last executing test programs: 2m57.302649157s ago: executing program 2 (id=4139): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0xd}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) close(0x3) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x0, 0x400, 0x9, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xefb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7e}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x93}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "1bd12cd5b498676e2ebf9f8cb03e25cb458ba7bd8ee75762e6ff1c59"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x48f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x146}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4044010}, 0x884) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) 2m56.685319664s ago: executing program 2 (id=4141): r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x8, 0x0, 0x0, 0x2, 0x984f, 0x401}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x8080, 0x4) 2m56.468240002s ago: executing program 2 (id=4144): connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e70"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000d4ebae38da5847bd99cfc7e18bb1d73f"], 0x14}, {0x0}], 0x2}, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$inet6(0xa, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000021011907800000000000000004e224e2300109078e204004f35a1f021"], 0x0) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) 2m55.364098996s ago: executing program 2 (id=4154): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) socket(0x26, 0x1, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m55.223916282s ago: executing program 2 (id=4155): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d0, 0x0) 2m52.107712032s ago: executing program 2 (id=4164): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x31803200}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0xd0, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffff0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x685e9936473a62d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x131c}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0xd0}}, 0x24008080) (async, rerun: 32) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r14 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r14, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) 2m37.079787758s ago: executing program 32 (id=4164): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x31803200}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0xd0, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffff0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x685e9936473a62d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x131c}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0xd0}}, 0x24008080) (async, rerun: 32) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r14 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r14, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) 2m32.241012163s ago: executing program 3 (id=4309): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) (async) poll(&(0x7f00000003c0)=[{r2, 0x40}], 0x1, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xc2, 0x1ff, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x8, 0x0, 0x2c1}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x5, 0x9, 0x7, 0x400, 0x7f, 0x4100c0, r7}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000700)={{0x2, 0x4e20, @multicast2}, {0x306, @remote}, 0xa, {0x2, 0x4e21, @broadcast}, 'veth1_virt_wifi\x00'}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) 2m32.043728764s ago: executing program 3 (id=4311): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000b20000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000034582a370095000000000009009c6a1886ba0980baaf4b20b39ce5a492fe8ba9edec90bf1b5a9cc73a8a9463dcc7461a1c88e0d625957bc8a7a0d1c0f6d90546ec8f86ce1cc65dee2f420ed17706e61c8d917dd3937d9efa410fcda171362186b032727c991e03e46693bdd8694a997850afc37169a9122ff02b7b7f9cc45d7aea2652f0156ea7275f2667114ba1ee2d337e4d04542792e2"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x89cb1000) 2m31.882786252s ago: executing program 3 (id=4313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3, 0x0, 0x800000000}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x131}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r5, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r6, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/140, 0x8c}], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0x8, 0x2, 0xfd, 0xfd, 0x5, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000240)=0x6, 0x4) shutdown(r6, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000200)=0x3, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYRES16, @ANYBLOB="000000001425000000000800200001000000"], 0x34}}, 0x0) 2m31.479787263s ago: executing program 3 (id=4314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x7fffffffffffffff, 0x9, 0xe}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r7, 0x2d322000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xd8, &(0x7f0000000780)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='f2fs_write_end\x00', r6, 0x0, 0x10}, 0x18) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x7a, '\x00', 0x0, @fallback, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0xfffffffe, 0x0, 0x1fffffff}, 0x10}, 0x94) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 2m29.141102742s ago: executing program 3 (id=4324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 2m28.867287025s ago: executing program 3 (id=4327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r0, 0x4000, r0}, 0x18) 2m13.827385879s ago: executing program 33 (id=4327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r0, 0x4000, r0}, 0x18) 1m3.874402897s ago: executing program 0 (id=5187): socket$inet(0x2, 0x2, 0x1) r0 = socket(0x2, 0x800, 0x203) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000400)="3245c7ba4a961c6bf10a489a6ebc33838e3496836f66cfd0102b71cc6b4f0af79898bd11b9a6a9aa23c7a7abc19c5976bb1690bd3aef1617", 0x38}, {&(0x7f00000019c0)}], 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYRESOCT=r2, @ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="000000000100000003000000000000000000000000000000000000006e0b0215517cd85bf21a8d9faa37435bd5111ce9ef6886605bba", @ANYRESHEX=0x0, @ANYRESOCT=r3], 0x50) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, 0x0, 0x0, 0x4000010, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="3001014a0552c478da00000001000000000000000c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x100, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x33, 0x0, r10}, {0x7, 0xffffffffc9de0286, 0x5, 0x9, 0x9, 0x80, 0x4, 0xffffffffffff8000}, {0x75, 0x4, 0x2, 0x1000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3501, 0x2, 0x0, 0x6, 0x659fbcf4, 0x1000000e, 0x6}}, 0xe8) close(0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) pipe(0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m3.608047978s ago: executing program 0 (id=5188): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1e}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x36, '\x00', 0x0, 0x0, r4}, 0x94) getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x75, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x2, 0x3, 0x1, 0x1, 0x4, 0x80}, @call={0x85, 0x0, 0x0, 0x94}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0xf}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800010000000000010000000a000000000000000000000008000400", @ANYRESHEX=0x0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r10], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 1m2.773571835s ago: executing program 0 (id=5196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x3d3b866cab67281, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x78, 0x0, 0x0, 0xff}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x38}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x0, @loopback}}) 1m2.548641094s ago: executing program 0 (id=5201): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x268, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d200000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3fe0000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x4094) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="185a4400000020001000000000000000000061100c00000000006800000000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219}, 0x94) 1m2.37571384s ago: executing program 0 (id=5204): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f0000000640)={'tunl0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x38, 0x3, r2}, @void}}, [""]}, 0xfffffffd}, 0x1, 0x0, 0x0, 0x40}, 0x24000846) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1m2.211977168s ago: executing program 0 (id=5206): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x3, 0x18, @empty, @loopback, 0x40, 0x40, 0x2, 0x116}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/time\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 52.295872829s ago: executing program 5 (id=5281): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf37, 0x2) read$alg(r3, &(0x7f00000003c0)=""/85, 0x55) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000340)="ab50df015e62") r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd31, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r11}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000480)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="61030602e8040201ef01"], 0xa) 51.292724523s ago: executing program 5 (id=5292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562e117fffffff81000e224e237f000001925aa800", 0x24}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000020000103feffffff000000000200000000000000040001000800acec0008000005001e6df1b681a6d4f3fe2b3f6eab75ac43a0882562bbe7f4530e3d4e0f5caa529465b18de895854ea5306e2b131c117205e87923e4478da7f36b0cac39b38248cad7a06a0e47e7dbeebfb96f1fd770a69884b0530e75d947e137e4de4bf7a5627d223c634a4431d1a1584569dd97a8b60c2a5b8f721e3e5393"], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0xe8, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf5e7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8884}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c00078008001200000000000c000300686173683a697000050005000a00000005000400000100000900"], 0x50}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x8) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x104, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0x2, 0x3}, 0x6) 50.886972291s ago: executing program 5 (id=5297): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000000c0)={0xe6, 0xe, 0xffffffff, 0x7, 0x8, 0x2, 0x400, 0x100000001}, &(0x7f0000000180)={0x9, 0x4, 0xfffffffffffffff8, 0x8000000000000000, 0x6, 0x4, 0x5, 0xffffffff}, &(0x7f00000001c0)={0x2, 0x5, 0x9, 0x2b, 0x200, 0x6, 0x9, 0x3661}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000240)={[0x1c]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01}, 0x810) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 50.767850074s ago: executing program 5 (id=5298): socket$inet6(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0x9}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@int=0x8, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x5, 0xb}, {0x2, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001001000010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x64}, 0x28) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) (async) r10 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x18, &(0x7f0000000080)=0x6, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0xc, @private0, 0x7fffffff}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r9, 0x0, 0x0, 0x3, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x6}}) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES16=r7, @ANYRESHEX=r3], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYRES64=r11, @ANYRES16=r12, @ANYRESDEC=r2], 0x6c}}, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) 50.626493224s ago: executing program 5 (id=5301): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) sendto$inet(r0, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 50.476036336s ago: executing program 5 (id=5302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000040)={&(0x7f00000002c0)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0, 0xea}, {0x0}, {&(0x7f0000000200)}], 0x4}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac14"], 0x0) 47.165892087s ago: executing program 34 (id=5206): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x3, 0x18, @empty, @loopback, 0x40, 0x40, 0x2, 0x116}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/time\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 35.437307905s ago: executing program 35 (id=5302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000040)={&(0x7f00000002c0)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0, 0xea}, {0x0}, {&(0x7f0000000200)}], 0x4}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac14"], 0x0) 16.281519083s ago: executing program 4 (id=5556): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32, @ANYBLOB="24002d8005000100fe000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008005}, 0x4880) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x56, &(0x7f00000003c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYBLOB="010025bd7000ffdbdf", @ANYRES32=0x0, @ANYBLOB="9801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000004000400080006", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400400000003800010024000100616374697665706f727400000000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c000100240001006d6f646500"/89, @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040018c3000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000008", @ANYRES32=r4, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74", @ANYRES32=r7], 0x4e8}, 0x1, 0x0, 0x0, 0x24008804}, 0x20044840) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000280)=0x20820, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x4109, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "adb400", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f0000000740)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94) ioctl$int_in(r9, 0x5421, &(0x7f0000000140)=0x4) 16.1097846s ago: executing program 4 (id=5567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000150a010a0000bb3717e31b61cbc40000000000000a000000081e7a0000008000001b7fa8ab86e80003400000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0xc, @multicast2, 0x4e21, 0x0, 'lc\x00', 0x8, 0x80, 0x15}, {@local, 0x4e22, 0x10000, 0x3, 0x7fffffff, 0x59}}, 0x44) 15.921138369s ago: executing program 4 (id=5560): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0xfffffffffffffc8e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)=0xfffffffd) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000400)="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") bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@null, @bcast, @default, @default, @bcast, @default]}, 0x40) 14.616738916s ago: executing program 4 (id=5571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x222fd463, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 14.419082501s ago: executing program 4 (id=5573): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x100494) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@acquire={0x128, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x5f}, @in=@loopback, {@in6=@empty, @in6=@loopback, 0x4e20, 0x0, 0x4e21, 0x54a7, 0x2, 0x0, 0x80, 0x2b}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@broadcast, 0x4e22, 0x7, 0x4e22, 0x5, 0x2, 0xa0, 0x0, 0x33}, {0x5, 0x10001, 0x3, 0x100000000, 0x6, 0x0, 0xf, 0x2}, {0xffffffff, 0x4}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x0, 0x3}, 0xec, 0x5, 0x1, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r3, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x600) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x100494) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@acquire={0x128, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x5f}, @in=@loopback, {@in6=@empty, @in6=@loopback, 0x4e20, 0x0, 0x4e21, 0x54a7, 0x2, 0x0, 0x80, 0x2b}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@broadcast, 0x4e22, 0x7, 0x4e22, 0x5, 0x2, 0xa0, 0x0, 0x33}, {0x5, 0x10001, 0x3, 0x100000000, 0x6, 0x0, 0xf, 0x2}, {0xffffffff, 0x4}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x0, 0x3}, 0xec, 0x5, 0x1, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r3, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) 14.074347136s ago: executing program 4 (id=5577): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000012"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000040)) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="0a31c5b5f4656f51036e04c93c0cfb1511edb2053060a6dc3a1cad6d1e00267a1c9b1b0450f7c0a45d2fdc851a2dc05b5433863b9ca07e89271db4753e6b421b768d02cebbfb910230e6226724a9fa328503e659719385b62465f9cb1ebbf0376a6b12523411dc8b3ed145c62b97baf8e9e05c9ed7ed1e6cf5ac51b606d0ffd4a85a", 0x82}, {&(0x7f00000001c0)="13129058de31b34c21c0006abc18b0f1b2874a76777a1412c7619e36752b76331f4be35f84a694774582a8f1644e5615d3b41f1c610977fb94c2528ec3edb565d6799ba6d7f6b3ef18c1348f41767f8935479ff121c3028a87b1d4f03ef6119b94bfc6c807548796686c24c3", 0x6c}], 0x2, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x105}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd0000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x28}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xd8}}], 0x1, 0x20000000) 11.941874073s ago: executing program 6 (id=5598): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xc4, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x23}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRES32=r0], 0x278}], 0x1}, 0x10) unshare(0x0) r1 = socket(0x8, 0x3, 0x0) accept$alg(r1, 0x0, 0x0) 11.639944327s ago: executing program 6 (id=5600): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4806}, 0x4020000) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000280)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4806}, 0x4020000) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) (async) 11.2771229s ago: executing program 6 (id=5602): socket$inet6(0xa, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="0000d0098b0000000000000008fe8a", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) accept4$inet6(r3, 0x0, &(0x7f0000000180), 0x80400) socket$inet6(0xa, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="0000d0098b0000000000000008fe8a", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) (async) accept4$inet6(r3, 0x0, &(0x7f0000000180), 0x80400) (async) 11.119856975s ago: executing program 6 (id=5603): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)={0x8, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc523}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, 0x40, 0x81, 0x10001, 0x16, 0xc0, 0x9, 0x9}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x7}, &(0x7f0000000040)=0x8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x8, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ec1}, {0x6, 0x0, 0x7, 0x9}]}, 0x10) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) r9 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x400) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="f7ff00001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f6164000000797a300000010073797a3000000000090002797a3200000000290000001100010000000000000000000000000a00"/122], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r6) r10 = accept4$netrom(r9, &(0x7f0000000640)={{0x3, @netrom}, [@rose, @null, @default, @rose, @default, @default, @default, @default]}, &(0x7f0000000500)=0x48, 0x80000) getsockopt$netrom_NETROM_T2(r10, 0x103, 0x2, &(0x7f00000006c0)=0x626f, &(0x7f0000000700)=0x4) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) r11 = socket(0x1e, 0x2, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='tegra_dma_complete_cb\x00', r2}, 0x18) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000000)={0x26, 0x4, 0x2, 0x5, 0x1}) 8.011807504s ago: executing program 6 (id=5606): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) unshare(0x6a040000) unshare(0x44000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r4, 0x7fff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r8, 0x0, 0x8000) vmsplice(r8, &(0x7f00000000c0), 0x0, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) socket$inet6(0xa, 0x3, 0x87) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2.740003805s ago: executing program 7 (id=5629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='afs_dir_check_failed\x00'}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 2.681739051s ago: executing program 1 (id=5630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x800020000000005) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f0000000200)=0x14) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r5, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x80000001}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x9}}, @struct={0xc, 0x8, 0x0, 0x4, 0x0, 0xfffffffb, [{0x1, 0x4, 0x8}, {0xb, 0x5, 0x1}, {0x0, 0x4}, {0x8, 0x4, 0xfffffffb}, {0x10, 0x3, 0x2}, {0x5, 0x4, 0x59}, {0x2, 0x0, 0x2}, {0xd, 0x5, 0xacf7}]}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @restrict={0x9}, @datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x6}], 'Uk'}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x8, 0x3}, {0xf, 0x5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x61, 0x10, 0x61]}}, &(0x7f0000000240)=""/7, 0x126, 0x7, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1d00000000ffff00f30a64ef01bb797d85f251597be02858a511435c67f5c6cf18a96fc8", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="02000000030000000500"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) write$cgroup_subtree(r9, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r9, 0x0) bind$x25(r2, &(0x7f00000004c0), 0x12) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth1_to_team\x00', @ifru_ivalue=0x4}) 2.630562195s ago: executing program 6 (id=5631): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xcc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) (async) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) unshare(0x6a040000) (async) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x40014) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x40014) connect$bt_rfcomm(r5, 0x0, 0x0) (async) connect$bt_rfcomm(r5, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x3}, 0xfe, 0x0, 0x1, 0xfffb, 0x27, 'syz1\x00', "1d6d4e74d690a60e2881f12c46422f54e5a69c50ed1d3d69269739587da5f3ea", "d5e8127d233472b18795c40ca95be3d79962b30ff1ee24f3e39e705ecc0da0c9", [{0x8, 0x9da0, {0x0, 0x3ff}}, {0x86, 0x0, {0x1, 0x5}}, {0x1, 0x10, {0x1, 0x5}}, {0x1, 0x50, {0x0, 0x8}}, {0x8, 0xfffa, {0x1, 0x80000000}}, {0x3, 0x7ff, {0x3}}, {0x800, 0x805, {0x3, 0x9c1b}}, {0x7, 0x1, {0x1, 0x610}}, {0x5, 0x6, {0x3, 0x1}}, {0x6, 0xf71, {0x1}}, {0x4, 0x40, {0x1, 0x8}}, {0x2b3, 0x0, {0x3, 0x7}}, {0xae5, 0x101, {0x2, 0x54}}, {0x37, 0x4, {0x0, 0x3c7}}, {0x8, 0x3, {0x2, 0x4}}, {0x400, 0xff81, {0x1, 0x12eb}}, {0x5, 0x0, {0x0, 0x4}}, {0x2, 0x9, {0x2, 0x5}}, {0xe0e, 0xe54, {0x0, 0x2000000}}, {0x13, 0xb, {0x0, 0xffffffff}}, {0x2, 0x1, {0x0, 0x7f}}, {0x2, 0xfff, {0x1}}, {0xfff9, 0x5, {0x2, 0x1}}, {0xf9, 0x2, {0x3, 0x80}}, {0x7f, 0x6, {0x3, 0x8}}, {0x4, 0xc696, {0x2, 0x9}}, {0x6, 0x0, {0x3, 0x7}}, {0x7, 0x7f, {0x0, 0xff}}, {0xb, 0x4, {0x0, 0xd61f}}, {0x10, 0x7ff, {0x1, 0x800}}, {0x8, 0xc658, {0x3, 0x5}}, {0xfff7, 0x1, {0x2, 0xff}}, {0x101, 0x1, {0x0, 0x6}}, {0x2, 0x4003, {0x3, 0x8}}, {0x8d79, 0x4, {0x0, 0x80000000}}, {0x0, 0x7, {0x2, 0xb2}}, {0x2, 0x4000, {0x2, 0xa}}, {0x7c, 0xf, {0x2, 0x7}}, {0x8001, 0x8, {0x1, 0x947}}, {0x8, 0x4, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x401}, 0x5, 0x40, 0xc7f6, 0xa9, 0x6, 'syz0\x00', "9f49e579ce1467f0a081fec3b854e9bbfe4d3564dbef1b32a6306e4f30e9cdf2", "92c62afa97039ba36491549ac130f2ab2837d44096f2ac1dfcc2d1a3b677ffea", [{0xf48, 0x2, {0x1, 0x8}}, {0x9, 0x3, {0x2, 0x47}}, {0x8001, 0xd, {0x2, 0xc0c0}}, {0x403, 0x1, {0x0, 0x116}}, {0xd53, 0x4, {0x0, 0x81}}, {0x6, 0x2, {0x0, 0x6cb2ae41}}, {0x1, 0x2, {0x1, 0x7}}, {0x200, 0x3, {0x3, 0x8}}, {0x8001, 0x4, {0x2, 0x4}}, {0x8, 0xc, {0x3, 0xffffffff}}, {0x18b, 0x3, {0x2, 0x7}}, {0x2, 0xbaba, {0x0, 0xa49}}, {0x1, 0x1ff, {0x1, 0x2}}, {0xc000, 0xf, {0x3, 0x7}}, {0x3, 0x2, {0x3, 0x4}}, {0x4000, 0x9, {0x0, 0x2}}, {0x8, 0x80, {0x2, 0x3ff}}, {0x1, 0xa8c2, {0x2, 0x9}}, {0x9, 0x3, {0x2, 0x6}}, {0x1, 0x3ff, {0x0, 0x9}}, {0x6, 0x0, {0x3, 0x800}}, {0x81, 0x0, {0x0, 0x800}}, {0x5, 0x8000, {0x1, 0xa4d}}, {0x8bf, 0x81, {0x1, 0xb3}}, {0x3, 0xc, {0x0, 0xd1f2}}, {0x2, 0xfff, {0x1, 0x25}}, {0x8, 0x1, {0x1, 0x2}}, {0x2, 0x8, {0x2, 0x4}}, {0xdb4d, 0x9, {0x2, 0x9}}, {0x8, 0x1, {0x0, 0x9}}, {0x0, 0x1, {0x0, 0x1}}, {0x7fff, 0x1, {0x3, 0xe}}, {0x5, 0x8ab4, {0x1, 0xffffffff}}, {0x2, 0x4, {0x1, 0x8}}, {0x7, 0x4, {0x0, 0x3}}, {0x1, 0x8000, {0x0, 0x7fffffff}}, {0x4, 0x1ff, {0x3, 0x8}}, {0x3, 0x91, {0x0, 0xcd}}, {0x1, 0x7fff, {0x1}}, {0x5, 0x4, {0x3, 0x8000}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x400c800}, 0x20008849) shutdown(r4, 0x1) 2.410633409s ago: executing program 8 (id=5632): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000001940)="a29876d7303630") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x0, 0xfd, 0x3, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) r3 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f5b, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x80000000, 0xa}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000480)=[{0x4, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x1, 0x8}, {0x4, 0x5, 0x9, 0x9}, {0x2, 0x3, 0x4, 0x9}, {0x3, 0x5, 0x6, 0x1}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000200), &(0x7f00000005c0)=r5}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000740)={0x0, 'xfrm0\x00', {0x4}, 0x5}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @broadcast}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cgroup.kill\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001900)={'veth1_to_team\x00', &(0x7f0000000780)=@ethtool_eeprom={0xb, 0x80000, 0x200, 0x24, "d3d37493f5898aab5ca85bfb92c0865f3be2a3dd6ab9e1b0168b87e0474b74a05175193b"}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r7, r8, 0x2, 0x5}, 0x50) 2.32369578s ago: executing program 7 (id=5633): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) (async) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) read(r1, &(0x7f0000000000)=""/7, 0x7) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) (async) r7 = gettid() (async) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000200)={0x1d, r10}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r10, @ANYBLOB="049c01004600050008001300", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x4802}, 0x8080) (async) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="d1e45464dab4131ca6b9d99da1544963d171fd7884004a70c63fdd8ead1ac5d72414d5e3d8c0f5704f203083f4fdef598227ee3c9cff285a865d9d3b7df6090e2c88392905b56037ac9c3a82e007cd147945888aab4c59cc369cd7a5d58ee94b2f1d940bce694c5e630b660c72aca590829a8a3983b923f29a7ad7a8db8248e75402680beb9fe6331cd55b69d2fa829675ca87412cc3a21455837c040056800800ce00", @ANYRES32=r6, @ANYBLOB="6fb410f78768314b2736561072e36313666b84b1f145966c4e411777234d1e13d1dbf7b83beb982030a640111f56e0f32b7b464828f09ab60000001400458008001300", @ANYRES32=r7, @ANYBLOB="6162e5ebe4230000000000"], 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async) pread64(r4, 0x0, 0x300, 0x1) 1.709148005s ago: executing program 7 (id=5634): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xd}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0x10, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2a}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1.599351111s ago: executing program 1 (id=5635): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) accept4(r0, 0x0, &(0x7f0000000080), 0x400) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003d00000001006e657464657673696d0000000f0002006e657464657673696d3000000800820000000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES16, @ANYBLOB="010076ee0000000040000800000000000000ebc5c45e8217a710060577a08703c837cd548c4afd9c831c9b7d0604ea5fa8addb3da45823f105eac1caf079601e10305c726b4d7636e7a0ab0b4ae24f28e83d03576f7196d850e38d83ccdc39ce8f30bea9992b1ff0143d10d12192bd11879e6a1ec0a9464d1b45162106cb59e4ee83d0cc4c9ead2cf3f4e47cd6020d05b908ee174405f350fe5b54cd5565507ae1df8bb5754af66c8f211a102d3652405ab8aa71873ef09dbc2b829928e48a02211bdc5f34f5", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f000000ef00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x61, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000140)=""/251) socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)) 1.407803049s ago: executing program 7 (id=5636): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) (async, rerun: 64) listen(r5, 0x0) (async, rerun: 64) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r4, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) (async) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1e85544879f9448a}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040001) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70000008000800e0000002"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r11, 0x30, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d77ab25a658018c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x14, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000045) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES8=r9], 0x110}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 1.406947941s ago: executing program 8 (id=5637): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f000000d540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000121c0)={0x0, 0x0, &(0x7f0000012180)={&(0x7f0000012140)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="9d6f61fa0500", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xcc0, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) recvmmsg(r2, &(0x7f0000001140), 0x74e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001a0001002bbd7000000000001c000000", @ANYRES32=0x0, @ANYBLOB="04002004140003000701000000000000ff7f00000000000014000100ff010009000000000000000000000001"], 0x44}}, 0x0) 1.237228334s ago: executing program 8 (id=5638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0xffff0001, 0x25dfdbfe}, 0x1c}}, 0x1) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000540)=""/65, 0x41}], 0x2}, 0x913f}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340002003c0007010300000000000000017c0000100000800c0019000010000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) 1.095293953s ago: executing program 8 (id=5639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c00198008000200130000000600124000030000380002802c00018014000300fe800000000000a5dee4ebb278c979bb140004"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0xfffffffffffffeb0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10002, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000040)={r11, 0x5c5, 0x0, 0x81, 0x3, 0x5}, 0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r11, 0x3}, &(0x7f0000000480)=0x8) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r12, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)="b95d3dcdc93d3199d8766a4533f986b57d346293c01008e52e0e129e419e79f69773bdec351e4a21d2d8233d681c3fc02f2a855fc0", 0x35}, {&(0x7f00000008c0)="0a4c71e778cc7598cad4e4", 0xb}], 0x2}}], 0x1, 0x40000) syz_emit_ethernet(0x22, &(0x7f0000002880)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x339, 0x8847, 0x6, 0x0, 0x4, @empty, "", @broadcast}}}}, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000380)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@deltaction={0x108, 0x31, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2a2}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2bf7}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x81) 1.012085129s ago: executing program 7 (id=5640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000014c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x53}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x34}}, 0x0) 881.087389ms ago: executing program 1 (id=5641): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='dlm_recv\x00', r0, 0x0, 0x23}, 0x18) 803.053872ms ago: executing program 7 (id=5642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @local, 0x13}, 0x1c) r2 = socket(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) write(r5, &(0x7f0000000000)="7438e828dcfb7be314e66a", 0xb) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000101010400000000000000000a00000a100001800c000280050001003a00000024b83109d58c74ac7dabfcb765b607927e8b4c9890b405d46941be3236a25c225a63172f"], 0x24}}, 0x48844) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004804) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r8, 0x89f2, &(0x7f0000000000)) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000040)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000830704"], 0x30}, 0x24040080) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x100, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x0, 0xffffffff, 'macvlan0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x73, 0x0, 0x11}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e24], [0x4e23, 0x4e21], 0x2, 0x80, 0xc2, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x9, 0x7, [0x2a, 0x25, 0x25, 0x33, 0x6, 0x3e, 0xe, 0x0, 0xc, 0x2b, 0x9, 0x28, 0xf, 0x19, 0x3b, 0x3e], 0x2, 0x0, 0xffffffffffff8ed3}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0x6c, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x6, [0x3b, 0x15, 0xf, 0x30, 0x11, 0x39, 0x3e, 0x39, 0x21, 0x1c, 0xb, 0x19, 0x38, 0x35, 0xb, 0x15], 0x0, 0xfffff991, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 676.024907ms ago: executing program 8 (id=5643): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 674.898859ms ago: executing program 1 (id=5644): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB, @ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="0a0006e92554130008021100000000", @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r11 = socket(0x10, 0x3, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) sendmsg$can_bcm(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000400800000000000000000000362c20c597fb6603b57514c9fed29f2b7c725044f2f62274c50dda9938d4b785b0f74e557d712561c961cc40fadf69541e30fdd3a3dbe162538d27462aa66af577a399afe0ce5547fbab9a58ff9885caa368729c5c8d6c9a36e3312ba2deec8fc1d9caebcf14b14c6888160769eb438bddc6735355fa0c04b3df654a6743f859baef3584672aec9e5ed8a732b9630bf7b5deda5d36e0312a7c0b8e34b0a4e477a3d0688763169c22760c183bc481dad059eef60c40e1d2eb2b4d0dac98c87f", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)) sendmsg$can_bcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x4, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20044008}, 0x40884) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100d82dbdc5fd77baa4b6a03b60922a24740c050c91f6f9fc594aff0083074e16bf4a2800b56a86ea25006088af00270d1fdac37247db774f8bf2112c7884ab111c38e9d9e27edf2691b4b893dbb2c027c2f3de0e4c1ba9c91eaf37063b0b4312f6fe63443c77ab79047d5233da08512ddd1054f8c7c553689602243808d1f712bd5ad695a6aeda634191fd67ff2c974603b6fac4deebe955ee7dbbc7957e0b474fc058bfb651f9e7c656d93ce968dbe42557dc779e86c0b2b55056432befe83a1f905e5d12c7f092e15673", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r11], 0x40}}, 0x0) 521.974303ms ago: executing program 1 (id=5645): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x7, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x140f, 0x200, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f7ff00"], 0x8) socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 121.463257ms ago: executing program 1 (id=5646): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="25c89d0918a25b3725f245a434ac", 0x0, 0x2f01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x11) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) 0s ago: executing program 8 (id=5647): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in6={0xa, 0x0, 0x0, @empty}], 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8044) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) kernel console output (not intermixed with test programs): 2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.983411][T22660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.086440][T22660] hsr_slave_0: entered promiscuous mode [ 646.093304][T22660] hsr_slave_1: entered promiscuous mode [ 646.274576][T22738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4295'. [ 646.284262][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4295'. [ 646.354163][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4295'. [ 646.492749][T22746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4297'. [ 646.805294][T22660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.822312][T22660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.835119][T22760] netlink: 'syz.0.4303': attribute type 1 has an invalid length. [ 646.859523][T22660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.908793][T22660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 647.119601][T22660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.180279][T22660] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.221199][T21224] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.228459][T21224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.289073][T21221] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.296339][T21221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.346496][T19684] Bluetooth: hci5: command tx timeout [ 647.587270][T22806] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 647.989336][T22817] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 648.017955][T22817] __nla_validate_parse: 1 callbacks suppressed [ 648.017978][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4315'. [ 648.079413][T22817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4315'. [ 648.627528][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 648.842436][T22818] lo speed is unknown, defaulting to 1000 [ 648.881624][T22660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.915737][T22818] lo speed is unknown, defaulting to 1000 [ 649.183461][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 649.425795][T19684] Bluetooth: hci5: command tx timeout [ 649.563878][T22660] veth0_vlan: entered promiscuous mode [ 649.580860][T22660] veth1_vlan: entered promiscuous mode [ 649.665608][T22660] veth0_macvtap: entered promiscuous mode [ 649.676955][T22660] veth1_macvtap: entered promiscuous mode [ 649.853034][T22660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.900584][T22660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.931476][T21222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.962454][T21222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.017547][T21222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.033958][T21222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.209361][T22850] syzkaller0: entered promiscuous mode [ 650.261184][T22850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4322'. [ 650.281333][T21222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.301986][T21222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.387477][T22856] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4324'. [ 650.408136][T21221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.428367][T21221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.609752][T22863] netlink: 'syz.4.4326': attribute type 10 has an invalid length. [ 650.636919][T22863] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 650.676853][T22867] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4268'. [ 650.797244][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4329'. [ 650.812758][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4329'. [ 650.820238][T22869] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 651.036154][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 651.070088][T22877] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 651.120840][T22881] lo speed is unknown, defaulting to 1000 [ 651.180426][T22881] lo speed is unknown, defaulting to 1000 [ 651.505013][T19684] Bluetooth: hci5: command tx timeout [ 652.246718][T22907] lo speed is unknown, defaulting to 1000 [ 652.290665][T22907] lo speed is unknown, defaulting to 1000 [ 652.458887][T22925] xt_bpf: check failed: parse error [ 652.655588][T22930] macsec0: entered allmulticast mode [ 652.679910][T22930] veth1_macvtap: entered allmulticast mode [ 652.697488][T22930] macsec0: left allmulticast mode [ 652.702601][T22930] veth1_macvtap: left allmulticast mode [ 653.145087][T22955] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 653.186000][T22962] __nla_validate_parse: 6 callbacks suppressed [ 653.186023][T22962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4356'. [ 653.431413][T22967] lo speed is unknown, defaulting to 1000 [ 653.519508][T22973] dvmrp8: entered allmulticast mode [ 653.529924][T22967] lo speed is unknown, defaulting to 1000 [ 653.680574][T22976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4360'. [ 653.714721][T22973] lo speed is unknown, defaulting to 1000 [ 653.942181][T22979] netlink: 'syz.0.4361': attribute type 3 has an invalid length. [ 654.116859][T22973] lo speed is unknown, defaulting to 1000 [ 655.237403][T23004] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4366'. [ 655.360060][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 655.370454][T23009] lo speed is unknown, defaulting to 1000 [ 655.386334][T23009] lo speed is unknown, defaulting to 1000 [ 655.552473][T23014] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4370'. [ 655.588689][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4370'. [ 656.840123][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4381'. [ 656.850549][T23059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4381'. [ 656.886217][T23053] lo speed is unknown, defaulting to 1000 [ 656.908981][T23051] lo speed is unknown, defaulting to 1000 [ 656.919138][T23053] lo speed is unknown, defaulting to 1000 [ 656.956292][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4382'. [ 656.998877][T23063] bridge0: entered promiscuous mode [ 657.019786][T23063] macsec1: entered allmulticast mode [ 657.034074][T23063] bridge0: entered allmulticast mode [ 657.051271][T23063] bridge0: port 3(macsec1) entered blocking state [ 657.068879][T23063] bridge0: port 3(macsec1) entered disabled state [ 657.089191][T23063] bridge0: left allmulticast mode [ 657.109390][T23063] bridge0: left promiscuous mode [ 657.287700][T23051] lo speed is unknown, defaulting to 1000 [ 657.349071][T23079] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4389'. [ 657.512499][T23084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4390'. [ 657.520923][T23083] netlink: 'syz.5.4391': attribute type 3 has an invalid length. [ 657.543876][T23083] netlink: 'syz.5.4391': attribute type 2 has an invalid length. [ 657.911779][T23106] tipc: Enabled bearer , priority 0 [ 657.940964][T23105] netlink: 'syz.1.4396': attribute type 9 has an invalid length. [ 657.955681][T23102] syzkaller0: entered promiscuous mode [ 657.961223][T23102] syzkaller0: entered allmulticast mode [ 658.278485][T23105] tipc: Resetting bearer [ 658.301764][T23105] tipc: Disabling bearer [ 658.331246][T23115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 658.457679][T23114] lo speed is unknown, defaulting to 1000 [ 658.476736][T23114] lo speed is unknown, defaulting to 1000 [ 658.560046][T23120] __nla_validate_parse: 6 callbacks suppressed [ 658.560067][T23120] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4400'. [ 658.698865][T23130] netlink: 'syz.0.4402': attribute type 13 has an invalid length. [ 658.707123][T23130] netlink: 'syz.0.4402': attribute type 17 has an invalid length. [ 659.093772][T23120] bond0 (unregistering): Released all slaves [ 659.266106][T23130] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.359131][T23130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.393362][T10920] lo speed is unknown, defaulting to 1000 [ 659.399302][T10920] syz0: Port: 1 Link ACTIVE [ 659.707196][T23146] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4407'. [ 659.813004][T23148] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 659.842827][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4408'. [ 659.918262][T23148] sch_fq: defrate 0 ignored. [ 660.029024][T23161] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4411'. [ 660.124524][T23164] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 660.276861][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4415'. [ 660.381618][T23176] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 660.596229][T23190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4421'. [ 660.864479][T23202] lo speed is unknown, defaulting to 1000 [ 660.880977][T23202] lo speed is unknown, defaulting to 1000 [ 660.915325][T23205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4425'. [ 661.554526][T23220] lo speed is unknown, defaulting to 1000 [ 661.562193][T23220] lo speed is unknown, defaulting to 1000 [ 661.946227][T23222] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.954178][T23222] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.134940][T23222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.155658][T23222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.401243][T21224] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.427986][T10225] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.469307][T10225] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.486246][T10225] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.522742][T23235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4434'. [ 662.596375][T23235] 8021q: VLANs not supported on ipvlan1 [ 662.765110][T23250] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4437'. [ 662.837576][T23254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4439'. [ 662.874430][T23254] netlink: 'syz.0.4439': attribute type 4 has an invalid length. [ 662.992634][T23256] netlink: 'syz.1.4440': attribute type 3 has an invalid length. [ 663.530908][T23268] lo speed is unknown, defaulting to 1000 [ 663.539539][T23268] lo speed is unknown, defaulting to 1000 [ 663.679018][T23275] lo speed is unknown, defaulting to 1000 [ 664.030293][T23275] lo speed is unknown, defaulting to 1000 [ 664.142349][T23282] __nla_validate_parse: 2 callbacks suppressed [ 664.142370][T23282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4447'. [ 664.199106][T23285] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4447'. [ 664.839953][T23301] 8021q: VLANs not supported on nlmon0 [ 665.027447][T23305] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4453'. [ 665.430989][T23307] sctp: [Deprecated]: syz.5.4454 (pid 23307) Use of int in max_burst socket option. [ 665.430989][T23307] Use struct sctp_assoc_value instead [ 665.607877][T23311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4455'. [ 665.635641][T23311] netlink: 'syz.5.4455': attribute type 7 has an invalid length. [ 665.654003][T23311] netlink: 'syz.5.4455': attribute type 8 has an invalid length. [ 665.674193][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4455'. [ 665.714130][T23311] bond0: entered promiscuous mode [ 665.728190][T23311] bond_slave_0: entered promiscuous mode [ 665.742352][T23311] bond_slave_1: entered promiscuous mode [ 665.764901][T23311] ip6gretap0: entered promiscuous mode [ 665.783314][T23311] erspan0: entered promiscuous mode [ 665.825113][T23311] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 665.856484][T23311] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 665.877150][T23311] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 665.988906][T23318] lo speed is unknown, defaulting to 1000 [ 666.036378][T23318] lo speed is unknown, defaulting to 1000 [ 666.176780][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 666.178019][T23315] lo speed is unknown, defaulting to 1000 [ 666.190454][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 666.204233][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 666.214809][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 666.227600][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.304362][T23332] lo speed is unknown, defaulting to 1000 [ 666.483308][T23315] lo speed is unknown, defaulting to 1000 [ 666.607233][T23352] tipc: Resetting bearer [ 666.899488][T23332] lo speed is unknown, defaulting to 1000 [ 666.907386][T23352] tipc: Resetting bearer [ 667.076543][T10225] tipc: Resetting bearer [ 667.599509][T23373] lo speed is unknown, defaulting to 1000 [ 667.653383][T23373] lo speed is unknown, defaulting to 1000 [ 667.927989][T23379] tipc: Started in network mode [ 667.962100][T23379] tipc: Node identity 2abfb94a6032, cluster identity 4711 [ 667.988624][T23379] tipc: Enabled bearer , priority 0 [ 668.036579][T23381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4473'. [ 668.055734][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4473'. [ 668.261112][T23385] syzkaller0: entered promiscuous mode [ 668.272056][T23385] syzkaller0: entered allmulticast mode [ 668.304145][ T5866] Bluetooth: hci6: command tx timeout [ 668.312880][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4472'. [ 668.379707][T23388] netlink: 'syz.4.4474': attribute type 21 has an invalid length. [ 668.388361][T23377] tipc: Resetting bearer [ 668.408207][T23377] tipc: Disabling bearer [ 668.433384][T23388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4474'. [ 668.691472][T23332] chnl_net:caif_netlink_parms(): no params data found [ 668.739870][T23395] netlink: 'syz.5.4476': attribute type 2 has an invalid length. [ 668.878151][ T30] audit: type=1800 audit(1759197571.877:8): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4478" name="memory.events" dev="tmpfs" ino=1878 res=0 errno=0 [ 668.929316][T23411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4479'. [ 669.181030][T23332] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.189119][T23332] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.197281][T23332] bridge_slave_0: entered allmulticast mode [ 669.205911][T23332] bridge_slave_0: entered promiscuous mode [ 669.215727][T23332] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.223016][T23332] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.231767][T23332] bridge_slave_1: entered allmulticast mode [ 669.243331][T23332] bridge_slave_1: entered promiscuous mode [ 669.345689][T23430] tipc: Enabling of bearer rejected, failed to enable media [ 669.361675][T23332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.394188][T23332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.502265][T23427] lo speed is unknown, defaulting to 1000 [ 669.511848][T23332] team0: Port device team_slave_0 added [ 669.530802][T23427] lo speed is unknown, defaulting to 1000 [ 669.547146][T23332] team0: Port device team_slave_1 added [ 669.707599][T23332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.717275][T23332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.760217][T23332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.782755][T23332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.793224][T23332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.823406][T23332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.919312][T23438] lo speed is unknown, defaulting to 1000 [ 669.996092][T23438] lo speed is unknown, defaulting to 1000 [ 670.319063][T23332] hsr_slave_0: entered promiscuous mode [ 670.328545][T23332] hsr_slave_1: entered promiscuous mode [ 670.344773][T23332] debugfs: 'hsr0' already exists in 'hsr' [ 670.353734][T23332] Cannot create hsr debugfs directory [ 670.384156][ T5866] Bluetooth: hci6: command tx timeout [ 670.549166][T23460] rdma_rxe: rxe_newlink: failed to add lo [ 671.358962][T23332] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 671.400550][T23332] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 671.422322][T23332] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 671.488428][T23332] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 671.642847][T23332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.681927][T23332] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.705423][T21224] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.712660][T21224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.731442][T21220] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.738644][T21220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.750623][T23506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.906516][T23510] lo speed is unknown, defaulting to 1000 [ 671.915110][T23510] lo speed is unknown, defaulting to 1000 [ 672.351155][T23332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.465322][ T5866] Bluetooth: hci6: command tx timeout [ 672.741825][T23538] tipc: Enabling of bearer rejected, failed to enable media [ 672.759363][T23540] netlink: 'syz.5.4511': attribute type 1 has an invalid length. [ 673.129234][T23545] bond1: (slave gretap1): making interface the new active one [ 673.164671][T23545] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 673.187405][T23538] syzkaller0: entered promiscuous mode [ 673.202206][T23538] syzkaller0: entered allmulticast mode [ 673.340442][T23546] lo speed is unknown, defaulting to 1000 [ 673.356727][T23546] lo speed is unknown, defaulting to 1000 [ 673.390209][T23559] netlink: 'syz.4.4513': attribute type 13 has an invalid length. [ 673.426056][T23559] netlink: 'syz.4.4513': attribute type 17 has an invalid length. [ 673.493489][T23559] gretap0: left promiscuous mode [ 673.571136][T23559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.668077][T23559] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.691589][T23559] 0ªX¹¦À: left allmulticast mode [ 673.703989][T23559] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 673.722458][ T5975] lo speed is unknown, defaulting to 1000 [ 673.723460][T23332] veth0_vlan: entered promiscuous mode [ 673.734546][ T5975] syz2: Port: 1 Link ACTIVE [ 673.788826][T23332] veth1_vlan: entered promiscuous mode [ 673.867096][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4518'. [ 673.902408][T23332] veth0_macvtap: entered promiscuous mode [ 673.930675][T23332] veth1_macvtap: entered promiscuous mode [ 674.016778][T23332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.046223][T23332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.284912][T21220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.304675][T21220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.331867][T21220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.354440][T21220] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.546927][ T5866] Bluetooth: hci6: command tx timeout [ 674.639585][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.660436][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.799114][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.809046][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.932681][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4530'. [ 675.095021][T23617] netlink: del zone limit has 8 unknown bytes [ 675.203898][T23621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4533'. [ 675.627616][T23640] tipc: Enabling of bearer rejected, already enabled [ 675.708268][T23640] tipc: Resetting bearer [ 675.907191][T23642] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.915243][T23642] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.089437][T23642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.109354][T23642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.288387][T10225] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.305974][T10225] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.324857][T10225] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.336451][T10225] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.384919][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4546'. [ 676.718523][T23692] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4552'. [ 676.767671][T23692] netlink: zone id is out of range [ 676.779943][T23692] netlink: zone id is out of range [ 676.794033][T23692] netlink: zone id is out of range [ 676.807046][T23692] netlink: zone id is out of range [ 676.820769][T23692] netlink: zone id is out of range [ 676.834937][T23692] netlink: zone id is out of range [ 676.849128][T23692] netlink: zone id is out of range [ 676.866686][T23692] netlink: zone id is out of range [ 676.899224][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4554'. [ 676.901374][T23704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4555'. [ 677.020319][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4555'. [ 677.116712][T23702] team0 (unregistering): Port device team_slave_0 removed [ 677.128036][T23702] team0 (unregistering): Port device team_slave_1 removed [ 677.160842][T23708] tipc: Enabling of bearer rejected, already enabled [ 677.387468][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4557'. [ 677.640090][T23723] lo speed is unknown, defaulting to 1000 [ 677.665691][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4561'. [ 677.684493][T23723] lo speed is unknown, defaulting to 1000 [ 677.962763][T23747] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 677.978265][T23747] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 677.988626][T23747] netlink: 'syz.1.4565': attribute type 2 has an invalid length. [ 677.996781][T23747] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 678.501039][T23771] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 678.851714][T23784] netlink: 'syz.4.4577': attribute type 29 has an invalid length. [ 678.867069][T23784] netlink: 'syz.4.4577': attribute type 29 has an invalid length. [ 678.898845][T23785] lo speed is unknown, defaulting to 1000 [ 678.906789][T23785] lo speed is unknown, defaulting to 1000 [ 679.300511][T23797] __nla_validate_parse: 8 callbacks suppressed [ 679.300535][T23797] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4577'. [ 679.317732][T23784] netlink: 'syz.4.4577': attribute type 29 has an invalid length. [ 679.919271][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4587'. [ 680.192112][T23831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4589'. [ 680.249420][T23834] netlink: 'syz.0.4590': attribute type 1 has an invalid length. [ 680.251812][T23835] netlink: 'syz.5.4591': attribute type 1 has an invalid length. [ 680.272810][T23834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4590'. [ 680.295433][T23830] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4588'. [ 680.330046][T23830] batadv1: entered promiscuous mode [ 680.337090][T23830] batadv1: entered allmulticast mode [ 680.621438][T23854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4595'. [ 680.774718][T23869] lo speed is unknown, defaulting to 1000 [ 680.782572][T23869] lo speed is unknown, defaulting to 1000 [ 680.981135][T23874] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4600'. [ 681.061631][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'. [ 681.218228][T23879] net_ratelimit: 5 callbacks suppressed [ 681.218249][T23879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.225897][T23881] vlan3: entered allmulticast mode [ 681.238692][T23881] bridge_slave_0: entered allmulticast mode [ 681.541261][T23890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4604'. [ 681.558628][T23892] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 681.592037][T23892] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 681.976292][T23912] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4612'. [ 682.933595][T23951] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 682.959626][T23951] dvmrp1: linktype set to 774 [ 683.052309][T23960] ipvlan0: entered promiscuous mode [ 683.060638][T23960] ipvlan0: left promiscuous mode [ 683.757147][T23991] lo speed is unknown, defaulting to 1000 [ 683.771106][T23991] lo speed is unknown, defaulting to 1000 [ 684.878117][T24018] __nla_validate_parse: 7 callbacks suppressed [ 684.878140][T24018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4648'. [ 684.929521][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 684.952545][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 684.978206][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 685.002905][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 685.041526][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 685.068571][T24022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4638'. [ 685.147162][T24024] bond0: entered allmulticast mode [ 685.316806][T24033] vlan2: entered promiscuous mode [ 685.329658][T24033] veth1: entered promiscuous mode [ 685.422126][T24039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4645'. [ 685.442122][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4645'. [ 685.457820][T24039] netlink: 'syz.1.4645': attribute type 2 has an invalid length. [ 685.468497][T24039] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 685.478769][T24039] netlink: 'syz.1.4645': attribute type 2 has an invalid length. [ 685.498275][T24041] lo speed is unknown, defaulting to 1000 [ 685.541216][T24041] lo speed is unknown, defaulting to 1000 [ 685.739569][T24051] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4646'. [ 685.907064][T24062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.071388][T24070] netlink: 'syz.4.4653': attribute type 1 has an invalid length. [ 686.081490][T24070] netlink: 'syz.4.4653': attribute type 3 has an invalid length. [ 686.090526][T24070] netlink: 'syz.4.4653': attribute type 1 has an invalid length. [ 686.116462][T24070] NCSI netlink: No device for ifindex 0 [ 686.186084][T24073] netlink: 'syz.6.4652': attribute type 4 has an invalid length. [ 686.272594][T24060] bridge_slave_1: left allmulticast mode [ 686.296103][T24060] bridge_slave_1: left promiscuous mode [ 686.312560][T24060] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.347930][T24060] bridge_slave_0: left allmulticast mode [ 686.375433][T24060] bridge_slave_0: left promiscuous mode [ 686.381321][T24060] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.591342][T24066] veth1_macvtap: left promiscuous mode [ 686.620822][T24086] netlink: 'syz.1.4656': attribute type 13 has an invalid length. [ 686.632046][T24086] netlink: 'syz.1.4656': attribute type 17 has an invalid length. [ 686.828413][T24086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.259058][T24119] vlan2: entered allmulticast mode [ 687.292002][T24119] bridge_slave_0: entered allmulticast mode [ 687.640633][T20385] IPVS: starting estimator thread 0... [ 687.657111][T24132] netlink: 'syz.4.4668': attribute type 3 has an invalid length. [ 687.659174][T24136] syz_tun: refused to change device tx_queue_len [ 687.794249][T24139] IPVS: using max 27 ests per chain, 64800 per kthread [ 687.938463][T24148] lo speed is unknown, defaulting to 1000 [ 688.016452][T24155] : entered promiscuous mode [ 688.024166][T24148] lo speed is unknown, defaulting to 1000 [ 688.052568][T24158] syzkaller1: entered allmulticast mode [ 688.098568][T24164] sctp: [Deprecated]: syz.1.4677 (pid 24164) Use of int in max_burst socket option deprecated. [ 688.098568][T24164] Use struct sctp_assoc_value instead [ 688.151558][T24166] tipc: Resetting bearer [ 688.224374][T24171] tipc: Resetting bearer [ 688.525912][T21199] tipc: Resetting bearer [ 688.635643][T24175] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 689.512737][T24223] syz_tun: entered allmulticast mode [ 689.553029][T24223] dvmrp8: entered allmulticast mode [ 689.676237][T24223] lo speed is unknown, defaulting to 1000 [ 689.689067][T24207] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 689.704209][T24223] lo speed is unknown, defaulting to 1000 [ 689.704330][T24207] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 689.944814][T24207] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 689.950803][T24207] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 690.188167][T24247] __nla_validate_parse: 9 callbacks suppressed [ 690.188191][T24247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4695'. [ 690.189782][T24217] syz_tun: left allmulticast mode [ 690.233269][T24217] dvmrp8: left allmulticast mode [ 690.353168][T24253] veth0: entered promiscuous mode [ 690.401884][T24253] veth0: left promiscuous mode [ 690.637153][T24270] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4700'. [ 690.719887][T24275] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4703'. [ 690.821179][T24272] lo speed is unknown, defaulting to 1000 [ 690.846185][T24272] lo speed is unknown, defaulting to 1000 [ 691.282736][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4709'. [ 691.382144][T24300] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 691.609372][T24304] macsec0: entered promiscuous mode [ 691.615966][T24304] macsec0: entered allmulticast mode [ 691.621957][T24303] lo speed is unknown, defaulting to 1000 [ 691.629250][T24304] veth1_macvtap: entered promiscuous mode [ 691.636319][T24304] veth1_macvtap: entered allmulticast mode [ 691.642400][T24304] macsec0: left promiscuous mode [ 691.648771][T24304] macsec0: left allmulticast mode [ 691.664880][T24304] veth1_macvtap: left allmulticast mode [ 691.892965][T24303] lo speed is unknown, defaulting to 1000 [ 692.059919][T24315] lo speed is unknown, defaulting to 1000 [ 692.137126][T24319] tipc: Resetting bearer [ 692.181536][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4715'. [ 692.204244][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4715'. [ 692.368207][T24319] veth1: entered promiscuous mode [ 692.413932][T24319] veth1: left promiscuous mode [ 692.507940][T24318] tipc: Resetting bearer [ 692.517400][T24315] lo speed is unknown, defaulting to 1000 [ 692.759927][T24332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4718'. [ 693.082726][T24341] validate_nla: 2 callbacks suppressed [ 693.082748][T24341] netlink: 'syz.1.4720': attribute type 13 has an invalid length. [ 693.110233][T24341] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4720'. [ 693.199023][T10219] tipc: Resetting bearer [ 693.729973][T24348] openvswitch: netlink: Message has 8 unknown bytes. [ 694.040568][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4725'. [ 694.068511][T24359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4725'. [ 694.094099][T24359] netlink: 'syz.0.4725': attribute type 5 has an invalid length. [ 694.109586][T24359] netlink: 'syz.0.4725': attribute type 6 has an invalid length. [ 695.461973][T24417] __nla_validate_parse: 3 callbacks suppressed [ 695.462027][T24417] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4737'. [ 695.487340][T24415] lo speed is unknown, defaulting to 1000 [ 695.499471][T24415] lo speed is unknown, defaulting to 1000 [ 695.521694][T24419] tipc: Enabled bearer , priority 0 [ 695.530002][T24419] syzkaller0: entered promiscuous mode [ 695.550105][T24419] syzkaller0: entered allmulticast mode [ 695.647125][T24419] tipc: Resetting bearer [ 695.939605][T24431] bridge1: entered promiscuous mode [ 695.945848][T24431] bridge1: entered allmulticast mode [ 695.959394][T24420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4739'. [ 696.374025][T24418] tipc: Resetting bearer [ 696.494580][T24418] tipc: Disabling bearer [ 696.541842][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4751'. [ 696.846053][T24476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4756'. [ 696.934703][T24474] netlink: 'syz.0.4755': attribute type 10 has an invalid length. [ 696.952291][T24474] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 697.128280][T24490] IPVS: length: 228 != 8 [ 697.231282][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4763'. [ 697.264958][T24495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4763'. [ 697.312230][T24495] geneve2: entered promiscuous mode [ 697.337213][T24495] geneve2: entered allmulticast mode [ 697.348403][ T3537] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.365495][ T3537] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.385711][ T3537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.404284][ T3537] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.425187][T24507] netlink: 'syz.0.4767': attribute type 6 has an invalid length. [ 697.510294][T24512] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4768'. [ 697.547120][T24516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4770'. [ 697.568442][T24512] netlink: 'syz.6.4768': attribute type 16 has an invalid length. [ 697.591584][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4768'. [ 697.637521][T24512] netlink: 828 bytes leftover after parsing attributes in process `syz.6.4768'. [ 698.032262][T24526] lo speed is unknown, defaulting to 1000 [ 698.066087][T24526] lo speed is unknown, defaulting to 1000 [ 698.307311][T24549] netlink: 'syz.6.4779': attribute type 1 has an invalid length. [ 698.359673][T24549] bond1: entered promiscuous mode [ 698.367477][T24549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.927869][T24651] lo speed is unknown, defaulting to 1000 [ 700.970322][T24657] __nla_validate_parse: 5 callbacks suppressed [ 700.970345][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4808'. [ 700.986642][T24651] lo speed is unknown, defaulting to 1000 [ 701.701954][T24680] dummy0: left allmulticast mode [ 701.756083][T24680] dummy0: left promiscuous mode [ 701.761326][T24680] bridge0: port 3(dummy0) entered disabled state [ 701.807308][T24680] bond0: (slave batadv0): Releasing backup interface [ 701.849606][T24680] bridge_slave_0: left promiscuous mode [ 701.875660][T24680] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.027969][T24680] bridge_slave_1: left allmulticast mode [ 702.034294][T24680] bridge_slave_1: left promiscuous mode [ 702.040215][T24680] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.109042][T24680] bond0: (slave bond_slave_0): Releasing backup interface [ 702.154499][T24680] bond0: (slave bond_slave_1): Releasing backup interface [ 702.179151][T24695] netlink: 308 bytes leftover after parsing attributes in process `syz.0.4819'. [ 702.197830][T24680] team0: Port device team_slave_0 removed [ 702.235110][T24680] team0: Port device team_slave_1 removed [ 702.253016][T24680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.316792][T24680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.534925][T24704] tipc: Resetting bearer [ 702.558419][T24704] siw: device registration error -23 [ 702.570502][T24707] netlink: 'syz.4.4823': attribute type 21 has an invalid length. [ 702.585381][T24703] tipc: Resetting bearer [ 702.622544][T24707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4823'. [ 702.782882][T24709] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 703.029419][T24725] ip6gre1: entered allmulticast mode [ 703.035134][T24724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4828'. [ 703.082329][T24727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 703.099711][T24727] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4829'. [ 703.191066][T24733] netlink: 'syz.4.4831': attribute type 29 has an invalid length. [ 703.247504][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4830'. [ 703.358097][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4833'. [ 703.385322][T24742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4833'. [ 703.431673][T24753] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4834'. [ 703.527448][T24758] syz_tun: entered allmulticast mode [ 703.545046][T24758] dvmrp8: entered allmulticast mode [ 703.589942][T10219] tipc: Resetting bearer [ 703.661384][T24762] tipc: Started in network mode [ 703.668025][T24762] tipc: Node identity 3ee34a01e0ca, cluster identity 4711 [ 703.682500][T24762] tipc: Enabled bearer , priority 0 [ 703.693554][T24762] syzkaller0: entered promiscuous mode [ 703.700256][T24762] syzkaller0: entered allmulticast mode [ 703.737229][T24762] tipc: Resetting bearer [ 703.779673][T24761] tipc: Resetting bearer [ 703.809610][T24761] tipc: Disabling bearer [ 704.476146][T24802] tipc: New replicast peer: 0.0.0.0 [ 704.483173][T24802] tipc: Enabled bearer , priority 10 [ 704.494601][T24802] tipc: New replicast peer: 255.255.255.255 [ 704.600664][T24813] netlink: 'syz.1.4856': attribute type 7 has an invalid length. [ 704.883418][T24825] netlink: 'syz.6.4858': attribute type 10 has an invalid length. [ 704.892512][T24825] bond0: (slave wlan1): Opening slave failed [ 704.971730][T24829] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 704.991432][T24833] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 705.320531][T24852] tipc: Resetting bearer [ 705.333796][T24845] netlink: 'syz.5.4866': attribute type 1 has an invalid length. [ 705.476521][T24851] tipc: Resetting bearer [ 705.527383][T24860] netlink: 'syz.5.4872': attribute type 1 has an invalid length. [ 705.670905][T21232] tipc: Resetting bearer [ 705.741035][T24867] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 706.131791][T24889] 8021q: VLANs not supported on sit0 [ 706.870679][T24915] lo speed is unknown, defaulting to 1000 [ 706.914652][T24919] __nla_validate_parse: 15 callbacks suppressed [ 706.914673][T24919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4886'. [ 706.943276][T24915] lo speed is unknown, defaulting to 1000 [ 707.054373][T24911] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.056417][ T44] IPVS: starting estimator thread 0... [ 707.156577][T24916] lo speed is unknown, defaulting to 1000 [ 707.174642][T24925] tipc: Cannot configure node identity twice [ 707.244339][T24924] IPVS: using max 27 ests per chain, 64800 per kthread [ 707.257711][T24922] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 707.304700][T24922] syzkaller1: linktype set to 778 [ 707.359182][T24929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 707.494240][T24916] lo speed is unknown, defaulting to 1000 [ 707.543562][T24935] tipc: Enabled bearer , priority 0 [ 707.576040][T24935] syzkaller0: entered promiscuous mode [ 707.581606][T24935] syzkaller0: entered allmulticast mode [ 707.770612][T24941] tap0: tun_chr_ioctl cmd 1074025680 [ 707.785530][T24946] tipc: Resetting bearer [ 707.797829][T24938] lo speed is unknown, defaulting to 1000 [ 707.798114][T24939] tipc: Enabled bearer , priority 0 [ 707.846235][T24941] D: renamed from syzkaller0 [ 707.867728][T24941] tipc: Disabling bearer [ 707.988809][T24938] lo speed is unknown, defaulting to 1000 [ 708.369023][T24956] lo speed is unknown, defaulting to 1000 [ 708.413468][T24956] lo speed is unknown, defaulting to 1000 [ 708.415980][T24968] tipc: Enabled bearer , priority 0 [ 708.437963][T24968] syzkaller0: entered promiscuous mode [ 708.455827][T24968] syzkaller0: entered allmulticast mode [ 708.492101][T24971] netlink: 'syz.4.4899': attribute type 1 has an invalid length. [ 708.500444][T24971] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4899'. [ 708.585694][T24968] syzkaller0: mtu less than device minimum [ 708.602701][T24966] tipc: Resetting bearer [ 708.679028][T24966] tipc: Disabling bearer [ 709.908685][T25010] lo speed is unknown, defaulting to 1000 [ 709.919461][T25010] lo speed is unknown, defaulting to 1000 [ 710.041816][T25014] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4910'. [ 710.175949][T25019] geneve2: entered promiscuous mode [ 710.231033][T21207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.247195][T21207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.293475][T21207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.334354][T21207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.452370][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4917'. [ 710.776401][T25052] netlink: 'syz.6.4923': attribute type 1 has an invalid length. [ 710.785035][T25052] netlink: 600 bytes leftover after parsing attributes in process `syz.6.4923'. [ 710.917548][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4925'. [ 710.952088][T25063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4925'. [ 711.486992][T25083] batadv3: entered promiscuous mode [ 711.516947][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4932'. [ 711.542551][T25086] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 712.016521][T25104] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 712.034376][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4938'. [ 712.292820][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4941'. [ 712.327624][T25123] netlink: 'syz.0.4942': attribute type 9 has an invalid length. [ 712.514148][T25127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.562048][T25132] lo: entered allmulticast mode [ 712.574699][T25137] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4948'. [ 712.595021][T25136] lo: left allmulticast mode [ 712.604916][T25137] block nbd0: reconnected socket [ 712.703172][ T5866] block nbd0: Receive control failed (result -32) [ 712.732051][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'. [ 712.742212][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 712.760601][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'. [ 712.790345][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 712.798448][T25148] lo speed is unknown, defaulting to 1000 [ 712.807810][T25148] lo speed is unknown, defaulting to 1000 [ 713.015538][T25161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4954'. [ 713.124144][T25161] team0: entered promiscuous mode [ 713.129504][T25161] team0: entered allmulticast mode [ 713.161673][T25161] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.236218][T25165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4956'. [ 713.357879][T25168] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4958'. [ 713.512428][T25162] lo speed is unknown, defaulting to 1000 [ 713.600148][T25169] lo speed is unknown, defaulting to 1000 [ 713.702260][T25162] lo speed is unknown, defaulting to 1000 [ 713.726335][T25175] lo speed is unknown, defaulting to 1000 [ 713.740572][T25182] netlink: 'syz.4.4959': attribute type 1 has an invalid length. [ 713.861833][T25184] macvlan5: entered promiscuous mode [ 713.867513][T25184] macvlan5: entered allmulticast mode [ 713.874705][T25184] bond12: entered promiscuous mode [ 713.880800][T25184] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 713.903347][T25184] bond12: left promiscuous mode [ 714.175877][T25189] bond0: entered promiscuous mode [ 714.182834][T25189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.192241][T25190] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 714.229749][T25169] lo speed is unknown, defaulting to 1000 [ 714.617098][T25175] lo speed is unknown, defaulting to 1000 [ 715.559777][T25220] lo speed is unknown, defaulting to 1000 [ 715.651296][T25220] lo speed is unknown, defaulting to 1000 [ 716.527054][T25245] block nbd2: shutting down sockets [ 716.893322][T25261] netlink: 'syz.4.4983': attribute type 4 has an invalid length. [ 716.941700][T20685] lo speed is unknown, defaulting to 1000 [ 716.949280][T25261] netlink: 'syz.4.4983': attribute type 4 has an invalid length. [ 716.949934][T20685] syz2: Port: 1 Link DOWN [ 717.119399][T20685] lo speed is unknown, defaulting to 1000 [ 717.127761][T20685] syz2: Port: 1 Link ACTIVE [ 717.188382][T25264] __nla_validate_parse: 4 callbacks suppressed [ 717.188406][T25264] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4984'. [ 718.233266][T25325] netlink: 'syz.5.5001': attribute type 13 has an invalid length. [ 718.262584][T25324] tipc: Invalid UDP bearer configuration [ 718.262648][T25324] tipc: Enabling of bearer rejected, failed to enable media [ 718.517184][T25335] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 718.822648][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5009'. [ 718.957751][T25350] syzkaller1: entered promiscuous mode [ 718.964572][T25350] syzkaller1: entered allmulticast mode [ 718.985292][T25348] lo speed is unknown, defaulting to 1000 [ 719.052004][T25348] lo speed is unknown, defaulting to 1000 [ 719.234152][T25365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5014'. [ 719.647683][T25386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5018'. [ 720.049580][T25392] lo speed is unknown, defaulting to 1000 [ 720.109622][T25392] lo speed is unknown, defaulting to 1000 [ 720.115094][T25394] lo speed is unknown, defaulting to 1000 [ 720.292717][T25404] lo speed is unknown, defaulting to 1000 [ 720.455193][T25394] lo speed is unknown, defaulting to 1000 [ 720.467986][T25414] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5024'. [ 720.632921][T25417] veth1_to_batadv: entered allmulticast mode [ 720.654920][T25417] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 721.083114][T25404] lo speed is unknown, defaulting to 1000 [ 721.371643][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5032'. [ 721.509783][T25432] lo speed is unknown, defaulting to 1000 [ 721.546445][T25432] lo speed is unknown, defaulting to 1000 [ 721.573945][T25449] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 721.600567][T25449] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 721.609980][T25449] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 721.648787][T25453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5034'. [ 721.747275][T25453] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.977897][T25459] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5035'. [ 722.435412][T25450] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 722.453469][T25450] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 722.467069][T25450] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 723.338263][T25494] lo speed is unknown, defaulting to 1000 [ 723.349392][T25494] lo speed is unknown, defaulting to 1000 [ 723.560958][T25497] netlink: 'syz.6.5044': attribute type 39 has an invalid length. [ 723.940114][T25511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5046'. [ 724.383546][T25528] netlink: 'syz.1.5054': attribute type 1 has an invalid length. [ 724.407665][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5056'. [ 724.601758][T25541] macsec0: entered allmulticast mode [ 724.615138][T25533] lo speed is unknown, defaulting to 1000 [ 724.615471][T25543] veth1_macvtap: entered allmulticast mode [ 724.701018][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5058'. [ 724.734595][T25543] macsec0: left allmulticast mode [ 724.749780][T25543] veth1_macvtap: left allmulticast mode [ 724.810038][T25533] lo speed is unknown, defaulting to 1000 [ 724.874480][T25550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5059'. [ 725.585790][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5066'. [ 725.664266][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 725.674110][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5068'. [ 726.275892][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5073'. [ 726.317566][T25598] openvswitch: netlink: Message has 8 unknown bytes. [ 726.358514][T25598] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 726.618965][T25610] netlink: 'syz.4.5078': attribute type 10 has an invalid length. [ 726.658724][T25610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.694294][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5076'. [ 726.702128][T25610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 726.750215][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 726.934906][T25628] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 726.959217][T25626] tipc: Enabling of bearer rejected, already enabled [ 727.512805][T25658] bridge5: entered allmulticast mode [ 727.540491][T25660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.565689][T25658] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 727.681656][T25667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.700645][T25711] netlink: 'syz.6.5108': attribute type 1 has an invalid length. [ 728.719616][T25711] NCSI netlink: No device for ifindex 813332851 [ 728.831287][T25718] netlink: 'syz.4.5109': attribute type 7 has an invalid length. [ 728.950095][T25724] __nla_validate_parse: 11 callbacks suppressed [ 728.950118][T25724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5112'. [ 728.979994][T25724] openvswitch: netlink: Flow key attr not present in new flow. [ 729.067956][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5114'. [ 729.100216][T25735] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 729.110052][T25735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5116'. [ 729.134126][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5116'. [ 729.171339][T25735] veth1_to_bond: entered allmulticast mode [ 729.206569][T25735] veth1_to_bond: entered promiscuous mode [ 729.217515][T25733] veth1_to_bond: left promiscuous mode [ 729.218299][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'. [ 729.224394][T25733] veth1_to_bond: left allmulticast mode [ 729.851656][T25771] tipc: Resetting bearer [ 729.896546][T25771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5125'. [ 729.996226][T25768] tipc: Resetting bearer [ 730.177505][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'. [ 730.192599][T25782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5130'. [ 730.208234][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5129'. [ 730.216076][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'. [ 730.257746][T10219] tipc: Resetting bearer [ 730.478277][T25794] bond0: Caught tx_queue_len zero misconfig [ 730.710612][T25817] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 731.150289][T25845] sctp: [Deprecated]: syz.0.5147 (pid 25845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.150289][T25845] Use struct sctp_sack_info instead [ 731.385813][T25856] block nbd2: server does not support multiple connections per device. [ 731.405343][T25856] block nbd2: shutting down sockets [ 731.461853][T25865] !: renamed from dummy0 [ 731.624027][T10920] IPVS: starting estimator thread 0... [ 731.632393][T25874] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 731.701251][T25867] lo speed is unknown, defaulting to 1000 [ 731.719169][T25876] IPVS: using max 27 ests per chain, 64800 per kthread [ 731.746482][T25867] lo speed is unknown, defaulting to 1000 [ 732.068111][T25909] netlink: 'syz.1.5160': attribute type 3 has an invalid length. [ 732.260391][T25913] lo speed is unknown, defaulting to 1000 [ 732.593306][T25913] lo speed is unknown, defaulting to 1000 [ 732.662081][T25930] lo speed is unknown, defaulting to 1000 [ 732.987766][T25930] lo speed is unknown, defaulting to 1000 [ 733.329709][T25938] tipc: Resetting bearer [ 733.550390][T25938] tipc: Resetting bearer [ 733.733229][T25947] lo speed is unknown, defaulting to 1000 [ 733.743756][T25947] lo speed is unknown, defaulting to 1000 [ 734.054409][T25960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 734.107351][T25957] __nla_validate_parse: 13 callbacks suppressed [ 734.107375][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5170'. [ 734.158503][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 734.238244][T25956] lo speed is unknown, defaulting to 1000 [ 734.261913][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5173'. [ 734.315133][T25956] lo speed is unknown, defaulting to 1000 [ 734.426487][T25969] 8021q: adding VLAN 0 to HW filter on device bond13 [ 734.555961][ T36] tipc: Resetting bearer [ 734.886272][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5178'. [ 735.284948][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5183'. [ 735.632207][T26015] nbd: nbd4 already in use [ 735.649013][T26015] block nbd4: NBD_DISCONNECT [ 735.656743][T26015] block nbd4: Send disconnect failed -32 [ 735.666687][T26015] block nbd4: shutting down sockets [ 735.679091][T26013] lo speed is unknown, defaulting to 1000 [ 735.812917][T26015] bond14: entered promiscuous mode [ 735.833323][T26015] bond14: entered allmulticast mode [ 735.854972][T26015] 8021q: adding VLAN 0 to HW filter on device bond14 [ 735.875663][T26013] lo speed is unknown, defaulting to 1000 [ 735.936630][T26021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5188'. [ 735.974177][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5188'. [ 736.213337][T26035] netlink: 'syz.5.5191': attribute type 12 has an invalid length. [ 736.410973][T26038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5192'. [ 736.421448][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5193'. [ 736.478572][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5193'. [ 736.530127][T26041] netlink: 'syz.4.5193': attribute type 18 has an invalid length. [ 736.669535][T26038] lo speed is unknown, defaulting to 1000 [ 736.710088][T26038] lo speed is unknown, defaulting to 1000 [ 737.732750][T26091] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 738.338217][T26116] netlink: 'syz.1.5217': attribute type 10 has an invalid length. [ 738.390423][T26121] netlink: 'syz.1.5217': attribute type 10 has an invalid length. [ 738.402510][T26114] lo speed is unknown, defaulting to 1000 [ 738.415547][T26121] batadv0: entered promiscuous mode [ 738.421110][T26121] batadv0: entered allmulticast mode [ 738.438455][T26121] bridge0: port 1(batadv0) entered blocking state [ 738.449677][T26121] bridge0: port 1(batadv0) entered disabled state [ 738.503785][T26114] lo speed is unknown, defaulting to 1000 [ 738.844765][T10227] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 738.854338][T10227] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 739.429673][T26139] __nla_validate_parse: 7 callbacks suppressed [ 739.429697][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5222'. [ 739.548644][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5225'. [ 739.584118][ T36] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 739.595076][ T36] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 739.617956][T26143] veth1: entered promiscuous mode [ 739.624870][T26143] netlink: 'syz.6.5225': attribute type 8 has an invalid length. [ 739.632872][T26143] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 739.667609][ T36] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 739.696576][ T36] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 739.825386][T26153] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5228'. [ 739.931111][T26152] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5229'. [ 740.036629][T26162] IPVS: length: 202 != 24 [ 740.082409][T26163] openvswitch: netlink: Message has 8 unknown bytes. [ 740.717841][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5238'. [ 740.719328][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5237'. [ 741.018264][T26199] veth5: entered promiscuous mode [ 741.045622][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5243'. [ 741.161173][T26210] tipc: Enabling of bearer rejected, failed to enable media [ 741.359068][T26219] netlink: 'syz.4.5245': attribute type 12 has an invalid length. [ 741.572885][T26227] lo speed is unknown, defaulting to 1000 [ 741.591498][T26227] lo speed is unknown, defaulting to 1000 [ 741.659640][T26228] lo speed is unknown, defaulting to 1000 [ 741.986495][T26228] lo speed is unknown, defaulting to 1000 [ 742.233167][T26223] mpoa:mpoad_close: () going down [ 742.263198][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5251'. [ 742.471377][T26245] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5254'. [ 742.492646][T26245] netlink: 'syz.4.5254': attribute type 1 has an invalid length. [ 742.550916][T26247] netlink: 'syz.6.5255': attribute type 1 has an invalid length. [ 742.574015][T26245] 8021q: adding VLAN 0 to HW filter on device bond15 [ 742.584988][T26247] netlink: 'syz.6.5255': attribute type 2 has an invalid length. [ 742.651802][T26250] bond15: (slave geneve4): making interface the new active one [ 742.688448][T26250] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 742.722731][T21216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.763810][T21216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.772701][T21216] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.891213][T26252] vlan2: entered promiscuous mode [ 742.896757][T26252] bond0: entered promiscuous mode [ 742.902058][T26252] bond_slave_0: entered promiscuous mode [ 742.908801][T26252] bond_slave_1: entered promiscuous mode [ 742.934142][T21216] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.174308][T26257] lo speed is unknown, defaulting to 1000 [ 743.181871][T26257] lo speed is unknown, defaulting to 1000 [ 743.481124][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5257'. [ 744.577744][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5263'. [ 744.624799][T26292] lo speed is unknown, defaulting to 1000 [ 744.661381][T26292] lo speed is unknown, defaulting to 1000 [ 744.730448][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5265'. [ 744.983042][T26301] lo speed is unknown, defaulting to 1000 [ 745.796142][T26301] lo speed is unknown, defaulting to 1000 [ 746.295502][T26334] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5273'. [ 746.591155][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5275'. [ 746.939911][T26353] pim6reg1: entered promiscuous mode [ 746.946728][T26353] pim6reg1: entered allmulticast mode [ 747.108130][T26359] netlink: 'syz.5.5281': attribute type 3 has an invalid length. [ 747.176075][T26362] bond0: (slave batadv0): Releasing backup interface [ 747.204263][T26362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.310267][T26371] netlink: 'syz.4.5282': attribute type 10 has an invalid length. [ 747.366534][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5282'. [ 747.376248][T26377] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5284'. [ 747.405931][T26373] mac80211_hwsim hwsim60 syzkaller0: Caught tx_queue_len zero misconfig [ 747.446145][T26371] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 747.568554][T10227] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 747.717320][T26382] IPVS: lc: FWM 3 0x00000003 - no destination available [ 747.778409][T26388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5287'. [ 747.834161][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5288'. [ 748.142724][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5290'. [ 748.342087][T26401] "syz.6.5291" (26401) uses obsolete ecb(arc4) skcipher [ 748.351232][T26410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5292'. [ 748.542216][T26419] bond0: Device is already in use. [ 748.631470][T26422] sctp: [Deprecated]: syz.5.5298 (pid 26422) Use of int in max_burst socket option deprecated. [ 748.631470][T26422] Use struct sctp_assoc_value instead [ 748.963488][T26436] lo speed is unknown, defaulting to 1000 [ 749.032159][T26436] lo speed is unknown, defaulting to 1000 [ 749.436882][T26446] batman_adv: batadv0: Adding interface: dummy0 [ 749.443193][T26446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.511562][T26446] batman_adv: batadv0: Interface activated: dummy0 [ 749.771396][T26452] tipc: Enabled bearer , priority 0 [ 749.779316][T26451] syzkaller1: entered promiscuous mode [ 749.786224][T26451] syzkaller1: entered allmulticast mode [ 749.795515][T26452] syzkaller0: entered promiscuous mode [ 749.801046][T26452] syzkaller0: entered allmulticast mode [ 749.988198][T26452] tipc: Resetting bearer [ 750.030758][T26450] tipc: Resetting bearer [ 750.091938][T26450] tipc: Disabling bearer [ 750.317059][T26462] __nla_validate_parse: 3 callbacks suppressed [ 750.317085][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5310'. [ 750.945901][T26478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5315'. [ 751.261353][T26487] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5319'. [ 751.287238][T26489] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.313854][T26490] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.322876][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.354249][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.364454][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.414450][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5318'. [ 751.485204][T26496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5321'. [ 751.869962][T26515] syzkaller0: entered promiscuous mode [ 751.884812][T26515] syzkaller0: entered allmulticast mode [ 752.435690][T26546] netlink: 'syz.6.5340': attribute type 1 has an invalid length. [ 752.453069][T26548] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 752.694739][T19684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 752.707279][T19684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 752.718275][T19684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 752.729766][T19684] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 752.737877][T19684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 752.793441][T26557] lo speed is unknown, defaulting to 1000 [ 752.802819][T26557] lo speed is unknown, defaulting to 1000 [ 753.360227][T26580] netlink: 'syz.1.5351': attribute type 4 has an invalid length. [ 753.398422][T26582] tipc: Bearer : already 2 bearers with priority 10 [ 753.411345][T26580] netlink: 'syz.1.5351': attribute type 4 has an invalid length. [ 753.420302][T26582] tipc: Bearer : trying with adjusted priority [ 753.429402][T26582] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 753.452837][T26557] chnl_net:caif_netlink_parms(): no params data found [ 753.537295][T26585] lo speed is unknown, defaulting to 1000 [ 753.552649][T26585] lo speed is unknown, defaulting to 1000 [ 753.636763][T26557] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.653905][T26557] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.667028][T26557] bridge_slave_0: entered allmulticast mode [ 753.685486][T26557] bridge_slave_0: entered promiscuous mode [ 753.694909][T26557] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.702239][T26557] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.709901][T26557] bridge_slave_1: entered allmulticast mode [ 753.721336][T26557] bridge_slave_1: entered promiscuous mode [ 753.781617][T26557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.799280][T26557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.859945][T26557] team0: Port device team_slave_0 added [ 753.870959][T26557] team0: Port device team_slave_1 added [ 753.940402][T26557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.947790][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.974213][T26557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.994528][T26557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.001552][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.028388][T26557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.152291][T26557] hsr_slave_0: entered promiscuous mode [ 754.162973][T26557] hsr_slave_1: entered promiscuous mode [ 754.185896][T26557] debugfs: 'hsr0' already exists in 'hsr' [ 754.191707][T26557] Cannot create hsr debugfs directory [ 754.557925][T26609] netlink: 'syz.1.5360': attribute type 2 has an invalid length. [ 754.785969][ T5866] Bluetooth: hci7: command tx timeout [ 754.924765][T26617] block nbd2: server does not support multiple connections per device. [ 754.936907][T26617] block nbd2: shutting down sockets [ 754.976466][T26557] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 755.028639][T26557] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 755.061579][T26557] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 755.097110][T26557] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 755.376412][T26557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.423088][T26557] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.448341][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.453719][T26641] syz.6.5369: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 755.455650][T10223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.486132][T26641] CPU: 0 UID: 0 PID: 26641 Comm: syz.6.5369 Not tainted syzkaller #0 PREEMPT(full) [ 755.486166][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 755.486183][T26641] Call Trace: [ 755.486193][T26641] [ 755.486205][T26641] dump_stack_lvl+0x189/0x250 [ 755.486242][T26641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.486269][T26641] ? __pfx__printk+0x10/0x10 [ 755.486318][T26641] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.486347][T26641] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.486376][T26641] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 755.486406][T26641] warn_alloc+0x214/0x310 [ 755.486442][T26641] ? stack_depot_save_flags+0x40/0x860 [ 755.486479][T26641] ? __pfx_warn_alloc+0x10/0x10 [ 755.486516][T26641] ? kasan_save_track+0x4f/0x80 [ 755.486544][T26641] ? xskq_create+0x56/0x170 [ 755.486566][T26641] ? xsk_init_queue+0xb0/0x110 [ 755.486584][T26641] ? xsk_setsockopt+0x4dc/0x8d0 [ 755.486617][T26641] ? do_sock_setsockopt+0x17c/0x1b0 [ 755.486646][T26641] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 755.486672][T26641] ? do_syscall_64+0xfa/0x3b0 [ 755.486698][T26641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.486732][T26641] __vmalloc_node_range_noprof+0x125/0x12f0 [ 755.486809][T26641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.486843][T26641] ? xskq_create+0x56/0x170 [ 755.486870][T26641] ? __kasan_kmalloc+0x93/0xb0 [ 755.486904][T26641] vmalloc_user_noprof+0xad/0xf0 [ 755.486937][T26641] ? xskq_create+0xbf/0x170 [ 755.486961][T26641] xskq_create+0xbf/0x170 [ 755.486988][T26641] xsk_init_queue+0xb0/0x110 [ 755.487015][T26641] xsk_setsockopt+0x4dc/0x8d0 [ 755.487054][T26641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.487090][T26641] ? __pfx_aa_sk_perm+0x10/0x10 [ 755.487129][T26641] ? aa_sock_opt_perm+0xff/0x1b0 [ 755.487155][T26641] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 755.487178][T26641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.487216][T26641] do_sock_setsockopt+0x17c/0x1b0 [ 755.487251][T26641] __x64_sys_setsockopt+0x13f/0x1b0 [ 755.487288][T26641] do_syscall_64+0xfa/0x3b0 [ 755.487313][T26641] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.487338][T26641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.487361][T26641] ? clear_bhb_loop+0x60/0xb0 [ 755.487390][T26641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.487413][T26641] RIP: 0033:0x7f2da898eec9 [ 755.487434][T26641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.487455][T26641] RSP: 002b:00007f2da9868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 755.487480][T26641] RAX: ffffffffffffffda RBX: 00007f2da8be5fa0 RCX: 00007f2da898eec9 [ 755.487497][T26641] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 755.487511][T26641] RBP: 00007f2da8a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 755.487526][T26641] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.487541][T26641] R13: 00007f2da8be6038 R14: 00007f2da8be5fa0 R15: 00007ffe817030f8 [ 755.487580][T26641] [ 755.487590][T26641] Mem-Info: [ 755.636248][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.693198][T26644] __nla_validate_parse: 14 callbacks suppressed [ 755.693224][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5370'. [ 755.694646][T10224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.723302][T26641] active_anon:8175 inactive_anon:0 isolated_anon:0 [ 755.723302][T26641] active_file:3929 inactive_file:40158 isolated_file:0 [ 755.723302][T26641] unevictable:768 dirty:76 writeback:0 [ 755.723302][T26641] slab_reclaimable:14269 slab_unreclaimable:259524 [ 755.723302][T26641] mapped:44946 shmem:1358 pagetables:1112 [ 755.723302][T26641] sec_pagetables:0 bounce:0 [ 755.723302][T26641] kernel_misc_reclaimable:0 [ 755.723302][T26641] free:1110041 free_pcp:17734 free_cma:0 [ 755.894311][T26641] Node 0 active_anon:32700kB inactive_anon:0kB active_file:15716kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179784kB dirty:300kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17460kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.930716][T26641] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.961637][T26641] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.991376][T26641] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 755.997548][T26641] Node 0 DMA32 free:524924kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32656kB inactive_anon:0kB active_file:15716kB inactive_file:158624kB unevictable:1536kB writepending:296kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:65324kB local_pcp:17540kB free_cma:0kB [ 756.042788][T26641] lowmem_reserve[]: 0 0 1 1 1 [ 756.086498][T26641] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 756.130038][T26641] lowmem_reserve[]: 0 0 0 0 0 [ 756.138188][T26641] Node 1 Normal free:3899852kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5688kB local_pcp:3008kB free_cma:0kB [ 756.172509][T26641] lowmem_reserve[]: 0 0 0 0 0 [ 756.180788][T26641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 756.193958][T26641] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 12*64kB (UM) 102*128kB (UME) 66*256kB (UM) 33*512kB (UME) 12*1024kB (UM) 3*2048kB (UE) 112*4096kB (UM) = 524924kB [ 756.214490][T26641] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 756.244060][T26641] Node 1 Normal: 167*4kB (UME) 45*8kB (UME) 44*16kB (UME) 257*32kB (UME) 84*64kB (UME) 14*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3900132kB [ 756.286490][T26641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.307258][T26641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.356605][T26641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.366474][T26641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.388079][T26641] 45442 total pagecache pages [ 756.392840][T26641] 0 pages in swap cache [ 756.410937][T26641] Free swap = 124996kB [ 756.420884][T26641] Total swap = 124996kB [ 756.425727][T26641] 2097051 pages RAM [ 756.429590][T26641] 0 pages HighMem/MovableOnly [ 756.434987][T26641] 424998 pages reserved [ 756.439191][T26641] 0 pages cma reserved [ 756.503020][T26557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.863861][ T5866] Bluetooth: hci7: command tx timeout [ 756.961708][T26690] netlink: 'syz.4.5380': attribute type 5 has an invalid length. [ 756.986829][T26690] netlink: 'syz.4.5380': attribute type 5 has an invalid length. [ 757.009907][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'. [ 757.059026][T26696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5379'. [ 757.110974][T26696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5379'. [ 757.136974][T26557] veth0_vlan: entered promiscuous mode [ 757.161006][T26557] veth1_vlan: entered promiscuous mode [ 757.174857][T26696] netlink: 'syz.6.5379': attribute type 15 has an invalid length. [ 757.271831][T26557] veth0_macvtap: entered promiscuous mode [ 757.309529][T26557] veth1_macvtap: entered promiscuous mode [ 757.377995][T26557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.426906][T26557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.465240][T21216] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.494506][T21216] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.525375][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5383'. [ 757.540572][T21216] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.554570][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.723870][T10224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.731875][T10224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.801292][T21216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.821019][T21216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.109672][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5391'. [ 758.317470][T26741] lo speed is unknown, defaulting to 1000 [ 758.349071][T26741] lo speed is unknown, defaulting to 1000 [ 758.954490][ T5866] Bluetooth: hci7: command tx timeout [ 760.331370][T26777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5403'. [ 760.368875][T26777] FAULT_INJECTION: forcing a failure. [ 760.368875][T26777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.439053][T26777] CPU: 0 UID: 0 PID: 26777 Comm: syz.7.5403 Not tainted syzkaller #0 PREEMPT(full) [ 760.439088][T26777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 760.439102][T26777] Call Trace: [ 760.439112][T26777] [ 760.439124][T26777] dump_stack_lvl+0x189/0x250 [ 760.439155][T26777] ? __pfx____ratelimit+0x10/0x10 [ 760.439181][T26777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.439207][T26777] ? __pfx__printk+0x10/0x10 [ 760.439238][T26777] ? __might_fault+0xb0/0x130 [ 760.439281][T26777] should_fail_ex+0x414/0x560 [ 760.439328][T26777] _copy_from_user+0x2d/0xb0 [ 760.439358][T26777] ___sys_sendmsg+0x158/0x2a0 [ 760.439393][T26777] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.439467][T26777] ? __fget_files+0x2a/0x420 [ 760.439499][T26777] ? __fget_files+0x3a0/0x420 [ 760.439551][T26777] __x64_sys_sendmsg+0x19b/0x260 [ 760.439586][T26777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.439627][T26777] ? __pfx_ksys_write+0x10/0x10 [ 760.439653][T26777] ? rcu_is_watching+0x15/0xb0 [ 760.439682][T26777] ? do_syscall_64+0xbe/0x3b0 [ 760.439714][T26777] do_syscall_64+0xfa/0x3b0 [ 760.439739][T26777] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.439763][T26777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.439786][T26777] ? clear_bhb_loop+0x60/0xb0 [ 760.439814][T26777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.439837][T26777] RIP: 0033:0x7f643a38eec9 [ 760.439857][T26777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.439878][T26777] RSP: 002b:00007f643b311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.439904][T26777] RAX: ffffffffffffffda RBX: 00007f643a5e5fa0 RCX: 00007f643a38eec9 [ 760.439921][T26777] RDX: 0000000004000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 760.439936][T26777] RBP: 00007f643b311090 R08: 0000000000000000 R09: 0000000000000000 [ 760.439950][T26777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.439965][T26777] R13: 00007f643a5e6038 R14: 00007f643a5e5fa0 R15: 00007ffea7ede6e8 [ 760.439998][T26777] [ 760.466916][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5404'. [ 760.962551][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 761.034390][ T5866] Bluetooth: hci7: command tx timeout [ 761.278251][T26798] lo speed is unknown, defaulting to 1000 [ 761.326892][T26798] lo speed is unknown, defaulting to 1000 [ 761.841027][T26819] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 762.203334][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5414'. [ 762.246628][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5415'. [ 762.258050][T26823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5414'. [ 762.281559][T26823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 762.314457][T26825] FAULT_INJECTION: forcing a failure. [ 762.314457][T26825] name failslab, interval 1, probability 0, space 0, times 0 [ 762.327694][T26825] CPU: 1 UID: 0 PID: 26825 Comm: syz.4.5415 Not tainted syzkaller #0 PREEMPT(full) [ 762.327725][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 762.327738][T26825] Call Trace: [ 762.327747][T26825] [ 762.327755][T26825] dump_stack_lvl+0x189/0x250 [ 762.327784][T26825] ? __pfx____ratelimit+0x10/0x10 [ 762.327806][T26825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.327827][T26825] ? __pfx__printk+0x10/0x10 [ 762.327856][T26825] ? __pfx___might_resched+0x10/0x10 [ 762.327889][T26825] should_fail_ex+0x414/0x560 [ 762.327920][T26825] should_failslab+0xa8/0x100 [ 762.327948][T26825] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 762.327973][T26825] ? __alloc_skb+0x112/0x2d0 [ 762.327998][T26825] __alloc_skb+0x112/0x2d0 [ 762.328023][T26825] netlink_sendmsg+0x5c6/0xb30 [ 762.328054][T26825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.328082][T26825] ? aa_sock_msg_perm+0xf1/0x1d0 [ 762.328115][T26825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 762.328151][T26825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.328177][T26825] __sock_sendmsg+0x21c/0x270 [ 762.328213][T26825] ____sys_sendmsg+0x505/0x830 [ 762.328246][T26825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.328283][T26825] ? import_iovec+0x74/0xa0 [ 762.328313][T26825] ___sys_sendmsg+0x21f/0x2a0 [ 762.328344][T26825] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.328413][T26825] ? __fget_files+0x2a/0x420 [ 762.328441][T26825] ? __fget_files+0x3a0/0x420 [ 762.328485][T26825] __x64_sys_sendmsg+0x19b/0x260 [ 762.328517][T26825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.328556][T26825] ? __pfx_ksys_write+0x10/0x10 [ 762.328580][T26825] ? rcu_is_watching+0x15/0xb0 [ 762.328606][T26825] ? do_syscall_64+0xbe/0x3b0 [ 762.328636][T26825] do_syscall_64+0xfa/0x3b0 [ 762.328661][T26825] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.328684][T26825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.328707][T26825] ? clear_bhb_loop+0x60/0xb0 [ 762.328734][T26825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.328756][T26825] RIP: 0033:0x7fc64158eec9 [ 762.328776][T26825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.328797][T26825] RSP: 002b:00007fc6424f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.328821][T26825] RAX: ffffffffffffffda RBX: 00007fc6417e5fa0 RCX: 00007fc64158eec9 [ 762.328838][T26825] RDX: 0000000004000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 762.328853][T26825] RBP: 00007fc6424f1090 R08: 0000000000000000 R09: 0000000000000000 [ 762.328868][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.328882][T26825] R13: 00007fc6417e6038 R14: 00007fc6417e5fa0 R15: 00007ffdbfa37528 [ 762.328919][T26825] [ 763.484763][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5418'. [ 763.552786][T26844] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5419'. [ 763.599277][T26845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5418'. [ 763.731863][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5421'. [ 763.817141][T26853] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5423'. [ 763.838147][T26853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 764.341713][T26861] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.349861][T26861] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.717021][T19684] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 764.729697][T19684] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 764.742045][T19684] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 764.755944][T19684] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 764.773377][T19684] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 764.891911][T26861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.920494][T26861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.204664][T21216] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.227546][T21216] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.291953][T21216] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.322517][T26879] lo speed is unknown, defaulting to 1000 [ 765.328863][T21216] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.350622][T26879] lo speed is unknown, defaulting to 1000 [ 765.396476][T26906] FAULT_INJECTION: forcing a failure. [ 765.396476][T26906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.419338][T26906] CPU: 1 UID: 0 PID: 26906 Comm: syz.6.5438 Not tainted syzkaller #0 PREEMPT(full) [ 765.419370][T26906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 765.419384][T26906] Call Trace: [ 765.419394][T26906] [ 765.419404][T26906] dump_stack_lvl+0x189/0x250 [ 765.419435][T26906] ? __pfx____ratelimit+0x10/0x10 [ 765.419459][T26906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.419483][T26906] ? __pfx__printk+0x10/0x10 [ 765.419511][T26906] ? __might_fault+0xb0/0x130 [ 765.419554][T26906] should_fail_ex+0x414/0x560 [ 765.419592][T26906] _copy_from_iter+0x1de/0x1790 [ 765.419638][T26906] ? rcu_is_watching+0x15/0xb0 [ 765.419661][T26906] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 765.419706][T26906] ? __pfx__copy_from_iter+0x10/0x10 [ 765.419734][T26906] ? __build_skb_around+0x257/0x3e0 [ 765.419765][T26906] ? netlink_sendmsg+0x642/0xb30 [ 765.419790][T26906] ? skb_put+0x11b/0x210 [ 765.419821][T26906] netlink_sendmsg+0x6b2/0xb30 [ 765.419863][T26906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.419894][T26906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 765.419938][T26906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.419962][T26906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.419990][T26906] __sock_sendmsg+0x21c/0x270 [ 765.420030][T26906] ____sys_sendmsg+0x505/0x830 [ 765.420066][T26906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.420123][T26906] ? import_iovec+0x74/0xa0 [ 765.420156][T26906] ___sys_sendmsg+0x21f/0x2a0 [ 765.420189][T26906] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.420262][T26906] ? __fget_files+0x2a/0x420 [ 765.420293][T26906] ? __fget_files+0x3a0/0x420 [ 765.420338][T26906] __x64_sys_sendmsg+0x19b/0x260 [ 765.420371][T26906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.420418][T26906] ? __pfx_ksys_write+0x10/0x10 [ 765.420444][T26906] ? rcu_is_watching+0x15/0xb0 [ 765.420471][T26906] ? do_syscall_64+0xbe/0x3b0 [ 765.420502][T26906] do_syscall_64+0xfa/0x3b0 [ 765.420526][T26906] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.420550][T26906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.420572][T26906] ? clear_bhb_loop+0x60/0xb0 [ 765.420600][T26906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.420629][T26906] RIP: 0033:0x7f2da898eec9 [ 765.420648][T26906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.420669][T26906] RSP: 002b:00007f2da9868038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.420692][T26906] RAX: ffffffffffffffda RBX: 00007f2da8be5fa0 RCX: 00007f2da898eec9 [ 765.420709][T26906] RDX: 0000000004000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 765.420724][T26906] RBP: 00007f2da9868090 R08: 0000000000000000 R09: 0000000000000000 [ 765.420738][T26906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.420752][T26906] R13: 00007f2da8be6038 R14: 00007f2da8be5fa0 R15: 00007ffe817030f8 [ 765.420789][T26906] [ 765.928303][T26909] vlan2: entered promiscuous mode [ 765.933543][T26909] dummy0: entered promiscuous mode [ 766.034686][T26919] __nla_validate_parse: 6 callbacks suppressed [ 766.034710][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5442'. [ 766.299973][T26924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5443'. [ 766.369575][T26924] 8021q: VLANs not supported on ip6gre0 [ 766.378428][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5445'. [ 766.432079][T26936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.449326][T26932] veth1_to_batadv: entered allmulticast mode [ 766.464672][T26932] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 766.548981][T26879] chnl_net:caif_netlink_parms(): no params data found [ 766.829367][T26879] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.838879][T26879] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.847936][T26879] bridge_slave_0: entered allmulticast mode [ 766.856803][T26879] bridge_slave_0: entered promiscuous mode [ 766.865763][T19684] Bluetooth: hci8: command tx timeout [ 766.868698][T26879] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.879632][T26879] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.887867][T26879] bridge_slave_1: entered allmulticast mode [ 766.926541][T26879] bridge_slave_1: entered promiscuous mode [ 767.059930][T26961] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5455'. [ 767.077198][T26879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.097869][T26961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5455'. [ 767.122307][T26879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.299252][T26879] team0: Port device team_slave_0 added [ 767.326461][T26879] team0: Port device team_slave_1 added [ 767.347622][T26975] syzkaller1: entered promiscuous mode [ 767.354535][T26975] syzkaller1: entered allmulticast mode [ 767.368950][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5460'. [ 767.420575][T26969] tipc: Enabled bearer , priority 0 [ 767.494271][T26969] syzkaller0: entered promiscuous mode [ 767.510238][T26969] syzkaller0: entered allmulticast mode [ 767.521115][T26969] tipc: Resetting bearer [ 767.558560][ T5870] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 767.561314][T26879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.574680][T26879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.601698][T26879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.629839][T26968] tipc: Resetting bearer [ 767.639226][ T5870] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 768.948572][T19684] Bluetooth: hci8: command tx timeout [ 770.686717][T26968] tipc: Disabling bearer [ 770.699338][T26879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.707089][T26879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.734587][T26879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.841001][T26879] hsr_slave_0: entered promiscuous mode [ 770.850473][T26879] hsr_slave_1: entered promiscuous mode [ 770.858747][T26879] debugfs: 'hsr0' already exists in 'hsr' [ 770.866840][T26879] Cannot create hsr debugfs directory [ 770.926999][T26985] lo speed is unknown, defaulting to 1000 [ 770.989734][T26985] lo speed is unknown, defaulting to 1000 [ 771.024409][T19684] Bluetooth: hci8: command tx timeout [ 771.682911][T26879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 771.719730][T26879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 771.744299][T26879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 771.784335][T26879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 771.801566][T27025] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 771.977286][T27029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5474'. [ 772.018811][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5474'. [ 772.061008][T27029] netlink: 'syz.4.5474': attribute type 30 has an invalid length. [ 772.117772][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5474'. [ 772.238539][T26879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.346110][T26879] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.427349][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.434652][T10224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.479339][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.486684][T10224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.500515][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5477'. [ 772.747300][T27049] lo speed is unknown, defaulting to 1000 [ 772.781760][T27049] lo speed is unknown, defaulting to 1000 [ 772.830951][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5480'. [ 772.840924][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5480'. [ 773.116090][T19684] Bluetooth: hci8: command tx timeout [ 773.419659][T27067] netlink: 'syz.6.5484': attribute type 10 has an invalid length. [ 773.500425][T27067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.519227][T27067] batadv0: entered promiscuous mode [ 773.542766][T27067] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 773.619495][T26879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.756286][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5486'. [ 774.485580][T27103] ipvlan0: entered promiscuous mode [ 774.534552][T27103] ipvlan0: left promiscuous mode [ 774.737573][T26879] veth0_vlan: entered promiscuous mode [ 774.746671][T27108] nbd: nbd6 already in use [ 774.755553][T27108] block nbd6: NBD_DISCONNECT [ 774.774663][T27108] block nbd6: Send disconnect failed -107 [ 774.776873][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5491'. [ 774.789670][T27108] block nbd6: shutting down sockets [ 774.819253][T26879] veth1_vlan: entered promiscuous mode [ 774.837063][T27112] FAULT_INJECTION: forcing a failure. [ 774.837063][T27112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.863536][T27112] CPU: 0 UID: 0 PID: 27112 Comm: syz.1.5491 Not tainted syzkaller #0 PREEMPT(full) [ 774.863569][T27112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 774.863588][T27112] Call Trace: [ 774.863597][T27112] [ 774.863606][T27112] dump_stack_lvl+0x189/0x250 [ 774.863636][T27112] ? __pfx____ratelimit+0x10/0x10 [ 774.863660][T27112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.863685][T27112] ? __pfx__printk+0x10/0x10 [ 774.863729][T27112] should_fail_ex+0x414/0x560 [ 774.863768][T27112] _copy_to_user+0x31/0xb0 [ 774.863799][T27112] simple_read_from_buffer+0xe1/0x170 [ 774.863838][T27112] proc_fail_nth_read+0x1b3/0x220 [ 774.863866][T27112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 774.863906][T27112] ? rw_verify_area+0x2a6/0x4d0 [ 774.863932][T27112] ? __lock_acquire+0xab9/0xd20 [ 774.863970][T27112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 774.863997][T27112] vfs_read+0x200/0xa30 [ 774.864023][T27112] ? fdget_pos+0x247/0x320 [ 774.864060][T27112] ? __pfx___mutex_lock+0x10/0x10 [ 774.864086][T27112] ? __pfx_vfs_read+0x10/0x10 [ 774.864115][T27112] ? __fget_files+0x2a/0x420 [ 774.864150][T27112] ? __fget_files+0x3a0/0x420 [ 774.864180][T27112] ? __fget_files+0x2a/0x420 [ 774.864222][T27112] ksys_read+0x145/0x250 [ 774.864253][T27112] ? __pfx_ksys_read+0x10/0x10 [ 774.864277][T27112] ? rcu_is_watching+0x15/0xb0 [ 774.864305][T27112] ? do_syscall_64+0xbe/0x3b0 [ 774.864336][T27112] do_syscall_64+0xfa/0x3b0 [ 774.864360][T27112] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.864394][T27112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.864416][T27112] ? clear_bhb_loop+0x60/0xb0 [ 774.864444][T27112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.864467][T27112] RIP: 0033:0x7f6ac398d8dc [ 774.864488][T27112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 774.864508][T27112] RSP: 002b:00007f6ac4873030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.864532][T27112] RAX: ffffffffffffffda RBX: 00007f6ac3be5fa0 RCX: 00007f6ac398d8dc [ 774.864548][T27112] RDX: 000000000000000f RSI: 00007f6ac48730a0 RDI: 0000000000000005 [ 774.864571][T27112] RBP: 00007f6ac4873090 R08: 0000000000000000 R09: 0000000000000000 [ 774.864585][T27112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.864597][T27112] R13: 00007f6ac3be6038 R14: 00007f6ac3be5fa0 R15: 00007ffc171f4d48 [ 774.864635][T27112] [ 775.175347][T27109] bond2: entered promiscuous mode [ 775.180461][T27109] bond2: entered allmulticast mode [ 775.186809][T27109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.225450][T27114] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 775.328872][T27126] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5494'. [ 775.369977][T26879] veth0_macvtap: entered promiscuous mode [ 775.424713][T26879] veth1_macvtap: entered promiscuous mode [ 775.459515][T26879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.483885][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 775.497540][T26879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.521003][T21205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.536397][T21205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.558101][T21205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.570664][T21205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.361667][T27136] lo speed is unknown, defaulting to 1000 [ 776.473700][T27136] lo speed is unknown, defaulting to 1000 [ 776.657995][T21201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.680695][T21201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.771151][T21208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.785072][T21208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.929582][T27166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.006347][T27171] macsec1: entered promiscuous mode [ 777.028946][T27171] bond1: entered promiscuous mode [ 777.041834][T27171] macsec1: entered allmulticast mode [ 777.047601][T27171] bond1: entered allmulticast mode [ 777.055996][T27171] bond1: left allmulticast mode [ 777.060921][T27171] bond1: left promiscuous mode [ 777.102855][T27170] lo speed is unknown, defaulting to 1000 [ 777.121565][T27170] lo speed is unknown, defaulting to 1000 [ 777.759357][T27196] __nla_validate_parse: 3 callbacks suppressed [ 777.759385][T27196] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5509'. [ 777.887266][T27196] batman_adv: batadv0: Adding interface: macsec1 [ 777.932185][T27196] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.962117][T27196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.974483][T27196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.989102][T27196] batman_adv: batadv0: Interface activated: macsec1 [ 778.088297][T27201] bond0: entered promiscuous mode [ 778.093491][T27201] bond_slave_0: entered promiscuous mode [ 778.100438][T27201] bond_slave_1: entered promiscuous mode [ 778.108444][T27201] batadv0: entered promiscuous mode [ 778.119210][T27201] debugfs: 'hsr1' already exists in 'hsr' [ 778.125288][T27201] Cannot create hsr debugfs directory [ 778.131942][T27201] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 778.151142][T27205] tipc: Enabled bearer , priority 0 [ 778.260666][T27213] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5515'. [ 778.453379][T27205] tipc: Disabling bearer [ 778.597246][T27218] vlan2: entered promiscuous mode [ 778.602494][T27218] gretap0: entered promiscuous mode [ 778.911822][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5520'. [ 778.924861][T27238] openvswitch: netlink: Message has 8 unknown bytes. [ 779.029821][T27245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5520'. [ 779.201503][T27250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5526'. [ 779.239149][T27251] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 779.248956][ T44] IPVS: starting estimator thread 0... [ 779.287208][T27240] IPVS: Error connecting to the multicast addr [ 779.294052][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5526'. [ 779.316849][T27250] bridge0: port 1(batadv0) entered disabled state [ 779.354423][T27252] IPVS: using max 23 ests per chain, 55200 per kthread [ 780.225168][T27254] lo speed is unknown, defaulting to 1000 [ 780.245388][T27254] lo speed is unknown, defaulting to 1000 [ 780.377267][T27285] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 780.462456][T27288] can: request_module (can-proto-0) failed. [ 780.798874][T27311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.815103][T27311] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5539'. [ 780.834153][T27311] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5539'. [ 780.850167][T27311] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5539'. [ 780.860816][T27311] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5539'. [ 780.878383][T27303] lo speed is unknown, defaulting to 1000 [ 780.928419][T27306] lo speed is unknown, defaulting to 1000 [ 780.929026][T27303] lo speed is unknown, defaulting to 1000 [ 781.191439][T27306] lo speed is unknown, defaulting to 1000 [ 781.378665][T27319] bond1: entered promiscuous mode [ 781.404411][T27319] bond1: entered allmulticast mode [ 781.410318][T27319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.468099][T27319] bond2: entered promiscuous mode [ 781.474802][T27319] bond2: entered allmulticast mode [ 781.480717][T27319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.576854][T27319] bond3: entered promiscuous mode [ 781.582097][T27319] bond3: entered allmulticast mode [ 781.588247][T27319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 781.633889][T27319] bond4: entered promiscuous mode [ 781.639277][T27319] bond4: entered allmulticast mode [ 781.645311][T27319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 781.752495][T27326] bridge_slave_0: left allmulticast mode [ 781.762550][T27326] bridge_slave_0: left promiscuous mode [ 781.778519][T27326] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.806709][T27326] bridge_slave_1: left allmulticast mode [ 781.812435][T27326] bridge_slave_1: left promiscuous mode [ 781.826334][T27326] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.897435][T27326] bond0: (slave bond_slave_0): Releasing backup interface [ 781.939259][T27326] bond0: (slave bond_slave_1): Releasing backup interface [ 781.970903][T27326] team0: Port device team_slave_0 removed [ 781.983081][T27326] team0: Port device team_slave_1 removed [ 781.991613][T27326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.002938][T27326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.012832][T27326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.089660][T27319] bond5: entered promiscuous mode [ 782.095230][T27319] bond5: entered allmulticast mode [ 782.101011][T27319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 782.132973][T27328] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 782.769472][T27354] tipc: Enabling of bearer rejected, already enabled [ 782.838449][T27358] __nla_validate_parse: 1 callbacks suppressed [ 782.838476][T27358] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5550'. [ 782.966672][T27366] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5553'. [ 782.978002][T27360] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.998288][T27360] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 783.006941][T27369] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5553'. [ 783.120825][T27360] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.143202][T27360] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 783.271741][T27360] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.303224][T27360] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 783.345244][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5567'. [ 783.377463][T27383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5567'. [ 783.410935][T27385] openvswitch: netlink: Message has 8 unknown bytes. [ 783.470482][T27387] netlink: 'syz.8.5559': attribute type 10 has an invalid length. [ 783.506069][T27385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.525898][T27385] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.536266][T27389] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5559'. [ 783.561949][T27385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.599605][T27360] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.612532][T27360] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 783.644623][T27387] team0: Failed to send options change via netlink (err -105) [ 783.655602][T27387] team0: Port device dummy0 added [ 783.862753][T21208] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 783.871735][T21208] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 783.930354][T21208] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 783.951511][T21208] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.015599][T21208] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 784.026536][T21208] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.056411][T27403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.172325][T21208] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 784.187095][T21208] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.218792][T27361] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 784.229932][T27361] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.369839][T27361] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 784.381261][T27361] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.460463][T27415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5566'. [ 784.505995][T27361] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 784.520971][T27361] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.609364][T27361] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 784.666632][T27361] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.860376][T27420] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.865927][T27428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 784.958128][T27430] netlink: 'syz.7.5572': attribute type 3 has an invalid length. [ 785.034836][T27420] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.090209][T27434] bridge0: entered allmulticast mode [ 785.113415][T27434] pim6reg: entered allmulticast mode [ 785.190913][T27420] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.371760][T27420] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.475365][T10227] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 785.494560][T10227] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.555650][T10227] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 785.565712][T10227] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.623142][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 785.641038][ T36] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.692640][T21208] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 785.702479][T21208] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.781194][T10227] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.838813][T10227] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.923808][T27457] tipc: Enabling of bearer rejected, already enabled [ 785.942278][T10227] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.988632][T10227] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.435343][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.450292][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 786.463995][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 786.482102][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.494295][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.535755][T27476] lo speed is unknown, defaulting to 1000 [ 786.671618][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.702649][T27476] lo speed is unknown, defaulting to 1000 [ 786.711848][T27479] lo speed is unknown, defaulting to 1000 [ 786.771953][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.100052][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.239952][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.411192][T27505] lo speed is unknown, defaulting to 1000 [ 787.419164][T27479] lo speed is unknown, defaulting to 1000 [ 787.516937][T27514] tipc: Started in network mode [ 787.536463][T27514] tipc: Node identity ac14140f, cluster identity 4711 [ 787.567219][T27514] tipc: New replicast peer: 255.255.255.255 [ 787.569024][T27518] netlink: 'syz.6.5598': attribute type 1 has an invalid length. [ 787.597656][T27514] tipc: Enabled bearer , priority 10 [ 787.601457][T27518] netlink: 600 bytes leftover after parsing attributes in process `syz.6.5598'. [ 788.131358][ T36] tipc: Resetting bearer [ 788.537267][ T36] bond9 (unregistering): (slave gretap1): Releasing active interface [ 788.564072][T10918] tipc: Node number set to 2886997007 [ 788.602808][ T36] dvmrp5 (unregistering): left allmulticast mode [ 788.630000][ T36] bond15 (unregistering): (slave geneve4): Releasing active interface [ 788.639858][ T5866] Bluetooth: hci3: command tx timeout [ 788.939342][ T36] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 788.989257][ T36] tipc: Disabling bearer [ 789.316873][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 789.326193][ T36] bond0 (unregistering): Released all slaves [ 789.501297][ T36] bond1 (unregistering): Released all slaves [ 789.517554][ T36] bond2 (unregistering): Released all slaves [ 789.532437][ T36] bond3 (unregistering): Released all slaves [ 789.708483][ T36] bond4 (unregistering): Released all slaves [ 789.861803][ T36] bond5 (unregistering): Released all slaves [ 790.038248][ T36] bond6 (unregistering): Released all slaves [ 790.052533][ T36] bond7 (unregistering): Released all slaves [ 790.226899][ T36] bond8 (unregistering): Released all slaves [ 790.434710][ T36] bond9 (unregistering): Released all slaves [ 790.646989][ T36] bond10 (unregistering): Released all slaves [ 790.662299][ T36] bond11 (unregistering): Released all slaves [ 790.677823][ T36] bond12 (unregistering): Released all slaves [ 790.709839][ T5866] Bluetooth: hci3: command tx timeout [ 790.863099][ T36] bond13 (unregistering): Released all slaves [ 791.050986][ T36] bond14 (unregistering): Released all slaves [ 791.229033][ T36] bond15 (unregistering): Released all slaves [ 791.242837][T27505] lo speed is unknown, defaulting to 1000 [ 791.454483][ T36] tipc: Disabling bearer [ 791.465480][ T36] tipc: Disabling bearer [ 791.486457][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5605'. [ 791.517778][ T36] tipc: Left network mode [ 791.610976][ T36] IPVS: stopping backup sync thread 22720 ... [ 791.983806][T27544] lo speed is unknown, defaulting to 1000 [ 792.021529][T27544] lo speed is unknown, defaulting to 1000 [ 792.028395][T27479] chnl_net:caif_netlink_parms(): no params data found [ 792.161780][T27547] lo speed is unknown, defaulting to 1000 [ 792.510376][T27479] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.517948][T27479] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.529863][T27479] bridge_slave_0: entered allmulticast mode [ 792.541480][T27479] bridge_slave_0: entered promiscuous mode [ 792.576074][T27479] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.603959][T27479] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.612050][T27479] bridge_slave_1: entered allmulticast mode [ 792.627735][T27479] bridge_slave_1: entered promiscuous mode [ 792.648122][T27547] lo speed is unknown, defaulting to 1000 [ 792.770654][T27479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.796106][ T5866] Bluetooth: hci3: command tx timeout [ 792.822990][T27479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.034410][T27479] team0: Port device team_slave_0 added [ 793.045529][T27479] team0: Port device team_slave_1 added [ 793.172628][T27563] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5608'. [ 793.219545][T27572] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5611'. [ 793.229287][T27572] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5611'. [ 793.668513][T27479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.691545][T27479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.780711][T27479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.953252][T27586] netlink: 264 bytes leftover after parsing attributes in process `syz.7.5615'. [ 794.019235][T27587] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5615'. [ 794.096546][T27479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.104996][T27479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.135737][T27479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.168247][ T36] hsr_slave_0: left promiscuous mode [ 794.174612][ T36] hsr_slave_1: left promiscuous mode [ 794.866335][ T5866] Bluetooth: hci3: command tx timeout [ 795.538915][T20685] lo speed is unknown, defaulting to 1000 [ 795.556258][T20685] infiniband syz2: ib_query_port failed (-19) [ 795.765732][T27479] hsr_slave_0: entered promiscuous mode [ 795.772973][T27479] hsr_slave_1: entered promiscuous mode [ 795.780165][T27479] debugfs: 'hsr0' already exists in 'hsr' [ 795.786171][T27479] Cannot create hsr debugfs directory [ 795.986301][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5621'. [ 796.023187][T27609] batadv_slave_1: entered promiscuous mode [ 796.033719][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'. [ 796.043055][T27614] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 796.069924][T27611] netlink: 42 bytes leftover after parsing attributes in process `syz.1.5621'. [ 796.312837][T27601] batadv_slave_1: left promiscuous mode [ 796.394946][ T36] IPVS: stop unused estimator thread 0... [ 796.575638][T27630] netlink: 'syz.8.5626': attribute type 1 has an invalid length. [ 796.806752][T27640] bond6: (slave bridge1): making interface the new active one [ 796.815613][T27640] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 797.036889][T27646] lo speed is unknown, defaulting to 1000 [ 797.065341][T27653] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5632'. [ 797.099394][T27653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 797.395822][T27653] 8021q: VLANs not supported on xfrm0 [ 797.737788][T27479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 797.762506][T27479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 797.791737][T27479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 797.843153][T27479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 798.059861][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5636'. [ 798.066003][T27677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5635'. [ 798.103241][T27674] netlink: 'syz.8.5637': attribute type 1 has an invalid length. [ 798.136869][T27678] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5636'. [ 798.151294][T27678] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5636'. [ 798.188767][T27678] netlink: 540 bytes leftover after parsing attributes in process `syz.7.5636'. [ 798.256419][T27644] lo speed is unknown, defaulting to 1000 [ 798.409431][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5639'. [ 798.658129][T27479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.723786][T27479] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.744598][T27702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5643'. [ 798.780559][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5644'. [ 798.955834][T27709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5642'. [ 799.281074][T21208] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.288369][T21208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.311940][T21208] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.319222][T21208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.347934][ T31] INFO: task syz.3.4327:22862 blocked for more than 143 seconds. [ 799.371149][ T31] Not tainted syzkaller #0 [ 799.389137][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 799.410704][ T31] task:syz.3.4327 state:D stack:25864 pid:22862 tgid:22860 ppid:17614 task_flags:0x400140 flags:0x00004004 [ 799.434153][ T31] Call Trace: [ 799.439966][ T31] [ 799.445942][ T31] __schedule+0x1798/0x4cc0 [ 799.454326][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.461815][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.474482][ T31] ? __pfx___schedule+0x10/0x10 [ 799.484007][ T31] ? schedule+0x91/0x360 [ 799.488336][ T31] schedule+0x165/0x360 [ 799.506482][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.512028][ T31] __mutex_lock+0x7e6/0x1350 [ 799.539849][ T31] ? __mutex_lock+0x5bb/0x1350 [ 799.551279][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 799.564246][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.579678][ T31] ? __asan_memset+0x22/0x50 [ 799.589852][ T31] ? ____sys_sendmsg+0x505/0x830 [ 799.605289][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 799.614099][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 799.619338][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 799.638712][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 799.654415][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 799.665417][ T31] ? __nla_parse+0x40/0x60 [ 799.669936][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 799.715862][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 799.754237][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 799.760437][ T31] ? bpf_lsm_capable+0x9/0x20 [ 799.817089][ T31] ? security_capable+0x7e/0x2e0 [ 799.822175][ T31] genl_rcv_msg+0x60e/0x790 [ 799.856440][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.861571][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 799.874089][ T31] netlink_rcv_skb+0x205/0x470 [ 799.878940][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.894461][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.899576][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 799.906875][ T31] ? down_read+0x1ad/0x2e0 [ 799.911371][ T31] genl_rcv+0x28/0x40 [ 799.917263][ T31] netlink_unicast+0x82f/0x9e0 [ 799.922115][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 799.929729][ T31] ? netlink_sendmsg+0x642/0xb30 [ 799.935318][ T31] ? skb_put+0x11b/0x210 [ 799.939618][ T31] netlink_sendmsg+0x805/0xb30 [ 799.944513][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.949977][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 799.955503][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.961223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.966695][ T31] __sock_sendmsg+0x21c/0x270 [ 799.971445][ T31] ____sys_sendmsg+0x505/0x830 [ 799.976665][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.982021][ T31] ? import_iovec+0x74/0xa0 [ 799.987686][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 799.992456][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.998256][ T31] ? __fget_files+0x2a/0x420 [ 800.002891][ T31] ? __fget_files+0x3a0/0x420 [ 800.007784][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 800.012789][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 800.019121][ T31] ? do_syscall_64+0xbe/0x3b0 [ 800.024151][ T31] do_syscall_64+0xfa/0x3b0 [ 800.028712][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.034335][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.040469][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.045587][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.051519][ T31] RIP: 0033:0x7f8738f8eec9 [ 800.056249][ T31] RSP: 002b:00007f8739ecf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.066737][ T31] RAX: ffffffffffffffda RBX: 00007f87391e5fa0 RCX: 00007f8738f8eec9 [ 800.075420][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 800.083446][ T31] RBP: 00007f8739011f91 R08: 0000000000000000 R09: 0000000000000000 [ 800.091570][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.099901][ T31] R13: 00007f87391e6038 R14: 00007f87391e5fa0 R15: 00007ffe7fef1338 [ 800.108408][ T31] [ 800.111545][ T31] [ 800.111545][ T31] Showing all locks held in the system: [ 800.119494][ T31] 1 lock held by khungtaskd/31: [ 800.140386][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 800.152718][ T31] 2 locks held by getty/5628: [ 800.157584][ T31] #0: ffff8880300fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 800.167946][ T31] #1: ffffc900036ae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 800.178495][ T31] 3 locks held by kworker/u8:23/10224: [ 800.184126][ T31] #0: ffff88801a489948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 800.196245][ T31] #1: ffffc9000b10fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 800.207504][ T31] #2: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 800.216738][ T31] 3 locks held by kworker/u8:14/21201: [ 800.222227][ T31] #0: ffff88814cb6a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 800.234582][ T31] #1: ffffc90004767bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 800.247971][ T31] #2: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 800.257631][ T31] 2 locks held by syz.2.4164/22200: [ 800.262870][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.271565][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 800.282219][ T31] 2 locks held by syz.3.4327/22862: [ 800.287830][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.296103][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 800.306716][ T31] 2 locks held by syz.0.5206/26079: [ 800.311953][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.320234][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 800.330526][ T31] 2 locks held by syz.5.5302/26438: [ 800.335822][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.344133][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 800.354292][ T31] 1 lock held by syz-executor/27479: [ 800.359602][ T31] #0: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 800.369126][ T31] 2 locks held by syz.6.5631/27644: [ 800.374513][ T31] #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 800.384187][ T31] #1: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 800.394133][ T31] 2 locks held by syz.6.5631/27646: [ 800.399417][ T31] #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 800.409438][ T31] #1: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 800.419581][ T31] 2 locks held by syz.7.5642/27698: [ 800.424956][ T31] #0: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 800.434668][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 800.445725][ T31] 2 locks held by syz.1.5646/27715: [ 800.450968][ T31] #0: ffffffff8f53e128 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 800.463032][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 800.477018][ T31] 1 lock held by syz.1.5646/27719: [ 800.482216][ T31] #0: ffffffff8f53adc8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 800.491694][ T31] [ 800.495663][ T31] ============================================= [ 800.495663][ T31] [ 800.624871][ T31] NMI backtrace for cpu 0 [ 800.624897][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 800.624923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 800.624936][ T31] Call Trace: [ 800.624945][ T31] [ 800.624955][ T31] dump_stack_lvl+0x189/0x250 [ 800.624988][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.625012][ T31] ? __pfx__printk+0x10/0x10 [ 800.625054][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 800.625091][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 800.625136][ T31] ? __pfx__printk+0x10/0x10 [ 800.625170][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 800.625206][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 800.625243][ T31] watchdog+0xf93/0xfe0 [ 800.625278][ T31] ? watchdog+0x1de/0xfe0 [ 800.625312][ T31] kthread+0x70e/0x8a0 [ 800.625343][ T31] ? __pfx_watchdog+0x10/0x10 [ 800.625370][ T31] ? __pfx_kthread+0x10/0x10 [ 800.625398][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.625418][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.625437][ T31] ? __pfx_kthread+0x10/0x10 [ 800.625462][ T31] ret_from_fork+0x439/0x7d0 [ 800.625485][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 800.625512][ T31] ? __switch_to_asm+0x39/0x70 [ 800.625537][ T31] ? __switch_to_asm+0x33/0x70 [ 800.625563][ T31] ? __pfx_kthread+0x10/0x10 [ 800.625591][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.625635][ T31] [ 800.625644][ T31] Sending NMI from CPU 0 to CPUs 1: [ 800.774278][ C1] NMI backtrace for cpu 1 [ 800.774298][ C1] CPU: 1 UID: 0 PID: 27719 Comm: syz.1.5646 Not tainted syzkaller #0 PREEMPT(full) [ 800.774321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 800.774333][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x2f/0x90 [ 800.774364][ C1] Code: 8b 04 24 65 48 8b 0c 25 08 70 9e 92 65 8b 15 f8 be de 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 <74> 4e 8b 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b [ 800.774382][ C1] RSP: 0018:ffffc90000a08a88 EFLAGS: 00000246 [ 800.774399][ C1] RAX: ffffffff899a233a RBX: fffffff0a3da8872 RCX: ffff88802e8cda00 [ 800.774415][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: fffffff0a3da8872 [ 800.774427][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 800.774439][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: dffffc0000000000 [ 800.774453][ C1] R13: 0019999999999998 R14: ffff888039c73ea0 R15: fffffff0a3da8872 [ 800.774468][ C1] FS: 0000000000000000(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 800.774483][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.774497][ C1] CR2: 0000000000000000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 800.774513][ C1] Call Trace: [ 800.774522][ C1] [ 800.774530][ C1] pie_calculate_probability+0x3ba/0x7e0 [ 800.774571][ C1] fq_pie_timer+0x288/0x5b0 [ 800.774588][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 800.774608][ C1] call_timer_fn+0x17b/0x5f0 [ 800.774634][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 800.774651][ C1] ? call_timer_fn+0xbe/0x5f0 [ 800.774675][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 800.774706][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.774724][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.774743][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 800.774761][ C1] __run_timer_base+0x61a/0x860 [ 800.774784][ C1] ? ktime_get+0x3e/0x1f0 [ 800.774811][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 800.774832][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 800.774864][ C1] run_timer_softirq+0xb7/0x180 [ 800.774888][ C1] handle_softirqs+0x283/0x870 [ 800.774926][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 800.774946][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 800.774978][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 800.775002][ C1] __irq_exit_rcu+0xca/0x1f0 [ 800.775018][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 800.775041][ C1] irq_exit_rcu+0x9/0x30 [ 800.775055][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 800.775075][ C1] [ 800.775081][ C1] [ 800.775089][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 800.775109][ C1] RIP: 0010:smp_call_function_many_cond+0xd3c/0x12d0 [ 800.775129][ C1] Code: 01 31 ff e8 86 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 31 5f 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 <41> f7 04 24 01 00 00 00 74 1e e8 15 5f 0b 00 eb e4 44 89 e1 80 e1 [ 800.775144][ C1] RSP: 0018:ffffc9000a957340 EFLAGS: 00000246 [ 800.775160][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8349 RCX: ffff88802e8cda00 [ 800.775173][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 800.775186][ C1] RBP: ffffc9000a9574c0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6 [ 800.775206][ C1] R10: dffffc0000000000 R11: fffffbfff1f460c7 R12: ffff8880b8641a48 [ 800.775221][ C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000 [ 800.775252][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 800.775285][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 800.775310][ C1] ? rcu_is_watching+0x15/0xb0 [ 800.775333][ C1] ? rcu_is_watching+0x15/0xb0 [ 800.775353][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 800.775380][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 800.775401][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 800.775431][ C1] ? free_pgd_range+0x144b/0x14c0 [ 800.775462][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 800.775490][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 800.775514][ C1] tlb_flush_mmu+0x1a7/0x680 [ 800.775547][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 800.775575][ C1] ? free_pgd_range+0x144b/0x14c0 [ 800.775605][ C1] free_ldt_pgtables+0x17b/0x320 [ 800.775630][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 800.775663][ C1] ? down_read+0x1ad/0x2e0 [ 800.775687][ C1] exit_mmap+0x17c/0xb50 [ 800.775712][ C1] ? uprobe_clear_state+0x20f/0x290 [ 800.775734][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 800.775757][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 800.775786][ C1] ? __pfx_exit_aio+0x10/0x10 [ 800.775820][ C1] ? uprobe_clear_state+0x274/0x290 [ 800.775843][ C1] __mmput+0x118/0x430 [ 800.775874][ C1] exit_mm+0x1da/0x2c0 [ 800.775898][ C1] ? __pfx_exit_mm+0x10/0x10 [ 800.775932][ C1] ? rcu_is_watching+0x15/0xb0 [ 800.775952][ C1] do_exit+0x648/0x2300 [ 800.775978][ C1] ? do_raw_spin_lock+0x121/0x290 [ 800.776001][ C1] ? __pfx_do_exit+0x10/0x10 [ 800.776022][ C1] ? cgroup_freezing+0x20/0x350 [ 800.776054][ C1] do_group_exit+0x21c/0x2d0 [ 800.776078][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.776099][ C1] get_signal+0x1286/0x1340 [ 800.776141][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 800.776173][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 800.776206][ C1] ? __fget_files+0x2a/0x420 [ 800.776237][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 800.776266][ C1] exit_to_user_mode_loop+0x75/0x110 [ 800.776292][ C1] do_syscall_64+0x2bd/0x3b0 [ 800.776313][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.776333][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.776352][ C1] ? clear_bhb_loop+0x60/0xb0 [ 800.776374][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.776392][ C1] RIP: 0033:0x7f6ac398eec9 [ 800.776408][ C1] Code: Unable to access opcode bytes at 0x7f6ac398ee9f. [ 800.776418][ C1] RSP: 002b:00007f6ac4831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.776437][ C1] RAX: 0000000000000000 RBX: 00007f6ac3be6180 RCX: 00007f6ac398eec9 [ 800.776450][ C1] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000006 [ 800.776462][ C1] RBP: 00007f6ac3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 800.776474][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.776486][ C1] R13: 00007f6ac3be6218 R14: 00007f6ac3be6180 R15: 00007ffc171f4d48 [ 800.776510][ C1] [ 801.560873][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 801.567913][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 801.577080][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.587236][ T31] Call Trace: [ 801.590533][ T31] [ 801.593477][ T31] dump_stack_lvl+0x99/0x250 [ 801.598086][ T31] ? __asan_memcpy+0x40/0x70 [ 801.602695][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.607910][ T31] ? __pfx__printk+0x10/0x10 [ 801.612546][ T31] vpanic+0x281/0x750 [ 801.616547][ T31] ? __pfx_vpanic+0x10/0x10 [ 801.621089][ T31] ? preempt_schedule+0xae/0xc0 [ 801.625960][ T31] ? preempt_schedule_common+0x83/0xd0 [ 801.631533][ T31] panic+0xb9/0xc0 [ 801.635295][ T31] ? __pfx_panic+0x10/0x10 [ 801.639757][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 801.645280][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 801.651485][ T31] watchdog+0xfd2/0xfe0 [ 801.655696][ T31] ? watchdog+0x1de/0xfe0 [ 801.660061][ T31] kthread+0x70e/0x8a0 [ 801.664180][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.669044][ T31] ? __pfx_kthread+0x10/0x10 [ 801.673674][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.678902][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.684201][ T31] ? __pfx_kthread+0x10/0x10 [ 801.688850][ T31] ret_from_fork+0x439/0x7d0 [ 801.693474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.698609][ T31] ? __switch_to_asm+0x39/0x70 [ 801.703426][ T31] ? __switch_to_asm+0x33/0x70 [ 801.708231][ T31] ? __pfx_kthread+0x10/0x10 [ 801.712840][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.717642][ T31] [ 801.720996][ T31] Kernel Offset: disabled [ 801.725334][ T31] Rebooting in 86400 seconds..