522423ffe0fa7014f92883d6a1bbdaa14ab47923195371fd8e4149d776b53d47c06f0786a946dc61beb6e1a9f52740cdf831a0d00be3e3443474b1f82e061f45d7213e7e51d1a389aa2d42988ddb20ebaf25eaaed3fa80d25dde44b7b5ec634733beda78c4f7e1c253bf9f462701bc8167e1e46022614102a82108ea45bf4dd4edcf7c36c97cefe969494290f2977b69d71c5e971750160df73038", 0xf3}, {&(0x7f0000000d80)="dd54bc7adbbc7b32efe3d03a97ddaf747755f6f2074ade88b251fc0548188e85142bd875dabff2977d723cbfa33efc3491e581dc0e246ffae75e8ba7e3333d74f8e85d20039b771e6cc6938409aef9ba9a1963692efb00cca4c9967081b17baaa0c49708fbf0bd138f56e348692dbec736b9b18ea59694999bbc51418b30c31a79065819a87cff7976e5978e4fd5812b68ae05ea4b0cfed15510d5556ec5d2f34edec430fa1aac233aec5d8cb128fc502430b2a1cbcece62cd667341c77603153f06421ee4706ea3ce01159a12f352e2683f35fec12170d7e4719f59843d8eab018f1898f9ed4dcb43b34772547f5b1894a6", 0xf2}, {&(0x7f0000000e80)="bca75a05ade2459145b05162e6be0efc7bbe53c7db317a89e553437a83b44fdf0b4e8816ae58cab7cf7bab5b3c80408b12b1181b672b434a227f42e3b9eb7a07924a6abf8a974feb8660081a9f0508577c62558df9f90dddedcef89c67907142", 0x60}], 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000f40)={0x7, 'vcan0\x00', {0xb2}, 0x4000}) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001380)={&(0x7f0000000fc0)={0x3ac, r4, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x398, 0x111, 0x0, 0x1, {0x394, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2050d1ae3b23ae73}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x430000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa67}]}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x46}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffd4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x155}]}]}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x240040d5}, 0x41) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001400)=[@in6={0xa, 0x4e20, 0x39a, @dev={0xfe, 0x80, '\x00', 0xb}, 0x101}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x2800}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x90) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f00000014c0), &(0x7f0000001500)=0x4) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000001580)={0x8, &(0x7f0000001540)=[{0x100, 0x6, 0x0, 0x80000000}, {0x6, 0x0, 0x0, 0x100}, {0xd751, 0xc4, 0xf, 0x40000000}, {0x84, 0x7, 0x9, 0x5}, {0x0, 0x31, 0x4, 0x4}, {0x4, 0xfe, 0x80, 0x1}, {0xd, 0xe, 0x3, 0x2}, {0x5, 0x40, 0x0, 0x200}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000015c0)={0x7, {{0xa, 0x4e24, 0x5630, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9da}}}, 0x88) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 3.409052374s ago: executing program 1 (id=2704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4) unshare(0x6a040000) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtfilter={0x1dd0, 0x2c, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0xa}, {0xa, 0xffe0}, {0xc, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0x1d88, 0x2, [@TCA_BASIC_EMATCHES={0x888, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xdc, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x8}, "cce1948451cf8ae1e44b7aaa0170116fa1e96b6ed5e91f9d9f75a506568850b5025aadf338cd994125095dfc13210f0a13a7a323e00b10e359f4fe51609f27c59ac3d7f1a51048d2ecce1335fdfa53f27376125218ece9a8db6f23396b0b409521eccf7f965c3c7a82b15430f5af286697058771ce247a2bd780fd1ebd3a2a222e2c36d7e8ca59c66b6af45ef3f8fc6ed9e49444f9d2f93b548d96bbbcb2d79aabca55eabc50975b886b06f3c8298787e80a9c38062cd647bfa6eacd6bf5df66fc5723d40658485520def15b168898"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x69}, {0xd7, 0x5, 0x0, 0xc16}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xc}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xacf, 0x3, 0x8}, {0x6, 0x99, 0x9, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x2bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x108, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x101}, "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"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0xffffffffffffffff, 0x0, 0x1}}}, @TCF_EM_IPT={0x1a0, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x7e, 0x5, "14755a13aaf3caf2bd0f7535733c601b543efd4f1fc6d6319b9ced882c61ec77e519ffc68327581e4a8dc152d220e11133ffe41d6818a5e33b01791d816982967942ce101b54d89904947f445bd9dafdf64a37099254dfc0d337c99f345a00ed3e15332702149c11bc1db956d5dccc533d7f520453408a2cbadc"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc8, 0x5, "5b95bc2f21423d0b079e766298dca4baff9a9d801645b0f9b47d578ffa4cbf0b84ecd8fc343542089acfefd87c04262a079e719a9d120468c45d638848ac5106b3040e50f29f11dc27aa6ffe80f7b0719aa5fe2e6b68a1cfb7475b0dc544f182b5958cdfaab21e058593cc9aeef4bbecaddf77c92d132e3f2fabefc982514b3b08850e57f5ca8de2436d97b924a9b00a04ded551df153766749f339a8d5276d39449701bb945da57e59d93529c335ad11bcc941d2860a0c53c5582f03d62cfa01d4245b1"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x338, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x9, 0x5, 0x2, "27277a6ec2"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1000, 0x8, 0x1}, {0x2, 0x5, 0x2}}}, @TCF_EM_IPT={0x14c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_DATA={0xa5, 0x5, "93d416b83ba3f7787dc628be3add199ef38170ae4e3f345cfba0c63cbd3e871ebe48a441d3920b4e11d5610c201bfd59676de33b8e0a3797264ba23ea9e17d0e86e685bfc59204823350aed1cc6b7817e6480822be21c337bf9a6b536a52d82ab4c83510a3937c02bd27c810e35af060900352e8d111ecc464926dbae9fb12be9ee4abf17550f029f7ce9b24ff465b4195bb405548bd52ca6849f3f90ff8f0c594"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}, @TCA_EM_IPT_MATCH_DATA={0x5f, 0x5, "ff5c489c9b54cd67b0fc987eb212fe75720f32093d0fc90f3515b5e20c671d6ed27f50ad8c0bab7192800de5361c9d129b1cfd98cf647514d3178fac72353c8e2ebbf168f07ba7d033ae8aff08623e8d6f9fd18e6bd04bee7eac92"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf, 0x1, 0x441d}, {0x7a5, 0x5cf, 0x8, 0x0, 0x9, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x6}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe8, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x1}, "af22a4fb042d1ad7bdcb34f15a30cf55f814c2a1255bd3e96259baa2911a6080dd3f5986e7cb65550503a097d66599bafb7ba8f4e34f48abd775071f918761096c23dfe0f683a3a3543199466f86af5c8bc0322a97ce6c738aa0cd4e4a84c9b0231c5f063365c936d1cf66a45f694687f3be678ab4668a12586f779e2ea268f26a069d335ee4f49edf9390f11e047bb189c222c308fccf3df706bbcb01d36a5b154f3dbd257bde264ca6680c61746a495d93aaeb212c2cd44c2a5304f3bde6808795d1610007b7edcc6222a1e43c34a09eac07d5d6dd896d558d8ece"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1800, 0x1, 0x4}, {0x7c, 0x9, 0x1, 0x9, 0xa}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x5c}, {0xa, 0x690, 0xffff, 0x2, 0x2, 0x0, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x1, 0x5, 0x2}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="53bd41a98fc4e6db1114", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="29e774a3", @TCF_META_TYPE_VAR="150d35bef4387e", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="53f6c0d7e7", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="7479c933c3fae9a4", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1285f2", @TCF_META_TYPE_VAR="84f2174256ce", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x18}, {0x4, 0x0, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff}, {0x1, 0x4, 0x8, 0x3, 0x2, 0x0, 0x2}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="a96e0975cc0aee9e03da", @TCF_META_TYPE_VAR="ba4567", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8b0e6c81ed3af48c8c", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0x5, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="76c2410c8480", @TCF_META_TYPE_VAR="5d934757911ee8e99e", @TCF_META_TYPE_VAR="03", @TCF_META_TYPE_VAR="ef31582aeed2b893"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x7}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6e9}, {0x401, 0x8, 0xa, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0xe}, {0x6, 0x7, 0x5, 0x0, 0x4, 0x1, 0x1}}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x1000, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="5407c70a0b22477b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="09f7fcdfaf369929f4", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="bd", @TCF_META_TYPE_VAR="c6"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x18, 0xa, 0xfffffff9, 0x1ff, 0x0, {0x5, 0x2, 0xb, 0x0, 0x7, 0x4}, {0x1, 0x2, 0x3, 0x6, 0xb, 0x1}, 0x2, 0x5, 0x8001}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x25, 0x4, 0x1, 0x5, 0x4, 0x8, 0x7, 0x101, 0x3ff, 0x2b, 0xe256, 0x8000, 0xfffffffb, 0x6, 0xf, 0x6, 0x80000001, 0x1, 0x8, 0x1000, 0x200, 0xfffffb10, 0x7, 0x30000000, 0x2, 0xb07f, 0x6, 0x7, 0x0, 0xb, 0x8, 0x4, 0x6, 0x80, 0x6, 0x2e4e1651, 0x6, 0x1, 0x8c7, 0x6, 0xffffffff, 0x3, 0x31def50f, 0x40, 0xfffffff8, 0x3, 0x23, 0x800, 0x5, 0x1, 0x3, 0x8, 0xffffb560, 0x81, 0x2, 0x4, 0x6, 0x9, 0x8, 0x6, 0xefa, 0x24, 0x6, 0x0, 0x5, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x1, 0x4, 0x9, 0x3, 0x400, 0x8, 0x6, 0x8, 0x2, 0x7fff, 0x1, 0x6, 0x2, 0x6, 0x7fff, 0x7b3, 0x6, 0x800, 0x27, 0x7, 0x1, 0xe08, 0x2, 0x3, 0x7021c26e, 0xfffffc00, 0xfffffff2, 0x64e, 0x80, 0x4, 0x48e0daa0, 0x7, 0x7, 0x3, 0x6, 0xa181, 0x5, 0x3, 0xfffffff9, 0x3, 0xfffffffe, 0xc0000000, 0x4, 0xf0, 0x100, 0x6, 0x4, 0x5, 0x3, 0x7fff, 0x4, 0x3, 0x3, 0x0, 0x3, 0xa, 0x0, 0x9, 0x1a, 0x2e, 0x8, 0x6, 0x5b75, 0x4, 0x930, 0x3, 0x7, 0xa, 0xfffffff8, 0x0, 0x4, 0x2, 0x0, 0xc, 0xd, 0x3, 0x9, 0x0, 0x9, 0xd, 0x33368ebc, 0xf66, 0xfffffffc, 0x5, 0xc9, 0x54c, 0xfdf, 0xffffec23, 0x3, 0x7, 0x0, 0x5, 0x4, 0x4, 0x786, 0x1, 0x0, 0x10000, 0x0, 0x8, 0x2, 0x0, 0x6d, 0x7, 0x10000, 0x9, 0x5b9, 0xfffffff8, 0x40, 0x101, 0x8, 0x6, 0x8, 0x0, 0x9, 0x0, 0x2, 0x8d94, 0x6, 0x54b7, 0xfffffffc, 0x3, 0x1, 0x0, 0x4f40, 0x1, 0xb, 0x5, 0x100, 0x4e, 0x1, 0x9, 0x9, 0x8, 0x1, 0x4, 0x3, 0x14, 0x9, 0xecb, 0xffff, 0x1, 0xffffffff, 0x10, 0x1000000, 0x7bf, 0x6, 0x0, 0x200, 0x6, 0x7, 0x3, 0x5, 0xff, 0xc4, 0x8, 0x80000001, 0x8, 0x1, 0x7, 0xf7, 0x3, 0x3, 0x5, 0xa63, 0x9, 0x0, 0x0, 0x5, 0x6, 0x8000, 0x80, 0x0, 0x3, 0x5381, 0xfffffbb5, 0xfffffffc, 0x2, 0xc, 0xfffffff8, 0x4, 0x81, 0xffff8d38]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x3}}, @TCA_BASIC_POLICE={0x10a4, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xff00000, 0xa34, 0x8, 0xf, 0x0, 0x0, 0x40, 0x800000, 0x7f, 0xfffffffe, 0x65f, 0x100, 0x6, 0x6, 0x8, 0x4, 0x1ff, 0x2, 0x3, 0x4c, 0x7, 0x80000001, 0x7ff0, 0x8, 0x9, 0x1, 0x0, 0xfff, 0x7, 0xa8b7, 0x4, 0xbd7, 0x10000, 0x7, 0x950f, 0x15, 0x6, 0x3, 0xfffffffc, 0x0, 0x400, 0x2, 0x8, 0x3, 0x2, 0x8, 0x807, 0x2, 0xc00000, 0x3, 0x6, 0x28, 0x0, 0x9, 0x80000001, 0x4, 0xb, 0x2, 0x1, 0x6, 0x2, 0x81, 0x0, 0x7, 0x2, 0x3, 0x7, 0x7, 0x7, 0x8, 0x4329, 0x400000, 0x4, 0x8, 0xc1d, 0x9, 0xa, 0x0, 0xb9, 0xd, 0xfffffff8, 0x8, 0x1, 0x5, 0x80000001, 0x1000, 0x1000, 0xf68, 0x5, 0x8, 0x9d, 0x9, 0x7, 0x571, 0x5, 0xf7, 0x7ff, 0x81, 0x81, 0x9, 0x3, 0x3, 0x7, 0x4, 0x7ff, 0x0, 0x6, 0x200, 0x0, 0x7, 0x8, 0x1ff, 0x1, 0x1, 0x1, 0x8, 0x4, 0x5, 0x6, 0xc8, 0x10001, 0xff, 0xb, 0x8356, 0x7, 0xff, 0x7, 0x80000000, 0x2000000, 0x60b5, 0x73, 0xd, 0x100, 0x2, 0x4e8, 0x5, 0xe, 0x2, 0x1, 0x8, 0xff, 0x0, 0x3, 0x62, 0x7fffffff, 0x2, 0x5, 0x1, 0xbc, 0xe, 0x3629, 0x7, 0x6, 0xbc, 0x2, 0x0, 0x1b4e4814, 0x6, 0x3, 0x4, 0x40, 0x9, 0x1b8, 0x3ff, 0x400, 0x80000001, 0xd2, 0x3, 0x1ff, 0x2, 0x4, 0x2, 0x6, 0x1, 0x0, 0x3, 0x6, 0x100, 0x921, 0x2, 0x2, 0x80, 0x3, 0xd5, 0x8d13, 0x200, 0x0, 0x0, 0x9, 0x6, 0x2, 0x1, 0x2e4, 0x6f, 0x6, 0x81, 0x8, 0x0, 0x5, 0x4, 0x401, 0x8, 0xf, 0x3, 0x5, 0x80, 0x6, 0x2, 0x0, 0x400, 0x9f, 0x2, 0x4, 0x3, 0x8, 0x5, 0x9, 0x2, 0x3, 0x1, 0x9, 0x3, 0x4, 0x7, 0x21d7, 0x8, 0xfffffff8, 0x6, 0x0, 0x5, 0x7, 0xd, 0x5, 0xb01d, 0xb, 0x1, 0xbd5, 0x50f9, 0xd8, 0xb004ac4b, 0x81, 0x5, 0x8, 0x101, 0x10, 0x5, 0x5, 0x7, 0x93d, 0xbaf, 0xfffeffff, 0x2, 0x3, 0x2, 0x58e874ee]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x2, 0x7, 0xfffffffa, 0x1, 0x8, 0x5, 0x4, 0x4, 0x4, 0x32, 0xd128, 0x1, 0xe00, 0x8, 0x6, 0x7, 0x80000000, 0x2, 0x100, 0x2, 0x5, 0x8, 0x4, 0x8000, 0x2c766a7a, 0x0, 0x3, 0x6, 0x2, 0xffff2654, 0x27f, 0x9ec, 0x0, 0x5, 0x6, 0x13, 0x0, 0x0, 0x2, 0x3, 0x5b6, 0x9, 0x8, 0x1, 0x438ed130, 0x7705, 0x2, 0x9, 0x80000001, 0x9, 0x101, 0x2, 0x101, 0x1, 0x7, 0x5af, 0x8, 0x7, 0x8, 0x3, 0x1ad0, 0x77, 0xf0, 0x8, 0x1ff, 0x4, 0x9, 0x8, 0x4, 0x3, 0x7, 0x5, 0x8, 0xe, 0xa000, 0x5, 0x5, 0x7, 0x80, 0xfc15, 0xe1e, 0x1, 0xff, 0x7, 0x2, 0x53, 0x8, 0x8, 0x3db, 0x4, 0xd2, 0xaa, 0x4, 0x100, 0x1ff, 0x8, 0x400, 0x9, 0x2, 0x101, 0xfffffff8, 0x9, 0x7, 0x800, 0x5, 0x0, 0x5316, 0x4, 0x9, 0x2, 0x0, 0x1, 0x2, 0x9, 0x400, 0xeaa4, 0xffffffc0, 0x8, 0x7, 0x80, 0x7, 0x7, 0xb, 0x1, 0x8000, 0x9, 0x3, 0x90d6, 0x3, 0x101, 0x7f, 0x9, 0x4, 0x2, 0x3, 0xb9d3, 0x10, 0x4e, 0x9, 0x1, 0x7fff, 0x8, 0x401, 0x0, 0xfffffffb, 0x5, 0x3, 0xfffff800, 0x0, 0x80000000, 0x401, 0x3, 0x4, 0x0, 0x400, 0x0, 0x7fffffff, 0x2f2, 0x0, 0x4, 0x7ff, 0x101, 0x8, 0xcfa7, 0xb, 0xbf92, 0xa, 0x22a, 0x0, 0x1, 0x4, 0x62b8aa53, 0x99d6, 0x200, 0x3, 0x4, 0x6, 0x2, 0x8, 0x8, 0x6c, 0x9, 0x4, 0x5, 0x0, 0x6, 0xffff, 0x1, 0x1, 0x25d, 0x7ff, 0x101, 0x7, 0x9, 0x4, 0xfffffffd, 0xa, 0x2, 0x9, 0x8, 0x101, 0x1bf8, 0x7, 0xdb8, 0xa2e, 0x1, 0x3ff, 0x101, 0x5f, 0x4, 0xdf6, 0x80000000, 0xf, 0x6, 0x6, 0x6, 0x6, 0x7, 0x5bb, 0x5, 0x100, 0x60b, 0x84, 0x2, 0x6, 0x3, 0x1000, 0x0, 0x9, 0x5, 0x1ff, 0x4, 0x7, 0xdc, 0x40, 0x5, 0x4, 0x80, 0x8001, 0x0, 0xffffffff, 0x100, 0x6, 0x40, 0x4, 0x3, 0x40, 0x1, 0x6, 0x8, 0x9, 0x3, 0x3ab3, 0x2, 0x4ac0]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x3, 0x3, 0x6, 0x1, 0xfffffff9, 0x0, 0xf, 0x10000, 0x6, 0x400, 0xbf6e, 0x2, 0x5, 0x71, 0x2, 0x88d, 0x1425, 0x5, 0x9, 0x9, 0x3, 0x2, 0x1, 0x318, 0x82, 0x34, 0x3, 0x9, 0x3, 0x101, 0xd8, 0x2, 0x3, 0x2, 0x0, 0xc2c, 0x8, 0x0, 0x7, 0x2, 0xc52b, 0x8, 0x7ff, 0x5, 0x7, 0x0, 0x7, 0x140, 0x9, 0x10000, 0x4, 0x6, 0xf5, 0x5, 0x1, 0x4, 0x2, 0x1, 0x0, 0x8, 0x2, 0x6, 0x8, 0xff, 0x8001, 0x0, 0x10, 0x5, 0x6, 0x9, 0x3, 0x5, 0x6, 0x0, 0x2, 0xf4b7, 0x672f, 0x3, 0xda5, 0x6, 0x73ad, 0xce4, 0x8, 0x0, 0x7, 0x5, 0x4, 0x6, 0xe, 0x3ff, 0x0, 0x6, 0xfffffbff, 0xcb01, 0x2, 0x0, 0x3ff, 0x4, 0x9, 0x0, 0x0, 0x36, 0x7, 0x6, 0x7ff, 0x10001, 0xfff, 0x3, 0x8, 0xb2, 0xff, 0x6, 0x0, 0x5, 0x10, 0x80000001, 0x2, 0x5, 0xffffff01, 0x3, 0x1, 0x800, 0x7, 0x2, 0xffffffff, 0x1, 0x7, 0x7, 0xfffff3df, 0x81, 0x6, 0x8000, 0x5, 0x6, 0x1, 0x5, 0x3b0a, 0x80000000, 0x20, 0xffffff6f, 0x5f, 0xfffffff7, 0x7, 0x800, 0x9, 0x4, 0x385, 0x401, 0x3050, 0x2, 0x0, 0x40, 0x5, 0x7, 0x1000, 0x9, 0x1, 0x3, 0x5, 0x2c, 0x3b, 0x9, 0xb, 0x2, 0xfffffffa, 0x7, 0x7ff, 0xbe, 0xfff, 0x9, 0x8, 0x0, 0x8, 0x8000, 0xf, 0x5, 0xd6, 0x9d94, 0x7, 0x4, 0x0, 0x0, 0x1, 0xa1a2, 0xb796796, 0x2, 0x30c, 0x1, 0xfffffffd, 0x8, 0x0, 0x7, 0x5, 0x2, 0x7f7, 0x438, 0xbc4, 0x6, 0x1b, 0x2, 0x2, 0x5, 0x0, 0x8, 0xffffffff, 0x2, 0x215, 0x300, 0x4, 0x8, 0x9, 0x0, 0x9, 0xa, 0x8, 0x5, 0x401, 0x0, 0x6, 0x0, 0x6, 0xea, 0x8, 0x2, 0x3, 0x6, 0x7, 0x6a, 0x9, 0x9, 0xb8a, 0x3c4c, 0x9, 0x6, 0x62, 0x4, 0x800, 0x9, 0x6, 0x8000, 0x6, 0xffff4691, 0x3, 0x7, 0xdbc, 0x1, 0x32319e47, 0x7, 0x7, 0x3, 0xd, 0x1d1c, 0x7d25]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x7, 0x4, 0x6, {0xed, 0x1, 0x4, 0x0, 0x3}, {0x9, 0x2, 0x1, 0x2, 0x0, 0x100}, 0x9, 0x400, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2400000, 0x1, 0xea, 0x6, 0x0, 0x2, 0xff, 0x0, 0x2, 0x864e, 0x9, 0x3bf3b71c, 0x3, 0x4, 0x8, 0x200, 0xffffff32, 0x8, 0x66b7, 0x0, 0xd93, 0x0, 0xfffffff9, 0x6, 0x7, 0x8, 0xffffff3b, 0xffff, 0x80000001, 0x8, 0x9, 0xe0000, 0x2, 0x5, 0x7, 0x1, 0x3, 0xd, 0xa, 0x80000000, 0x4, 0x0, 0x100, 0x100, 0xfffff2d9, 0x3, 0x6, 0x94, 0x2, 0xc9f, 0x0, 0x1000, 0x0, 0x9, 0x4, 0x41d, 0x7, 0x1ff, 0x3, 0x2, 0x6, 0x6, 0x434, 0x7ff, 0x9, 0x1, 0x7f, 0x8, 0x3, 0xfffffffc, 0xcb0b, 0xffffffff, 0xaa1, 0x8, 0xc, 0x400, 0x2, 0x4, 0x2, 0x2, 0x9, 0xcfeb, 0xfffffc00, 0x3, 0x2, 0x101, 0xc, 0x7, 0x2, 0xa44, 0x400, 0x401, 0xffffffd2, 0xd847, 0x3ff, 0x1, 0x9, 0x0, 0x3, 0x6, 0x0, 0x6, 0x2, 0x9, 0xaf, 0xfffffff4, 0x2, 0x7ff, 0x10, 0x7, 0x3, 0x10000, 0x0, 0x2, 0x0, 0x3, 0xd, 0xfffff50a, 0xbec, 0x400, 0xfffffff0, 0x5, 0x57, 0x6, 0xd0b, 0xb, 0x1, 0x1, 0xf, 0xfffe0000, 0xf275, 0x8, 0x9, 0xff, 0x0, 0x2c000000, 0x5a59, 0x6, 0x59b1, 0xd, 0x8, 0x7fff, 0xfffffffd, 0x7fff, 0x7ff, 0xb, 0x3, 0x5, 0x7, 0x4, 0x3, 0x1, 0x0, 0x9, 0x5, 0x5, 0x80000001, 0xfffffff7, 0x5, 0x2, 0x1ff, 0x1, 0x4, 0x0, 0x8, 0x401, 0x5, 0x1, 0x6, 0xfffff3b3, 0x3a, 0x7ff, 0x4, 0x4, 0x4, 0x6, 0x7, 0x2, 0x4, 0x6, 0x30, 0x9, 0x80, 0x2, 0xfff, 0x10, 0x9, 0x80000001, 0xa, 0x800, 0x1ad, 0x80000000, 0x48f, 0x9, 0x5, 0x0, 0x2, 0x6, 0xd, 0x8, 0x7, 0x3, 0x5, 0x200, 0x40, 0x9, 0x9, 0x8, 0x0, 0x0, 0x1, 0x20000, 0x7, 0x3, 0x5, 0x12, 0x7, 0x0, 0x72, 0xfff, 0x7, 0xff, 0x401, 0x4, 0xb, 0x6, 0x8, 0x54, 0x0, 0xdf, 0xffffffff, 0x8, 0xb3b5, 0xff, 0x9, 0x3, 0x4, 0x4, 0xc7, 0x7fffffff, 0xd, 0x0, 0xa7, 0x8, 0x6, 0x4, 0x3, 0x0, 0xb41, 0x66, 0x8, 0xd229, 0x5, 0x10000, 0x4, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe, 0x5, 0x3, {0x1, 0x0, 0x8, 0x4, 0xfff9}, {0x9, 0x0, 0xea04, 0x6, 0x2, 0x400}, 0xffff, 0x2, 0x4}}]}]}}]}, 0x1dd0}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb08004574dd68fffc000000019078ac1e00ac1414aa04009078030000004300000000000000002f0000ac1414bbe0000002440c00010a01010100000007861f00000003020206020206d109567c050bc92d3002d91d907b7900020002860c000000000006ade24b152b721aff5a9d069536069031711300"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010b00000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r10}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000075b50e5c600000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11}, 0x94) 2.613068941s ago: executing program 0 (id=2713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.342896009s ago: executing program 0 (id=2715): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x44, @broadcast}, {0x2, 0x4e2f, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c4000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$inet6(0xa, 0x1, 0x7fff) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg(r4, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) ioctl$SIOCNRDECOBS(r4, 0x89e2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff00000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000260000280012800b00010062726964676500001800028005002a00030000000c00230003000000000027"], 0x48}}, 0x48004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x0, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x3, @private2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="a728a654422df333d45518e8e77710de53384872303f1624fc0ad4313e35367c89f2bf05aafe", 0x26}], 0x1, &(0x7f0000000540)=[{0xc0, 0x1, 0x0, "6e2d37783a3067bfc869f974bb74a087479733c8632ba1af6c0386d2ce73a9fa5a03bad3158b981b58b100331abe24f3f4fa403b0c54dcb96b0d1ce887db884844c8585bb2139a3cd62216d5221d4fdb79b3687b77db509574cded8761c44aedddd35dc31d3c9aefc89546e63e50e112abfbab8c8d400a20d53afbf5a1f5ffaf9f5d11db40c78d26912f8c4651124c1f8b101d5634929c1502b1fb2aa0be746c3c0f06f9252aeb9adf2f93a119"}, {0x18, 0x111, 0x1ff, "253feb690b9324"}, {0xe0, 0xff, 0x6e0, "6ea587de8c4dc4c5555295ceac810a04d0c5a45aa02b5564d54c5fccf6f3de398feaa9bc967a3ab0060daa31b91b41d203e88f1b1aba695ecec5b9237bf19821a26e213a130de3c63c1331e9c0c8c2df055510555533fd88f2df86b82337fbf83b8ae3c4895daa10067feb9a7f3d018e58d2c66afe1365d5e5fcaebe73877d5e1e520373497cdf075702c8cfb587622b573dbad0d56a5137ee380de408fff08fcd535e56c2651cf47420f848999fb06ac1d8022b2a0fa4791004ea773b1552462ea0673494616735d3"}], 0x1b8}, 0x28800) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x3, 0x3, 0x7, 0xee, 0x9]}, &(0x7f00000003c0)=0x78) socket$kcm(0x10, 0x2, 0x0) 2.083422989s ago: executing program 3 (id=2719): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c0400001900010000000000000000001d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd0000003804068034047580"], 0x49c}, 0x1, 0x0, 0x0, 0x5}, 0x804) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000040000007110a8000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd89dc8ab9777e75f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.871264306s ago: executing program 3 (id=2722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf251400000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0cdc1ed484aae0736d6b9547ed3", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r8, &(0x7f0000000280)="7daba883a6387866e6849d80a4c2e849363288259708ae2e86168163311cf7ce57fbfff58e0581ec117943823d8d5aec00bf2db43e99257e9aedd3bc5afeedd0982506ba10f788f3abadc7b3a4a7b0b43d207b030ee0f5f6d288df097711", &(0x7f0000000300)=""/206, 0x4}, 0x20) 1.784782261s ago: executing program 3 (id=2723): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket$inet6(0xa, 0x2, 0x3a) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x0, 0x0, 0xffffffff, 0x2f0, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, &(0x7f0000000080), {[{{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xff, 0xff000000], 'pim6reg\x00', 'veth1_to_team\x00', {0xff}, {}, 0x2e, 0x7f, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e24, 0x4e23, 0x4e23, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e21, 0x4e20, 0x4e20, 0x4e22, 0x4e24], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1a, @ipv4=@empty, @ipv6=@private1, @port=0x4e20, @icmp_id=0x65}}}, {{@ipv6={@private2, @private2, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffffff, 0xffffff00], 'wlan0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x67, 0x9, 0x4, 0x4e}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0x0, 0xff], 'veth1_to_hsr\x00', 'lo\x00', {0xff}, {0xff}, 0x2b, 0x8, 0x6, 0x78}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x2}, {0x3, 0x4, 0x1}, {0x2, 0x2, 0x1}, 0xb362, 0x200}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x8, 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@loopback, @port=0x4e20, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a0a0102000000000000001a0200ffff090001"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa090100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e0001006974366772657461700000002800028014000600fe8000000000000000000000000000aa08000c000300000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) 1.607110411s ago: executing program 4 (id=2726): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xa32e}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00070000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x2f, 0x38, 0x1, 0x7, 0x10, @mcast2, @loopback, 0x80, 0x7800, 0x80000001, 0xd7}}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x12, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800d7090000000000000000fa7cd39c1bc009f785117a00000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200b4546a0008000000b70300000000000085000000960000001811000060058eef9fbe325d62758465808bf02132b08b7cc5acf2d692e2fbdaa3eb76350000000000", @ANYRES32=r5, @ANYBLOB="00000a0000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x597}, {0x0}, &(0x7f00000005c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000300)=""/17, 0x11}], 0x3}}], 0x48, 0x840}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x816) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x9, 0x700000}, 0x4e}, 0x10) 1.555805623s ago: executing program 2 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44c20541bc004b0400000000000000007a000000", @ANYRESOCT=r0, @ANYRES64=r0], 0x44}}, 0x8800) 1.399458326s ago: executing program 2 (id=2728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x5, 0xb, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x2c, 0xfd, 0x1, 0x5, [{@multicast2, 0xfffffffe}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000000}, {@empty, 0x37e6}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0xd0, '\x00', r2, r0, 0x4, 0x1, 0x2}, 0x50) 1.29861945s ago: executing program 3 (id=2729): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@enum64={0xd, 0x5, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x8000, 0x25}, {0x4, 0x4, 0x2}, {0x5, 0x9, 0x9}, {0xe, 0xf9, 0x4}, {0x3, 0x401, 0x7}]}, @var={0xe, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61, 0x61, 0x30, 0x5f, 0x0, 0x30, 0x0, 0x2e, 0x0]}}, &(0x7f0000000480)=""/67, 0x7b, 0x43, 0x4, 0x2, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)={0x28, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r3}, @nested={0xa, 0x16, 0x0, 0x1, [@generic="7d7fb497fbaa"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x40080, {}, [{0x68, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "56d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0x8c, r6, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x78}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x4000000) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000013000100000000008000000000000000", @ANYBLOB="00020000000000001c001a8018000aaa12a97633ca747984d27f8a13e2b2cc2eb278f200f5fffffffffe81e0000001140031000076fe62e73db67a4a1d9cfc8b158e767744b5a967c7ebd9601b58e4f48acccae907c288eb4c0dda828236853eae0c26ffb85d"], 0x50}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)={0x18, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x1, 0x80, 0x3ff, 0x0, {{0x35, 0x4, 0x2, 0x2, 0xd4, 0x67, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x18, 0x2, [{0x1, 0x6, "14f5c2b3"}, {0x5, 0xc, "379bc14652e860ae5301"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xc2, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}]}, @ssrr={0x89, 0x2b, 0xc5, [@broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast]}, @rr={0x7, 0x13, 0xe0, [@empty, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x1f, 0x28, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @local]}, @cipso={0x86, 0x13, 0x1, [{0x2, 0xd, "d120d1407dc68ab7ad929e"}]}, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0xd, [{@multicast2, 0x9ba}, {@private=0xa010101, 0x9}, {@broadcast, 0x1ff00000}, {@multicast1, 0x52df}]}]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000300)={@loopback, @private=0xa010102, r10}, 0xc) 1.288174884s ago: executing program 2 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d0001002dbd7000fcdbdf250a000000", @ANYRES32, @ANYBLOB="08003c24140001"], 0x30}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40914) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/216, 0xd8}], 0xc}}], 0x1, 0x40010100, 0x0) 1.131462634s ago: executing program 4 (id=2731): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000380)="464aa5d4b28ffe3a") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x11, 0x0, 0x40000}, 0x816) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b6a3dd963b683ced2b3266175599b779617e66e6b3e15c049fcf0635a2d36160bbf9a2edcacc0bbe015b84150a19e54d361ea5b7127f63b6cbe3d34f28de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b7", 0x8b}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40410c0}, 0x20000801) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x1a, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000380)="464aa5d4b28ffe3a") (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x11, 0x0, 0x40000}, 0x816) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b6a3dd963b683ced2b3266175599b779617e66e6b3e15c049fcf0635a2d36160bbf9a2edcacc0bbe015b84150a19e54d361ea5b7127f63b6cbe3d34f28de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b7", 0x8b}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) (async) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40410c0}, 0x20000801) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x1a, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) (async) 1.031162198s ago: executing program 2 (id=2732): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x0, 0x8, "e256b28c5988"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x2}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xe, 0x12}, {0xb, 0xffe6}}}, 0x24}}, 0x4000010) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x2, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 901.235503ms ago: executing program 3 (id=2733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x800e, 0x6005}, @void, @x25={0x2, 0x2, 0xb, "08fb453c526999a1b05660ddb2f3d535a64745c910edd94567d8b0f1e322d331332c4b28322381a4293318598f1896c9fbc5cb2eb98e2dd0fc3c540589409d4c4ed632bbaffc2ed32836986ef242032545c8a5611e6b30de320c502ed5c29e09c410618cf31a4eb63d344bce3fdc381a2be568830c9e5be666c96a9b0ef2396fe55c04f9a4d17f4b65c2558aaa83bc75490651f1a34e42f837c578592d"}}, 0xa4) 702.123957ms ago: executing program 4 (id=2734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfa}, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0xff10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x10}], 0x1, 0x0, 0x0, 0x4002011}, 0x0) 389.817577ms ago: executing program 4 (id=2735): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x458, 0x30, 0xffff, 0x0, 0x0, {}, [{0x444, 0x1, [@m_police={0x440, 0x1, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x1, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x458}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000000103010100000000000000000500000608000340000ffe004400138006000140810000000600014088a8000006000240fffe00000600014088a800000600024000080000060002400004000006000240fffb000006000240000e00000c000200fffffffc000000019b83e4b05b9233e74937e6933544f1f7fb008c0bca0331350d9fd5c1dd90fe52746d906683f3757439041a154971585787fb9cbfb7b78aa1c3034e9a8560721f98eba032db339d37e4624c2636684bd664d6c585b43fa124ab"], 0x6c}, 0x1, 0x0, 0x0, 0x44080}, 0x4040044) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c"], 0xe8}}, 0x0) 279.445011ms ago: executing program 2 (id=2736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000001080003400000001408000240000000020800044000d400150900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 182.33555ms ago: executing program 4 (id=2737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x22020600) (async, rerun: 64) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2402}], 0x57, 0x7f) (async, rerun: 64) epoll_pwait(r1, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 126.709623ms ago: executing program 2 (id=2738): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x80, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x16, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x5, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "9a75a4246a1d840f20f6de8c68dc8702"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xfe9c}, 0x1, 0x0, 0x0, 0x20008090}, 0x40) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r10}, &(0x7f0000000040), &(0x7f0000000ac0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) pread64(r8, &(0x7f0000000000)=""/112, 0x70, 0x2) 2.44376ms ago: executing program 3 (id=2739): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "d789d6872b89943d72bbdf5139672ae77b452d7b24075f511006e1a0cfd0c39350c4cb5c35c225721312747b0e2ad7f97f275e8f71e63d9d8aab464662570f407feb1d8024967f3ef558513b6c9ab8851ab095776667aedacf66f90afd3fcda51bff0e0ce3147bf9c51c1c3d890f758864c92511d712bfcb94733ffbbcd00dfffc173670a698c214caba88440c"}, @NFTA_OBJ_USERDATA={0x52, 0x8, "57465797b99a9a3227a1bd2e279f9756722366ae893dd9cb9640590df4a10b6f7e1141a203c2d030b735044945cf1f798cd1b59e134b5dad7204a1cf660d33bb5c70b2c15d19035f01c3ca2e669f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x76, 0x8, "042b206813ab2870bdfaea4a07da030f24b47a546108ff5882357eede123adeed42ba27d72835905dd045b2b0a2e2441a1ed8d7e5170a3831fac67c6a49762e9f39490f943df022461eb82ef041fd72f60724fe9286781535c032d739f3b9bac1c3b3ea7f6d9f66734223126d39f33ea0b3643ab4f2a13aa9d9556c7bc02aa2cb35116927ed5"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xbcc8c9aebf91a27f}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x230}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x3194, 0x30, 0x800, 0x0, 0x0, {}, [{0x3050, 0x1, [@m_mpls={0xc4, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2a3a3}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4d}, @TCA_MPLS_LABEL={0x8, 0x5, 0x12244}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x8000, 0x8, 0x3, 0x80000000}, 0x1}}]}, {0x41, 0x6, "5e973e60af5191b8e0085597f51b45ba28b5c5f70170fbf6965e4beb997aa818b02c3c077ad7c6fdfd1fad74b276ba8f5d1ffe13059b680b69cbbf6e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xd8, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6007}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x89, 0x6, "7adaff05501e0b3424b7357087a4009bd392c60025f0593bf8f35b0a0616f6aa7018bb72d3209147de0ef69b52231a98fa4a50013094592aa43360c5d73d16f18e6981fd66a4730927131cbd2a4f46966f5582e9b630d4719f4da06cee12f4707e4a109e466581b32b24feaadfca8c88300394922173a8663108463bfe723567c6e36dc9a4"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1cb8, 0xa, 0x0, 0x0, {{0xb}, {0xc8c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x45b0}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x7, 0x7, 0x506fcb4f, 0x1, 0xc, 0x6, 0x5, 0x7, 0x9, 0x9a1, 0x37, 0xa57b, 0x7aa3, 0x3, 0xffffffff, 0x3ff, 0xfff, 0x87, 0x6, 0x1, 0x3ff, 0x9, 0x20, 0x0, 0x7, 0x6, 0xb5a2, 0xf, 0xc, 0x4, 0x81, 0x9, 0x6, 0x100, 0x7fff, 0x1, 0x4, 0x1, 0x4, 0x1, 0x7, 0x6, 0x7, 0x6, 0x9f, 0x9, 0x4, 0x81, 0x8, 0x8, 0x9, 0xd, 0x0, 0x7ff, 0x8, 0x7, 0x2, 0x6, 0xdbb4, 0x7, 0x5, 0x5, 0xff, 0xe, 0x100, 0x88, 0x1000000, 0xcd, 0x936, 0x5, 0x10, 0x0, 0x4, 0x4, 0x0, 0xdc, 0x7c8b40f1, 0x1, 0x100, 0x7f, 0x6, 0x1, 0x1000, 0x6d, 0x1, 0x5, 0xa6, 0x0, 0x2, 0x3, 0x4, 0xea, 0x5d616090, 0x4, 0x6, 0xfff, 0x200, 0x40, 0x1, 0x2, 0x5, 0x1c00000, 0x0, 0x6, 0x5a1, 0x9, 0x4, 0x2d, 0xffff, 0xb, 0x0, 0x200, 0x2, 0x4, 0xfffffff7, 0x5, 0x6, 0xff, 0x6, 0x7, 0xb60, 0x3d, 0x6, 0x9, 0x3, 0x101, 0x1, 0x9, 0xa3e5, 0x2, 0x9, 0x7, 0x1, 0x0, 0x200, 0xffffffbf, 0x0, 0xb, 0x3, 0x10, 0x8, 0x5, 0x411, 0x2, 0x1, 0x7, 0x0, 0x6c6, 0x0, 0xd48, 0x7ff, 0x14, 0xda, 0x9, 0x6, 0x8, 0x7eb, 0x7fff, 0x9, 0x8, 0x9, 0x2, 0x3, 0xe, 0x2, 0x3, 0xb, 0x9, 0x6, 0x0, 0x40, 0xc4d6, 0x401, 0x7730, 0x4, 0xfffffffe, 0x9, 0x81, 0x2ffc, 0x80000000, 0xfb, 0x10, 0x1, 0x8, 0x2, 0x0, 0x7, 0x400, 0x80000000, 0x7634, 0x1, 0x4, 0x5, 0x8a6, 0x7, 0x6, 0x6, 0x9, 0x6, 0x2, 0x8, 0x3, 0xb, 0x400, 0x6, 0x0, 0xfff, 0x7, 0x5, 0xd2, 0x5d64a7f2, 0x7, 0x0, 0x6, 0x5, 0x5a76ce80, 0x10000, 0xcf78, 0x5, 0x628319f8, 0x4, 0x9, 0x1ff, 0x2, 0xffffffff, 0x10, 0x9, 0x7fda5e58, 0x2, 0x0, 0x3, 0x0, 0x5, 0x0, 0x4, 0x3, 0x1, 0x7, 0x5, 0x1, 0x9315, 0x10000, 0x6, 0x29, 0x4, 0x7, 0x9, 0x4, 0x9, 0xc9b1, 0xbb21, 0x7, 0x2, 0x8000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x9, 0x9, {0x0, 0x0, 0x7fff, 0x6, 0x3, 0x8}, {0xe7, 0x0, 0xa, 0xce15, 0xa6, 0x605}, 0x1, 0x7, 0x175}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xf, 0x1e5, 0x8, 0x5, 0x101, 0x8, 0x1, 0x9, 0x9, 0x14001, 0x7, 0x40, 0x7, 0x7fff, 0x1, 0x1, 0x10000, 0x1, 0x4, 0xca3e, 0x4, 0x9, 0x9, 0x10000, 0x7, 0x8, 0xb2c, 0x2, 0x80000001, 0x59f0, 0x2, 0x81, 0xe2, 0x6, 0x3, 0xc0e9, 0x1e53, 0x3, 0x42a, 0xc, 0x8000, 0x100, 0x9, 0x9, 0x1ff, 0x80000001, 0x101, 0x2b, 0x7, 0xffff, 0x5, 0x5, 0x9, 0x8b3, 0x0, 0xe, 0x81, 0x3, 0x2, 0xb517, 0x10001, 0x5, 0xe9, 0xee, 0x8001, 0x9, 0x2, 0x1, 0x6, 0x0, 0x4d5e4729, 0xbc1e, 0x4, 0x74a, 0x0, 0x100, 0x5, 0x3, 0x3, 0x2, 0xec, 0x6, 0x8, 0x80000000, 0xffffffff, 0x9, 0x0, 0x8000, 0x6, 0x2, 0x0, 0x9, 0x5, 0x9, 0x101, 0x4, 0x58, 0x6, 0x4, 0x8, 0x7, 0xc, 0x1, 0x8001, 0xdf, 0x7fff, 0x3, 0x8000, 0x4, 0x9, 0xc, 0x1, 0x3, 0x7, 0x7f, 0xffffffff, 0xe, 0x4, 0x7, 0x0, 0x3, 0x30dd, 0x6, 0x5, 0x0, 0x7fffffff, 0x9, 0xbab, 0x7, 0x1, 0x8, 0x8f, 0x3, 0x8, 0x9, 0x2, 0xff, 0x6, 0xff, 0x3ff, 0x4, 0x8, 0x8, 0x9, 0x1, 0x6496, 0x0, 0x5, 0x10, 0x80, 0x8, 0x200, 0x8, 0xf, 0x5, 0xf, 0x2, 0x2, 0x9, 0xfe3b, 0x47, 0x1, 0x0, 0x1aa4a058, 0x5, 0x8e8, 0xcc27, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0xb0a, 0xd26b, 0x9, 0x101, 0x5, 0x1d3d, 0x5, 0x9, 0x5, 0x3, 0xff3, 0x40, 0x8, 0x4, 0xf, 0x1, 0x6, 0x5bf, 0x1, 0xfffffffe, 0x4, 0x40, 0x7fffffff, 0x6, 0x8, 0x1, 0xfffffffe, 0x7fffffff, 0x0, 0x7, 0x3, 0x74, 0x2, 0x5, 0xeb, 0x2, 0x200, 0x7fffffff, 0x70f, 0x7ff, 0x81, 0x7, 0x6, 0xc, 0x100, 0x7, 0x8000, 0xbbc4, 0x40, 0x1, 0x7, 0x80000000, 0xc35, 0xffffffff, 0x6, 0x2610, 0x6, 0x9, 0x0, 0x80, 0x0, 0x9, 0x1000, 0xd4, 0x0, 0x9, 0x3, 0xd9e0, 0x10, 0x3, 0x400, 0x0, 0x0, 0x4, 0x7fff, 0x9691, 0x4, 0x2, 0x101, 0x10000, 0x3, 0x8, 0x0, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x5, 0xf, 0x1d05, 0x9, 0x5, 0x1d, 0x513, 0x7fff, 0xfffffffc, 0x8001, 0x8, 0x4f85, 0xb, 0x2, 0x1, 0x10001, 0x413e4372, 0x8, 0x3, 0x3, 0xffff, 0x3ff, 0xffffffff, 0x5, 0x4, 0x1, 0xb1, 0x2, 0xfffffffe, 0x80000000, 0x8, 0x2, 0x0, 0x180000, 0x6, 0xc, 0x8, 0x4, 0x7, 0x3, 0x8, 0x7, 0x0, 0x3ff, 0x4, 0x8, 0x1000, 0x1, 0x6, 0x35, 0x80000001, 0xfffffffd, 0x401, 0x9, 0x7ff, 0x0, 0xc458, 0xe, 0x6, 0xb15, 0xfff, 0x3, 0x10000, 0xa, 0x2, 0x1000, 0x8, 0x6, 0x8000, 0x6, 0x5, 0x0, 0x1, 0xd67c, 0x2, 0x400, 0xfffffff8, 0x200, 0x6, 0x2, 0xfff, 0x32, 0x4, 0x9, 0x864e, 0x9e00, 0x6, 0x44, 0x0, 0x4, 0x9, 0x8, 0xc6, 0x2, 0xffffffff, 0x1, 0x8001, 0x5, 0x7, 0x2, 0x7, 0x80, 0x2, 0xffffffff, 0x7fff, 0x0, 0xb7, 0x80000000, 0x6, 0x2, 0xfffffff8, 0x4c, 0xa54e, 0x9, 0x5, 0x243e4031, 0xa, 0x3, 0x100, 0x80000001, 0x9, 0x1, 0xb, 0x80000000, 0x4, 0x7df, 0x29021dd6, 0x5, 0x1b2c024f, 0x0, 0x1, 0x8, 0x7f, 0x50e5802a, 0x5, 0x29, 0x400000, 0x4, 0x7, 0x6, 0xffff8001, 0x0, 0x0, 0xd, 0x77a, 0xd36d, 0x200, 0x10, 0x6, 0x2, 0x2, 0xc, 0x10000, 0x8, 0xf, 0x800, 0x835, 0x8, 0x18000, 0x3cc2, 0x4, 0x8, 0x6, 0x5, 0x7ff, 0x245a, 0xfff, 0x0, 0xe, 0x2, 0x0, 0x4f1f, 0x0, 0x6, 0x1, 0x5, 0x400, 0x1a0, 0x0, 0x2, 0x76a2, 0x2b, 0xfffffe01, 0x0, 0x7, 0x1, 0x9, 0x1, 0xacf, 0x7fff, 0x5, 0x400, 0x4d, 0x81, 0x0, 0x1, 0x9, 0x6, 0x10000, 0x6, 0x9, 0x7ff, 0x401, 0x400, 0xd95, 0x0, 0x0, 0xecb9, 0x2, 0x200, 0xafd1, 0xfffffff9, 0x80b, 0xb, 0x20b3, 0xfffffff7, 0x30c1, 0x101, 0xc5f, 0x0, 0x5, 0x4, 0x800, 0xfff, 0x3, 0x6, 0x7, 0x1, 0x1, 0x8, 0x0, 0x9, 0x10000, 0x2, 0x7, 0x5, 0x7, 0xffffff7f, 0x4, 0x7, 0x10000, 0x788dcf68, 0x5, 0xb, 0x1, 0x4, 0x9, 0x7, 0x4, 0x3, 0xd82b, 0x63, 0x40, 0xe, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf65}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], []]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1b0, 0x20, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x7d, 0x6, {0x5, 'security\x00', 0xc, 0x8, "39993d93d70b05a89f8e5c2d5e209d8baeb4cc05d14b5620a6337cec3c88df162e04455655dc4abc1b8f5b6fcdca1d9b1498226b00b2fe722f45063bf20057bfeb058e420c09ef82d38af47822f57533b22abe"}}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1048, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xba, 0xffffffff, 0x5, 0x3, 0x35c}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x130, 0x1, [@m_bpf={0x12c, 0x1b, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xf3, 0x6, "2a9decd496b139f0fe896854a2a31c97d0836286bffb30c6a5725432589ea2572a73c9e5fda27e7b94d8a0ceb59b5e23dbbe80a14fbe2e9f86817e10b7583472c58fee6b850eede811398e0352c491717f498c048cb60c764d0aac02ca715f1248a9656dce89f43e7915afac701af9b83d704b5069620a4e470239e097e845bc9ab18fa0319ad31bb3afc1940d770bf35b0826c0b813dde6997b6db469e5dcd3ed4b2cd4bc39d476ea4325ab49fbf6d9890b84238fb59647529ada812ee9be552ab0a926c6d1c3bffcd1bdee658a1fd4b11303b0f1ad94eb544d7bb2279498083dd76f61f2dae1cfbae7bf2c51a075"}, {0xc}, {0xc}}}]}]}, 0x3194}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) bpf$MAP_CREATE(0x100000000000020, &(0x7f00000005c0)=ANY=[@ANYBLOB='\n', @ANYRES32], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x100000}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x60, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10d0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xb91, 0x45}}]}]}]}, 0x50}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x90, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6e00}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8d2) 0s ago: executing program 4 (id=2740): pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x4000044) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x0, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) write$tun(r2, &(0x7f00000003c0)={@val={0x0, 0x6558}, @void, @llc={@snap={0x0, 0x1, "e26c", "b0bcce", 0x11, "50f4b8c5a8f0f0cafa98ae47547be267ea296997c14db401d2f6938897214ecf95e4d9c9ebeea24ff6d88c096b671b7bd78c1d88bb4151ae89dda13e0f4f71ae75f9a181c57095669d1ea4f4a78c3c1ac8b645a811f66c12744cea26eaa9356a375ab47b277693acfd58be21786e6b0f446063373e8d79bb1b8d867b905abdbeb672fc5ab5d18f9fcb0da6d1582fd99727dceeea4ced7c85f79dc2c5deea741bc3fb407b1e3f5edb3e1e44cc77f1b757ef1970db84aac36eb00fd144c3a819758e2683456938ea04b425c53c76ba8ad134f68451ec74f0b4"}}}, 0xe5) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Resetting bearer [ 244.038174][T10680] tipc: Resetting bearer [ 244.080189][T10699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1293'. [ 244.118475][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 244.299462][T10703] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 244.308080][T10703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1293'. [ 244.887219][ T980] tipc: Node number set to 4263211927 [ 245.822503][T10680] tipc: Disabling bearer [ 245.832415][T10686] lo speed is unknown, defaulting to 1000 [ 245.832464][T10678] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 245.853748][T10696] macvlan5: entered allmulticast mode [ 245.866122][T10696] veth1_vlan: entered allmulticast mode [ 245.918556][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 245.936230][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 245.976827][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 246.214148][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1300'. [ 246.224076][T10725] netlink: 'syz.3.1300': attribute type 7 has an invalid length. [ 246.233854][T10725] netlink: 'syz.3.1300': attribute type 8 has an invalid length. [ 246.264173][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 246.534898][T10741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'. [ 246.567114][T10741] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 246.575186][T10741] netlink: 'syz.3.1305': attribute type 3 has an invalid length. [ 246.586797][T10741] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1305'. [ 246.597237][T10741] NCSI netlink: No device for ifindex 246 [ 246.707965][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 246.782233][T10686] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 246.831630][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 247.013032][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 247.048668][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 247.340625][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 247.370836][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 247.400814][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1309'. [ 247.419451][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 247.506404][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 247.958024][T10792] netlink: 'syz.2.1322': attribute type 2 has an invalid length. [ 248.023614][T10792] : entered promiscuous mode [ 248.213397][T10798] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.449695][T10807] bridge0: port 1(erspan0) entered blocking state [ 248.471698][T10807] bridge0: port 1(erspan0) entered disabled state [ 248.490638][T10807] erspan0: entered allmulticast mode [ 248.523980][T10807] erspan0: entered promiscuous mode [ 248.533555][T10807] bridge0: port 1(erspan0) entered blocking state [ 248.540403][T10807] bridge0: port 1(erspan0) entered forwarding state [ 248.559312][T10808] erspan0: left allmulticast mode [ 248.584672][T10808] erspan0: left promiscuous mode [ 248.594452][T10808] bridge0: port 1(erspan0) entered disabled state [ 248.659409][ T3030] net_ratelimit: 7 callbacks suppressed [ 248.659432][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 248.828551][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 248.925047][T10827] macsec0: entered allmulticast mode [ 248.944096][T10827] syz_tun: entered allmulticast mode [ 248.954741][T10827] syz_tun: left allmulticast mode [ 248.997577][T10831] !: renamed from dummy0 (while UP) [ 249.076093][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 249.204195][T10842] rdma_rxe: rxe_newlink: failed to add lo [ 249.367430][T10847] sctp: [Deprecated]: syz.4.1339 (pid 10847) Use of int in maxseg socket option. [ 249.367430][T10847] Use struct sctp_assoc_value instead [ 249.442050][T10842] 8021q: adding VLAN 0 to HW filter on device  [ 249.470358][T10842] dummy0: entered promiscuous mode [ 249.691123][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.883987][T10840] lo speed is unknown, defaulting to 1000 [ 249.891450][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 250.173811][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 250.326376][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 250.666014][ T5861] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.670347][T10889] tipc: Enabled bearer , priority 0 [ 250.756052][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 250.916667][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 250.962666][T10888] tipc: Disabling bearer [ 251.116790][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 251.197722][T10898] __nla_validate_parse: 12 callbacks suppressed [ 251.197743][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1346'. [ 251.246570][T10898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1346'. [ 251.270510][T10906] bond0: (slave bond6): Error -95 calling ndo_bpf [ 251.390000][T10907] bond0: (slave bond6): Error -95 calling ndo_bpf [ 252.167135][T10909] lo speed is unknown, defaulting to 1000 [ 252.167544][T10840] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 252.255237][T10933] macsec1: entered promiscuous mode [ 252.274862][T10933] bridge0: entered promiscuous mode [ 252.312523][T10937] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 252.323302][T10933] bridge0: port 1(macsec1) entered blocking state [ 252.387416][T10933] bridge0: port 1(macsec1) entered disabled state [ 252.400620][T10933] macsec1: entered allmulticast mode [ 252.408954][T10933] bridge0: entered allmulticast mode [ 252.425087][T10933] macsec1: left allmulticast mode [ 252.441188][T10933] bridge0: left allmulticast mode [ 252.466928][T10933] bridge0: left promiscuous mode [ 252.586878][T10938] bond2: entered promiscuous mode [ 252.592057][T10938] bond2: entered allmulticast mode [ 252.627517][T10938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.723014][T10950] xt_bpf: check failed: parse error [ 253.296235][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.669225][T10933] hsr0: left allmulticast mode [ 253.674114][T10933] hsr_slave_0: left allmulticast mode [ 253.695748][T10933] hsr_slave_1: left allmulticast mode [ 253.763584][T10933] !: left promiscuous mode [ 253.830927][T10909] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 253.891798][T10954] ip6gre2: entered allmulticast mode [ 253.907452][ T1144] net_ratelimit: 7 callbacks suppressed [ 253.907475][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 253.940635][ T1155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.953817][ T1155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.988692][ T1155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.991589][T10957] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 254.102621][ T1155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.386081][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 254.547436][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 254.633744][T10967] FAULT_INJECTION: forcing a failure. [ 254.633744][T10967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.647620][T10967] CPU: 0 UID: 0 PID: 10967 Comm: syz.4.1364 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 254.647652][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.647664][T10967] Call Trace: [ 254.647673][T10967] [ 254.647681][T10967] dump_stack_lvl+0x189/0x250 [ 254.647712][T10967] ? __pfx____ratelimit+0x10/0x10 [ 254.647742][T10967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.647765][T10967] ? __pfx__printk+0x10/0x10 [ 254.647792][T10967] ? __might_fault+0xb0/0x130 [ 254.647833][T10967] should_fail_ex+0x414/0x560 [ 254.647869][T10967] _copy_from_user+0x2d/0xb0 [ 254.647896][T10967] __sys_bpf+0x1ed/0x860 [ 254.647930][T10967] ? __pfx___sys_bpf+0x10/0x10 [ 254.647975][T10967] ? ksys_write+0x22a/0x250 [ 254.648004][T10967] ? __pfx_ksys_write+0x10/0x10 [ 254.648025][T10967] ? rcu_is_watching+0x15/0xb0 [ 254.648057][T10967] __x64_sys_bpf+0x7c/0x90 [ 254.648084][T10967] do_syscall_64+0xfa/0x3b0 [ 254.648100][T10967] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.648128][T10967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.648147][T10967] ? clear_bhb_loop+0x60/0xb0 [ 254.648170][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.648189][T10967] RIP: 0033:0x7f0c9f38e9a9 [ 254.648208][T10967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.648223][T10967] RSP: 002b:00007f0ca0191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.648246][T10967] RAX: ffffffffffffffda RBX: 00007f0c9f5b5fa0 RCX: 00007f0c9f38e9a9 [ 254.648261][T10967] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 254.648273][T10967] RBP: 00007f0ca0191090 R08: 0000000000000000 R09: 0000000000000000 [ 254.648284][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.648295][T10967] R13: 0000000000000000 R14: 00007f0c9f5b5fa0 R15: 00007ffc7a0eef48 [ 254.648329][T10967] [ 254.956602][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'. [ 255.039507][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.174774][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.327635][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.435881][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.482112][T10994] lo speed is unknown, defaulting to 1000 [ 255.499185][T10994] lo speed is unknown, defaulting to 1000 [ 255.516667][T10994] lo speed is unknown, defaulting to 1000 [ 255.546175][T10998] FAULT_INJECTION: forcing a failure. [ 255.546175][T10998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.595858][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.0.1375 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 255.595892][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.595904][T10998] Call Trace: [ 255.595912][T10998] [ 255.595921][T10998] dump_stack_lvl+0x189/0x250 [ 255.595952][T10998] ? __pfx____ratelimit+0x10/0x10 [ 255.595981][T10998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.596002][T10998] ? __pfx__printk+0x10/0x10 [ 255.596048][T10998] should_fail_ex+0x414/0x560 [ 255.596073][T10998] _copy_to_user+0x31/0xb0 [ 255.596101][T10998] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 255.596138][T10998] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 255.596168][T10998] ? __fget_files+0x2a/0x420 [ 255.596191][T10998] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 255.596220][T10998] bpf_prog_test_run+0x2c4/0x340 [ 255.596244][T10998] __sys_bpf+0x4a4/0x860 [ 255.596274][T10998] ? __pfx___sys_bpf+0x10/0x10 [ 255.596316][T10998] ? ksys_write+0x22a/0x250 [ 255.596343][T10998] ? __pfx_ksys_write+0x10/0x10 [ 255.596365][T10998] ? rcu_is_watching+0x15/0xb0 [ 255.596410][T10998] __x64_sys_bpf+0x7c/0x90 [ 255.596438][T10998] do_syscall_64+0xfa/0x3b0 [ 255.596455][T10998] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.596482][T10998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.596500][T10998] ? clear_bhb_loop+0x60/0xb0 [ 255.596524][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.596541][T10998] RIP: 0033:0x7f1c3af8e9a9 [ 255.596560][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.596577][T10998] RSP: 002b:00007f1c3be42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.596598][T10998] RAX: ffffffffffffffda RBX: 00007f1c3b1b5fa0 RCX: 00007f1c3af8e9a9 [ 255.596613][T10998] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 255.596625][T10998] RBP: 00007f1c3be42090 R08: 0000000000000000 R09: 0000000000000000 [ 255.596636][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.596647][T10998] R13: 0000000000000000 R14: 00007f1c3b1b5fa0 R15: 00007ffcf788deb8 [ 255.596681][T10998] [ 255.601439][T10994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.679795][T11007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1376'. [ 255.766608][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.886596][T10994] lo speed is unknown, defaulting to 1000 [ 255.892336][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.894594][T10994] lo speed is unknown, defaulting to 1000 [ 255.908322][T10994] lo speed is unknown, defaulting to 1000 [ 255.917343][T10994] lo speed is unknown, defaulting to 1000 [ 255.956322][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 255.963631][T10994] lo speed is unknown, defaulting to 1000 [ 256.085517][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 256.133987][T11023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1383'. [ 256.318456][T11033] FAULT_INJECTION: forcing a failure. [ 256.318456][T11033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.361676][T11035] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1388'. [ 256.371826][T11033] CPU: 0 UID: 0 PID: 11033 Comm: syz.3.1387 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 256.371865][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.371877][T11033] Call Trace: [ 256.371886][T11033] [ 256.371894][T11033] dump_stack_lvl+0x189/0x250 [ 256.371925][T11033] ? __pfx____ratelimit+0x10/0x10 [ 256.371955][T11033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.371979][T11033] ? __pfx__printk+0x10/0x10 [ 256.372020][T11033] should_fail_ex+0x414/0x560 [ 256.372047][T11033] _copy_to_user+0x31/0xb0 [ 256.372077][T11033] simple_read_from_buffer+0xe1/0x170 [ 256.372110][T11033] proc_fail_nth_read+0x1df/0x250 [ 256.372135][T11033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.372160][T11033] ? rw_verify_area+0x258/0x650 [ 256.372184][T11033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.372206][T11033] vfs_read+0x200/0x980 [ 256.372238][T11033] ? __pfx___mutex_lock+0x10/0x10 [ 256.372258][T11033] ? __pfx_vfs_read+0x10/0x10 [ 256.372286][T11033] ? __fget_files+0x2a/0x420 [ 256.372310][T11033] ? __fget_files+0x3a0/0x420 [ 256.372325][T11033] ? __fget_files+0x2a/0x420 [ 256.372355][T11033] ksys_read+0x145/0x250 [ 256.372384][T11033] ? __pfx_ksys_read+0x10/0x10 [ 256.372405][T11033] ? rcu_is_watching+0x15/0xb0 [ 256.372435][T11033] ? do_syscall_64+0xbe/0x3b0 [ 256.372459][T11033] do_syscall_64+0xfa/0x3b0 [ 256.372476][T11033] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.372503][T11033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.372522][T11033] ? clear_bhb_loop+0x60/0xb0 [ 256.372547][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.372565][T11033] RIP: 0033:0x7f079498d3bc [ 256.372584][T11033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 256.372599][T11033] RSP: 002b:00007f0795865030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.372621][T11033] RAX: ffffffffffffffda RBX: 00007f0794bb5fa0 RCX: 00007f079498d3bc [ 256.372636][T11033] RDX: 000000000000000f RSI: 00007f07958650a0 RDI: 0000000000000005 [ 256.372648][T11033] RBP: 00007f0795865090 R08: 0000000000000000 R09: 0000000000000000 [ 256.372659][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.372671][T11033] R13: 0000000000000000 R14: 00007f0794bb5fa0 R15: 00007ffffcadbc38 [ 256.372708][T11033] [ 256.789501][T11044] netlink: 'syz.4.1392': attribute type 12 has an invalid length. [ 256.820916][T11044] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1392'. [ 257.221803][T11067] ip6gre2: entered allmulticast mode [ 257.330328][T11071] netlink: 'syz.0.1401': attribute type 8 has an invalid length. [ 257.661025][T11081] bridge2: entered promiscuous mode [ 257.700821][T11081] bridge2: entered allmulticast mode [ 258.097615][T11100] netlink: 14220 bytes leftover after parsing attributes in process `syz.3.1410'. [ 258.184694][T11105] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 258.219904][T11105] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 258.237229][T11108] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 258.276581][T11108] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 258.621612][T11120] xt_CT: No such helper "syz0" [ 259.669094][T11153] net_ratelimit: 17 callbacks suppressed [ 259.669116][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 260.017361][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 260.356350][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 260.401209][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 260.410908][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 260.695665][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 261.024053][T11171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1430'. [ 261.042440][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 261.386620][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 261.669242][T11153] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 261.857188][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 261.970167][T11182] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.986067][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 262.096183][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 262.374186][T11188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1435'. [ 262.482492][T11207] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1442'. [ 262.486284][T11188] lo speed is unknown, defaulting to 1000 [ 262.521148][T11207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1442'. [ 262.678115][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1444'. [ 262.691962][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.895760][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 263.016660][T11217] netlink: 'syz.4.1446': attribute type 13 has an invalid length. [ 263.041911][T11217] netlink: 'syz.4.1446': attribute type 17 has an invalid length. [ 263.044709][T11220] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.186174][T11188] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 263.195067][T11217] lo speed is unknown, defaulting to 1000 [ 263.202335][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1446'. [ 263.217390][T11222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.257736][T11188] lo speed is unknown, defaulting to 1000 [ 263.309570][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.390797][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'. [ 263.395517][T11222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.811426][T11241] syzkaller0: entered promiscuous mode [ 263.825522][T11241] syzkaller0: entered allmulticast mode [ 265.984736][T11217] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 265.991852][T11239] lo speed is unknown, defaulting to 1000 [ 265.997839][ T3030] net_ratelimit: 12 callbacks suppressed [ 265.997861][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 266.015036][T11217] lo speed is unknown, defaulting to 1000 [ 266.265977][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 266.402577][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 266.526246][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 266.611135][T11239] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 266.631960][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1461'. [ 266.653943][T11239] lo speed is unknown, defaulting to 1000 [ 266.655680][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 267.091021][T11285] bpq0: left promiscuous mode [ 267.101749][T11285] bpq0: left allmulticast mode [ 267.207336][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 267.273504][T11297] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 267.575992][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 267.725393][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 267.864354][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 267.982584][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1479'. [ 267.997546][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 268.063542][T11331] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1479'. [ 268.402901][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 268.422000][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 268.447040][T11341] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 268.741764][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1488'. [ 269.650357][T11397] tipc: Enabled bearer , priority 0 [ 269.664614][T11397] syzkaller0: entered promiscuous mode [ 269.671248][T11397] syzkaller0: entered allmulticast mode [ 269.733228][T11401] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1494'. [ 270.012435][T11394] tipc: Resetting bearer [ 270.113473][T11394] tipc: Disabling bearer [ 270.167687][T11422] tipc: New replicast peer: 255.255.255.255 [ 270.191940][T11422] tipc: Enabled bearer , priority 26 [ 270.442601][T11439] tipc: Enabling of bearer rejected, already enabled [ 270.495973][T11440] syzkaller0: entered promiscuous mode [ 270.506676][T11440] syzkaller0: entered allmulticast mode [ 270.545276][T11440] tipc: Resetting bearer [ 270.625112][T11448] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1509'. [ 270.756284][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'. [ 270.924394][T11462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1513'. [ 270.934670][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1508'. [ 271.047535][ T36] net_ratelimit: 21 callbacks suppressed [ 271.047557][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.176797][ T3030] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.321063][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.468178][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.520180][T11486] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 271.585813][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.721044][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.870956][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 272.019096][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 272.168230][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 272.296908][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 273.803749][T11559] __nla_validate_parse: 4 callbacks suppressed [ 273.803770][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1539'. [ 273.820047][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1538'. [ 273.958756][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 274.113749][T11571] syzkaller0: entered promiscuous mode [ 274.137030][T11571] syzkaller0: entered allmulticast mode [ 274.287896][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 274.324996][T11582] xt_TCPMSS: Only works on TCP SYN packets [ 274.380464][T11583] lo speed is unknown, defaulting to 1000 [ 274.970372][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1552'. [ 274.991993][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1552'. [ 275.019763][T11598] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1551'. [ 275.022587][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1552'. [ 275.054107][T11602] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1553'. [ 275.105892][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 275.263015][T11583] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 275.264998][T11607] bond0: option resend_igmp: invalid value (18446744073709551482) [ 275.300359][T11607] bond0: option resend_igmp: allowed values 0 - 255 [ 275.329861][T11583] lo speed is unknown, defaulting to 1000 [ 275.487477][T11615] netlink: 'syz.1.1556': attribute type 1 has an invalid length. [ 275.527012][T11615] netlink: 'syz.1.1556': attribute type 39 has an invalid length. [ 275.725920][T11630] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 275.887794][T11633] netlink: 'syz.2.1562': attribute type 10 has an invalid length. [ 275.956548][T11628] lo speed is unknown, defaulting to 1000 [ 276.057329][T11636] FAULT_INJECTION: forcing a failure. [ 276.057329][T11636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.109373][T11636] CPU: 0 UID: 0 PID: 11636 Comm: syz.1.1563 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 276.109404][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.109416][T11636] Call Trace: [ 276.109424][T11636] [ 276.109432][T11636] dump_stack_lvl+0x189/0x250 [ 276.109462][T11636] ? __pfx____ratelimit+0x10/0x10 [ 276.109490][T11636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.109512][T11636] ? __pfx__printk+0x10/0x10 [ 276.109540][T11636] ? __might_fault+0xb0/0x130 [ 276.109579][T11636] should_fail_ex+0x414/0x560 [ 276.109606][T11636] _copy_from_user+0x2d/0xb0 [ 276.109635][T11636] __x64_sys_epoll_ctl+0x126/0x1a0 [ 276.109666][T11636] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 276.109688][T11636] ? rcu_is_watching+0x15/0xb0 [ 276.109716][T11636] ? do_syscall_64+0xbe/0x3b0 [ 276.109751][T11636] do_syscall_64+0xfa/0x3b0 [ 276.109767][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.109794][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.109813][T11636] ? clear_bhb_loop+0x60/0xb0 [ 276.109837][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.109855][T11636] RIP: 0033:0x7f623698e9a9 [ 276.109874][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.109890][T11636] RSP: 002b:00007f6237878038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 276.109912][T11636] RAX: ffffffffffffffda RBX: 00007f6236bb5fa0 RCX: 00007f623698e9a9 [ 276.109925][T11636] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 276.109937][T11636] RBP: 00007f6237878090 R08: 0000000000000000 R09: 0000000000000000 [ 276.109950][T11636] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 276.109962][T11636] R13: 0000000000000000 R14: 00007f6236bb5fa0 R15: 00007ffd30f74ea8 [ 276.109995][T11636] [ 276.439711][T11643] syzkaller0: entered allmulticast mode [ 276.461630][ T1144] net_ratelimit: 29 callbacks suppressed [ 276.461645][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 276.482843][T11651] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 276.615968][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 276.705231][T11630] @ÿ: renamed from bond_slave_0 [ 276.766918][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 276.833102][T11651] lo speed is unknown, defaulting to 1000 [ 276.846426][T11628] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 276.890240][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 276.910907][T11628] lo speed is unknown, defaulting to 1000 [ 277.181606][T11663] geneve2: entered promiscuous mode [ 277.207610][ T3474] bond7: (slave macvlan2): failed to get link speed/duplex [ 277.421810][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.449753][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.468237][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.491507][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.525662][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 277.646097][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 277.765849][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 277.776422][T11651] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 277.879770][ T13] bond7: (slave macvlan2): failed to get link speed/duplex [ 277.915805][T11651] lo speed is unknown, defaulting to 1000 [ 277.950052][T11683] FAULT_INJECTION: forcing a failure. [ 277.950052][T11683] name failslab, interval 1, probability 0, space 0, times 0 [ 278.035658][T11683] CPU: 0 UID: 0 PID: 11683 Comm: syz.2.1577 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 278.035690][T11683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.035702][T11683] Call Trace: [ 278.035710][T11683] [ 278.035718][T11683] dump_stack_lvl+0x189/0x250 [ 278.035757][T11683] ? __pfx____ratelimit+0x10/0x10 [ 278.035786][T11683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.035808][T11683] ? __pfx__printk+0x10/0x10 [ 278.035840][T11683] ? __pfx___might_resched+0x10/0x10 [ 278.035862][T11683] ? fs_reclaim_acquire+0x7d/0x100 [ 278.035888][T11683] should_fail_ex+0x414/0x560 [ 278.035915][T11683] should_failslab+0xa8/0x100 [ 278.035945][T11683] kmem_cache_alloc_noprof+0x73/0x3c0 [ 278.035970][T11683] ? ep_insert+0x272/0x19e0 [ 278.036000][T11683] ep_insert+0x272/0x19e0 [ 278.036042][T11683] ? do_epoll_ctl+0x3c9/0xe90 [ 278.036066][T11683] ? __pfx_ep_insert+0x10/0x10 [ 278.036091][T11683] ? __pfx___mutex_lock+0x10/0x10 [ 278.036111][T11683] ? __fget_files+0x2a/0x420 [ 278.036132][T11683] ? __fget_files+0x2a/0x420 [ 278.036148][T11683] ? __fget_files+0x3a0/0x420 [ 278.036163][T11683] ? __fget_files+0x2a/0x420 [ 278.036192][T11683] do_epoll_ctl+0x7f4/0xe90 [ 278.036226][T11683] __x64_sys_epoll_ctl+0x163/0x1a0 [ 278.036257][T11683] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 278.036280][T11683] ? rcu_is_watching+0x15/0xb0 [ 278.036310][T11683] ? do_syscall_64+0xbe/0x3b0 [ 278.036333][T11683] do_syscall_64+0xfa/0x3b0 [ 278.036350][T11683] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.036378][T11683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.036396][T11683] ? clear_bhb_loop+0x60/0xb0 [ 278.036421][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.036440][T11683] RIP: 0033:0x7f58fe78e9a9 [ 278.036459][T11683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.036475][T11683] RSP: 002b:00007f58ff52a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 278.036497][T11683] RAX: ffffffffffffffda RBX: 00007f58fe9b5fa0 RCX: 00007f58fe78e9a9 [ 278.036511][T11683] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 278.036522][T11683] RBP: 00007f58ff52a090 R08: 0000000000000000 R09: 0000000000000000 [ 278.036535][T11683] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 278.036547][T11683] R13: 0000000000000000 R14: 00007f58fe9b5fa0 R15: 00007ffc4b5bb438 [ 278.036581][T11683] [ 278.418520][ T36] bond7: (slave macvlan2): failed to get link speed/duplex [ 278.629357][T11685] wireguard0: entered promiscuous mode [ 278.634966][T11685] wireguard0: entered allmulticast mode [ 278.850899][T11698] netlink: 'syz.2.1581': attribute type 1 has an invalid length. [ 278.863227][T11698] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 279.175080][T11709] netlink: 'syz.4.1585': attribute type 2 has an invalid length. [ 279.231950][T11709] __nla_validate_parse: 6 callbacks suppressed [ 279.231974][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 279.804677][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 279.814313][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 279.826062][T11734] netlink: 'syz.0.1591': attribute type 20 has an invalid length. [ 279.836688][T11733] FAULT_INJECTION: forcing a failure. [ 279.836688][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 279.850368][T11733] CPU: 1 UID: 0 PID: 11733 Comm: syz.3.1590 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 279.850398][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.850410][T11733] Call Trace: [ 279.850418][T11733] [ 279.850426][T11733] dump_stack_lvl+0x189/0x250 [ 279.850450][T11733] ? __pfx____ratelimit+0x10/0x10 [ 279.850473][T11733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.850492][T11733] ? __pfx__printk+0x10/0x10 [ 279.850521][T11733] ? __pfx___might_resched+0x10/0x10 [ 279.850551][T11733] ? fs_reclaim_acquire+0x7d/0x100 [ 279.850574][T11733] should_fail_ex+0x414/0x560 [ 279.850597][T11733] should_failslab+0xa8/0x100 [ 279.850631][T11733] kmem_cache_alloc_noprof+0x73/0x3c0 [ 279.850654][T11733] ? ep_insert+0x51a/0x19e0 [ 279.850690][T11733] ep_insert+0x51a/0x19e0 [ 279.850733][T11733] ? __pfx_ep_insert+0x10/0x10 [ 279.850772][T11733] ? __pfx___mutex_lock+0x10/0x10 [ 279.850791][T11733] ? __fget_files+0x2a/0x420 [ 279.850811][T11733] ? __fget_files+0x2a/0x420 [ 279.850825][T11733] ? __fget_files+0x3a0/0x420 [ 279.850840][T11733] ? __fget_files+0x2a/0x420 [ 279.850867][T11733] do_epoll_ctl+0x7f4/0xe90 [ 279.850902][T11733] __x64_sys_epoll_ctl+0x163/0x1a0 [ 279.850931][T11733] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 279.850953][T11733] ? rcu_is_watching+0x15/0xb0 [ 279.850981][T11733] ? do_syscall_64+0xbe/0x3b0 [ 279.851003][T11733] do_syscall_64+0xfa/0x3b0 [ 279.851019][T11733] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.851044][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.851063][T11733] ? clear_bhb_loop+0x60/0xb0 [ 279.851086][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.851103][T11733] RIP: 0033:0x7f079498e9a9 [ 279.851120][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.851136][T11733] RSP: 002b:00007f0795865038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 279.851157][T11733] RAX: ffffffffffffffda RBX: 00007f0794bb5fa0 RCX: 00007f079498e9a9 [ 279.851169][T11733] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 279.851178][T11733] RBP: 00007f0795865090 R08: 0000000000000000 R09: 0000000000000000 [ 279.851188][T11733] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 279.851198][T11733] R13: 0000000000000000 R14: 00007f0794bb5fa0 R15: 00007ffffcadbc38 [ 279.851228][T11733] [ 280.161534][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 280.171091][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 280.181051][T11734] netlink: 'syz.0.1591': attribute type 20 has an invalid length. [ 280.224065][T11737] netlink: 'syz.3.1592': attribute type 3 has an invalid length. [ 280.233277][T11737] netlink: 'syz.3.1592': attribute type 3 has an invalid length. [ 280.294173][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.386378][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.394743][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.444619][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.919471][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1598'. [ 280.929572][T11768] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 280.939187][T11768] netlink: 'syz.4.1598': attribute type 2 has an invalid length. [ 280.959312][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 280.980237][T11772] ip6t_rpfilter: unknown options [ 281.030229][T11768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1598'. [ 281.147053][T11768] tipc: Started in network mode [ 281.152270][T11768] tipc: Node identity 5ed741d4cd3, cluster identity 4711 [ 281.162660][T11768] tipc: Enabled bearer , priority 0 [ 281.194273][T11761] tipc: Disabling bearer [ 281.239018][T11786] FAULT_INJECTION: forcing a failure. [ 281.239018][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 281.253056][T11779] lo speed is unknown, defaulting to 1000 [ 281.301577][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.1.1602 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 281.301607][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.301617][T11786] Call Trace: [ 281.301625][T11786] [ 281.301632][T11786] dump_stack_lvl+0x189/0x250 [ 281.301673][T11786] ? __pfx____ratelimit+0x10/0x10 [ 281.301703][T11786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.301724][T11786] ? __pfx__printk+0x10/0x10 [ 281.301754][T11786] ? __pfx___might_resched+0x10/0x10 [ 281.301780][T11786] should_fail_ex+0x414/0x560 [ 281.301805][T11786] should_failslab+0xa8/0x100 [ 281.301834][T11786] kmem_cache_alloc_noprof+0x73/0x3c0 [ 281.301859][T11786] ? ep_ptable_queue_proc+0x5c/0x200 [ 281.301889][T11786] ep_ptable_queue_proc+0x5c/0x200 [ 281.301915][T11786] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 281.301943][T11786] datagram_poll+0x82/0x420 [ 281.301971][T11786] udp_poll+0x34/0x1f0 [ 281.301994][T11786] sock_poll+0x329/0x3e0 [ 281.302024][T11786] ? __pfx_sock_poll+0x10/0x10 [ 281.302045][T11786] ep_insert+0x115e/0x19e0 [ 281.302089][T11786] ? __pfx_ep_insert+0x10/0x10 [ 281.302114][T11786] ? __pfx___mutex_lock+0x10/0x10 [ 281.302133][T11786] ? __fget_files+0x2a/0x420 [ 281.302154][T11786] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 281.302180][T11786] ? __fget_files+0x3a0/0x420 [ 281.302195][T11786] ? __fget_files+0x2a/0x420 [ 281.302223][T11786] do_epoll_ctl+0x7f4/0xe90 [ 281.302259][T11786] __x64_sys_epoll_ctl+0x163/0x1a0 [ 281.302288][T11786] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 281.302309][T11786] ? rcu_is_watching+0x15/0xb0 [ 281.302340][T11786] ? do_syscall_64+0xbe/0x3b0 [ 281.302364][T11786] do_syscall_64+0xfa/0x3b0 [ 281.302383][T11786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.302399][T11786] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.302415][T11786] ? clear_bhb_loop+0x60/0xb0 [ 281.302438][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.302456][T11786] RIP: 0033:0x7f623698e9a9 [ 281.302474][T11786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.302490][T11786] RSP: 002b:00007f6237878038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 281.302510][T11786] RAX: ffffffffffffffda RBX: 00007f6236bb5fa0 RCX: 00007f623698e9a9 [ 281.302524][T11786] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 281.302535][T11786] RBP: 00007f6237878090 R08: 0000000000000000 R09: 0000000000000000 [ 281.302546][T11786] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 281.302558][T11786] R13: 0000000000000000 R14: 00007f6236bb5fa0 R15: 00007ffd30f74ea8 [ 281.302599][T11786] [ 281.569761][ T2985] net_ratelimit: 14 callbacks suppressed [ 281.569781][ T2985] bond7: (slave macvlan2): failed to get link speed/duplex [ 281.687012][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 281.771557][T11779] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 281.780429][T11779] lo speed is unknown, defaulting to 1000 [ 281.856155][ T13] bond7: (slave macvlan2): failed to get link speed/duplex [ 282.116849][ T1144] bond7: (slave macvlan2): failed to get link speed/duplex [ 282.227318][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 282.352005][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 282.488931][ T59] bond7: (slave macvlan2): failed to get link speed/duplex [ 282.579011][T11824] netlink: 'syz.4.1613': attribute type 13 has an invalid length. [ 282.619263][T11824] netlink: 'syz.4.1613': attribute type 17 has an invalid length. [ 282.636257][ T13] bond7: (slave macvlan2): failed to get link speed/duplex [ 283.019551][T11824] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.032762][T11835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.044219][T11824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.068831][ T48] lo speed is unknown, defaulting to 1000 [ 283.076565][ T48] syz1: Port: 1 Link ACTIVE [ 283.097051][ T1155] bond7: (slave macvlan2): failed to get link speed/duplex [ 283.137777][T11824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.194220][T11834] : (slave dummy0): Releasing backup interface [ 283.224234][T11819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.244242][T11834] dummy0: left promiscuous mode [ 283.268160][T11834] : (slave bond_slave_0): Releasing backup interface [ 283.333601][T11834] : (slave bond_slave_1): Releasing backup interface [ 283.369302][T11834] team0: Port device team_slave_0 removed [ 283.401955][T11834] team0: Port device team_slave_1 removed [ 283.410888][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1619'. [ 283.420828][T11834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.430140][T11834] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 283.438979][T11834] batman_adv: batadv0: Removing interface: virt_wifi0 [ 283.452971][T11834] team0: Port device geneve0 removed [ 283.472619][T11834] team0: Port device batadv1 removed [ 283.489020][T11834] team0: Port device ip6gretap3 removed [ 283.499265][T11834] bond7: (slave macvlan2): Removing an active aggregator [ 283.508794][T11834] bond7: (slave macvlan2): Releasing backup interface [ 283.531086][T11842] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1617'. [ 283.573773][T11830] lo speed is unknown, defaulting to 1000 [ 283.821532][T11854] sctp: [Deprecated]: syz.3.1621 (pid 11854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.821532][T11854] Use struct sctp_sack_info instead [ 284.401054][T11883] __nla_validate_parse: 4 callbacks suppressed [ 284.401074][T11883] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1627'. [ 284.452177][T11830] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 284.491585][T11830] lo speed is unknown, defaulting to 1000 [ 284.857523][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 285.001461][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 285.334709][T11915] x_tables: duplicate underflow at hook 1 [ 285.380782][T11918] gre0: entered allmulticast mode [ 285.836902][T11934] tipc: Enabled bearer , priority 0 [ 285.853636][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 285.887708][T11933] tipc: Disabling bearer [ 286.334807][T11950] netlink: 'syz.0.1649': attribute type 5 has an invalid length. [ 286.355240][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 286.366521][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 317.310338][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749799][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.676783][T11964] xt_CT: No such helper "snmp" [ 398.354510][T11987] netlink: 'syz.1.1660': attribute type 2 has an invalid length. [ 398.382919][T11987] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1660'. [ 398.915153][T12010] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1667'. [ 398.936081][T12010] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1667'. [ 398.954858][T12010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1667'. [ 399.081899][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 399.104080][T12019] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 399.117989][T12019] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 399.188151][T12019] lo speed is unknown, defaulting to 1000 [ 399.664196][T12035] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 399.846513][T12019] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 399.854836][T12019] lo speed is unknown, defaulting to 1000 [ 399.862611][T12022] lo speed is unknown, defaulting to 1000 [ 400.044127][T12042] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 400.291980][T12042] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 400.608066][T12055] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1675'. [ 400.664891][T12022] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 400.693583][T12022] lo speed is unknown, defaulting to 1000 [ 401.354626][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'. [ 401.560500][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 401.947683][T12089] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1684'. [ 402.258489][T12094] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.468619][T12107] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 402.491007][T12108] x_tables: duplicate underflow at hook 3 [ 402.893170][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 403.454049][T12141] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 404.312458][T12172] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 404.329523][T12172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1712'. [ 404.663647][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.688197][T12180] bridge0: port 1(bond0) entered blocking state [ 404.696725][T12180] bridge0: port 1(bond0) entered disabled state [ 404.703309][T12180] bond0: entered allmulticast mode [ 404.712292][T12180] bond0: entered promiscuous mode [ 404.733658][T12183] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1717'. [ 404.738053][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1715'. [ 404.752967][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1715'. [ 404.804479][T12180] !: entered promiscuous mode [ 404.831021][T12180] !: left promiscuous mode [ 405.050226][T12189] lo speed is unknown, defaulting to 1000 [ 405.347288][T12203] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1722'. [ 406.302416][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1730'. [ 406.320130][T12189] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 406.350219][T12189] lo speed is unknown, defaulting to 1000 [ 406.731413][T12249] lo speed is unknown, defaulting to 1000 [ 407.027772][T12252] FAULT_INJECTION: forcing a failure. [ 407.027772][T12252] name failslab, interval 1, probability 0, space 0, times 0 [ 407.043467][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.4.1736 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 407.043497][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.043509][T12252] Call Trace: [ 407.043518][T12252] [ 407.043526][T12252] dump_stack_lvl+0x189/0x250 [ 407.043559][T12252] ? __pfx____ratelimit+0x10/0x10 [ 407.043589][T12252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.043614][T12252] ? __pfx__printk+0x10/0x10 [ 407.043652][T12252] ? __lock_acquire+0xab9/0xd20 [ 407.043685][T12252] should_fail_ex+0x414/0x560 [ 407.043713][T12252] should_failslab+0xa8/0x100 [ 407.043739][T12252] kmem_cache_alloc_noprof+0x73/0x3c0 [ 407.043765][T12252] ? skb_clone+0x212/0x3a0 [ 407.043796][T12252] skb_clone+0x212/0x3a0 [ 407.043825][T12252] __netlink_deliver_tap+0x404/0x850 [ 407.043861][T12252] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.043895][T12252] netlink_deliver_tap+0x19c/0x1b0 [ 407.043928][T12252] netlink_unicast+0x7fa/0x9e0 [ 407.043975][T12252] ? __pfx_netlink_unicast+0x10/0x10 [ 407.044007][T12252] ? netlink_sendmsg+0x642/0xb30 [ 407.044025][T12252] ? skb_put+0x11b/0x210 [ 407.044051][T12252] netlink_sendmsg+0x805/0xb30 [ 407.044084][T12252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.044108][T12252] ? aa_sock_msg_perm+0x94/0x160 [ 407.044132][T12252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.044153][T12252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.044175][T12252] __sock_sendmsg+0x219/0x270 [ 407.044208][T12252] ____sys_sendmsg+0x505/0x830 [ 407.044239][T12252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.044275][T12252] ? import_iovec+0x74/0xa0 [ 407.044313][T12252] ___sys_sendmsg+0x21f/0x2a0 [ 407.044340][T12252] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.044410][T12252] ? __fget_files+0x2a/0x420 [ 407.044428][T12252] ? __fget_files+0x3a0/0x420 [ 407.044460][T12252] __x64_sys_sendmsg+0x19b/0x260 [ 407.044488][T12252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.044524][T12252] ? __pfx_ksys_write+0x10/0x10 [ 407.044547][T12252] ? rcu_is_watching+0x15/0xb0 [ 407.044577][T12252] ? do_syscall_64+0xbe/0x3b0 [ 407.044603][T12252] do_syscall_64+0xfa/0x3b0 [ 407.044621][T12252] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.044648][T12252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.044668][T12252] ? clear_bhb_loop+0x60/0xb0 [ 407.044694][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.044712][T12252] RIP: 0033:0x7f0c9f38e9a9 [ 407.044731][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.044748][T12252] RSP: 002b:00007f0ca0191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.044771][T12252] RAX: ffffffffffffffda RBX: 00007f0c9f5b5fa0 RCX: 00007f0c9f38e9a9 [ 407.044785][T12252] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 407.044799][T12252] RBP: 00007f0ca0191090 R08: 0000000000000000 R09: 0000000000000000 [ 407.044812][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.044824][T12252] R13: 0000000000000000 R14: 00007f0c9f5b5fa0 R15: 00007ffc7a0eef48 [ 407.044860][T12252] [ 407.408458][T12249] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 407.417874][T12249] lo speed is unknown, defaulting to 1000 [ 407.909300][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 408.119712][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.162560][T12284] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 408.170752][T12284] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1746'. [ 408.370469][T12291] FAULT_INJECTION: forcing a failure. [ 408.370469][T12291] name failslab, interval 1, probability 0, space 0, times 0 [ 408.475937][T12291] CPU: 0 UID: 0 PID: 12291 Comm: syz.4.1749 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 408.475969][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.475981][T12291] Call Trace: [ 408.475989][T12291] [ 408.475997][T12291] dump_stack_lvl+0x189/0x250 [ 408.476027][T12291] ? __pfx____ratelimit+0x10/0x10 [ 408.476056][T12291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.476080][T12291] ? __pfx__printk+0x10/0x10 [ 408.476112][T12291] ? __pfx___might_resched+0x10/0x10 [ 408.476133][T12291] ? fs_reclaim_acquire+0x7d/0x100 [ 408.476159][T12291] should_fail_ex+0x414/0x560 [ 408.476186][T12291] should_failslab+0xa8/0x100 [ 408.476213][T12291] __kmalloc_cache_noprof+0x70/0x3d0 [ 408.476236][T12291] ? ctnetlink_alloc_filter+0xb2/0xb20 [ 408.476256][T12291] ? __mutex_trylock_common+0x153/0x260 [ 408.476284][T12291] ctnetlink_alloc_filter+0xb2/0xb20 [ 408.476309][T12291] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 408.476328][T12291] ? rcu_is_watching+0x15/0xb0 [ 408.476350][T12291] ? trace_contention_end+0x39/0x120 [ 408.476373][T12291] ? __mutex_lock+0x330/0xe80 [ 408.476400][T12291] ctnetlink_del_conntrack+0x6c4/0x8e0 [ 408.476425][T12291] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 408.476474][T12291] nfnetlink_rcv_msg+0xb4a/0x1130 [ 408.476500][T12291] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 408.476545][T12291] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 408.476566][T12291] ? kasan_save_free_info+0x46/0x50 [ 408.476654][T12291] netlink_rcv_skb+0x208/0x470 [ 408.476686][T12291] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 408.476712][T12291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.476755][T12291] ? bpf_lsm_capable+0x9/0x20 [ 408.476780][T12291] ? security_capable+0x7e/0x2e0 [ 408.476809][T12291] nfnetlink_rcv+0x26a/0x2520 [ 408.476839][T12291] ? __dev_queue_xmit+0x1d79/0x3b50 [ 408.476875][T12291] ? __dev_queue_xmit+0x27b/0x3b50 [ 408.476915][T12291] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 408.476939][T12291] ? __pfx___dev_queue_xmit+0x10/0x10 [ 408.476977][T12291] ? ref_tracker_free+0x63a/0x7d0 [ 408.476997][T12291] ? __asan_memcpy+0x40/0x70 [ 408.477017][T12291] ? __pfx_ref_tracker_free+0x10/0x10 [ 408.477058][T12291] ? skb_clone+0x246/0x3a0 [ 408.477086][T12291] ? __netlink_deliver_tap+0x807/0x850 [ 408.477104][T12291] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.477139][T12291] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.477178][T12291] netlink_unicast+0x82f/0x9e0 [ 408.477213][T12291] ? __pfx_netlink_unicast+0x10/0x10 [ 408.477242][T12291] ? netlink_sendmsg+0x642/0xb30 [ 408.477258][T12291] ? skb_put+0x11b/0x210 [ 408.477281][T12291] netlink_sendmsg+0x805/0xb30 [ 408.477313][T12291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.477336][T12291] ? aa_sock_msg_perm+0x94/0x160 [ 408.477359][T12291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.477379][T12291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.477398][T12291] __sock_sendmsg+0x219/0x270 [ 408.477427][T12291] ____sys_sendmsg+0x505/0x830 [ 408.477457][T12291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.477490][T12291] ? import_iovec+0x74/0xa0 [ 408.477521][T12291] ___sys_sendmsg+0x21f/0x2a0 [ 408.477546][T12291] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.477621][T12291] ? __fget_files+0x2a/0x420 [ 408.477638][T12291] ? __fget_files+0x3a0/0x420 [ 408.477666][T12291] __x64_sys_sendmsg+0x19b/0x260 [ 408.477690][T12291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.477723][T12291] ? __pfx_ksys_write+0x10/0x10 [ 408.477744][T12291] ? rcu_is_watching+0x15/0xb0 [ 408.477772][T12291] ? do_syscall_64+0xbe/0x3b0 [ 408.477796][T12291] do_syscall_64+0xfa/0x3b0 [ 408.477812][T12291] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.477839][T12291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.477857][T12291] ? clear_bhb_loop+0x60/0xb0 [ 408.477880][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.477898][T12291] RIP: 0033:0x7f0c9f38e9a9 [ 408.477916][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.477933][T12291] RSP: 002b:00007f0ca0191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.477955][T12291] RAX: ffffffffffffffda RBX: 00007f0c9f5b5fa0 RCX: 00007f0c9f38e9a9 [ 408.477969][T12291] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 408.477982][T12291] RBP: 00007f0ca0191090 R08: 0000000000000000 R09: 0000000000000000 [ 408.477993][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.478004][T12291] R13: 0000000000000000 R14: 00007f0c9f5b5fa0 R15: 00007ffc7a0eef48 [ 408.478039][T12291] [ 409.206999][T12313] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1753'. [ 409.246375][T12317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 409.361943][T12312] wireguard1: entered promiscuous mode [ 409.397471][T12312] wireguard1: entered allmulticast mode [ 409.659764][T12327] __nla_validate_parse: 1 callbacks suppressed [ 409.659786][T12327] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1757'. [ 409.819868][T12330] set match dimension is over the limit! [ 410.197815][T12350] vxcan0: tx address claim with dlc 0 [ 410.216553][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'. [ 410.250138][T12350] vxcan0: tx address claim with dlc 0 [ 410.282604][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'. [ 410.320178][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'. [ 410.682253][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 410.685006][T12373] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 411.141759][T12388] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 411.249689][T12388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.892240][T12415] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 412.345542][T12429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1788'. [ 412.504452][T12433] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 413.006479][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 413.082428][T12467] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1796'. [ 413.086057][T12464] macsec2: entered allmulticast mode [ 413.097711][T12466] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 413.115337][T12466] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1798'. [ 413.145907][T12464] team0: entered allmulticast mode [ 413.175765][T12464] team_slave_0: entered allmulticast mode [ 413.183238][T12469] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 413.237732][T12464] team_slave_1: entered allmulticast mode [ 413.266156][T12470] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 413.291813][T12464] team0: left allmulticast mode [ 413.315077][T12464] team_slave_0: left allmulticast mode [ 413.347438][T12464] team_slave_1: left allmulticast mode [ 413.479977][T12476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1799'. [ 414.026562][T12474] lo speed is unknown, defaulting to 1000 [ 414.059922][T12481] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 414.179805][T12484] TCP: TCP_TX_DELAY enabled [ 414.264240][T12481] bond3: entered promiscuous mode [ 414.302758][T12481] bond3: entered allmulticast mode [ 414.356853][T12486] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 414.637087][T12504] gretap1: entered promiscuous mode [ 414.667140][T12504] gretap1: entered allmulticast mode [ 414.790644][T12474] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 414.831549][T12474] lo speed is unknown, defaulting to 1000 [ 414.889326][T12511] gtp0: entered promiscuous mode [ 414.894336][T12511] gtp0: entered allmulticast mode [ 414.950944][T12509] pim6reg1: entered promiscuous mode [ 414.971151][T12509] pim6reg1: entered allmulticast mode [ 414.987736][T12511] __nla_validate_parse: 4 callbacks suppressed [ 414.987756][T12511] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1808'. [ 415.032709][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 415.061625][T12511] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1808'. [ 415.087878][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 415.100705][T12511] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1808'. [ 415.138594][T12517] vlan0: entered promiscuous mode [ 415.143681][T12517] bridge0: entered promiscuous mode [ 415.517471][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 415.543735][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 415.618574][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 415.627978][T12528] openvswitch: netlink: Unknown nsh attribute 0 [ 415.634290][T12528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.678421][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 416.270280][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 416.569279][T12572] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 416.648050][T12572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.680131][T12571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.687627][T12571] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.700579][T12571] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 416.836430][T12587] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 416.921192][T12588] dvmrp8: entered allmulticast mode [ 417.397427][T12590] netlink: 'syz.2.1832': attribute type 13 has an invalid length. [ 417.484544][T12590] lo speed is unknown, defaulting to 1000 [ 417.504340][T12593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.591194][T12596] netlink: 'syz.3.1834': attribute type 21 has an invalid length. [ 417.594652][T12593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.987947][T12613] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 418.118068][T12590] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 418.133416][T12590] lo speed is unknown, defaulting to 1000 [ 418.443491][T12622] tipc: Resetting bearer [ 418.489691][T12622] veth1_vlan: left allmulticast mode [ 418.579287][ T5933] lo speed is unknown, defaulting to 1000 [ 418.586410][ T3030] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.594864][ T3030] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.614443][ T5933] syz0: Port: 1 Link DOWN [ 418.650738][ T5933] lo speed is unknown, defaulting to 1000 [ 418.664108][ T3030] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.692377][ T3030] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.106476][T12651] tipc: Enabling of bearer rejected, already enabled [ 419.128628][T12651] tipc: Resetting bearer [ 419.751821][T12671] can: request_module (can-proto-3) failed. [ 420.059512][T12684] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 420.121852][T12688] lo speed is unknown, defaulting to 1000 [ 420.809311][T12688] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 420.822903][T12688] lo speed is unknown, defaulting to 1000 [ 421.033858][T12719] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 421.089675][T12730] ip6gre2: entered promiscuous mode [ 421.557792][T12741] Cannot find add_set index 3 as target [ 421.563929][T12741] Cannot find add_set index 3 as target [ 421.618864][T12741] Cannot find add_set index 3 as target [ 421.648002][T12741] Cannot find add_set index 3 as target [ 421.673091][T12741] Cannot find add_set index 3 as target [ 421.696042][T12743] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 421.707163][T12743] __nla_validate_parse: 6 callbacks suppressed [ 421.707180][T12743] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1877'. [ 421.723744][T12741] Cannot find add_set index 3 as target [ 421.771454][T12741] Cannot find add_set index 3 as target [ 421.786791][T12741] Cannot find add_set index 3 as target [ 421.793028][T12741] Cannot find add_set index 3 as target [ 421.814131][T12741] Cannot find add_set index 3 as target [ 422.302189][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 422.737985][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'. [ 422.761837][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 423.136570][T12782] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 424.694303][T12772] tipc: Resetting bearer [ 424.701057][T12772] bond0: left allmulticast mode [ 424.706296][T12772] bond0: left promiscuous mode [ 424.711362][T12772] bridge0: port 1(bond0) entered disabled state [ 424.892057][T12796] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1892'. [ 424.910749][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1890'. [ 425.132844][T12814] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1894'. [ 425.523336][T12829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1900'. [ 425.837045][T12844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1903'. [ 425.885027][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1909'. [ 426.991257][T12903] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 427.006760][T12903] tipc: Resetting bearer [ 427.014379][T12903] syzkaller0: left promiscuous mode [ 427.032407][T12903] syzkaller0: left allmulticast mode [ 427.106719][T12903] macvlan5: left allmulticast mode [ 427.127598][T12903] bridge2: left promiscuous mode [ 427.137482][T12903] bridge2: left allmulticast mode [ 427.174639][T12908] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 427.235814][T12905] syzkaller0: entered promiscuous mode [ 427.242934][T12905] syzkaller0: entered allmulticast mode [ 427.257832][T12911] lo speed is unknown, defaulting to 1000 [ 427.539698][T12914] macsec2: entered allmulticast mode [ 427.546523][T12914] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 427.566765][T12914] batman_adv: batadv0: Adding interface: macsec2 [ 427.573332][T12914] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.604026][T12914] batman_adv: batadv0: Interface activated: macsec2 [ 427.618909][T12911] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 427.620474][T12920] __nla_validate_parse: 4 callbacks suppressed [ 427.620491][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 427.768462][T12911] lo speed is unknown, defaulting to 1000 [ 427.804166][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1929'. [ 427.891035][T12924] vxcan4: entered promiscuous mode [ 428.353408][T12947] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1933'. [ 428.416281][T12950] netlink: 'syz.3.1934': attribute type 1 has an invalid length. [ 428.550779][T12950] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 428.566643][T12957] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1935'. [ 428.939175][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1940'. [ 428.953740][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1940'. [ 429.003238][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 429.109098][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'. [ 429.135092][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'. [ 429.144969][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 430.339180][T13035] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 430.647333][T13051] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 430.661275][T13051] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 430.983465][T13065] lo speed is unknown, defaulting to 1000 [ 431.209531][T13068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.579928][T13074] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 431.629784][T13074] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 431.744650][T13065] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 431.757674][T13065] lo speed is unknown, defaulting to 1000 [ 432.006752][T13084] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 432.123161][T13090] netlink: 'syz.4.1973': attribute type 2 has an invalid length. [ 432.134636][T13090] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 432.209314][T13100] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.245038][T13090] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 432.515131][T13094] veth3: entered promiscuous mode [ 432.529605][T13094] bond10: (slave veth3): Enslaving as an active interface with an up link [ 433.013321][T13126] tipc: Enabled bearer , priority 0 [ 433.090651][T13129] netlink: 'syz.3.1981': attribute type 12 has an invalid length. [ 433.144221][T13138] __nla_validate_parse: 11 callbacks suppressed [ 433.144243][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 433.174142][T13129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1981'. [ 433.234886][T13126] tipc: Disabling bearer [ 433.311155][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 433.345011][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1983'. [ 433.588542][T13160] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1986'. [ 433.720269][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 433.748902][T13164] netlink: 'syz.2.1987': attribute type 83 has an invalid length. [ 433.988998][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 433.999017][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 434.026626][T13185] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 434.039891][T13185] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1992'. [ 434.117196][T13185] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.126725][T13185] block nbd0: shutting down sockets [ 434.162591][T13187] syzkaller0: entered promiscuous mode [ 434.176100][T13187] syzkaller0: entered allmulticast mode [ 434.377308][T13198] tun0: tun_chr_ioctl cmd 2147767521 [ 434.495155][T13201] lo speed is unknown, defaulting to 1000 [ 434.512432][T13209] sctp: [Deprecated]: syz.1.1999 (pid 13209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.512432][T13209] Use struct sctp_sack_info instead [ 435.060672][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 435.105819][T13234] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 435.106261][T13201] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 435.113562][T13218] lo speed is unknown, defaulting to 1000 [ 435.136573][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.315903][T13201] lo speed is unknown, defaulting to 1000 [ 435.970655][T13224] lo speed is unknown, defaulting to 1000 [ 436.135027][T13255] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 436.322804][T13240] lo speed is unknown, defaulting to 1000 [ 436.354044][T13258] netlink: 'syz.4.2009': attribute type 13 has an invalid length. [ 436.362737][T13258] netlink: 'syz.4.2009': attribute type 17 has an invalid length. [ 436.393223][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.483700][T13258] batadv_slave_0: left promiscuous mode [ 436.497189][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.516898][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.553156][T13258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.564299][T13258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.581723][T13258] hsr0: left promiscuous mode [ 436.622048][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.649493][T13258] veth1_macvtap: left promiscuous mode [ 436.662464][T13258] veth0_macvtap: left promiscuous mode [ 436.690883][T13258] veth0_macvtap: entered promiscuous mode [ 436.691628][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.713869][T13258] veth1_macvtap: entered promiscuous mode [ 436.739614][T13258] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 436.776091][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.825146][T13258] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 436.860170][T13258] ip6tnl1: left promiscuous mode [ 436.865725][T13258] ip6tnl1: left allmulticast mode [ 436.912016][T13258] hsr0: entered promiscuous mode [ 436.917418][T13258] hsr0: entered allmulticast mode [ 436.922550][T13258] hsr_slave_0: entered allmulticast mode [ 436.928812][T13258] hsr_slave_1: entered allmulticast mode [ 436.934806][T13258] macvlan2: left promiscuous mode [ 436.941349][T13258] macvlan2: left allmulticast mode [ 436.947222][T13258] hsr0: left allmulticast mode [ 436.952252][T13258] hsr_slave_0: left allmulticast mode [ 436.958147][T13258] hsr_slave_1: left allmulticast mode [ 436.974570][T13258] bond0: left promiscuous mode [ 436.980285][T13258] bond0: left allmulticast mode [ 436.987615][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.997390][T13258] !: entered promiscuous mode [ 437.004037][T13258] ip6gre1: left promiscuous mode [ 437.011510][T13258] bond1: left promiscuous mode [ 437.018258][T13258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.026408][T13258] batadv1: left promiscuous mode [ 437.031378][T13258] batadv1: left allmulticast mode [ 437.037793][T13258] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 437.052996][T13258] bond2: left promiscuous mode [ 437.058630][T13258] bond2: left allmulticast mode [ 437.064135][T13258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.078815][T13258] ip6gre2: left allmulticast mode [ 437.087030][T13258] geneve2: left promiscuous mode [ 437.093662][T13258] batadv0: entered promiscuous mode [ 437.104957][T13258] bond3: left promiscuous mode [ 437.111566][T13258] bond3: left allmulticast mode [ 437.117503][T13258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.131938][T13258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.141391][T13258] macsec2: left allmulticast mode [ 437.147187][T13258] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 437.190093][T13224] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 437.201420][T13240] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 437.205497][T13224] lo speed is unknown, defaulting to 1000 [ 437.234911][T13240] lo speed is unknown, defaulting to 1000 [ 437.259193][T13218] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 437.289900][T13257] lo speed is unknown, defaulting to 1000 [ 437.289928][T13218] lo speed is unknown, defaulting to 1000 [ 437.718858][T13263] SET target dimension over the limit! [ 437.732079][T13257] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 437.787583][T13257] lo speed is unknown, defaulting to 1000 [ 439.337455][T13288] lo speed is unknown, defaulting to 1000 [ 439.641083][T13302] __nla_validate_parse: 8 callbacks suppressed [ 439.641106][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2023'. [ 439.663263][T13303] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.2022'. [ 439.690995][T13302] netlink: 'syz.4.2023': attribute type 12 has an invalid length. [ 439.709077][T13302] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2023'. [ 439.746670][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 439.762733][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2023'. [ 439.934554][T13309] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 439.955581][T13309] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2025'. [ 439.987453][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 440.040477][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2025'. [ 440.050488][T13288] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 440.078278][T13288] lo speed is unknown, defaulting to 1000 [ 440.196334][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209688][T13315] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2026'. [ 440.493905][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 441.124996][T13355] set match dimension is over the limit! [ 441.159902][T13344] veth3: entered promiscuous mode [ 441.301726][T13359] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 441.440055][T13359] bond5: (slave gretap2): making interface the new active one [ 441.449078][T13359] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 442.980375][T13420] bridge0: entered promiscuous mode [ 443.050305][T13420] bridge0: entered allmulticast mode [ 443.163273][T13420] team0: Port device bridge0 added [ 443.419914][T13440] IPVS: length: 136 != 24 [ 443.578426][T13452] netlink: 'syz.1.2057': attribute type 23 has an invalid length. [ 443.812296][T13455] lo speed is unknown, defaulting to 1000 [ 443.838692][T13459] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 444.140494][T13472] veth0: entered promiscuous mode [ 444.461789][T13477] netlink: 'syz.2.2064': attribute type 5 has an invalid length. [ 444.763476][T13455] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 444.779240][T13455] lo speed is unknown, defaulting to 1000 [ 444.852437][T13461] veth0: left promiscuous mode [ 444.872435][T13494] __nla_validate_parse: 12 callbacks suppressed [ 444.872455][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 445.470598][T13516] netlink: 'syz.4.2073': attribute type 2 has an invalid length. [ 445.485859][T13519] xt_cgroup: path and classid specified [ 445.525740][T13516] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 445.911607][T13529] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2077'. [ 446.206131][T13548] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 446.305204][T13548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.403672][T13555] bond6: (slave gretap3): making interface the new active one [ 446.429244][T13555] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 446.512693][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 446.535837][T13563] geneve2: entered allmulticast mode [ 447.131721][T13600] gre0: left allmulticast mode [ 447.307464][T13600] ip6gretap2: left promiscuous mode [ 447.337775][T13600] ip6gretap2: left allmulticast mode [ 447.353251][T13600] bond4: left promiscuous mode [ 447.379097][T13600] geneve2: left allmulticast mode [ 447.427153][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 447.437687][T13600] gretap1: left promiscuous mode [ 447.463107][T13600] gretap1: left allmulticast mode [ 447.475574][T13600] gtp0: left promiscuous mode [ 447.493325][T13600] gtp0: left allmulticast mode [ 447.558004][T13623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2101'. [ 447.606373][ T1155] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.633899][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 447.636050][T13626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.682968][ T1155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.720022][ T1155] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.763635][ T1155] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.809272][T13635] bridge0: port 1(erspan0) entered blocking state [ 447.816563][T13635] bridge0: port 1(erspan0) entered disabled state [ 447.823280][T13635] erspan0: entered allmulticast mode [ 447.845081][T13635] erspan0: entered promiscuous mode [ 447.854238][T13635] bridge0: port 1(erspan0) entered blocking state [ 447.860866][T13635] bridge0: port 1(erspan0) entered forwarding state [ 448.101331][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 448.130435][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 448.139673][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 448.151004][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 448.183330][T13653] netlink: 'syz.2.2111': attribute type 2 has an invalid length. [ 448.288444][T13658] netlink: 'syz.1.2114': attribute type 7 has an invalid length. [ 448.656500][T13678] netlink: 'syz.1.2119': attribute type 1 has an invalid length. [ 448.659448][T13676] syz0: rxe_newlink: already configured on lo [ 448.672048][T13678] NCSI netlink: No device for ifindex 0 [ 448.834078][T13686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 449.117304][T13704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.590137][T13725] lo speed is unknown, defaulting to 1000 [ 449.706051][T13733] netlink: zone id is out of range [ 449.712665][T13733] netlink: get zone limit has 8 unknown bytes [ 449.777042][T13736] netlink: 'syz.1.2135': attribute type 1 has an invalid length. [ 449.831367][T13736] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 450.099410][T13725] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 450.107914][T13725] lo speed is unknown, defaulting to 1000 [ 450.373818][T13754] veth5: entered promiscuous mode [ 450.474367][T13748] lo speed is unknown, defaulting to 1000 [ 450.703301][T13771] netlink: 'syz.3.2144': attribute type 2 has an invalid length. [ 451.388403][T13748] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 451.411516][T13748] lo speed is unknown, defaulting to 1000 [ 451.625589][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 451.716543][T13810] __nla_validate_parse: 8 callbacks suppressed [ 451.716563][T13810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2157'. [ 451.822594][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 451.939214][T13822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2161'. [ 451.949289][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 452.010922][T13823] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 452.312224][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 452.428115][T13828] bridge5: entered promiscuous mode [ 452.433406][T13828] bridge5: entered allmulticast mode [ 452.473090][T13828] team0: Port device bridge5 added [ 452.483064][T13830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2164'. [ 452.718342][T13838] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2166'. [ 452.787071][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 452.989961][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2166'. [ 453.265095][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 453.291979][T13863] pim6reg1: entered promiscuous mode [ 453.298677][T13863] pim6reg1: entered allmulticast mode [ 454.286904][ T48] IPVS: starting estimator thread 0... [ 454.288597][T13887] netlink: 'syz.4.2181': attribute type 13 has an invalid length. [ 454.324263][T13887] netlink: 'syz.4.2181': attribute type 17 has an invalid length. [ 454.405476][T13894] IPVS: using max 23 ests per chain, 55200 per kthread [ 454.558252][T13887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.597261][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.683298][T13914] netlink: 'syz.1.2188': attribute type 13 has an invalid length. [ 454.706733][T13887] bridge0: left promiscuous mode [ 454.732737][T13887] bridge0: left allmulticast mode [ 454.737825][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.792662][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.034645][T13899] lo speed is unknown, defaulting to 1000 [ 455.049036][T13930] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 455.176833][T13934] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 455.244476][T13932] erspan0: left allmulticast mode [ 455.258664][T13932] erspan0: left promiscuous mode [ 455.267281][T13936] netlink: 'syz.1.2192': attribute type 7 has an invalid length. [ 455.281236][T13932] bridge0: port 1(erspan0) entered disabled state [ 455.366609][T13932] team0: Port device bridge5 removed [ 455.386478][T13934] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 455.662083][T13947] netlink: 'syz.1.2194': attribute type 39 has an invalid length. [ 455.728733][T13945] pim6reg: entered allmulticast mode [ 455.741968][T13947] pim6reg: left allmulticast mode [ 455.827893][T13899] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 455.858832][T13899] lo speed is unknown, defaulting to 1000 [ 456.102848][T13967] bridge0: port 1(veth0_to_bridge) entered blocking state [ 456.120967][T13967] bridge0: port 1(veth0_to_bridge) entered disabled state [ 456.161572][T13967] veth0_to_bridge: entered allmulticast mode [ 456.178018][T13967] veth0_to_bridge: entered promiscuous mode [ 456.288454][T13970] bond0: (slave bond_slave_0): Releasing backup interface [ 456.331468][T13970] bond_slave_0: left promiscuous mode [ 456.421990][T13970] bond0: (slave bond_slave_1): Releasing backup interface [ 456.422024][T13979] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 456.446142][T13979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.457806][T13970] bond_slave_1: left promiscuous mode [ 456.561902][T13970] team0: Port device team_slave_0 removed [ 456.642509][T13970] team0: Port device team_slave_1 removed [ 456.678517][T13986] netlink: 'syz.2.2204': attribute type 20 has an invalid length. [ 456.690706][T13970] bond1: (slave gretap1): Releasing active interface [ 456.750680][T13970] bond3: (slave bridge3): Releasing backup interface [ 456.775435][T13970] bridge3: left promiscuous mode [ 456.884237][T13970] team0: Port device bond4 removed [ 456.904861][T13970] bond0: (slave bond6): Releasing backup interface [ 456.949372][T13970] bond6: left promiscuous mode [ 456.979842][T13970] bond0: (slave bond7): Releasing backup interface [ 456.989715][T13970] bond7: left promiscuous mode [ 457.001512][T13970] team0: Port device batadv0 removed [ 457.010219][T13970] bond10: (slave veth3): Releasing backup interface [ 457.187859][T13995] __nla_validate_parse: 6 callbacks suppressed [ 457.187878][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 457.360987][T14008] netlink: 'syz.0.2207': attribute type 3 has an invalid length. [ 457.403621][T14008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2207'. [ 457.438113][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 458.139472][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 458.337132][T14054] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2219'. [ 458.364570][T14055] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 458.825909][T14082] dvmrp1: entered allmulticast mode [ 458.833964][T14082] dvmrp1: left allmulticast mode [ 459.185297][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2230'. [ 459.194329][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2230'. [ 459.628358][T14125] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2232'. [ 459.791272][T14133] tipc: Enabling of bearer rejected, failed to enable media [ 460.018120][T14142] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 460.124765][T14144] bond6: (slave bridge5): making interface the new active one [ 460.140069][T14144] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 460.290506][T14154] lo speed is unknown, defaulting to 1000 [ 461.008171][T14154] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 461.039525][T14154] lo speed is unknown, defaulting to 1000 [ 461.062765][T14177] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 461.150500][T14188] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 461.192802][T14188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2251'. [ 461.722644][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2256'. [ 462.524694][T14243] lo speed is unknown, defaulting to 1000 [ 462.542720][T14249] netlink: 'syz.1.2265': attribute type 13 has an invalid length. [ 462.581629][T14251] xt_nat: multiple ranges no longer supported [ 462.601249][T14251] xt_nat: multiple ranges no longer supported [ 462.611741][T14249] netlink: 'syz.1.2265': attribute type 17 has an invalid length. [ 462.624605][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 462.851105][T14259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 462.872095][T14258] sctp: [Deprecated]: syz.0.2267 (pid 14258) Use of int in max_burst socket option. [ 462.872095][T14258] Use struct sctp_assoc_value instead [ 462.914576][T14260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.009736][T14260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.111733][T14267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.237613][T14249] 8021q: adding VLAN 0 to HW filter on device  [ 463.258417][T14249] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.286826][T14249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.340902][T14243] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 463.394440][T14243] lo speed is unknown, defaulting to 1000 [ 463.410798][T14253] lo speed is unknown, defaulting to 1000 [ 463.518359][T14271] netlink: 'syz.4.2271': attribute type 10 has an invalid length. [ 463.527136][T14271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2271'. [ 463.539625][T14271] !: entered allmulticast mode [ 463.550515][T14271] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 463.622407][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 463.644251][T14271] IPVS: Error joining to the multicast group [ 463.752927][T14279] tipc: Enabling of bearer rejected, already enabled [ 463.817737][T14279] syzkaller0: entered promiscuous mode [ 463.833750][T14279] syzkaller0: entered allmulticast mode [ 463.866279][T14279] tipc: Resetting bearer [ 464.000005][T14290] netlink: 'syz.4.2277': attribute type 3 has an invalid length. [ 464.052139][T14289] IPv6: sit2: Disabled Multicast RS [ 464.080248][T14253] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 464.109985][T14253] lo speed is unknown, defaulting to 1000 [ 464.550130][T14306] lo speed is unknown, defaulting to 1000 [ 464.613084][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 464.694984][T14314] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 464.697471][T14312] vlan0: entered promiscuous mode [ 464.703128][T14314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2283'. [ 464.765034][T14314] batman_adv: batadv0: Adding interface: virt_wifi0 [ 464.805986][T14314] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.838006][T14314] batman_adv: batadv0: Interface activated: virt_wifi0 [ 464.969199][T14317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2284'. [ 465.053483][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2284'. [ 465.176476][T14327] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 465.182316][T14306] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 465.193628][T14327] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2288'. [ 465.234826][T14306] lo speed is unknown, defaulting to 1000 [ 465.410360][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 465.464724][T14336] nbd: couldn't find a device at index 65546 [ 465.839493][T14347] lo speed is unknown, defaulting to 1000 [ 466.368763][T14352] lo speed is unknown, defaulting to 1000 [ 466.374343][T14347] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 466.420328][T14347] lo speed is unknown, defaulting to 1000 [ 467.134919][T14368] netlink: 'syz.4.2300': attribute type 6 has an invalid length. [ 467.222708][T14377] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 467.295427][T14366] lo speed is unknown, defaulting to 1000 [ 467.748873][T14366] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 467.769147][T14352] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 467.789314][T14366] lo speed is unknown, defaulting to 1000 [ 467.893612][T14352] lo speed is unknown, defaulting to 1000 [ 467.943535][T14397] pim6reg1: entered promiscuous mode [ 467.961930][T14397] pim6reg1: entered allmulticast mode [ 468.193226][T14397] __nla_validate_parse: 6 callbacks suppressed [ 468.193246][T14397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2308'. [ 468.233751][T14397] syzkaller0: left promiscuous mode [ 468.259100][T14397] syzkaller0: left allmulticast mode [ 468.264860][T14397] tipc: Resetting bearer [ 468.341132][T14397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.381757][T14397] team0: Port device bond7 added [ 468.450283][T14412] pim6reg1: entered promiscuous mode [ 468.462915][T14412] pim6reg1: entered allmulticast mode [ 468.512456][T14416] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2312'. [ 468.728103][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 468.742660][T14421] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2313'. [ 468.818347][T14423] syzkaller1: entered promiscuous mode [ 468.834483][T14423] syzkaller1: entered allmulticast mode [ 469.123270][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2317'. [ 469.256682][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 469.299005][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 469.342592][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 469.437477][T14446] tipc: Enabled bearer , priority 0 [ 469.752410][T14457] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 469.793957][T14457] netlink: 'syz.4.2321': attribute type 2 has an invalid length. [ 469.828174][T14445] syzkaller0: entered promiscuous mode [ 469.844787][T14445] syzkaller0: entered allmulticast mode [ 469.864064][T14445] tipc: Resetting bearer [ 469.948312][T14444] tipc: Resetting bearer [ 470.339167][T14483] xt_hashlimit: size too large, truncated to 1048576 [ 470.525502][ T5934] tipc: Node number set to 2481406420 [ 472.073727][T14444] tipc: Disabling bearer [ 472.083317][T14468] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ²DœL‰, priority 26 [ 472.350601][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 472.369196][T14488] tipc: Disabling bearer [ 472.489157][T14488] lo speed is unknown, defaulting to 1000 [ 472.564734][T14505] batman_adv: batadv0: Adding interface: dummy0 [ 472.589978][T14505] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.643428][T14505] batman_adv: batadv0: Interface activated: dummy0 [ 472.711015][T14509] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2340'. [ 472.721038][T14509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 473.089162][T14525] GUP no longer grows the stack in syz.4.2344 (14525): 200000006000-20000000a000 (200000005000) [ 473.130115][T14525] CPU: 1 UID: 0 PID: 14525 Comm: syz.4.2344 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 473.130147][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.130160][T14525] Call Trace: [ 473.130167][T14525] [ 473.130176][T14525] dump_stack_lvl+0x189/0x250 [ 473.130210][T14525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.130234][T14525] ? __pfx__printk+0x10/0x10 [ 473.130257][T14525] ? find_vma+0xe7/0x160 [ 473.130300][T14525] __get_user_pages+0x2a60/0x30b0 [ 473.130370][T14525] ? __pfx___get_user_pages+0x10/0x10 [ 473.130395][T14525] ? __gup_longterm_locked+0xbf7/0x15b0 [ 473.130419][T14525] ? down_read_killable+0x1d1/0x350 [ 473.130440][T14525] ? try_get_folio+0x633/0x660 [ 473.130469][T14525] __gup_longterm_locked+0xd66/0x15b0 [ 473.130502][T14525] ? try_grab_folio_fast+0x1be/0x4f0 [ 473.130539][T14525] ? gup_fast_fallback+0x1afc/0x2260 [ 473.130568][T14525] gup_fast_fallback+0x1cd4/0x2260 [ 473.130639][T14525] ? __pfx_gup_fast_fallback+0x10/0x10 [ 473.130660][T14525] ? trace_contention_end+0x39/0x120 [ 473.130686][T14525] ? __mutex_lock+0x330/0xe80 [ 473.130705][T14525] ? futex_unqueue+0x22/0x240 [ 473.130727][T14525] ? futex_unqueue+0x22/0x240 [ 473.130747][T14525] ? futex_unqueue+0x22/0x240 [ 473.130769][T14525] ? is_valid_gup_args+0x11f/0x200 [ 473.130794][T14525] ? get_user_pages_fast+0x4d/0xb0 [ 473.130821][T14525] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 473.130858][T14525] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 473.130883][T14525] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 473.130905][T14525] ? wait_for_space+0x24d/0x2d0 [ 473.130943][T14525] iov_iter_get_pages2+0x5e/0xa0 [ 473.130975][T14525] __se_sys_vmsplice+0x548/0x10d0 [ 473.131028][T14525] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 473.131053][T14525] ? __pfx_futex_wait+0x10/0x10 [ 473.131088][T14525] ? __lock_acquire+0xab9/0xd20 [ 473.131160][T14525] ? rcu_is_watching+0x15/0xb0 [ 473.131190][T14525] ? do_syscall_64+0xbe/0x3b0 [ 473.131215][T14525] do_syscall_64+0xfa/0x3b0 [ 473.131230][T14525] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.131258][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.131276][T14525] ? clear_bhb_loop+0x60/0xb0 [ 473.131301][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.131318][T14525] RIP: 0033:0x7f0c9f38e9a9 [ 473.131338][T14525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.131353][T14525] RSP: 002b:00007f0ca0191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 473.131374][T14525] RAX: ffffffffffffffda RBX: 00007f0c9f5b5fa0 RCX: 00007f0c9f38e9a9 [ 473.131389][T14525] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 473.131401][T14525] RBP: 00007f0c9f410d69 R08: 0000000000000000 R09: 0000000000000000 [ 473.131413][T14525] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 473.131423][T14525] R13: 0000000000000000 R14: 00007f0c9f5b5fa0 R15: 00007ffc7a0eef48 [ 473.131455][T14525] [ 473.173767][T14530] tipc: Enabled bearer , priority 0 [ 473.510822][T14521] lo speed is unknown, defaulting to 1000 [ 473.512518][T14530] tipc: Resetting bearer [ 473.523492][T14488] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 473.547637][T14531] syzkaller0: entered promiscuous mode [ 473.553160][T14531] syzkaller0: entered allmulticast mode [ 473.570703][T14488] lo speed is unknown, defaulting to 1000 [ 473.626459][T14540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.641881][T14540] netlink: 'syz.0.2349': attribute type 1 has an invalid length. [ 473.719394][T14529] tipc: Resetting bearer [ 473.801139][T14529] tipc: Disabling bearer [ 473.883041][T14543] ip_vti0: entered allmulticast mode [ 474.396234][T14539] lo speed is unknown, defaulting to 1000 [ 474.402326][T14521] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 474.415529][T14521] lo speed is unknown, defaulting to 1000 [ 474.899110][T14569] xt_hashlimit: invalid interval [ 474.914251][T14569] ipvlan2: entered promiscuous mode [ 474.967034][T14539] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 474.975124][T14539] lo speed is unknown, defaulting to 1000 [ 474.983369][T14567] siw: device registration error -23 [ 475.392505][T14584] __nla_validate_parse: 1 callbacks suppressed [ 475.392527][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 475.414557][T14584] nbd: must specify at least one socket [ 475.973965][T14618] netlink: 'syz.0.2368': attribute type 5 has an invalid length. [ 476.009543][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 476.209995][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 476.242813][T14624] openvswitch: netlink: Flow key attr not present in new flow. [ 476.271834][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 476.316006][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2371'. [ 476.361514][T14628] netlink: 'syz.0.2371': attribute type 4 has an invalid length. [ 476.370336][T14626] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2370'. [ 476.402299][T14624] netlink: 'syz.0.2371': attribute type 4 has an invalid length. [ 476.454838][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2371'. [ 476.480837][ T5934] lo speed is unknown, defaulting to 1000 [ 476.493014][T14628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2371'. [ 476.512285][ T5934] syz0: Port: 1 Link ACTIVE [ 476.519483][ T48] lo speed is unknown, defaulting to 1000 [ 476.529813][T14624] netlink: 'syz.0.2371': attribute type 10 has an invalid length. [ 476.870795][T14645] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2376'. [ 477.144367][T14654] No such timeout policy "syz0" [ 477.226120][T14654] pim6reg: entered allmulticast mode [ 477.290025][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2379'. [ 477.810645][T14685] tipc: Enabling of bearer rejected, already enabled [ 477.833725][T14685] syzkaller0: entered promiscuous mode [ 477.845744][T14685] syzkaller0: entered allmulticast mode [ 477.851590][T14685] tipc: Resetting bearer [ 477.862070][T14685] tipc: Resetting bearer [ 478.054289][T14699] tipc: Enabling of bearer rejected, already enabled [ 478.506918][T14714] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 478.581283][T14718] syzkaller0: entered allmulticast mode [ 478.603769][T14717] syzkaller0: left allmulticast mode [ 478.807408][T14729] tipc: Enabling of bearer rejected, failed to enable media [ 479.135622][T14743] syzkaller1: entered promiscuous mode [ 479.141862][T14743] syzkaller1: entered allmulticast mode [ 479.181907][T14756] syzkaller1: left promiscuous mode [ 479.196152][T14756] syzkaller1: left allmulticast mode [ 479.349130][T14760] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 479.357831][T14760] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 479.496301][T14767] No such timeout policy "syz0" [ 479.556207][T14773] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 479.577818][T14773] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 479.759348][T14784] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 479.962702][T14799] xt_cgroup: invalid path, errno=-2 [ 480.004716][T14804] tipc: Enabled bearer , priority 0 [ 480.021540][T14804] syzkaller0: entered promiscuous mode [ 480.042344][T14804] syzkaller0: entered allmulticast mode [ 480.393292][T14837] pimreg: entered allmulticast mode [ 480.419538][T14837] pimreg: left allmulticast mode [ 480.434726][T14840] __nla_validate_parse: 11 callbacks suppressed [ 480.434746][T14840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2433'. [ 480.520865][T14845] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2433'. [ 480.951899][T14861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2438'. [ 480.992680][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 481.079061][T14865] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 481.280788][T14868] lo speed is unknown, defaulting to 1000 [ 481.312215][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2443'. [ 481.497887][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 481.847232][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 482.129463][T14911] bond0: entered promiscuous mode [ 482.159684][T14911] macvlan1: entered promiscuous mode [ 482.167291][T14911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.174970][T14911] Cannot create hsr debugfs directory [ 482.226526][T14911] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 482.267294][T14911] hsr0: entered promiscuous mode [ 482.402317][T14915] netlink: 'syz.2.2454': attribute type 9 has an invalid length. [ 482.433384][T14920] syzkaller1: entered promiscuous mode [ 482.476266][T14920] syzkaller1: entered allmulticast mode [ 482.486572][T14923] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2449'. [ 484.629849][T14929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2456'. [ 484.649116][T14868] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 484.674890][T14868] lo speed is unknown, defaulting to 1000 [ 484.691317][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 485.299873][T14951] SET target dimension over the limit! [ 485.388273][ T982] lo speed is unknown, defaulting to 1000 [ 485.400902][ T982] syz1: Port: 1 Link DOWN [ 485.501332][T14954] lo speed is unknown, defaulting to 1000 [ 486.634435][T14998] __nla_validate_parse: 3 callbacks suppressed [ 486.634457][T14998] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2474'. [ 486.636373][T14954] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 486.693683][T14954] lo speed is unknown, defaulting to 1000 [ 486.701895][T14990] pim6reg1: entered promiscuous mode [ 486.714639][T14990] pim6reg1: entered allmulticast mode [ 486.778525][T15002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2477'. [ 486.888033][T15004] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2477'. [ 486.929989][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 487.077126][T15008] xt_nat: multiple ranges no longer supported [ 487.117140][T15008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2479'. [ 487.276989][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.291049][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.300431][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.331567][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 487.405818][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 487.414738][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'. [ 487.471845][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.671384][T15015] lo speed is unknown, defaulting to 1000 [ 488.279535][T15050] netlink: 'syz.0.2490': attribute type 11 has an invalid length. [ 488.442667][T15056] tipc: Enabling of bearer rejected, already enabled [ 488.620789][T15062] pimreg: entered allmulticast mode [ 488.643995][T15062] pimreg: left allmulticast mode [ 488.804759][T15030] lo speed is unknown, defaulting to 1000 [ 488.835916][T15015] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 488.872826][T15070] netlink: 'syz.2.2496': attribute type 8 has an invalid length. [ 488.892901][T15015] lo speed is unknown, defaulting to 1000 [ 489.137092][T15077] bridge6: entered promiscuous mode [ 489.143186][T15077] bridge6: entered allmulticast mode [ 489.351272][T15030] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 489.359905][T15030] lo speed is unknown, defaulting to 1000 [ 489.781712][T15098] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 489.837619][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 489.866129][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 490.258058][T15106] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 490.298734][T15106] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 490.362824][T15106] batman_adv: batadv0: Removing interface: virt_wifi0 [ 490.422227][T15110] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 490.487657][T15110] netlink: 'syz.0.2507': attribute type 4 has an invalid length. [ 490.693072][T15118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.964071][T15129] Bluetooth: MGMT ver 1.23 [ 491.418317][T15148] netlink: 'syz.0.2518': attribute type 10 has an invalid length. [ 491.827882][T15164] __nla_validate_parse: 1 callbacks suppressed [ 491.827903][T15164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2523'. [ 491.850520][T15165] openvswitch: netlink: Duplicate or invalid key (type 0). [ 491.859000][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.958493][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 491.981498][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 492.037491][T15176] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 492.046897][T15176] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 492.288656][T15170] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2523'. [ 492.660322][T15192] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.691275][T15192] bridge0: port 1(bond12) entered blocking state [ 492.708902][T15192] bridge0: port 1(bond12) entered disabled state [ 492.716181][T15192] bond12: entered allmulticast mode [ 492.725419][T15192] bond12: entered promiscuous mode [ 492.823199][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2530'. [ 492.847806][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2530'. [ 492.872833][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2535'. [ 492.911553][T15192] !: entered promiscuous mode [ 492.934873][T15192] team0: entered promiscuous mode [ 492.969092][T15192] team0: left promiscuous mode [ 492.985455][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 492.985912][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 493.013101][T15212] sctp: [Deprecated]: syz.0.2534 (pid 15212) Use of int in maxseg socket option. [ 493.013101][T15212] Use struct sctp_assoc_value instead [ 493.033303][T15192] !: left promiscuous mode [ 493.082397][T15209] bridge6: entered promiscuous mode [ 493.088302][T15209] bridge6: entered allmulticast mode [ 493.227105][T15216] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 493.299588][T15216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.363009][T15227] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2538'. [ 493.382209][T15216] veth5: entered promiscuous mode [ 493.398430][T15216] bond7: (slave veth5): Enslaving as an active interface with a down link [ 493.433024][T15224] erspan0: entered allmulticast mode [ 493.557322][T15224] bond7: (slave erspan0): making interface the new active one [ 493.584602][T15224] erspan0: entered promiscuous mode [ 493.591622][T15224] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 494.230879][T15229] batman_adv: batadv0: Interface deactivated: dummy0 [ 494.284258][T15229] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 494.351522][ T982] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 494.351575][T15244] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2543'. [ 494.371115][ T982] syz2: Port: 1 Link DOWN [ 494.613582][T15276] x_tables: duplicate underflow at hook 1 [ 494.614162][T15277] netlink: 'syz.0.2550': attribute type 4 has an invalid length. [ 494.680590][T15258] lo speed is unknown, defaulting to 1000 [ 494.691944][T15277] netlink: 'syz.0.2550': attribute type 4 has an invalid length. [ 494.700822][T15258] syz0: Port: 1 Link DOWN [ 494.716608][T15260] lo speed is unknown, defaulting to 1000 [ 494.729406][T15265] lo speed is unknown, defaulting to 1000 [ 494.738264][T15265] syz0: Port: 1 Link ACTIVE [ 494.744540][T15264] lo speed is unknown, defaulting to 1000 [ 494.805958][T15277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 495.460352][T15310] netlink: 'syz.3.2556': attribute type 10 has an invalid length. [ 496.504501][T15364] wireguard0: entered promiscuous mode [ 496.538795][T15364] wireguard0: entered allmulticast mode [ 496.582219][T15379] tipc: Enabled bearer , priority 0 [ 496.628668][T15379] syzkaller0: entered promiscuous mode [ 496.645098][T15379] syzkaller0: entered allmulticast mode [ 496.671170][T15375] netlink: 'syz.4.2579': attribute type 10 has an invalid length. [ 496.802075][T15375] syzkaller1: entered promiscuous mode [ 496.854298][T15375] syzkaller1: entered allmulticast mode [ 496.899537][T15383] tipc: Resetting bearer [ 496.966909][T15396] gtp0: entered promiscuous mode [ 497.692591][T15426] __nla_validate_parse: 14 callbacks suppressed [ 497.692612][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 497.761502][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 497.942600][T15431] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 497.965434][T15431] syzkaller1: ignored: set checksum disabled [ 498.021054][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2592'. [ 498.054620][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2592'. [ 498.378935][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 498.538927][T15458] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:65535 [ 498.588020][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2598'. [ 498.639980][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2598'. [ 498.706922][T15458] erspan0: entered promiscuous mode [ 498.763792][T15458] erspan0: left promiscuous mode [ 498.849426][T15467] tipc: Enabling of bearer rejected, already enabled [ 498.918690][T15467] netlink: 'syz.1.2599': attribute type 30 has an invalid length. [ 498.929222][T15467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.054228][T15475] tipc: Enabling of bearer rejected, already enabled [ 499.163415][T15475] tipc: Resetting bearer [ 499.351938][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 499.590883][T15489] lo speed is unknown, defaulting to 1000 [ 500.054181][T15507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2611'. [ 500.111800][T15513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.343759][T15489] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 500.358769][T15489] lo speed is unknown, defaulting to 1000 [ 500.774849][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 500.796627][T15523] lo speed is unknown, defaulting to 1000 [ 501.102750][T15546] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 501.171912][T15546] bond6: (slave geneve4): making interface the new active one [ 501.187947][T15546] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 501.201822][ T49] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 501.223057][T15546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.241022][ T49] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 501.301627][T15523] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 501.301673][ T49] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 501.386558][ T49] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 501.394863][T15523] lo speed is unknown, defaulting to 1000 [ 501.633230][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.040246][T15567] netlink: 'syz.3.2624': attribute type 282 has an invalid length. [ 502.200248][T15570] IPVS: Unknown mcast interface: bridge_slave_0 [ 502.208131][T15570] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 502.810554][T15601] __nla_validate_parse: 6 callbacks suppressed [ 502.810577][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 502.880539][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 503.578607][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2642'. [ 503.896274][T15644] x_tables: duplicate underflow at hook 2 [ 504.198235][T15664] netlink: 'syz.3.2651': attribute type 13 has an invalid length. [ 504.216118][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 504.349872][T15664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2651'. [ 504.388222][T15658] lo speed is unknown, defaulting to 1000 [ 504.421890][T15664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.481446][T15664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.507932][T15675] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2657'. [ 504.808381][ T49] erspan0: left promiscuous mode [ 504.967233][T15687] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2660'. [ 505.000709][T15658] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 505.025292][T15658] lo speed is unknown, defaulting to 1000 [ 505.224673][T15699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 505.319695][T15706] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2663'. [ 505.332487][T15706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2663'. [ 505.406268][T15712] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 505.434373][T15712] batman_adv: batadv0: Removing interface: dummy0 [ 505.586239][T15712] bond6: (slave geneve4): Releasing active interface [ 505.609723][T15722] netlink: 'syz.2.2667': attribute type 10 has an invalid length. [ 505.683836][T15722] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 505.693344][T14603] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 505.812649][T15716] lo speed is unknown, defaulting to 1000 [ 505.812668][T14603] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 505.959184][T14603] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 505.980269][T14603] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 506.439923][T15716] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 506.451265][T15716] lo speed is unknown, defaulting to 1000 [ 506.872782][T15762] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 506.941549][T15765] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 506.972451][T15762] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 507.015064][T15765] 8021q: adding VLAN 0 to HW filter on device bond8 [ 507.884314][T15809] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 507.970072][T15814] __nla_validate_parse: 6 callbacks suppressed [ 507.970095][T15814] netlink: 848 bytes leftover after parsing attributes in process `syz.2.2690'. [ 508.304932][T15827] tipc: Enabling of bearer rejected, already enabled [ 508.352862][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 508.504632][T15838] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2698'. [ 508.518950][T15838] lo: entered promiscuous mode [ 508.551523][T15838] tunl0: entered promiscuous mode [ 508.562695][T15838] gre0: entered promiscuous mode [ 508.573925][T15838] gretap0: entered promiscuous mode [ 508.583504][T15838] erspan0: entered promiscuous mode [ 508.602400][T15838] ip_vti0: entered promiscuous mode [ 508.613695][T15838] ip6_vti0: entered promiscuous mode [ 508.623257][T15838] sit0: entered promiscuous mode [ 508.637802][T15838] ip6tnl0: entered promiscuous mode [ 508.649374][T15838] ip6gre0: entered promiscuous mode [ 508.658167][T15838] ip6gretap0: entered promiscuous mode [ 508.665103][T15838] : entered promiscuous mode [ 508.673322][T15838] team0: entered promiscuous mode [ 508.679771][T15838] dummy0: entered promiscuous mode [ 508.685859][T15838] nlmon0: entered promiscuous mode [ 508.692486][T15838] caif0: entered promiscuous mode [ 508.698484][T15838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.771608][T15841] lo speed is unknown, defaulting to 1000 [ 508.848189][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2701'. [ 509.042052][T15855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2703'. [ 509.429850][T15859] lo speed is unknown, defaulting to 1000 [ 509.441731][T15841] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 509.467970][T15841] lo speed is unknown, defaulting to 1000 [ 509.573881][T15864] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 510.529129][T15893] lo speed is unknown, defaulting to 1000 [ 510.810385][T15917] x_tables: duplicate underflow at hook 1 [ 510.861658][T15917] syzkaller1: entered promiscuous mode [ 510.878945][T15917] syzkaller1: entered allmulticast mode [ 511.349291][T15935] netlink: 'syz.3.2729': attribute type 9 has an invalid length. [ 511.374857][T15859] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 511.376420][T15935] netlink: 'syz.3.2729': attribute type 7 has an invalid length. [ 511.384265][T15859] lo speed is unknown, defaulting to 1000 [ 511.421208][T15893] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 511.448362][T15935] netlink: 'syz.3.2729': attribute type 8 has an invalid length. [ 511.505994][T15893] lo speed is unknown, defaulting to 1000 [ 511.600003][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2731'. [ 512.613179][T15978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2739'. [ 512.619683][T15974] macsec2: entered promiscuous mode [ 512.645336][T15974] macsec2: entered allmulticast mode [ 512.957703][T15984] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 513.098363][ T49] [ 513.100741][ T49] ============================================ [ 513.106906][ T49] WARNING: possible recursive locking detected [ 513.113073][ T49] 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 Not tainted [ 513.120191][ T49] -------------------------------------------- [ 513.126351][ T49] kworker/u8:3/49 is trying to acquire lock: [ 513.132319][ T49] ffff88806da6f218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 513.144510][ T49] [ 513.144510][ T49] but task is already holding lock: [ 513.151864][ T49] ffff8880249e9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 513.164044][ T49] [ 513.164044][ T49] other info that might help us debug this: [ 513.172097][ T49] Possible unsafe locking scenario: [ 513.172097][ T49] [ 513.179539][ T49] CPU0 [ 513.182812][ T49] ---- [ 513.186086][ T49] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 513.193202][ T49] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 513.200311][ T49] [ 513.200311][ T49] *** DEADLOCK *** [ 513.200311][ T49] [ 513.208709][ T49] May be due to missing lock nesting notation [ 513.208709][ T49] [ 513.217020][ T49] 8 locks held by kworker/u8:3/49: [ 513.222120][ T49] #0: ffff8880306bd148 ((wq_completion)bond6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.233176][ T49] #1: ffffc90000b97bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.246045][ T49] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 513.255617][ T49] #3: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 513.265540][ T49] #4: ffff8880249e9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 513.278159][ T49] #5: ffff888033b03d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 513.288436][ T49] #6: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 513.298181][ T49] #7: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 513.308196][ T49] [ 513.308196][ T49] stack backtrace: [ 513.314097][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-01565-ge7ce59d9205e #0 PREEMPT(full) [ 513.314118][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.314128][ T49] Workqueue: bond6 bond_alb_monitor [ 513.314145][ T49] Call Trace: [ 513.314152][ T49] [ 513.314158][ T49] dump_stack_lvl+0x189/0x250 [ 513.314178][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.314194][ T49] ? __pfx__printk+0x10/0x10 [ 513.314213][ T49] ? print_lock_name+0xde/0x100 [ 513.314232][ T49] print_deadlock_bug+0x28b/0x2a0 [ 513.314251][ T49] validate_chain+0x1a3f/0x2140 [ 513.314272][ T49] ? look_up_lock_class+0x74/0x170 [ 513.314294][ T49] ? register_lock_class+0x51/0x320 [ 513.314306][ T49] ? __nf_conntrack_find_get+0xc1/0x520 [ 513.314324][ T49] __lock_acquire+0xab9/0xd20 [ 513.314346][ T49] ? __dev_queue_xmit+0x22b7/0x3b50 [ 513.314362][ T49] lock_acquire+0x120/0x360 [ 513.314375][ T49] ? __dev_queue_xmit+0x22b7/0x3b50 [ 513.314393][ T49] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 513.314414][ T49] _raw_spin_lock+0x2e/0x40 [ 513.314433][ T49] ? __dev_queue_xmit+0x22b7/0x3b50 [ 513.314448][ T49] __dev_queue_xmit+0x22b7/0x3b50 [ 513.314469][ T49] ? __dev_queue_xmit+0x27b/0x3b50 [ 513.314489][ T49] ? neigh_connected_output+0x1ea/0x460 [ 513.314511][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 513.314528][ T49] ? read_seqbegin+0x122/0x250 [ 513.314547][ T49] ? neigh_connected_output+0x1ea/0x460 [ 513.314567][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.314587][ T49] ? read_seqbegin+0x1ac/0x250 [ 513.314606][ T49] ? __pfx_read_seqbegin+0x10/0x10 [ 513.314637][ T49] ip_finish_output2+0xd3d/0x1160 [ 513.314657][ T49] ? ip_finish_output2+0x452/0x1160 [ 513.314675][ T49] ? __pfx_ip_finish_output2+0x10/0x10 [ 513.314693][ T49] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 513.314708][ T49] ? ip_skb_dst_mtu+0x866/0xab0 [ 513.314724][ T49] ? ip_finish_output+0x33a/0x3f0 [ 513.314740][ T49] iptunnel_xmit+0x592/0xa40 [ 513.314765][ T49] ip_tunnel_xmit+0x1c41/0x2390 [ 513.314791][ T49] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 513.314807][ T49] ? gre_build_header+0x3fd/0xa40 [ 513.314826][ T49] ? __pfx_gre_build_header+0x10/0x10 [ 513.314846][ T49] gre_tap_xmit+0x590/0x7a0 [ 513.314862][ T49] ? __pfx_gre_tap_xmit+0x10/0x10 [ 513.314876][ T49] ? __lock_acquire+0xab9/0xd20 [ 513.314892][ T49] dev_hard_start_xmit+0x2d7/0x830 [ 513.314914][ T49] sch_direct_xmit+0x241/0x4b0 [ 513.314936][ T49] ? __pfx_sch_direct_xmit+0x10/0x10 [ 513.314958][ T49] __dev_queue_xmit+0x1857/0x3b50 [ 513.314978][ T49] ? __dev_queue_xmit+0x27b/0x3b50 [ 513.315000][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 513.315018][ T49] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 513.315035][ T49] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 513.315056][ T49] ? __build_skb_around+0x257/0x3e0 [ 513.315075][ T49] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 513.315091][ T49] ? alb_send_lp_vid+0x139/0x510 [ 513.315108][ T49] alb_send_lp_vid+0x324/0x510 [ 513.315123][ T49] ? rcu_is_watching+0x15/0xb0 [ 513.315140][ T49] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 513.315157][ T49] ? __lock_acquire+0xab9/0xd20 [ 513.315173][ T49] alb_send_learning_packets+0x10d/0x2c0 [ 513.315190][ T49] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 513.315213][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 513.315237][ T49] bond_alb_monitor+0x3e4/0x1800 [ 513.315254][ T49] ? bond_alb_monitor+0xf1/0x1800 [ 513.315267][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 513.315283][ T49] ? __pfx_bond_alb_monitor+0x10/0x10 [ 513.315298][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.315316][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 513.315337][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 513.315354][ T49] process_scheduled_works+0xae1/0x17b0 [ 513.315379][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.315400][ T49] worker_thread+0x8a0/0xda0 [ 513.315424][ T49] kthread+0x70e/0x8a0 [ 513.315444][ T49] ? __pfx_worker_thread+0x10/0x10 [ 513.315459][ T49] ? __pfx_kthread+0x10/0x10 [ 513.315478][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.315497][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.315515][ T49] ? __pfx_kthread+0x10/0x10 [ 513.315534][ T49] ret_from_fork+0x3fc/0x770 [ 513.315550][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 513.315566][ T49] ? __switch_to_asm+0x39/0x70 [ 513.315583][ T49] ? __switch_to_asm+0x33/0x70 [ 513.315600][ T49] ? __pfx_kthread+0x10/0x10 [ 513.315618][ T49] ret_from_fork_asm+0x1a/0x30 [ 513.315641][ T49]