last executing test programs: 3m42.218596459s ago: executing program 0 (id=2820): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x100) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3m41.235686254s ago: executing program 0 (id=2828): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000ec0)="9925f561", 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000fc0)=[@sack_perm, @window={0x3, 0x1ff, 0xeed}, @mss={0x2, 0x3575f4f3}, @window={0x3, 0x30, 0x9}], 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 3m40.613142644s ago: executing program 0 (id=2834): r0 = socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 3m40.157255235s ago: executing program 0 (id=2838): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00001b00bfa20000000000f8ffffffb703000008000000b70400004200000085003ca1c000000700009500"/74], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x7d, &(0x7f0000000100)=""/125, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x10004, 0x6, 0x6, 0x2b}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x1, 0xf, 0xb}, {0x3, 0x4, 0x9, 0xa}, {0x5, 0x5, 0x2, 0x6}, {0x5, 0x5, 0xb, 0xa}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0x0, @val={0x8c, 0x10, {0xb04, "8101c39cce7e", @short="3961bc13d6679f1e"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf256600000008000300", @ANYRES32=r7, @ANYBLOB="0c009900050000006500000008002600e015000008009f53f3c9047ea009d79b19ee642dac00040000000800a0006d0800000400b800"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="06499db5387de5c9785c81b785ed2910d0c65274bcc00e8e123808e33bf4a41ab51c727135568191667e4aca9b3a1c4b60824bd5a33f4086c1565c020d6a19745249424faf6d6ddda8794543058d827c100b472a53d0c3a9219f45e70562e84d5d4537e48a6d7355b9a510baaa9fe6da04dc0255a474e83399732023772f0928313c7eef38d53eed570b1e25261d3a6c95843f0b610e8e544f828d4023a92b2bcfdb5a8e167f3a1327736d67b369e00f9acafb0792a17582b62d5012365aeaf16204e32a12a5a2e5999dc0de", @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r11, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000640)=0x5) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r14, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0)=r12, 0x4) 3m39.61176228s ago: executing program 0 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000800000004001680"], 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4048004) 3m38.870054457s ago: executing program 0 (id=2851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000013000500"/20, @ANYRES32=0x0, @ANYRES16=0x0], 0x48}}, 0x0) 3m23.843624194s ago: executing program 32 (id=2851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000013000500"/20, @ANYRES32=0x0, @ANYRES16=0x0], 0x48}}, 0x0) 2m43.554560927s ago: executing program 3 (id=3236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd700000dcdfa075bb4b3b571fa385cfac8800", @ANYRES32=0x0, @ANYBLOB="020407000000040014000300626f6e645f736c6176655f3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) 2m43.394768933s ago: executing program 3 (id=3237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa1c7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @ringbuf_query, @tail_call, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xfffffc00, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x1, 0xc, 0xa}, {0x5, 0x4, 0x10, 0xb}, {0x4, 0x5, 0xd, 0x5}, {0x1, 0x5, 0x10, 0x7}, {0x1, 0x4, 0xa, 0xc}], 0x10, 0xfffff800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xda, 0x84, &(0x7f0000000600)="20abe7c7de59c92b628707553f39a8f19d8cf838cc6ebd5e2454a03c8f27d470973e814a4da4d64e5b4d1feab9071ac691be49d0dcf458cad99e781aed29ef8750243e0923e679f6d8534968ac3fe3c8644d476b08403e32b5fed2538cf415a08eff7aff0696717c4b761015dde394c1ba9ff28b6195344ec79670d90c1abb662f26ef8ed4b9d7f0d2c5552f751cadf86a3370b215243ac1a448b3a51a2d93392c1c6e6945e90fe636a5935551ef1ce880efd8b6e79f0375099217e8adf786af729f3d3da7f35c07326f47b18bf43ae7bf7c9498bb497eed470c", &(0x7f0000000700)=""/132, 0x4, 0x0, 0x4c, 0x14, &(0x7f00000007c0)="df26a23744d0a8e1959dc41162568e871bd278f30c882c2af8b047a1f6923e29bc8aa06694edc9620c112ade1c2b734d194a811382455ed2e9d7e501d3134aec720c798108c51b9a0d43ce55", &(0x7f0000000840)="79cfa639e1c7d3bc4d135d5233d92a80f6936fa3", 0x0, 0x0, 0x8}, 0x50) write(r1, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c90", 0x28) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_VNI={0x8, 0x7, 0x80}]}, 0x24}}, 0x0) 2m43.210002865s ago: executing program 3 (id=3240): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@getchain={0x5c, 0x66, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0xd}, {0xc, 0xfff2}, {0x8, 0x6}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0xf}, {0x8}, {0x8, 0xb, 0xbd}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7080fedbdf25050000000800090002000000ff000b0a04000000"], 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="c3a80f6df0570f9fef2897811ffaedf081e36e1c561225889795be151cab73a0cec5d616a29f763ef0329c0f3ca2270cca465eb97368ead8ef7233b81d9b6fd1e31e292f1eafa7789c26e3e249f3de0081b9f05bc76652fe0a3d8c7c1ee66c611389e0fca79cf16f5f554605d4ffddd07286a2d12e9f17ad96cfda60c2d472329b22b0f0db5b02f51f87c886112f8894cb089ade96", @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x9) setsockopt$inet_int(r15, 0x0, 0x21, &(0x7f00000000c0), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$l2tp6(r14, &(0x7f0000000000)={0xa, 0x0, 0x1c, @empty, 0x3}, 0x20) 2m42.804395252s ago: executing program 3 (id=3245): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="02fc4b1228b6dc567c00e714e38ab259cccb5b036d45fb9f3dcb6f0c61800d2f8803ba0786294e94e20121f53bb3f31bbef83801e8f05c8ec1f38dd235e2cf6c69d6686097f9db44373a61c5362535756310c8cdfa76b740ea741d4d4ce4d3bfb42c9c5c9d9e15274e862e3021647fe01d1ea75d6a2c4c82950adc483ed1127550a6e4ad8d74cdebe5aae4d6256543c77fa086d99e38dae898eac100d781cdc1b4d341bfe638a58705f304172e57fe2b3493d60041e7c7a3c3fff93025419c25c97cca1db22026bb"], 0xc8) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="02fc4b1228b6dc567c00e714e38ab259cccb5b036d45fb9f3dcb6f0c61800d2f8803ba0786294e94e20121f53bb3f31bbef83801e8f05c8ec1f38dd235e2cf6c69d6686097f9db44373a61c5362535756310c8cdfa76b740ea741d4d4ce4d3bfb42c9c5c9d9e15274e862e3021647fe01d1ea75d6a2c4c82950adc483ed1127550a6e4ad8d74cdebe5aae4d6256543c77fa086d99e38dae898eac100d781cdc1b4d341bfe638a58705f304172e57fe2b3493d60041e7c7a3c3fff93025419c25c97cca1db22026bb"], 0xc8) (async) 2m42.592270869s ago: executing program 3 (id=3247): syz_emit_ethernet(0x132, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/408], 0x0) clock_gettime(0x4, &(0x7f0000000000)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0xf, "556feb4bb7b5a962cabbbb20dac228"}, &(0x7f0000000200)=0x17) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 2m42.201790224s ago: executing program 3 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x1010402, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x2, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r6) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000084125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8001}, 0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2m34.426108453s ago: executing program 5 (id=3290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00011100000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000001042088be120000030c000800050086dd88a888be000000021609660501000000000088a8080022eb000200002009f00802000000000000020004940308006558000000020000000000000000"], 0xfdef) 2m34.053968924s ago: executing program 5 (id=3294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async) 2m33.798175473s ago: executing program 5 (id=3297): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) (async) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) ioctl(r0, 0x8b2d, &(0x7f0000000040)) (async) ioctl(r0, 0x8b2d, &(0x7f0000000040)) 2m33.294048093s ago: executing program 5 (id=3303): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) r3 = socket(0x11, 0x80a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318003f0600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001bd62f553200d3751b67700547cd314aa25f08caae5cf98c82b154378fdb00e3c32b398413ae5b45378883d0f76e8ca04cc5f06c7761aac45116cfc421e41ada0af5e1176f49277a1a849a1290f85bce063d518e7416ec2420d0cb8d209216e129f55bbe1723a9f61eb0ab8133f4acf39ab807d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000907800001302fe0477010000"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c00038004000500"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0xfc, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) (async) socket(0x11, 0x80a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) (async) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318003f0600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001bd62f553200d3751b67700547cd314aa25f08caae5cf98c82b154378fdb00e3c32b398413ae5b45378883d0f76e8ca04cc5f06c7761aac45116cfc421e41ada0af5e1176f49277a1a849a1290f85bce063d518e7416ec2420d0cb8d209216e129f55bbe1723a9f61eb0ab8133f4acf39ab807d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000907800001302fe0477010000"], 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c00038004000500"], 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0xfc, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 2m33.034961137s ago: executing program 5 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0xad7f585b85390de9) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) splice(r8, 0x0, r8, 0x0, 0xd, 0x0) sendto$packet(r5, &(0x7f00000002c0)="8c673949135e7af175a15c8e7c6174ee516bece6b3bfe117d890e4afa36ef4178b66fc29602c4fe54650564a99878891ed662b9a89bf91c4b425411a90dd09145aec2b1e42e06b438f127edc8fe7b022713251d4c9705693fa03a884bc7ec12497e45fe7bcdd78a304c5a544fa3439ce75a7d3ac0c2de1c3866b95abc9fa1ec3ddaec5d723308be81c2b6476f592cf13b064701499ef730194fd329d3572fed3b58b06702312dab9eda7094744774d9091f4", 0xb2, 0x0, &(0x7f0000000380)={0x11, 0x17, r6, 0x1, 0xd, 0x6, @local}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe67, &(0x7f0000000ac0)=ANY=[], 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000200b4010020001208000100767469001400028008000200060000000800060003000000caeed60a2a64d96d9944b4447773307a09834251c3ca9f4b8ee6dc69ed35a61013abbd3e733a6c8772f5538a1a04cfffb00b4d4cc10537879bd899be17ae9efcca4cf0653b1f5a21ab87"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m32.83530215s ago: executing program 5 (id=3308): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m26.889476808s ago: executing program 33 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x1010402, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x2, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r6) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000084125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8001}, 0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2m17.756217428s ago: executing program 34 (id=3308): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m52.010138153s ago: executing program 7 (id=3628): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r10}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) 1m51.713548235s ago: executing program 7 (id=3633): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32], 0x24}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe81}]}, 0x24}}, 0x400c8c1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r4, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32], 0x24}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe81}]}, 0x24}}, 0x400c8c1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r4, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 1m51.43808103s ago: executing program 7 (id=3636): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 1m51.148617543s ago: executing program 7 (id=3640): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000070290780a0101021681000111ff907800000000"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m49.378486925s ago: executing program 7 (id=3657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) 1m49.000824115s ago: executing program 7 (id=3660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0xb) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000240)={r1, &(0x7f0000000040)='):-\x00', 0x10000, &(0x7f00000000c0)={@_ha_fsid={[0x3ff, 0x796]}, {0xb, 0x8000, 0x7f, 0x5}}, 0x9, &(0x7f0000000100), &(0x7f00000001c0)=0x9}) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="96c3f1", 0x3}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f00000029c0)="93", 0x1}], 0x1}}], 0x2, 0x4040040) 1m33.818464535s ago: executing program 35 (id=3660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b704000000000e006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0xb) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000240)={r1, &(0x7f0000000040)='):-\x00', 0x10000, &(0x7f00000000c0)={@_ha_fsid={[0x3ff, 0x796]}, {0xb, 0x8000, 0x7f, 0x5}}, 0x9, &(0x7f0000000100), &(0x7f00000001c0)=0x9}) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="96c3f1", 0x3}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f00000029c0)="93", 0x1}], 0x1}}], 0x2, 0x4040040) 44.774993545s ago: executing program 4 (id=4162): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e31db80000d3382f"}, 0xb}}]}, 0x34}}, 0x50) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002820752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003800000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) 44.407335815s ago: executing program 4 (id=4166): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a0101"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xdc34}]}]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) 44.150635697s ago: executing program 4 (id=4170): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r2}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r6, 0x1457}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) (async) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18) (async) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 43.774078992s ago: executing program 4 (id=4172): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) close(r0) (async) close(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4117, 0x1015}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000000000)=""/61, 0x3d}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, &(0x7f0000003ac0)=[{0x0}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/185, 0xb9}, {&(0x7f0000003a00)=""/148, 0x94}], 0x4, &(0x7f0000003b00)=""/4080, 0xff0}, 0xd58a}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/28, 0x1c}], 0x1}, 0x9}], 0xa, 0x2000, 0x0) (async) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4117, 0x1015}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000000000)=""/61, 0x3d}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, &(0x7f0000003ac0)=[{0x0}, {&(0x7f0000003900)=""/39, 0x27}, {&(0x7f0000003940)=""/185, 0xb9}, {&(0x7f0000003a00)=""/148, 0x94}], 0x4, &(0x7f0000003b00)=""/4080, 0xff0}, 0xd58a}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/28, 0x1c}], 0x1}, 0x9}], 0xa, 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xd0}}, 0xd47bcbf51489e025) 42.6464648s ago: executing program 4 (id=4181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000000)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @from_mac=@broadcast, {0x2, 0x40f}}, 0x0, 0x101, @device_a, {0x0, 0x6, @default_ap_ssid}, @val, @void, [{0xdd, 0xe4, "7c627aaeed28b5f14d836869933de1ea931f00f80c300341be293770b93c04cf94d97e0d52a3e031055cdc3b9f14b2b079df3ba5a9ced5b3dec0cf3fd469c693fe894925453723ec6d774c8e916c197b61fec0d382eabe3ea1d4a25ec65d3a8bad8e29d99e88c648795d502e1ee4fab9e25e4dec978345b72b0d38cd86023e687168c44bbeaf18a0fdf746b5a5b5f34f5bb17fa0f6ca59bd40ae458c3559cc1b3e858def039a004c9df24ab8fa5f3e0faf9bca708f8c1a7107d840b3682b341eda91dfe3c097ed8a30dcf868d634844f5183b99d7ec0302bee6f61c6787c8a94cc0355d0"}]}, 0x112) 41.85604995s ago: executing program 4 (id=4191): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 26.758829394s ago: executing program 36 (id=4191): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.905659887s ago: executing program 1 (id=4511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000eb6ce42ea657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1a0, 0x8, 0x7f02ae, 0x1a0, 0x200, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xa, 0x17}}, @common=@inet=@iprange={{0x68}, {@ipv4=@rand_addr=0x4, @ipv6=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@private=0xa010100}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2, [0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x8, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 3.575666573s ago: executing program 1 (id=4513): socket$l2tp6(0xa, 0x2, 0x73) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) 2.485481551s ago: executing program 8 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r0], 0x38}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYRESHEX=r1], 0x94}}, 0x0) 2.269820376s ago: executing program 1 (id=4527): r0 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 2.184246498s ago: executing program 9 (id=4528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ba8f", @ANYRES16=r7, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 2.043179528s ago: executing program 2 (id=4529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1.934858397s ago: executing program 8 (id=4531): r0 = socket$inet(0x2, 0x5, 0x2) close(r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$inet(0x2, 0x5, 0x2) (async) close(r0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) (async) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) 1.934028423s ago: executing program 1 (id=4532): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0xffffffffffffff7c}}, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.809684736s ago: executing program 9 (id=4533): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) listen(r1, 0x7fff) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x15, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 1.802058395s ago: executing program 2 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x7, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0x1, 0x4, 0xd, 0xfffffffffffffff0}, @ldst={0x1, 0x1, 0x4, 0x1, 0x6, 0x6, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x12cf, 0x64, &(0x7f00000003c0)=""/100, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x8, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={r0, r2}) 1.750976974s ago: executing program 6 (id=4535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="40004c060a000200aaaaaaaaaa0c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="f2cb097efffa0180c200000086dd60081f2000783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff33732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf636b41e5af180200010000000004002600040000000101fe906d17efe3"], 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.594849541s ago: executing program 8 (id=4536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000009c0)={{r0, &(0x7f0000000040)='geneve0\x00', 0x200180, &(0x7f00000000c0)={@align=0x3, {0x9, 0xff81, 0x3}}, 0x7ff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xd4d1}, 0x3, &(0x7f0000000480)=[{0x2, 0x1c, &(0x7f0000000180)='\',{\x00', &(0x7f00000001c0)="fb1310006d6cfcf709645d2acc3e8c4c790d08909750ecc11fb0dc3042990a706d0e83f3c9d2872f42508b703a1e8a5f8733f502aa88601f5409b5ca431bfd14182f23c5f0a6df5d632f7e06de482ca6659a766881340a5a052ff38c9dca7caa21763b339f0f620128fcf808e37b9fbf05381808741462dc07856fd7a1c4a78c1d67e00ad17502a298295fae597ba1fe86de46", 0x93, 0x2}, {0x1, 0x3, &(0x7f0000000280)='macvlan0\x00', &(0x7f00000002c0)="f6208e18f3df88e0305c3409c5c954ef80ac58ce097798427ebcd09385372be2a4b0e4adf78cfd6d3829fff45cfc677952d34c735c2f652dafdf65af417bfd4f5961c6f9899986505254543b", 0x4c, 0x32}, {0x0, 0x4, &(0x7f0000000380)='][ (&\x00', &(0x7f00000003c0)="19b00de725298b8ef468138cf39a2cba67ae63dafa766d0536f10ff62351b844d4e8a6b7421bcef0f110de13c34f6998e27e09b1be3b3d163720c47fb2eea4ff3cac1d02643f5ca7cdce9d15760109d4744b9ecd73c38e43262b1ab08df05809918200e329f26f2d3528b224890565734c2c6d73485b4e14af45cc53432f0e825147e9e87ba003cbc16d0c42db364a9942a2e5c557477547e511f04b3d301e61466650681d1facc8b2a693fd147cc66f", 0xb0, 0x32}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 1.435615644s ago: executing program 2 (id=4537): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) accept(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700000000000080000001800018b1400020073797a5f74756e0000000000000000001c00028018000380"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000000c000180080003000300"/26], 0x20}}, 0x4040000) 1.415191966s ago: executing program 1 (id=4538): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000003b00)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb12cea5a4bedb7a4b1fa9897a86d3add2db7208aa10343df8ff0f4d6325549c6e3d0f819ed23064e15279e9f5aa7113dc2542a54817c862c433f24c", 0x78, 0x0, 0x0, 0x0) 1.299289007s ago: executing program 6 (id=4539): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085faff00640000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.260836199s ago: executing program 8 (id=4540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x28, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.097688218s ago: executing program 6 (id=4541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000280), 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000700160081000000950000"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1.023039499s ago: executing program 9 (id=4542): r0 = socket(0x400000000010, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0xf0, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfff2}, {0x9, 0xfff1}, {0x8, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x800, 0x2}}}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xb, 0x7ff, 0x4, 0x1, 0x5, 0x4}}, {0x4}}, {{0x1c, 0x1, {0xa0, 0x5, 0xfff9, 0x9, 0x1, 0x81, 0x209, 0x2}}, {0x8, 0x2, [0x8c00, 0x800]}}, {{0x1c, 0x1, {0x6, 0x3e, 0x79, 0x5d, 0x1, 0x7fff, 0xfff, 0x5}}, {0xe, 0x2, [0x1, 0x9, 0x400, 0x6, 0x3ab6]}}, {{0x1c, 0x1, {0xe, 0x6, 0x3, 0x3ff, 0x0, 0x2, 0xb6a4, 0x3}}, {0xa, 0x2, [0x4, 0x5ed, 0x2d]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8b52}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xf0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.022646334s ago: executing program 8 (id=4543): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000400)={r2, 0x0, 0xe539, 0xfffffffffffffffc, 0x0, 0x1, [0x8, 0xfffffffffffffffd, 0x2, 0x7, 0x0, 0xd5]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000003600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 906.43014ms ago: executing program 1 (id=4544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="0027f80000006d99507fc9c3177a44bdcf2a3626df022a721b6d98fb93cc27bcb75526e54aef390c4483365277a2c87823b8d282ad63a1f1149a4c74883bed8e14983c320f123717375cab4eee13d5c54c9170dfc3a34915c5f099ca9a097643850f165ba12b35c4cfe3bf83f9e134846765eeb5f71b0e7dfe00aa0ec6296ea0a3100de4da633c4683de44ffaf5197c90aafd3d3763254c17aa23e7125aad160e6940c24943cfdf70fdd67515ebc12", @ANYRES16=r5, @ANYBLOB="000227bd7000f9dbdf250c00000008000300", @ANYRES32=r4, @ANYBLOB="0800370002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24009814}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0xa}, {0x10, 0xa}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa231}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4044) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0x3, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x24084084) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000000c0)=0x200000, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000740)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r9}, 0x10) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f00000004c0)) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000380)=0x68) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18081d00bfdd6d9f15849c9c410000000000000400b3", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000044000000bca900000000000135090100000000009500000000000000bf9800000000000056080000020000008500000006000000b70000f5ee3456b48b8903da3b8b9f4c4ce400e4271d85"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 850.977111ms ago: executing program 6 (id=4545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 602.174489ms ago: executing program 8 (id=4546): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x400) r3 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r3) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002c80)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003040)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000003140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003180)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000003280)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000032c0)={0x0, 0x0, 0x0}, &(0x7f0000003300)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r18 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="2f9794b67204351b8117a916558ae9a1a3f61f8db2605800bd5a6ecdf145e527df8ce1414321e0c11c8813dc90e98ebcd0a8f87bd86bcca070e5600010ffb2067f7906ec53c1d18215422c9138afeb54a569ad3e07355cb3f8eff92119f633a844aabbd33a69e7ae110b27579609c3736ac39863c8ee519d4221a7950bd7f99c65a82836a55147972fa9aaa135278c923b784b5e7042449f5041e3dc8f331bb29c81b96c9b927e0f6e77abbc2ac4b1d820daf3c112ed5085e3e39c1c0c80ffa238b84f994c79bf01a1859241cacf092bb1be618763b662bc57871482cc807c5a087317b8aa9e8b3b634957164a4176a4", 0xf0}, {&(0x7f0000000480)="564836fea8c0e411db995980053ef0ea1432be4352e4964dba277056374e3718809251a5e0810b334a6a2061477f78400a2f79fc345e1eb8dfb5b3f194571abf4cce08f13aa736bd4b79", 0x4a}, {&(0x7f0000000500)="11927c0569110990ff08f215daa319db2d2146f0ec19e51dbb66d4072fdf821cef95ce15e00f793d755cbf9aef99e905eb7cc8056926ab41114d04e5e5dec4cbb45a1176420be685f2b96b715f78dff3a7d0061c5c235a387b8d7b8fe4935b1a1dba99c7c90e5861b4", 0x69}, {&(0x7f00000005c0)="d874795694b02dfb02d38f9adb17adf8f5c1aceab0e6003037837da14dd1442d96bc809716768b58dcc60bd4d81609ccf9720767b100704fb0c55723c644333301ef75fbab53aa828f67e8635990abf2328b6cdf886c9dfe4ee116cdc04e0b9a3681333a11b4536ef597c01477", 0x6d}, {&(0x7f0000000640)="7e85c010a28769bc39237be666610f4abe8946ef36af96fd9825cd76f900ba4708f423ea7714bd67ba451d2c9d10df39ca46059ced4bf0911a1f8909e567729567be934872c2d8b9f421346735657d2a91198125120e22807539103697e42ab1e0d5c1c991cdbe0b264ae8c8ca242995cf739b9574add5eae10fac576a53ba7c70127e5f6daebd59de2da56f7ba71eb33e", 0x91}, {&(0x7f0000000700)}, {&(0x7f0000001c00)="a0fd25c15150ae51ab640c1dbd0050846864e982a1a6026f4302b83417ad4849c91f8920c0c3f46650059058e6403ead30a9245d3a7d82b73ef4860543e0fd5ee192f465a865a921c3661ca1127d64c045140d7757db044cd6b7e3648dba7c2eb0eb9e67fab05d6a171b36246cf3614d9fe7b4996299099c546188b172ce030fcd739cdfd36e7ae3dbcb3be34f634d68409b236130bf511605887f99dbdfc26a069db8eedd11afec79934b4c438cd76023505e726da032219905bef5e2808a426a0a9901b67368afe74bf360009e531951fa726d6e554fc3df65d16919e3511a8c13188590fe876fa376fbddac27f0b33efbeba0ac5f5d68941f89edac80b39eaa73c34b61d64fae4e92c1ecd79652e0d9b0776337ad104841444d12093ac856ed8e102a93eeabe85422c784e972bfbf8cd5050e13792f65c5c8e48300b7465b0a54045dd9c8f8119cd14fa023fd79c427f0eb561ad8f616fa37e07336c2aa60c219a4a8526f88fd419764cd1474baac6634693fb4cbf58b01d39bce3ae37eb92a66f2897178a2d696c768ef62723f52bf92cbbfa518a1ade4cb41378ea20dd0f7a78487bac16b444890f55f22477cc0b8e7b486af2c1d4923fac6865ef8e04556ba1172eac82ac4a01fc6ce976ae9477c8d8680671882b26e7091e296b03450b177c7e8676e0f97ccd488bce12da1b8d4d2314522a1ddc13aea7b97caf81882cd5e84f58513d2f3d053b3d2606e596d93cba82b80c7537a406713e7ffe6b9d35612c1aefa1bd8c128170517a3d6f8d47d3877d8f5b81740b7c8bd5cf99647aaa09b815d796733abd5d84643f0ae74a03937fa73d880e6ac4f6cb95024eff61ac24db13ca6c82aa17a07559d74864712c5ab9b454e55decb00facc7b7b5dbe84ccef542903a8314590912c820e7990ae634ec42d06f330e1ca1dcdabd05fd020e4b4f873244e3a6413016c53b4f36353e4051edc62bf0d41fc2cf583199e762dac564fae360c963465591e3379bf46802d0a54730bf3657f2528d0399c9a79b6bb186d5aeee2fb5d7ea954e146e41874ecd5d8f8a8b885151f4c6d639ba397a7568dc00e56d18e56548537bf23a2583bd22bd1f295b8356bf88e489652eab1c4782dcd5f9ee8763ac533c8148552ff0bcdc88030034adfb726fa811efbf5f084e795bd07d77c28bbb7b3a56a83e94a86a58c3c2ebdd7cfc8cb5fc5f3c4a44d1f14fd835b4a282f353e115991e676cfcfcb3ab1e9eab7106ce6c8195ed73cdc35a1d6d62e33fa3d33eec77eb5ee3b1c4a59d2fe68a2330df70d75142c3955d49a0267ab9ef5ff05ccb319bef0a94a24f811cf0a134b1b65349cf374a2165f54266c89ae714cebbd4ed860fa0af7d44bdc61159603792c97970801275916f77970e62093c5ebaecafb468e1833acdbed394986d812728f8fe028bfe1e28454b4101c705d93b913fdcea515ab8fab1764508f0a146f3b731bb1501b0b95b704e8aff6e39dbbbabf7cd58bbf5ce0003c322d52ffad3577209be5ab57165fc4b9a2b18294b1e79e13e1ac8cafb6624b9dadc55718dae0a9b43d62a5324a70639b6c17e52a81c1418fca9f1b7f3225611d11e0eabc2803239da2709c52f85877a04a26e28ce8ab04c2793983ebe0bd35d0115a6d19afcbe74b3af5fbab24774c35e5bde6db2f77cfd6dfe3cf54b805dbaef60ed2fddb831edcab55396d69e2df9f64e746c20cb1db76bcdf3cf191e8295d711ad108cefcc62ab7bd48a4dc7567b55817cbb63e9aacab712829358336d2a7a6ddbfab4d9ab91c909418143ae9937dfcd2ee42f9fd61adf4a3e2951395d6e7a799163a4dbf53c654f9fa9a99c42e214410a6deb94b7cd1a8800b6f4e8555fd8415b94a57a9af1f3fa2fe5cf8f87b7af2ed46bf599b17737e198fff385c43dd2e8e865b8d59a0242801f8fa135106e3450353182730b1370b92e8dcf26e12bcd73f42b61d177a76fbc32e6315841012e1890eb81bc7eb9ad868a465667daa76ab17ee62bcecf6e47aa033040adbb22654f8ef2b2186480f06f1a8a116a76196bc8b492209ed4e9f9eaa4395477da928cd0a0b555825ac4e11ea6692fe5059af6e3022f7abf669ece2a3a855506925069213f0a83702f7045ea585c75acab18400b1e9c91ee1cdb9a37f9d3d62bc8ca741a9456a49429abee843aed704e333b8750da1f9554518c6e29197573829f52b0d1422c4ac99ab10152d5af5a4919879fea6253de233771469b08133c8657ccf6e6a354d104358791b85301790a4d468b33c731ed2cc2ba753a7d970e2bcb1f7ed4affe3ef466c9df3ce17a38abe696a34d40e678762a4cde95cadf472aa72fb6bcd22e072d7d7f74c86828a4416c042403389bbee93e7877f83bfbac42b374c282eac9f495b00d790064fea6656785febac11c90cca3b8672ab24f3117a43cdada2b5cbe44a7c193fba2a75bba99aba09b8c734597cc34ebeae3d5eea75f0a3d550bd0aa3b0b8e226658e881285393660002ca0741e4d31fa5951a93fa6009641e68c1941eeb7ac9d73d456423d6a82b614a621ee681f461422b117b9e48298a0bcd0adab31bbd5a61e83294061876645df1cf0c173c462ce5ed2366a0c47f090c95c64d78edee93c92e5046a9b0c22ad2d1683e8c95fe80d349a6b002322d13aa27f6d1c3379204a363cec06b9a4589003854ca3420cc197ee69b068b8e0ae7adbb3c7b204344c4df5cbfc79c7a8f7112517798a21f716994ae37b83bf90b32f87f3e257060666a00e83f817080866dbae8939f9e98029d98800623c6c3abe633ec439fabe0247185b88176224361a0cf058d3e25ec178dc6d1d3ff9cbbc7c441770e3fb44169bb76213a4dc94ec9cbbc4b37af7999433825a699964c5ab8e2f4f2c4d26bd2e5323a2fb6851a03dbd218a099506908e5657e0081cd3ec66378dc269ff479ab631317ab4af681394f1c8c2b47ca4141e9e784f74d39266671a7a368853f2b877220854252c001b9047a279937b45a4488268d9d047c1f6434dcbf3985fc68288482cbb0b9f4e33dc97dedc9bd4b234fa5cb1e28d7416fbe4b16db3c731e54f5322eef1e30e410131de54a01896fa29189efdcf299461f6971662477227bde39b139cca617320582843f0a2a6c5af83ad590d7a7f65b4c8fff6b0da92787f668773f7f02c8a21a5d66e9272a64c9c9e8beba3c650fac1d520a1e72fd1cbabb9550eff5ef86255ba0dfdb0ced35e76e3cc951f761dd8cf13e114ca6764fcd5f8712439d144d0efdd25973b411938176243a1fe48960de2956eea5fd756ede082a9ce108155c3c66da670f055f6c27b0ae975df6ed99e2459b66a4285cd572d5cf7440307d88759cc9cc81aa6d6fd7240e9717c59fd65d201b2d22e2f92d569fc51e5f53d3013852c79f962721486c8e5c89c6addd3c583d0cb7c54af8a46066e0aa17a340bcdd69d62299189a488a4a9b12280c0274e1a89f2c2a8b004f024d9125431e2d493306d19454478ca5af11ccca84736356297422963e56f0fc2f929a3f78f4966861e592190f9362736bb8c271e6260a194420254514946395850d0ead9e06fc2cac269cc31c7ffa95ceda2cfef58e2d97c21e66e3d84a3b12a657c496da4a26e35e0d879bdc254a15ee656214bad3a34803d299b88d6ff7a13f61aa95cfc865ff93119af7bdbb8ab384ca2fb853b2ec14f8f82eaeb876038f20791a6a0d8f312b53310f5722ff500c4f1c18f799e6da03c4c055bcc1846f4fdbaa0930d1477c14f0510bed45c37c59966f853a8c5fe5903ffec6407bbcb715c217f17f9171e8d3cd818c2943f082c2e5b240c83f0ee089d333eb7dc5f19dd97401cccba76a6ed2869abd0943b3c2c49956d5b7b2e012a958a73bbe538dcd891dd7964f96453d5849573d9083f8143c2f7f48554d91dbe7c81030a8e44c1680d850eae160f456ee39574e0a8f162dd3481686ee7a8090424c059802e793927663f88b66cb9ba55f9d44a295ee02a6960ad12d657e7240823fde0ce2a9855cd21c46dca183bd9c4552614972efa7c4b16b181054d234c8120ce51bb97abad8356f2a2b0fae4349017099d7f9aba5abfafd6d327c617f6cbe2c91524c0da93f2d5bc63e6c94be33e8f19719c960d317f0c5ffe419256ab84a4e474fb1dacb325a61c0fc6632a1bc21f71a65c545cb28eec670bf4f768f0bdb1958f82041a0c60598b52680f8ac876616ad006d28336164fd72a8e4813740bc0291c7dffc4ce129546e65251b85e14b0c1046c1d574c63a076a616ced73718595461f02eb7c9c84a3001950089e4ea941ae42c9c18e84a0db737302fd73693896c87368959f552020d94bda0ca7c9d3491d99ec4a7439418830b30fda2ef1ced3bfdad0fcdf0ed638a510a65a14daa277c1f71c861bf8c88adeb8b2c79dd6e07577a65e17534d49be79b5ae6bce616438a9b838297540970f8c19209dcbeb0b2fd77da043e6b85242b2041cb69862bacba43d2e7147bf2d82cdeae94047f647bb9b5fa729588447526095a3e19b5a4b6bd94efd6d557eb724917950291eb6a51a25b92e4b495a5967d0daccdea7aa6f1c28b02b1f91ad1511b1bcc077d2a05c267c59d1e197833d1ef6b38a2c0d5c311d0e8f0da368968788e998f184f1262149c250b28e9c8a8851f8ea02dec6474f17116f52f37e3f8236e3d8486ef91821ed2d1c18cb6f57f8b2983f1a7d5c45ffd343d1c72c6853fe76f6910eca1f51228a74dbfd6a07fd47292e70495517773b2611505ec9011b2e4570fa5e3835fca2c2a87adb58ac9cc12975c019a71e7c0047c3823564352685603568303f0c10ad79d0acafcbbbebb48f8af2e4bc432b784fc27d6bb2fa7cb3337027728f072aa298c896e6a3de29cb645f6f6ea6ec8d58a8f50e3f5efe19ff5f62b577e8b9ad67208782b9b8359addd14f9117a36210374ef22f64c3f74447b6aa4d4c3c3b65c6f06e74bdc45ebf08eb501e417eabbba1f34035bab4f988493cf31fd8e4e4479a885cb069c8d5c2f848854fdb9331131d3baf87968da78b40f901485081eaa160981f41b0f3b973d8376d74c0e4e65f3edefd9a444c3cd4457b5b7cc051be1848919b13ce041d81b86cdc2bbc84bb6a5d42c136b162304204b18a9b5dbcd69d1c8135144bdb6595be3e5ec102fc86df4e4105724c69dd4d7844ac88cd8d105712d8cb2c27c4c955476ebc1f64d7f8ef59cb13bce714050d73e5329acd03be120f382a936a3ab1c0a5684416818769a992748fd52cf2aca6a4aa2d1226fc7dcd02c05f5325929c37c869151121464a2de610e8bfac3f08dc9a69fa603ee38e7d300ecc92634b7c499709bab703d4aef6317b3d9cf605737c41c6c6395e8974e3673d42e76f133940daa9c296f1744f2fb363c75a1dcf378ce789b1d568ea59e63d42f4cdc2efe7f0f321d3de17082c59bd89483a614290de9589e42deca3953285ab28cf7bdbdf69e34c2ee5a8cdadff35471098b7369a951a9205cda0adbadca42f9383b54decc893fd9b8d7a23f415b42df09817ba1af7dca206a72ffc14b8cc7b6d1e4dabb1d6000073c6f619d3002a56ba82488028b7cc4dffbad984292b69ce970126ff115c36a2658befe48af9381098796c7b55e0162662a25eb7840c6c4aef5b2dc99f6dc02a7a36b945788e14c65284b75ab911a80dd145402d56e797b6bd888b682abd5c255cdf2c721f06bd028c28555dc83f7d07313d361aff418efa121440d42f4ee0912624d04b16cd8c6c4b82365d2d28904d6f3a8fbb11a6503ae68112535a1", 0x1000}], 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000edb34946c272c28f2b7418a8671e16c80a47369b94d8589df98f0450c869e6a1d958423ada7aeae8bab0d523acb32e0664aad43be722c0b2d0c62eadeb0c06f4c9d295d9c1d0d7647de354f51ff36101a745c78bfaee8b5d6128e79d647de81f3af8af32afd0ed7c3c35e66fd5971274cf9665e14be209f7", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1], 0x78, 0x8000}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000800)="e90c9f1ca46f75f83f150576b95531716aa4c7e9922b7b6f1cca7c0bc06f9b987ca034fd5d73b49b5450eaa664d177287f3eb8b60daa5fa0409808ce736c1728f97cc26993cdb2e9f9e4557a81fdcc921f438eb699cae6dbccae5a5f441ff0b2d9b05398726426975cd18f7561d7d8a04eab169fdf1a49ab121220bf5f790bbe5f9b0ae98306d4d8e15210e500f371fd76c3feeb624a1e859e6cf656", 0x9c}, {&(0x7f0000002e00)="ba598ffaed5f0508f2ae6174f8dad05d10e70c3c976ca71de4db8ad52dcc9903590c4b5d55d5ee4ca129cf8c7868981ed726bf28d6fb12270a4df0701450bf41305511a5104b24cb9c39c746c84bfd0b128c0a266f17ddaebf9dbb160d5b8bf5a53e1b4830e4c421e4a9dca61d99e71da18ff80d8fc97b3086172a7909b89d996faf87f36069b9977a84c5cfb952d6675b4497aeb694e8506250499dc36f0733fdc82808457167b44f26ab1d494135b72920729649346e8f91a97cc75039f5eb9f364e83c08568cbca1730fccc5dedf626c989b5b6d57d2693321b44172d9ca36a7299f4776f", 0xe6}, {&(0x7f0000002f00)="95534401d18c7cd0bd265f3a5c67f52126b9f99564c38a2a5d4aa8c8a84301a187c4d4f2f9e4346fa39e78d97b495e0c667ec809954e5b971b45fb9f7ae649ada4b1b5836fade33d4a9357d1940ad5e2f48025725ad0714eba97b4e619ed66375fc803a94834d37369f20b0b9ec3d47c1bb590ba964b07333944c3a232ebb4816ab00a2c191a89acadf334d85a5e2a0508de44d9ef", 0x95}], 0x3, &(0x7f0000003340)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="288000000000000e0100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x80}}, {{&(0x7f0000003440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003600)=[{&(0x7f00000034c0)="8126f9e8cec7bcb643d377eb6ca8c80abf8aab50eb1210bd81700466460a92a4ddcc5d055c550a8e3e8b61cdf8", 0x2d}, {&(0x7f0000003500)="cbeb9f9435ba6cbb50ddeab398c88c4b0c935a7eda74c449181ae6639c68088c1f1420a3e91a69d1ab87ca9db77146b1481bdb8ca23a284584e4f32c10ca7e5e4b8823c07eb20aebfb52c48f6cfc91b9a59a320e8cdc3d03a67dd42c9f0608efe124f34cecf161900c8a8889ee03db30127b86a992820339d770b001d0d05507953cf23e3473186a599e761fba7f73d2ba98b218791c3ed1aedb122398d02ee16d7795f7a26f92fda39512c6f96ee6d7b152e7eb92ce05c389319ec53958fbc2b2822be9c65dbd8293b87dad4d23310aadf5b81d42a7613a177d9488062e957287fc84fd9c1895f40f7ae8eb66f25522d283c719168f9ca2", 0xf8}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="18000005000000000000000001000000d4aaa0a3d9628490098d14d5aefd544864cd75e76c2ad1141c9a51a72163552027180f6e0e507d5ff38b0a44481d81d6b955a8a85564d6b5", @ANYRES32=r18, @ANYRES32=r0], 0x18, 0x48001}}, {{&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000003700)="f759a65ece846ed61a1a43d2ea1ac8c491e485b1af6483016204d2b078d079f3f3146f64c1044c000be2af19f73dcbab69906588856d4da902c2cc6f5589d977a916e05190720d65ab8003567c50b24309fbc57a9a245feb2a024aad591e4c5a4c512bac529445768a680ca0ca0f804d030d52c91b475ac5806065b242db3d3875200b6d7c733b4387bda5091812880ee83eceb1380b9dd37836274b4ffbf534e188d36dba35438bd3aa661712a3f5af251ecb1daac822f249903babbde29c2db5cfc3fcb13741b3f3bd785f6524e598c597f04f60fc3d17b061a3080f74137f3a3640b129ba4f226d0be3516f6f17cb7b8fcfbdf7d84c01530f", 0xfa}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="56b9e6ad463e44e95cf896003e4b7fadeb4c4cdc4eed1450e4", 0x19}, {&(0x7f0000004840)="3ce9ee4ca1e2ccff3b0a912ff7db5f00ee08e8d1da74430a1cc26fcc82e46a1f7ec6e5875f8c323f", 0x28}, {&(0x7f0000004880)="a35347dc3605307abf4ea0957318bb84db099af7a13d488509f57329c35372981b8557b12ad69ec3220a35ba0312eedd6b6416370ca1e95debbe087e29cba8f29a9db683aa9d49f8bb2160c1e2bb054329f6f544a39696d7638dc7e1e60d88760720a1e09153f95980e849d333572651e71fa3d254de74e17d36ea0667fa70beb23beda7e203b21a01c0241d67deab4a7917583d5b41de0e2f68b1f49338c8ed18dd813e962ab7e3932fee45693507685244d15c85a3ed7491a67c27377d97cfd26082dcd40596ea18e1ebdc98d1c4163a1a6ce4f95cb038b194d58903a3a80e7fc643444368f91705474ebd406f7a4be752f31de6", 0xf5}, {&(0x7f0000004980)="2bffdaca2c7478c27f8c06d98a07", 0xe}], 0x6, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000004a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004ac0)="b062550950b42de1c94b9f5130d479dd6fb563239c2a9c6eb7f46562fe5ac087ce4b900e8623d35a1477b4d6201f22a9e92c72cafe004c78312cda038f256933abc13d90fcd793276c2d99c75b3bf3f2164504b997f8963d2cce6bb517a9a44fd9609c47ef4591cea6a4a092c5a41d7415d44b89c90a61f7ea5e0c0dc5602e3c00f7a44ad0c5aa80a2a0c07c828eb30a78cbf1416f12bd90970af8cc8944d0894ea37dd3a8e0", 0xa6}, {&(0x7f0000004b80)="5dabed7e1fbbae87144b73a9a98bf52303a1c2a52c919d1efb1b0f172176240da3c909659631a780b5da45ba4ecd2785fe0c5abdcb293a1e7a4d3c70ad3d7ee5035713d1d178e0a8bb04f629bccc1177af92095fac52bdec1ac0e919f58d8ecb1d846f00ee470d391b8a92f33e00cfc3964ada5cc10371b8cfb6512b84fc77e2fafe82256d27426c386b0ed56cab33e646b7ae6615c376f1c56278fb79bf9a18c7a0f2bf140073cea2627ad882e1889b96f1ec39f356784ac86fdb585a1ba173e7d17da4f5150865116c3d314d304fd624ce6c3bb83fbb2b997ee8d3c1c68258ab40c812098a", 0xe6}], 0x2, &(0x7f0000004cc0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}], 0x30, 0x40080c4}}], 0x5, 0x4040811) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r19, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r19, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r19, 0x6, 0x15, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x7f, 0x400, 0x30, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8000, 0xfffffff8, 0x7}}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5d, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000d00)="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"/1316, 0x524}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b", 0x80}, {&(0x7f0000000140)="6fc6cd2a44d9e640e546ee0598e1d35cda4f7c676cb5ecca9efd5f002eca26cbe6db8edd8e689232939383", 0x2b}, {&(0x7f0000000180)="042b557dda601573044f4c97c75b0f80108b521fc29eee215b11b7d30cf0df6d8924777adb7cd0076a", 0x29}, {&(0x7f0000000200)="c7b67e2ab0c9419c35835e67b3d994cbfa4d069d7b2bd050d98fa59adac0add8c57617974aedca96545298bd5ba9a2c3de93bec260ee41b7b1e73b8b032eb195031908c2c0c5764f7fbf676a4b526509a4e080b1938c78aeab8e76ab1f3319ae885054e8f5c0a85bf46f5536d6c2c1b67367bba0c205f81d02278b9fd50d1999684f0da771d90b90151f0b27f365b0d08c041f0a", 0x94}, {&(0x7f00000001c0)="855e27da1affbb17ba2e7a070e96f28632af6c11894ea7d10d442541a6fabaf4654f2aedadf73ab21809f9919e17ee904f1305", 0x33}], 0x6, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x55619e55}}], 0x18}, 0x0) 515.227801ms ago: executing program 6 (id=4547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x2, 0x400}) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) sendto(r4, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000006c0)={r2, 0x5, 0x5, 0x1}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = epoll_create1(0x80000) ioctl$FICLONE(r7, 0x40049409, r8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x5c}}, 0x24000000) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070028008000100", @ANYBLOB="081c0b7feddad189177f1855ad46b78bfb4df5a33e65527ee84c0562c4c0690a028f7329927a6aff45c3db2b0620afde178cd315200157a552a647328425c84fefa912a5b3444d2a144c2e1e08c63f3f874360984917f9f5e64e8d6929bc48cae0be78"], 0x40}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 431.399688ms ago: executing program 2 (id=4548): r0 = socket(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x14c}}, 0x4810) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff, 0x0, 0x3, 0x3, 0x10, 0x63b8}, 0x20) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1d, 0x9d3f, 0x78}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113670000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c0002800800158004001d0039d95fbb435ee08e527b60b9ed49b19ff22c47f8ad2d687ff50024248fab97933d970ae6ce75fcd487b143fe9db1cc60988ac2f2d41c824b661d42946c4526c7efa5c618d4c8a2de2ca3e10f077d6c76b98a8b48aaf48c6eb38e9d2e206913d37089d8a5d3763034c199ffdb810f9d341e1b5088a1de16a0938b9198b1a6857acd877a3375ba0c157649b76c3ef8ff7902dd332c66b68f0de8591e4bcb33998083dc7f9f44d6a7cb3ff350bee2260e95f2d8e50166dc8d03cc"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) r8 = accept$unix(r2, &(0x7f0000000300), &(0x7f0000000380)=0x6e) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) 367.179844ms ago: executing program 9 (id=4549): r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40894) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0xf0}, 0x1, 0x0, 0x0, 0x2404c811}, 0x0) 268.564056ms ago: executing program 6 (id=4550): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) sendto$l2tp6(r0, &(0x7f0000000000)="b16fa260e98a0f1074b89d54eb1b1928b7bbe2e22111fb4a44645713f998cb36146787828b0a11b5253192e80e4ff7018cd31379e1ec22576a8b57308b0120fa", 0x40, 0x8000, &(0x7f00000001c0)={0xa, 0x0, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x20) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000600)="ad0ae40a6cbfd6e32988b2a21ebad81b84a29f05bd2952cdc7047377caaa4461d5252bc57c46b85ff2a6d07826970e722c70697291a5910e8e8d680025d31068c9cb35a718c0288f8f95e314bb977639f11a96cf1378c9a3c072", 0x5a}, {&(0x7f00000006c0)="11b84f91e789654d234a44641e3ffcf99fd2a8c9c06bbf17e64a1ea86179b0ce", 0x20}, {&(0x7f0000000700)="19be9fa33b6f6c93917e188504e847e73e5b1a2376f96c987fa3f9ef39bc37b6bfd9dda8aa637f6b1e691a5c76cbc68e282832a7283e485842440b58c9c21ef5d3bbcf0d3470868afb5df868475761fd180438c42370443c36ad1005d433d5251ad691399fb345d6935c643fb4990520f8dadb3843ffc37825b50a6e4a32c55482", 0x81}], 0x4, 0x0, 0x2c}, 0x20000004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="950000000000000018170000", @ANYRES32, @ANYBLOB="000000000000000002070200d1000000b5b98bad73a922698591b7911cd07c30f5bc8f0bafb2651748876d5e1c1fb9ee5d9b370559e245f6012eb60ef916776c67ee4fcebe3f8e96b3e595fde5e7ebdb4b396245eecf2814ec0ea367815ac3105ddf06c2d3888c"], &(0x7f0000000100)='GPL\x00', 0x4c, 0xce, &(0x7f0000000240)=""/206, 0x83e00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x0, 0x6}, 0x10, 0x0, r2, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xb}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x4d, 0x0, &(0x7f0000000140)="259a5306e17b5777087b7199e82e8438667d2f15851fd1487b3d454e91d2ebff67ce61f08419e92f541de4b6c1da9afcd35e5344003616eddc3f90cd3f3e407c3f1dffd502aadc49ba7c48a535", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) 258.122641ms ago: executing program 9 (id=4551): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltaction={0xd0, 0x31, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4d}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xd0}}, 0x0) 206.991126ms ago: executing program 2 (id=4552): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x5, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 2.250897ms ago: executing program 2 (id=4553): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x2c, r6, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4df2553279bd"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xb4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000040)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], &(0x7f0000000100)='syzkaller\x00', 0xe46e, 0x52, &(0x7f0000000240)=""/82, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x999b, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x2, 0xd, 0x3}, {0x4, 0x4, 0xb, 0x8}, {0x5, 0x1, 0x8, 0xa}], 0x10, 0xd4}, 0x94) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000600)="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") sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2160, 0x0) (async) recvmmsg(r5, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2160, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, r1, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) 0s ago: executing program 9 (id=4554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES8, @ANYRES16, @ANYBLOB="2ff60b2d8b3a2886b926000000000004000000000000000000001f00"/38], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, r1, 0x0, 0x3, 0x4}, 0x50) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00006c0000000000000018000004004ca30010010000010000000000008c1b00"/41], 0x30}, 0x0) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x204, @empty}, 0x6) sendto$inet(r9, &(0x7f0000000240)="e1caa8fbbde4", 0x6, 0x0, 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0xa) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000340)=0x5) r11 = socket$l2tp6(0xa, 0x2, 0x73) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0xb, '\x00', r6, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x94) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r13, &(0x7f0000000a80)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="8900018000000004bf63e9a650814f538a8a0fa86ac4ba853733cf662325a3e1c353f791eb"], 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r15, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r15, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x80087601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0100009a85e6e80000000000000000ebff000000", @ANYRES32=0x0, @ANYBLOB="030000000d000000030000000008000009400100", @ANYBLOB="00000000000000000200"/24, @ANYRES32=r14, @ANYBLOB, @ANYRESDEC=r3], 0x50) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r14, 0x1, 0x6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) kernel console output (not intermixed with test programs): on packets_per_slave: invalid value (18446744073709551615) [ 485.563468][T19082] bond1: option packets_per_slave: allowed values 0 - 65535 [ 485.577559][T19082] bond1 (unregistering): Released all slaves [ 485.623210][T19086] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 485.808828][T19090] netlink: 'syz.4.3352': attribute type 1 has an invalid length. [ 485.811335][T19093] syzkaller1: entered promiscuous mode [ 485.826154][T19093] syzkaller1: entered allmulticast mode [ 485.931282][T19098] netlink: 'syz.1.3353': attribute type 2 has an invalid length. [ 485.993577][T19100] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 486.020127][T19101] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 486.092972][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 486.233382][T19105] ieee802154 phy0 wpan0: encryption failed: -90 [ 486.247317][T19107] sock: sock_set_timeout: `syz.1.3357' (pid 19107) tries to set negative timeout [ 486.353664][T19110] sctp: [Deprecated]: syz.4.3359 (pid 19110) Use of int in maxseg socket option. [ 486.353664][T19110] Use struct sctp_assoc_value instead [ 486.481350][T19116] tipc: Started in network mode [ 486.486968][T19116] tipc: Node identity 565a93a48396, cluster identity 4711 [ 486.495231][T19116] tipc: Enabled bearer , priority 0 [ 486.567869][T19116] syzkaller0: entered promiscuous mode [ 486.573502][T19116] syzkaller0: entered allmulticast mode [ 486.580543][T19116] tipc: Resetting bearer [ 486.607071][T19116] tipc: Resetting bearer [ 487.647032][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.659415][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.678189][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.735432][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.767383][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.845483][ T5648] Bluetooth: hci3: command tx timeout [ 490.595793][T19116] tipc: Disabling bearer [ 490.614389][T19127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.632755][T15117] tipc: Node number set to 3586954148 [ 491.628341][T19134] lo speed is unknown, defaulting to 1000 [ 491.850798][T19187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3379'. [ 491.855783][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 491.914263][ T5648] Bluetooth: hci3: command tx timeout [ 492.025623][T19193] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 492.157256][T19198] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3383'. [ 492.176049][T19198] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3383'. [ 492.188751][T19198] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3383'. [ 492.199922][T19198] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3383'. [ 492.218351][T19198] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3383'. [ 492.229570][T19195] veth3: entered allmulticast mode [ 492.312222][T19196] ip6gretap0: entered promiscuous mode [ 492.329179][T19196] ip6gretap0: entered allmulticast mode [ 492.350343][T19196] bond1: (slave ip6gretap0): making interface the new active one [ 492.370511][T19196] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.383005][T19196] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.391806][T19196] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 492.458543][T19208] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.481835][T19208] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.602037][T19218] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3386'. [ 492.862324][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 492.986813][T19234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3389'. [ 493.165589][T19247] xt_TCPMSS: Only works on TCP SYN packets [ 493.181290][T19134] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.216002][T19134] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.241569][T19134] bridge_slave_0: entered allmulticast mode [ 493.275549][T19134] bridge_slave_0: entered promiscuous mode [ 493.288400][T19134] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.296149][T19134] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.324514][T19134] bridge_slave_1: entered allmulticast mode [ 493.346788][T19134] bridge_slave_1: entered promiscuous mode [ 493.521721][T19134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.568426][T19134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.769704][T19134] team0: Port device team_slave_0 added [ 493.775289][T19266] block nbd4: NBD_DISCONNECT [ 493.806639][T19134] team0: Port device team_slave_1 added [ 493.880371][T19134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.900502][T19134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.960537][T19134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.000649][ T5648] Bluetooth: hci3: command tx timeout [ 494.013253][T19134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.023237][T19134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.060975][T19134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.072993][T19277] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 494.148086][T19273] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 494.206758][T19134] hsr_slave_0: entered promiscuous mode [ 494.215952][T19134] hsr_slave_1: entered promiscuous mode [ 494.222899][T19134] debugfs: 'hsr0' already exists in 'hsr' [ 494.228992][T19134] Cannot create hsr debugfs directory [ 494.716995][ T1667] block nbd1: Possible stuck request ffff888026f95080: control (read@0,1024B). Runtime 240 seconds [ 494.727992][ T1667] block nbd1: Possible stuck request ffff888026f95240: control (read@1024,1024B). Runtime 240 seconds [ 494.739102][ T1667] block nbd1: Possible stuck request ffff888026f95400: control (read@2048,1024B). Runtime 240 seconds [ 494.750269][ T1667] block nbd1: Possible stuck request ffff888026f955c0: control (read@3072,1024B). Runtime 240 seconds [ 495.299365][T19134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 495.330902][T19134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.385767][T19134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 495.457546][T19134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.480809][T19134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 495.535651][T19134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.585307][T19134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 495.605797][T19134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.615486][T19319] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 496.085744][ T5648] Bluetooth: hci3: command tx timeout [ 496.281790][T19134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.393222][T19134] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.461352][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.468660][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.583078][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.590494][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.851768][T19371] netlink: 'syz.4.3418': attribute type 1 has an invalid length. [ 497.083687][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.101805][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.119694][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.135710][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.151190][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.280513][T19390] Bluetooth: MGMT ver 1.23 [ 497.493260][T19396] __nla_validate_parse: 16 callbacks suppressed [ 497.493281][T19396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3424'. [ 497.516539][T19394] tipc: Enabled bearer , priority 4 [ 497.842496][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3426'. [ 497.858317][T19408] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3427'. [ 497.879963][T19406] macvlan0: entered promiscuous mode [ 498.102197][T19418] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20002 [ 498.113127][T15138] IPVS: starting estimator thread 0... [ 498.164896][T19134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.242869][T19420] IPVS: using max 27 ests per chain, 64800 per kthread [ 498.489581][T19429] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.507880][T15115] IPVS: starting estimator thread 0... [ 498.536989][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 498.550159][T19381] lo speed is unknown, defaulting to 1000 [ 498.578316][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 498.614552][T19431] IPVS: using max 28 ests per chain, 67200 per kthread [ 498.943564][T19449] x_tables: unsorted entry at hook 2 [ 499.096820][T19134] veth0_vlan: entered promiscuous mode [ 499.160741][T19134] veth1_vlan: entered promiscuous mode [ 499.195460][ T5648] Bluetooth: hci7: command tx timeout [ 499.207768][T19457] ipt_ECN: cannot use operation on non-tcp rule [ 499.255686][T19457] netem: change failed [ 499.333573][T19134] veth0_macvtap: entered promiscuous mode [ 499.391062][T19134] veth1_macvtap: entered promiscuous mode [ 499.537433][T19381] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.555313][T19381] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.580298][T19381] bridge_slave_0: entered allmulticast mode [ 499.591903][T19381] bridge_slave_0: entered promiscuous mode [ 499.606921][T19381] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.618199][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.626476][T19381] bridge_slave_1: entered allmulticast mode [ 499.638916][T19381] bridge_slave_1: entered promiscuous mode [ 499.652523][T19134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.742449][T19134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.787235][T19381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.899711][T19468] bond1: entered promiscuous mode [ 499.913444][T19468] bond1: entered allmulticast mode [ 499.921195][T19468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.940964][T19381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.061660][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 500.078649][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 500.084526][T10426] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.156789][T19381] team0: Port device team_slave_0 added [ 500.184502][T19381] team0: Port device team_slave_1 added [ 500.240807][T10426] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.282949][T10426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.319751][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 500.355383][T19487] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3445'. [ 500.457098][T10426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.520581][T19381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.544117][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.596751][T19381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.666471][T19381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.687597][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.727543][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 500.774443][T19381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.112948][T19381] hsr_slave_0: entered promiscuous mode [ 501.139305][T19381] hsr_slave_1: entered promiscuous mode [ 501.161303][T19381] debugfs: 'hsr0' already exists in 'hsr' [ 501.180069][T19381] Cannot create hsr debugfs directory [ 501.274334][ T5648] Bluetooth: hci7: command tx timeout [ 501.278826][T19507] netlink: 'syz.1.3451': attribute type 29 has an invalid length. [ 501.372046][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.412868][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.608101][T19516] netlink: 'syz.1.3454': attribute type 29 has an invalid length. [ 501.648986][T19522] netlink: 'syz.1.3454': attribute type 29 has an invalid length. [ 501.759121][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.863655][T13062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.886019][T13062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.113162][T19556] __nla_validate_parse: 7 callbacks suppressed [ 503.113185][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 503.159332][T19381] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.231684][T19381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.247164][T19381] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.271541][T19381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.287344][T19568] lo: entered promiscuous mode [ 503.310812][T19568] tunl0: entered promiscuous mode [ 503.348433][T19568] gre0: entered promiscuous mode [ 503.354599][ T5648] Bluetooth: hci7: command tx timeout [ 503.379280][T19571] syz.6.3468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 503.451286][T19568] gretap0: entered promiscuous mode [ 503.464276][T19571] CPU: 0 UID: 0 PID: 19571 Comm: syz.6.3468 Not tainted syzkaller #0 PREEMPT(full) [ 503.464305][T19571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.464317][T19571] Call Trace: [ 503.464325][T19571] [ 503.464335][T19571] dump_stack_lvl+0xe8/0x150 [ 503.464366][T19571] warn_alloc+0x249/0x340 [ 503.464397][T19571] ? stack_trace_save+0xa9/0x100 [ 503.464430][T19571] ? __pfx_warn_alloc+0x10/0x10 [ 503.464465][T19571] ? kasan_save_track+0x4f/0x80 [ 503.464490][T19571] ? kasan_save_track+0x3e/0x80 [ 503.464514][T19571] ? __kasan_kmalloc+0x93/0xb0 [ 503.464539][T19571] ? __kmalloc_cache_noprof+0x31c/0x660 [ 503.464564][T19571] ? xskq_create+0x56/0x170 [ 503.464591][T19571] ? xsk_setsockopt+0x54c/0x990 [ 503.464613][T19571] ? do_sock_setsockopt+0x17c/0x1b0 [ 503.464640][T19571] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 503.464666][T19571] ? do_syscall_64+0x174/0x580 [ 503.464689][T19571] __vmalloc_node_range_noprof+0x132/0x1750 [ 503.464763][T19571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 503.464798][T19571] ? __kasan_kmalloc+0x93/0xb0 [ 503.464832][T19571] vmalloc_user_noprof+0xad/0xe0 [ 503.464860][T19571] ? xskq_create+0xbf/0x170 [ 503.464888][T19571] xskq_create+0xbf/0x170 [ 503.464919][T19571] xsk_init_queue+0x8a/0xe0 [ 503.464950][T19571] xsk_setsockopt+0x54c/0x990 [ 503.464983][T19571] ? __pfx_xsk_setsockopt+0x10/0x10 [ 503.465010][T19571] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.465042][T19571] ? aa_sock_opt_perm+0xff/0x1a0 [ 503.465073][T19571] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 503.465099][T19571] ? __pfx_xsk_setsockopt+0x10/0x10 [ 503.465127][T19571] do_sock_setsockopt+0x17c/0x1b0 [ 503.465161][T19571] __x64_sys_setsockopt+0x13d/0x1b0 [ 503.465193][T19571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.465215][T19571] do_syscall_64+0x174/0x580 [ 503.465234][T19571] ? trace_irq_disable+0x3b/0x140 [ 503.465263][T19571] ? clear_bhb_loop+0x40/0x90 [ 503.465288][T19571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.465308][T19571] RIP: 0033:0x7fef1af9ce59 [ 503.465329][T19571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.465345][T19571] RSP: 002b:00007fef1bf14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.465367][T19571] RAX: ffffffffffffffda RBX: 00007fef1b215fa0 RCX: 00007fef1af9ce59 [ 503.465381][T19571] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 503.465393][T19571] RBP: 00007fef1b032d6f R08: 0000000000000004 R09: 0000000000000000 [ 503.465405][T19571] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.465416][T19571] R13: 00007fef1b216038 R14: 00007fef1b215fa0 R15: 00007ffe48c325b8 [ 503.465450][T19571] [ 503.465494][T19571] Mem-Info: [ 503.760965][T19568] erspan0: entered promiscuous mode [ 503.780084][T19571] active_anon:7465 inactive_anon:0 isolated_anon:0 [ 503.780084][T19571] active_file:2949 inactive_file:40119 isolated_file:0 [ 503.780084][T19571] unevictable:768 dirty:84 writeback:0 [ 503.780084][T19571] slab_reclaimable:11569 slab_unreclaimable:117670 [ 503.780084][T19571] mapped:44840 shmem:1303 pagetables:1444 [ 503.780084][T19571] sec_pagetables:0 bounce:0 [ 503.780084][T19571] kernel_misc_reclaimable:0 [ 503.780084][T19571] free:1184286 free_pcp:21286 free_cma:0 [ 503.828160][T19571] Node 0 active_anon:29860kB inactive_anon:0kB active_file:11796kB inactive_file:160272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179360kB dirty:332kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15984kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 503.860355][T19568] ip_vti0: entered promiscuous mode [ 503.942500][T19571] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 504.029131][T19571] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.124003][T19381] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.158370][T19381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.174442][T19571] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 504.188742][T19381] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 504.200987][T19571] Node 0 DMA32 free:835448kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29552kB inactive_anon:0kB active_file:11796kB inactive_file:160280kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2552804kB mlocked:0kB bounce:0kB free_pcp:77980kB local_pcp:11412kB free_cma:0kB [ 504.257557][T19381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.334784][T19571] lowmem_reserve[]: 0 0 0 0 0 [ 504.348005][T19571] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.421027][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 504.448270][T19571] lowmem_reserve[]: 0 0 0 0 0 [ 504.455486][T19571] Node 1 Normal free:3937088kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.521317][T19571] lowmem_reserve[]: 0 0 0 0 0 [ 504.527858][T19571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 504.574480][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 504.608348][T19571] Node 0 DMA32: 5687*4kB (UME) 3576*8kB (UME) 1508*16kB (UME) 66*32kB (UME) 318*64kB (UME) 421*128kB (UM) 199*256kB (UME) 85*512kB (U) 66*1024kB (UME) 13*2048kB (UM) 126*4096kB (UM) = 856604kB [ 504.642113][T19584] openvswitch: netlink: Missing key (keys=40, expected=80) [ 504.693242][T19571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.719289][T19571] Node 1 Normal: 0*4kB 6*8kB (UM) 11*16kB (UM) 7*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3937152kB [ 504.757626][T19381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.767523][T19597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3473'. [ 504.777611][T19571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.823417][T19571] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.873408][T19571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.889207][T19381] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.936505][T19571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.963096][T19571] 44369 total pagecache pages [ 504.976180][T19571] 0 pages in swap cache [ 504.980584][T19571] Free swap = 124996kB [ 504.985443][T19571] Total swap = 124996kB [ 504.989752][T19571] 2097051 pages RAM [ 505.002192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.009723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.020081][T19571] 0 pages HighMem/MovableOnly [ 505.026525][T19571] 427065 pages reserved [ 505.041160][T19571] 0 pages cma reserved [ 505.132351][T13062] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.139859][T13062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.233608][T19607] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3476'. [ 505.435438][ T5648] Bluetooth: hci7: command tx timeout [ 505.502683][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 505.516462][T19612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3478'. [ 505.564634][T19614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3479'. [ 505.578595][T19611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3477'. [ 505.609342][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3477'. [ 505.730635][T19621] netlink: zone id is out of range [ 505.767754][T19621] netlink: zone id is out of range [ 505.807315][T19621] netlink: zone id is out of range [ 505.833588][T19621] netlink: zone id is out of range [ 505.848355][T19621] netlink: zone id is out of range [ 505.925474][T19621] netlink: zone id is out of range [ 505.943887][T19621] netlink: zone id is out of range [ 505.967147][T19621] netlink: zone id is out of range [ 505.999936][T19621] netlink: zone id is out of range [ 506.874434][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 506.899615][T19649] bond1: option ad_user_port_key: invalid value (1207) [ 506.937336][T19649] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 506.981107][T19649] bond1 (unregistering): Released all slaves [ 507.371705][T19381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.444809][T19674] Bluetooth: MGMT ver 1.23 [ 507.950466][T19695] tipc: Failed to remove unknown binding: 66,1,1/0:1528830427/1528830429 [ 507.981722][T19695] tipc: Failed to remove unknown binding: 66,1,1/0:1528830427/1528830429 [ 508.353169][T19704] __nla_validate_parse: 4 callbacks suppressed [ 508.353191][T19704] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3501'. [ 508.431243][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 508.472709][T19705] nbd: couldn't find a device at index 0 [ 508.540341][T19381] veth0_vlan: entered promiscuous mode [ 508.613578][T19381] veth1_vlan: entered promiscuous mode [ 508.679887][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f9ecc00: rx timeout, send abort [ 508.774582][T19381] veth0_macvtap: entered promiscuous mode [ 508.870880][T19381] veth1_macvtap: entered promiscuous mode [ 508.947615][T19381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.016269][T19381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.077864][T13062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.099401][T13062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.138411][T13062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.149747][T13062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.172800][T19728] netlink: 'syz.2.3511': attribute type 16 has an invalid length. [ 509.180818][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888069146c00: rx timeout, send abort [ 509.189840][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804f9ecc00: abort rx timeout. Force session deactivation [ 509.228892][T19728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3511'. [ 509.382296][T19728] veth0_macvtap: entered allmulticast mode [ 509.530363][T10426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.575797][T10426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.680940][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888069146c00: abort rx timeout. Force session deactivation [ 509.749760][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.806751][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.138362][T19755] x_tables: unsorted entry at hook 2 [ 510.222392][T19755] xt_hashlimit: size too large, truncated to 1048576 [ 510.263102][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3520'. [ 510.292214][T19763] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3415'. [ 510.342984][T19767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3521'. [ 510.358962][T19768] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 510.547265][T19763] netlink: 'syz.7.3415': attribute type 1 has an invalid length. [ 510.607671][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'. [ 510.963231][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3527'. [ 511.021362][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 511.104685][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 511.670777][T19817] veth3: entered allmulticast mode [ 511.727121][T19831] syzkaller0: entered promiscuous mode [ 511.733180][T19831] syzkaller0: entered allmulticast mode [ 511.778590][T19824] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 511.812335][T19824] veth5: entered allmulticast mode [ 511.828263][T19831] xt_hashlimit: size too large, truncated to 1048576 [ 511.991944][T19838] 8021q: adding VLAN 0 to HW filter on device eth0 [ 512.014002][T19838] 8021q: adding VLAN 0 to HW filter on device eth1 [ 512.029025][T19838] 8021q: adding VLAN 0 to HW filter on device eth2 [ 512.039077][T19838] 8021q: adding VLAN 0 to HW filter on device eth3 [ 512.052990][T19838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.105079][T15131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.455420][T15131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.580423][T19848] netlink: 'syz.2.3541': attribute type 7 has an invalid length. [ 513.035366][ T3290] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.047480][ T1152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.076217][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.089140][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.166923][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.252115][T19803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.464728][T19854] __nla_validate_parse: 3 callbacks suppressed [ 514.464751][T19854] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3542'. [ 514.595483][ T5752] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.665118][T19868] netlink: 'syz.1.3546': attribute type 1 has an invalid length. [ 514.711194][T19868] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3546'. [ 514.773387][T19868] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3546'. [ 514.785329][T19868] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3546'. [ 514.821398][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 514.866032][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3549'. [ 515.060607][T19873] : entered promiscuous mode [ 515.107905][T19877] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3549'. [ 515.146385][T19877] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3549'. [ 515.180269][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 515.216387][T19882] veth0: entered promiscuous mode [ 515.268978][T19882] block nbd1: NBD_DISCONNECT [ 515.286495][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.293765][T19882] block nbd1: Send disconnect failed -32 [ 515.309399][T19882] block nbd1: shutting down sockets [ 515.343321][T19890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'. [ 515.368206][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.377756][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 515.400612][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.409888][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 515.471738][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.480991][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 515.492844][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.502141][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 515.512070][ T7858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.530583][ T7858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 515.576579][ T7858] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.604420][ T7858] Buffer I/O error on dev nbd1, logical block 1, async page read [ 515.607645][T19881] veth0: left promiscuous mode [ 515.614831][ T7858] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.634028][ T7858] Buffer I/O error on dev nbd1, logical block 2, async page read [ 515.688590][ T7858] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.745999][ T7858] Buffer I/O error on dev nbd1, logical block 3, async page read [ 515.785801][ T7858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.830649][ T7858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 515.886608][ T7858] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.922734][ T7858] Buffer I/O error on dev nbd1, logical block 1, async page read [ 516.030745][ T7858] ldm_validate_partition_table(): Disk read failed. [ 516.089738][ T7858] Dev nbd1: unable to read RDB block 0 [ 516.120076][ T7858] nbd1: unable to read partition table [ 516.294948][ T4998] udevd[4998]: worker [7858] terminated by signal 9 (Killed) [ 516.318100][ T4998] udevd[4998]: worker [7858] failed while handling '/devices/virtual/block/nbd1' [ 516.444881][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.785444][T19949] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 516.793983][T19946] netlink: 'syz.6.3568': attribute type 24 has an invalid length. [ 516.868990][T19949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.044894][T19955] bond1: (slave geneve2): making interface the new active one [ 517.061416][T19955] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 517.072148][T19952] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 517.357564][T19959] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 517.439063][T19959] bond2 (unregistering): Released all slaves [ 517.572865][T19047] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.597928][T19047] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.634850][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.688786][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.717134][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 518.154462][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.261224][T20005] netlink: 'syz.4.3584': attribute type 7 has an invalid length. [ 518.324709][ T5775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.425564][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.472487][T20005] netlink: 'syz.4.3584': attribute type 7 has an invalid length. [ 518.511802][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.559003][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.694038][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.751061][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.784962][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.827413][T20025] netlink: 'syz.6.3589': attribute type 1 has an invalid length. [ 519.593776][T20054] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 519.859982][T20068] geneve3: entered promiscuous mode [ 519.944890][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.962470][T20073] __nla_validate_parse: 6 callbacks suppressed [ 519.962490][T20073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3599'. [ 520.020054][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3599'. [ 520.090100][T20073] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3599'. [ 520.332181][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3604'. [ 520.373361][T20091] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 520.403110][T20091] netlink: 'syz.1.3605': attribute type 2 has an invalid length. [ 520.431076][T20092] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 520.450921][T20092] netlink: 'syz.1.3605': attribute type 2 has an invalid length. [ 520.462921][T20093] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 520.552184][T20093] netlink: 'syz.1.3605': attribute type 2 has an invalid length. [ 520.569292][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3606'. [ 520.598927][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3606'. [ 520.774940][T20101] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 520.820112][T20101] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3608'. [ 521.057069][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 521.066742][T20110] net_ratelimit: 54 callbacks suppressed [ 521.066763][T20110] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 521.099244][T20109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.129098][T20114] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3613'. [ 521.145495][T20109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.221671][T20115] erspan0: entered promiscuous mode [ 521.272452][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 521.706675][T20133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.206017][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 522.708513][T20172] bond2: Removing last ns target with arp_interval on [ 522.730862][T20181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3632'. [ 522.930635][T20190] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 523.009550][T20192] netem: change failed [ 523.396259][ T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.002338][T20222] vet: renamed from veth0_vlan [ 524.437986][T20243] netlink: 'syz.2.3651': attribute type 1 has an invalid length. [ 524.566439][T10429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.758646][T20253] netlink: 'syz.2.3654': attribute type 1 has an invalid length. [ 525.096999][T20253] __nla_validate_parse: 3 callbacks suppressed [ 525.097020][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3654'. [ 525.120486][T20262] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 525.143016][T20275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3659'. [ 525.359719][T20267] veth5: entered promiscuous mode [ 525.407443][T13062] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 525.410761][T20253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.635956][T20292] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.683717][T10425] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 525.706007][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.074595][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.125360][T20303] syz_tun: entered allmulticast mode [ 526.198480][T20303] pimreg: entered allmulticast mode [ 526.234953][T20303] pimreg: left allmulticast mode [ 526.450596][T20313] netlink: 'syz.1.3667': attribute type 30 has an invalid length. [ 526.711559][T20303] syz_tun: left allmulticast mode [ 526.740869][T20321] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3668'. [ 526.763653][ T5294] vet: left promiscuous mode [ 526.799485][ T5294] vet: entered promiscuous mode [ 526.849333][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.942901][T20328] openvswitch: netlink: EtherType 50a is less than min 600 [ 527.158537][T20331] SET target dimension over the limit! [ 527.448905][T20350] vxcan1: entered allmulticast mode [ 527.641662][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 527.745925][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 527.817011][T20367] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 527.912208][T20369] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 528.000635][ T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.130239][T20384] xt_hashlimit: size too large, truncated to 1048576 [ 528.949810][T20397] syzkaller0: entered promiscuous mode [ 528.974752][T20397] syzkaller0: entered allmulticast mode [ 529.126820][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 529.382925][T20431] netlink: 'syz.1.3694': attribute type 64 has an invalid length. [ 530.327122][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.485333][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.619296][ T3290] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.559149][T20436] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 533.758208][ T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.810784][T20446] netlink: 'syz.6.3698': attribute type 83 has an invalid length. [ 534.011302][T20449] syzkaller0: entered allmulticast mode [ 534.033502][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3698'. [ 534.923020][T20483] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3708'. [ 534.923141][T20484] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3708'. [ 534.953800][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.966288][T20482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3708'. [ 535.441469][T20501] netlink: 'syz.2.3715': attribute type 11 has an invalid length. [ 535.452140][T20501] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3715'. [ 535.550884][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3716'. [ 535.573348][T20504] macsec1: entered promiscuous mode [ 535.581445][T20504] bridge0: entered promiscuous mode [ 535.588234][T20504] macsec1: entered allmulticast mode [ 535.593740][T20504] bridge0: entered allmulticast mode [ 535.631739][T20504] bridge0: port 3(macsec1) entered blocking state [ 535.643692][T20504] bridge0: port 3(macsec1) entered disabled state [ 535.699168][T20504] bridge0: left allmulticast mode [ 535.780949][ T5775] bridge0: left promiscuous mode [ 535.790606][T20516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3719'. [ 535.816070][T20516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3719'. [ 535.832490][T20516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3719'. [ 536.078696][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.463881][T20535] dvmrp0: entered allmulticast mode [ 536.938095][T20548] syzkaller0: entered promiscuous mode [ 536.995853][T20548] syzkaller0: entered allmulticast mode [ 537.198391][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.785837][T20577] FAULT_INJECTION: forcing a failure. [ 537.785837][T20577] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 537.808179][T20576] netlink: 'syz.4.3737': attribute type 62 has an invalid length. [ 537.827027][T20577] CPU: 0 UID: 0 PID: 20577 Comm: syz.1.3736 Not tainted syzkaller #0 PREEMPT(full) [ 537.827056][T20577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.827068][T20577] Call Trace: [ 537.827076][T20577] [ 537.827085][T20577] dump_stack_lvl+0xe8/0x150 [ 537.827115][T20577] should_fail_ex+0x412/0x560 [ 537.827143][T20577] _copy_from_user+0x2d/0xb0 [ 537.827169][T20577] get_timespec64+0x96/0x1b0 [ 537.827193][T20577] ? __pfx_get_timespec64+0x10/0x10 [ 537.827227][T20577] __x64_sys_recvmmsg+0x14b/0x250 [ 537.827252][T20577] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 537.827283][T20577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.827305][T20577] do_syscall_64+0x174/0x580 [ 537.827324][T20577] ? trace_irq_disable+0x3b/0x140 [ 537.827353][T20577] ? clear_bhb_loop+0x40/0x90 [ 537.827378][T20577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.827398][T20577] RIP: 0033:0x7f271779ce59 [ 537.827419][T20577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.827435][T20577] RSP: 002b:00007f27159ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 537.827457][T20577] RAX: ffffffffffffffda RBX: 00007f2717a15fa0 RCX: 00007f271779ce59 [ 537.827470][T20577] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 537.827483][T20577] RBP: 00007f27159ee090 R08: 0000200000003700 R09: 0000000000000000 [ 537.827494][T20577] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 537.827505][T20577] R13: 00007f2717a16038 R14: 00007f2717a15fa0 R15: 00007ffc688e3218 [ 537.827544][T20577] [ 538.265659][T20583] vlan0: entered promiscuous mode [ 538.389352][T20583] team0: Port device vlan0 added [ 538.457765][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.655628][T20595] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 538.678691][T20595] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 539.067647][T20610] FAULT_INJECTION: forcing a failure. [ 539.067647][T20610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.111095][T20610] CPU: 0 UID: 0 PID: 20610 Comm: syz.6.3748 Not tainted syzkaller #0 PREEMPT(full) [ 539.111123][T20610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 539.111135][T20610] Call Trace: [ 539.111143][T20610] [ 539.111151][T20610] dump_stack_lvl+0xe8/0x150 [ 539.111180][T20610] should_fail_ex+0x412/0x560 [ 539.111210][T20610] _copy_from_user+0x2d/0xb0 [ 539.111235][T20610] ___sys_recvmsg+0x175/0x590 [ 539.111256][T20610] ? ktime_get_ts64+0xa9/0x410 [ 539.111290][T20610] ? __pfx____sys_recvmsg+0x10/0x10 [ 539.111316][T20610] ? __fget_files+0x2a/0x420 [ 539.111359][T20610] ? __fget_files+0x3a0/0x420 [ 539.111394][T20610] do_recvmmsg+0x334/0x800 [ 539.111425][T20610] ? __pfx_do_recvmmsg+0x10/0x10 [ 539.111459][T20610] ? _copy_from_user+0x94/0xb0 [ 539.111498][T20610] __x64_sys_recvmmsg+0x1b7/0x250 [ 539.111522][T20610] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 539.111552][T20610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.111572][T20610] do_syscall_64+0x174/0x580 [ 539.111592][T20610] ? trace_irq_disable+0x3b/0x140 [ 539.111620][T20610] ? clear_bhb_loop+0x40/0x90 [ 539.111645][T20610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.111664][T20610] RIP: 0033:0x7fef1af9ce59 [ 539.111683][T20610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.111700][T20610] RSP: 002b:00007fef1bf14028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 539.111731][T20610] RAX: ffffffffffffffda RBX: 00007fef1b215fa0 RCX: 00007fef1af9ce59 [ 539.111744][T20610] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 539.111757][T20610] RBP: 00007fef1bf14090 R08: 0000200000003700 R09: 0000000000000000 [ 539.111769][T20610] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 539.111781][T20610] R13: 00007fef1b216038 R14: 00007fef1b215fa0 R15: 00007ffe48c325b8 [ 539.111814][T20610] [ 539.776823][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.876754][T20638] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3754'. [ 540.112019][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3755'. [ 540.193032][T20649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3750'. [ 540.589571][T20662] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3759'. [ 540.613717][T20655] can: request_module (can-proto-3) failed. [ 540.889875][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 540.906715][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.943726][T20668] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3761'. [ 540.962971][ T5635] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 540.981981][ T5635] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 540.992863][ T5635] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.005993][T20666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 541.028904][ T5635] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.039178][ T5635] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.099832][T20666] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.156721][T20666] gretap1: entered promiscuous mode [ 541.172752][T20666] gretap1: entered allmulticast mode [ 541.248672][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 541.915380][T20707] sit1: entered promiscuous mode [ 541.926868][T20707] sit1: entered allmulticast mode [ 542.047204][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.074757][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.205511][T20674] lo speed is unknown, defaulting to 1000 [ 542.230407][T20725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3773'. [ 543.115004][ T5635] Bluetooth: hci8: command tx timeout [ 543.184735][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 543.588620][T20674] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.607915][T20785] FAULT_INJECTION: forcing a failure. [ 543.607915][T20785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.637350][T20674] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.655915][T20785] CPU: 0 UID: 0 PID: 20785 Comm: syz.2.3787 Not tainted syzkaller #0 PREEMPT(full) [ 543.655941][T20785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.655952][T20785] Call Trace: [ 543.655960][T20785] [ 543.655969][T20785] dump_stack_lvl+0xe8/0x150 [ 543.655995][T20785] should_fail_ex+0x412/0x560 [ 543.656024][T20785] _copy_to_iter+0x589/0x17d0 [ 543.656062][T20785] ? __pfx__copy_to_iter+0x10/0x10 [ 543.656083][T20785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 543.656114][T20785] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.656133][T20785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.656162][T20785] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 543.656190][T20785] __skb_datagram_iter+0xf8/0x980 [ 543.656213][T20785] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 543.656243][T20785] skb_copy_datagram_iter+0xb5/0x240 [ 543.656269][T20785] netlink_recvmsg+0x2c3/0xa50 [ 543.656307][T20785] ? __pfx_netlink_recvmsg+0x10/0x10 [ 543.656342][T20785] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.656372][T20785] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 543.656396][T20785] ? security_socket_recvmsg+0x7e/0x2c0 [ 543.656432][T20785] ? __pfx_netlink_recvmsg+0x10/0x10 [ 543.656460][T20785] sock_recvmsg+0x172/0x1b0 [ 543.656488][T20785] ____sys_recvmsg+0x1e6/0x4a0 [ 543.656519][T20785] ? __pfx_____sys_recvmsg+0x10/0x10 [ 543.656554][T20785] ? import_iovec+0x73/0xa0 [ 543.656581][T20785] ___sys_recvmsg+0x215/0x590 [ 543.656603][T20785] ? __pfx____sys_recvmsg+0x10/0x10 [ 543.656626][T20785] ? __fget_files+0x2a/0x420 [ 543.656667][T20785] ? __fget_files+0x3a0/0x420 [ 543.656766][T20785] do_recvmmsg+0x334/0x800 [ 543.656793][T20785] ? __pfx_do_recvmmsg+0x10/0x10 [ 543.656827][T20785] ? _copy_from_user+0x94/0xb0 [ 543.656876][T20785] __x64_sys_recvmmsg+0x1b7/0x250 [ 543.656897][T20785] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 543.656925][T20785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.656946][T20785] do_syscall_64+0x174/0x580 [ 543.656971][T20785] ? trace_irq_disable+0x3b/0x140 [ 543.656999][T20785] ? clear_bhb_loop+0x40/0x90 [ 543.657024][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.657043][T20785] RIP: 0033:0x7f433259ce59 [ 543.657064][T20785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.657079][T20785] RSP: 002b:00007f43334fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 543.657101][T20785] RAX: ffffffffffffffda RBX: 00007f4332815fa0 RCX: 00007f433259ce59 [ 543.657114][T20785] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 543.657127][T20785] RBP: 00007f43334fa090 R08: 0000200000003700 R09: 0000000000000000 [ 543.657139][T20785] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 543.657150][T20785] R13: 00007f4332816038 R14: 00007f4332815fa0 R15: 00007ffd11b88508 [ 543.657182][T20785] [ 543.674586][T20674] bridge_slave_0: entered allmulticast mode [ 543.689000][T20787] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 543.712053][T20674] bridge_slave_0: entered promiscuous mode [ 543.803515][T20789] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3788'. [ 543.821648][T20674] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.908979][T20793] netlink: 'syz.6.3789': attribute type 10 has an invalid length. [ 544.072595][T20674] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.082686][T20674] bridge_slave_1: entered allmulticast mode [ 544.093641][T20674] bridge_slave_1: entered promiscuous mode [ 544.231990][T20787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.277458][T20793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.294879][T20793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.312268][T20793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.324521][T20793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.376616][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 544.452219][T20674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.501873][T20674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.678281][T20817] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 544.796524][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 544.893080][T20817] bond4: entered promiscuous mode [ 544.900362][T20817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.122617][T20828] bond4: (slave bridge2): making interface the new active one [ 545.164032][T20828] bridge2: entered promiscuous mode [ 545.194450][ T5648] Bluetooth: hci8: command tx timeout [ 545.251179][T20828] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 545.260872][T20817] netlink: 'syz.4.3794': attribute type 12 has an invalid length. [ 545.273145][T20817] netlink: 'syz.4.3794': attribute type 29 has an invalid length. [ 545.304614][T20817] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3794'. [ 545.315081][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3798'. [ 545.340792][T20843] xt_hashlimit: size too large, truncated to 1048576 [ 545.399282][T20674] team0: Port device team_slave_0 added [ 545.480489][T20844] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 545.526250][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.527647][T20844] netlink: 'syz.2.3798': attribute type 2 has an invalid length. [ 545.603295][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3798'. [ 545.641772][T20674] team0: Port device team_slave_1 added [ 545.807336][T20674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.847870][T20674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.923008][T20674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.991396][T20674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.028919][T20674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.131421][T20674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.425583][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 546.472006][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 546.520409][T20674] hsr_slave_0: entered promiscuous mode [ 546.555953][T20674] hsr_slave_1: entered promiscuous mode [ 546.588373][T20674] debugfs: 'hsr0' already exists in 'hsr' [ 546.609239][T20674] Cannot create hsr debugfs directory [ 546.612474][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3806'. [ 546.627743][T20871] syzkaller1: entered promiscuous mode [ 546.640318][T20871] syzkaller1: entered allmulticast mode [ 546.655986][T19048] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.084615][T20896] netlink: 'syz.2.3810': attribute type 1 has an invalid length. [ 547.242545][T20908] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 547.280284][T20896] netlink: 'syz.2.3810': attribute type 12 has an invalid length. [ 547.289917][ T5648] Bluetooth: hci8: command tx timeout [ 547.410502][T20913] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3811'. [ 547.836900][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 548.278226][T20935] bridge_slave_0: left allmulticast mode [ 548.353971][T20935] bridge_slave_0: left promiscuous mode [ 548.420355][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.550159][T20935] bridge_slave_1: left allmulticast mode [ 548.599599][T20935] bridge_slave_1: left promiscuous mode [ 548.648490][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.808512][T20935] bond0: (slave bond_slave_0): Releasing backup interface [ 548.830950][T20958] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3818'. [ 548.917112][T20935] bond0: (slave bond_slave_1): Releasing backup interface [ 548.986502][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 549.008332][T20970] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3819'. [ 549.047291][T20935] team0: Port device team_slave_0 removed [ 549.110290][T20935] team0: Port device team_slave_1 removed [ 549.141458][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.152405][T20935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.186042][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.210609][T20935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.249015][T20935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.291453][T20980] netlink: 'syz.4.3822': attribute type 1 has an invalid length. [ 549.365001][ T5648] Bluetooth: hci8: command tx timeout [ 549.390284][T20975] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3821'. [ 549.477248][T20980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.218201][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.378053][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 552.595719][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 553.741713][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 554.513553][T20674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 554.563100][T20674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.592545][T20674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 554.669753][T20674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.688966][T21033] __nla_validate_parse: 1 callbacks suppressed [ 554.688987][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3832'. [ 554.787450][T20674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 554.803304][T20674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.812737][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3832'. [ 554.823371][T20674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 554.840131][T20674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.880939][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 554.969388][T21042] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.026176][T21042] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.060908][T21055] netlink: 'syz.6.3835': attribute type 11 has an invalid length. [ 555.069089][T21055] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.3835'. [ 555.077861][T21059] netlink: 'syz.1.3836': attribute type 33 has an invalid length. [ 555.259098][T21059] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 555.273744][T21059] bond3 (unregistering): Released all slaves [ 555.432202][T21042] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.445719][T21042] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.610345][T21042] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.634744][T21042] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.996234][T21042] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.006029][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 556.008695][T21042] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.066122][T21082] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 556.074941][T21082] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 556.207456][T20674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.287884][T20674] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.352674][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.359999][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.377499][ T1177] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.387458][ T1177] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.426037][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 556.440040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.447417][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.499574][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.520415][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.652532][ T1177] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.665994][ T1177] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.678452][ T1177] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.691879][ T1177] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.735084][T21096] tipc: Enabling of bearer rejected, failed to enable media [ 556.851562][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3848'. [ 557.144898][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.290484][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 557.479652][T19049] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.489787][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 557.517141][T19049] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.554669][T21115] veth0_to_bridge: entered promiscuous mode [ 557.581200][T19049] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.613160][T19049] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.633414][T21115] netlink: 'syz.2.3851': attribute type 1 has an invalid length. [ 557.817443][T21113] veth0_to_bridge: left promiscuous mode [ 557.863578][T21125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.143751][T21132] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3858'. [ 558.263687][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.469051][T21143] netlink: 'syz.4.3861': attribute type 21 has an invalid length. [ 558.485866][T21143] netlink: 'syz.4.3861': attribute type 22 has an invalid length. [ 558.503445][T21143] netlink: 'syz.4.3861': attribute type 23 has an invalid length. [ 558.540539][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3861'. [ 558.549241][T21143] netlink: 'syz.4.3861': attribute type 25 has an invalid length. [ 558.579515][T21143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3861'. [ 559.005889][T20674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.019458][T21164] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 559.069595][T21164] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 559.415293][T21184] syzkaller1: entered promiscuous mode [ 559.425387][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.446645][T21184] syzkaller1: entered allmulticast mode [ 560.122714][T20674] veth0_vlan: entered promiscuous mode [ 560.155222][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 560.201009][T20674] veth1_vlan: entered promiscuous mode [ 560.349476][T20674] veth0_macvtap: entered promiscuous mode [ 560.372437][T20674] veth1_macvtap: entered promiscuous mode [ 560.402093][ T29] audit: type=1107 audit(1780375675.587:5): pid=21215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 560.433215][T21216] gre1: entered promiscuous mode [ 560.506443][T20674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.513769][T21219] __nla_validate_parse: 5 callbacks suppressed [ 560.513789][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 560.564856][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 560.685913][T20674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.777249][T13060] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.829679][T13060] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.879302][T13060] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.915721][T13065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.926244][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3880'. [ 560.944163][T21228] openvswitch: netlink: Flow actions attr not present in new flow. [ 560.981956][T21231] netlink: 'syz.1.3882': attribute type 39 has an invalid length. [ 561.325623][T19049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.347878][T19049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.469138][T19047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.501931][T21243] syz_tun: refused to change device tx_queue_len [ 561.504335][T19047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.730021][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.908178][T21254] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3758'. [ 562.010047][T21256] macsec1: entered promiscuous mode [ 562.452778][T21276] netlink: zone id is out of range [ 562.514511][T21276] netlink: zone id is out of range [ 562.545315][T21276] netlink: zone id is out of range [ 562.554616][T21280] netlink: 'syz.1.3897': attribute type 21 has an invalid length. [ 562.576927][T21276] netlink: zone id is out of range [ 562.593774][T21280] netlink: 'syz.1.3897': attribute type 2 has an invalid length. [ 562.607048][T21276] netlink: zone id is out of range [ 562.621557][T21276] netlink: zone id is out of range [ 562.628280][T21280] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3897'. [ 562.658891][T21276] netlink: zone id is out of range [ 562.693518][T21276] netlink: set zone limit has 4 unknown bytes [ 562.709452][T21284] xt_policy: too many policy elements [ 562.865834][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.024343][T21294] 8021q: VLANs not supported on lo [ 563.203779][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.254883][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'. [ 563.256987][T21300] netlink: 'syz.2.3904': attribute type 11 has an invalid length. [ 563.308487][T21300] netlink: 'syz.2.3904': attribute type 11 has an invalid length. [ 563.361585][T21300] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3904'. [ 563.459826][T21300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3904'. [ 563.913545][T21321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.020340][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.220585][T21325] netlink: 'syz.2.3912': attribute type 6 has an invalid length. [ 564.237001][T21327] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.240288][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'. [ 564.286451][T21325] nbd: couldn't find a device at index 0 [ 564.314826][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3914'. [ 564.416283][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3915'. [ 564.440453][T21335] netlink: 'syz.4.3916': attribute type 39 has an invalid length. [ 564.590239][T21342] netlink: set zone limit has 4 unknown bytes [ 564.731722][T21342] netlink: set zone limit has 4 unknown bytes [ 564.904976][T21340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.951645][T21340] bond4 (unregistering): Released all slaves [ 565.095540][T21355] gretap1: entered promiscuous mode [ 565.101899][T21355] batman_adv: batadv0: Adding interface: gretap1 [ 565.111258][T21355] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 565.138744][T21355] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 565.182402][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 565.803315][T21381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3927'. [ 566.207684][T21391] xt_hashlimit: size too large, truncated to 1048576 [ 566.366379][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.608076][T15131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.609279][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.655273][T21392] 8021q: adding VLAN 0 to HW filter on device eth0 [ 566.684357][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.724621][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.753770][T21392] 8021q: adding VLAN 0 to HW filter on device eth1 [ 566.775700][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.787301][T21392] 8021q: adding VLAN 0 to HW filter on device eth2 [ 566.794919][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.826149][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 566.838902][T21392] 8021q: adding VLAN 0 to HW filter on device eth3 [ 567.408822][T21415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3935'. [ 567.497753][T21424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3935'. [ 567.513454][T21423] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.3937'. [ 567.541597][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'. [ 567.541946][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.596415][T15138] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.860910][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 567.876685][T21438] netlink: 'syz.8.3942': attribute type 1 has an invalid length. [ 567.915095][T21438] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3942'. [ 568.120619][T21449] netlink: 'syz.4.3944': attribute type 2 has an invalid length. [ 568.640855][T21465] ieee802154 phy0 wpan0: encryption failed: -126 [ 568.699976][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.822828][T21474] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 568.870882][T21476] netlink: 'syz.2.3953': attribute type 8 has an invalid length. [ 568.923607][T21480] netlink: 'syz.2.3953': attribute type 8 has an invalid length. [ 569.087361][ T157] net_ratelimit: 39 callbacks suppressed [ 569.087384][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.314741][ T1177] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.391090][T21500] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3959'. [ 569.402616][T21500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3959'. [ 569.466916][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.587272][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.736246][ T1177] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.835324][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.938038][T21525] team0: entered promiscuous mode [ 569.943386][T21525] team_slave_0: entered promiscuous mode [ 569.952189][T21525] team_slave_1: entered promiscuous mode [ 570.226461][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.329159][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3968'. [ 570.395567][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.398975][ T5648] Bluetooth: hci6: command 0x0406 tx timeout [ 570.514820][T21543] netlink: 'syz.8.3972': attribute type 9 has an invalid length. [ 570.668037][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.804967][T10425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.955206][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.966917][T13065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.188589][T21576] __nla_validate_parse: 2 callbacks suppressed [ 571.188610][T21576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3977'. [ 571.236285][T21578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3980'. [ 571.255110][T21578] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3980'. [ 571.543248][T21588] syzkaller0: entered promiscuous mode [ 571.573946][T21588] syzkaller0: entered allmulticast mode [ 571.653127][T21585] syzkaller0: entered promiscuous mode [ 571.668354][T21585] syzkaller0: entered allmulticast mode [ 571.739935][T21585] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 571.759554][T21596] netlink: 'syz.8.3985': attribute type 3 has an invalid length. [ 572.128721][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.245474][T21613] netlink: 'syz.1.3991': attribute type 1 has an invalid length. [ 572.294228][T21613] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3991'. [ 572.310315][T21613] netlink: 'syz.1.3991': attribute type 1 has an invalid length. [ 572.323793][T21613] netlink: 'syz.1.3991': attribute type 8 has an invalid length. [ 572.341830][T21613] netlink: 582 bytes leftover after parsing attributes in process `syz.1.3991'. [ 572.395775][T21613] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3991'. [ 572.743529][T21624] syz_tun: entered allmulticast mode [ 572.762741][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 573.269463][T21655] pim6reg527: entered allmulticast mode [ 573.269766][T21650] ieee802154 phy0 wpan0: encryption failed: -126 [ 573.286892][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.436857][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.743011][T21680] netlink: 'syz.2.4010': attribute type 1 has an invalid length. [ 573.764961][T21677] syz_tun: entered allmulticast mode [ 573.808411][T21680] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.4010'. [ 573.820566][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4012'. [ 573.841776][T21682] pimreg: entered allmulticast mode [ 573.859381][T21681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4012'. [ 573.948569][T21677] syz_tun: left allmulticast mode [ 574.046256][T21691] netlink: 'syz.2.4014': attribute type 27 has an invalid length. [ 574.090333][T21691] netlink: 'syz.2.4014': attribute type 4 has an invalid length. [ 574.155207][ T13] net_ratelimit: 19 callbacks suppressed [ 574.155227][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.226801][T21695] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.338083][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.417582][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.483122][T21704] 8021q: VLANs not supported on ip_vti0 [ 574.525213][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.664899][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.856037][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.928230][T21718] netlink: 'syz.6.4020': attribute type 11 has an invalid length. [ 574.994749][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 575.337002][T21727] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.344460][T21727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.352182][T21727] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.359551][T21727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.422647][T21727] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.552784][T21727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.600226][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.655513][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 575.700461][T21736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.778794][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 576.006040][T21754] netlink: 'syz.8.4032': attribute type 2 has an invalid length. [ 576.036051][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 576.155861][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 576.299797][T21761] bridge1: entered promiscuous mode [ 576.332005][T21761] bridge1: entered allmulticast mode [ 576.408053][T21768] geneve3: entered promiscuous mode [ 576.528587][T21769] geneve3: entered promiscuous mode [ 576.729363][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 577.013645][T21791] __nla_validate_parse: 2 callbacks suppressed [ 577.013666][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 577.076825][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 577.199394][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 577.249336][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 577.552556][T21805] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4049'. [ 577.871256][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.029651][T21830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4059'. [ 578.099688][T21830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4059'. [ 578.129591][T21830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4059'. [ 578.681433][T21861] netlink: 'syz.6.4066': attribute type 1 has an invalid length. [ 578.860707][T21857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.866868][T21868] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4067'. [ 579.020565][T21868] tunl0: entered promiscuous mode [ 579.049247][T10425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.051748][T21868] netlink: 'syz.8.4067': attribute type 3 has an invalid length. [ 579.127408][T21868] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4067'. [ 579.188007][ T1152] net_ratelimit: 17 callbacks suppressed [ 579.188028][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.354851][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.486775][T21880] x_tables: unsorted underflow at hook 4 [ 579.496652][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.542609][T21880] syzkaller1: entered promiscuous mode [ 579.581714][T21880] syzkaller1: entered allmulticast mode [ 579.703143][T21892] x_tables: duplicate entry at hook 3 [ 579.855713][T21895] h: entered promiscuous mode [ 579.896276][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.039034][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.205518][ T1152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.218488][ T29] audit: type=1107 audit(1780375695.407:6): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 580.254276][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.515972][T21923] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 580.549416][T21923] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 580.564837][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.694200][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.834569][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 580.972199][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 581.376555][T21947] H: renamed from dummy0 (while UP) [ 581.395801][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.456801][T21955] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 581.575032][T21951] macvlan2: entered promiscuous mode [ 581.604725][T21951] macvlan2: entered allmulticast mode [ 581.612288][T21951] bond4: entered promiscuous mode [ 581.621308][T21951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 581.719323][T21951] bond4: left promiscuous mode [ 582.045673][T21975] xt_hashlimit: size too large, truncated to 1048576 [ 582.238080][T21979] __nla_validate_parse: 5 callbacks suppressed [ 582.238101][T21979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4102'. [ 582.537555][T13065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 582.760643][T22006] netlink: 'syz.4.4107': attribute type 9 has an invalid length. [ 582.809685][T22006] netlink: 'syz.4.4107': attribute type 6 has an invalid length. [ 582.823081][T21994] syzkaller0: entered promiscuous mode [ 582.838702][T21994] syzkaller0: entered allmulticast mode [ 583.042647][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4108'. [ 583.055099][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4109'. [ 583.145276][T22014] pimreg3: entered allmulticast mode [ 583.257855][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4109'. [ 583.371222][T22025] xt_hashlimit: size too large, truncated to 1048576 [ 583.520343][T22023] bond4: entered promiscuous mode [ 583.531641][T22023] bond4: entered allmulticast mode [ 583.539790][T22023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.550190][T22031] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4114'. [ 583.578723][T22017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4109'. [ 583.697690][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 584.143241][T22053] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 584.233673][T22053] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 584.320119][T19049] net_ratelimit: 17 callbacks suppressed [ 584.320139][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.507030][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.655848][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.803123][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.814845][T22049] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 584.844326][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 584.987515][T22089] bond3 (unregistering): Released all slaves [ 585.954778][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.075078][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 586.424660][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 586.443067][T22110] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 586.544734][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 586.686035][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4136'. [ 586.731749][T22122] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 586.743169][T22122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.796082][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 586.995025][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 587.086429][T13065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.107279][T22134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4142'. [ 587.381459][T22143] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4146'. [ 587.396628][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4146'. [ 587.429937][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 587.448090][T22148] netlink: 'syz.1.4147': attribute type 8 has an invalid length. [ 587.475073][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'. [ 587.496942][T22143] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 587.509063][T22143] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 587.533714][T22143] gretap1: entered promiscuous mode [ 587.557001][T22143] gretap1: entered allmulticast mode [ 587.568211][T22153] netlink: 'syz.8.4149': attribute type 1 has an invalid length. [ 587.681425][T22148] veth1_to_team: entered promiscuous mode [ 587.762740][T22148] veth1_to_team: left promiscuous mode [ 587.959222][T22163] hsr0: entered promiscuous mode [ 588.239481][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.517827][T22189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4156'. [ 589.293746][T22174] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.340389][T22198] pim6reg: entered allmulticast mode [ 589.383261][T22202] pim6reg: left allmulticast mode [ 589.391331][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 589.416253][T19049] net_ratelimit: 3 callbacks suppressed [ 589.416274][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.809011][T22174] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.966088][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.167618][T22174] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.519616][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.539298][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.561867][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4171'. [ 590.613178][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4171'. [ 590.701497][T22174] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.827794][T22263] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4174'. [ 590.864304][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 591.009853][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 591.338148][T22284] sctp: [Deprecated]: syz.6.4179 (pid 22284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.338148][T22284] Use struct sctp_sack_info instead [ 591.368970][T13060] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.396552][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 591.433839][T22284] tipc: Started in network mode [ 591.469848][T22284] tipc: Node identity 080211000001, cluster identity 4711 [ 591.521772][T22284] tipc: Enabled bearer , priority 0 [ 591.571859][T22284] sctp: [Deprecated]: syz.6.4179 (pid 22284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.571859][T22284] Use struct sctp_sack_info instead [ 591.711923][T22292] syzkaller0: mtu less than device minimum [ 591.725954][T22298] nbd: must specify a size in bytes for the device [ 591.726212][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.742979][T13065] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.767072][T22299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.866622][T22304] mac80211_hwsim hwsim36 ÿ: renamed from wlan1 [ 591.949755][T13065] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.017492][T13060] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.045215][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.174921][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.298216][T22318] : entered promiscuous mode [ 592.348119][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.431939][T22329] netlink: 'syz.1.4189': attribute type 1 has an invalid length. [ 592.681267][T22344] xt_policy: too many policy elements [ 592.760029][T22329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 592.787673][T22330] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 592.877689][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.879326][T22333] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 592.894932][T22333] bond3: option packets_per_slave: allowed values 0 - 65535 [ 592.949618][T22333] bond3 (unregistering): Released all slaves [ 593.121936][T22335] bond5: (slave ip6gretap1): making interface the new active one [ 593.137108][T22335] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 593.149932][ T5831] tipc: Node number set to 134418688 [ 593.518543][T22367] netlink: 'syz.1.4200': attribute type 11 has an invalid length. [ 593.529015][T22367] netlink: 'syz.1.4200': attribute type 11 has an invalid length. [ 593.538906][T22367] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4200'. [ 593.734446][T22375] netlink: 'syz.2.4202': attribute type 1 has an invalid length. [ 593.763698][T22380] x_tables: unsorted underflow at hook 2 [ 594.078810][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.125892][T22397] netlink: 'syz.1.4211': attribute type 1 has an invalid length. [ 594.158409][T22403] netlink: 'syz.6.4212': attribute type 1 has an invalid length. [ 594.178254][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4211'. [ 594.204143][T22392] bond3: entered promiscuous mode [ 594.295610][T22406] bond5 (unregistering): Released all slaves [ 594.427887][T22397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.492913][T22413] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4213'. [ 594.549816][T22413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4213'. [ 594.562768][T22417] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4214'. [ 594.573121][T22417] net_ratelimit: 7 callbacks suppressed [ 594.573141][T22417] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 594.593143][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4213'. [ 594.620833][T22409] bond5: (slave gretap2): making interface the new active one [ 594.638483][T22409] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 594.665473][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.787255][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.846988][T22422] netlink: 'syz.2.4215': attribute type 2 has an invalid length. [ 594.849825][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'. [ 594.872793][T22422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4215'. [ 594.914653][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.936876][T22422] netlink: 'syz.2.4215': attribute type 2 has an invalid length. [ 594.955794][T22422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4215'. [ 595.026719][T22422] netlink: 'syz.2.4215': attribute type 10 has an invalid length. [ 595.038363][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.065982][T22422] syz_tun: entered promiscuous mode [ 595.204666][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.224859][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 595.614307][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.718027][T22457] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4225'. [ 595.727346][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.865461][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.957371][T22470] vcan1: entered promiscuous mode [ 595.977079][T22470] vcan1: entered allmulticast mode [ 596.064289][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 596.345756][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.932813][T22495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.278500][T22503] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 597.460273][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.661663][T22519] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 597.835544][ T5635] Bluetooth: hci8: command tx timeout [ 598.133575][T22537] netlink: 'syz.1.4247': attribute type 29 has an invalid length. [ 598.167939][T22537] netlink: 'syz.1.4247': attribute type 29 has an invalid length. [ 598.186154][T22537] netlink: 'syz.1.4247': attribute type 32 has an invalid length. [ 598.498320][T22546] netlink: 'syz.1.4251': attribute type 1 has an invalid length. [ 598.596152][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.631218][T22546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 598.677671][T22549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.809078][T22566] netlink: 'syz.1.4257': attribute type 32 has an invalid length. [ 598.829877][T22566] __nla_validate_parse: 5 callbacks suppressed [ 598.829895][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'. [ 598.939637][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'. [ 598.950202][T22574] netlink: 'syz.6.4259': attribute type 3 has an invalid length. [ 598.969849][T22566] bond8: option coupled_control: invalid value (192) [ 598.984632][T22566] bond8 (unregistering): Released all slaves [ 599.055189][T22577] netlink: 'syz.6.4261': attribute type 1 has an invalid length. [ 599.168043][T22577] bond6: (slave geneve3): making interface the new active one [ 599.195611][T22577] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 599.212231][ T5635] block nbd1: Receive control failed (result -32) [ 599.228026][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.301030][ T13] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.330338][T22591] netlink: 'syz.8.4263': attribute type 21 has an invalid length. [ 599.340001][ T13] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.379137][ T13] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.391747][T22593] netlink: 'syz.8.4263': attribute type 1 has an invalid length. [ 599.401374][T22591] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4263'. [ 599.519861][T22599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4265'. [ 599.559486][T22598] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4264'. [ 599.665032][ T13] net_ratelimit: 24 callbacks suppressed [ 599.665054][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.705395][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 599.818394][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.947173][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.064783][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.205377][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.276248][T22632] pim6reg527: entered allmulticast mode [ 600.285075][T22632] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4273'. [ 600.334581][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.456304][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.487297][T22639] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4273'. [ 600.594509][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.714510][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.824538][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.844705][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.964596][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.084629][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.123430][T22621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.386522][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4281'. [ 603.413092][T22670] validate_nla: 2 callbacks suppressed [ 603.413112][T22670] netlink: 'syz.1.4280': attribute type 2 has an invalid length. [ 603.495802][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 603.526150][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4282'. [ 603.654843][T22676] netlink: 'syz.6.4283': attribute type 8 has an invalid length. [ 603.751171][T22682] netlink: 'syz.8.4285': attribute type 1 has an invalid length. [ 604.200199][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.385007][T22709] __nla_validate_parse: 1 callbacks suppressed [ 604.385036][T22709] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4291'. [ 604.696008][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4297'. [ 604.754793][ T157] net_ratelimit: 862 callbacks suppressed [ 604.754816][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.849525][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4300'. [ 604.866416][T22735] vlan0: entered allmulticast mode [ 604.875108][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.984537][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.104684][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.216130][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.324512][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.355305][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 605.436938][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.564385][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.674956][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.784744][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 606.464705][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 607.323741][T22709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.575632][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 607.767130][T22748] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4304'. [ 607.947742][ T5648] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 607.961148][ T5648] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 607.979967][ T5648] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 607.992625][ T5648] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 608.010568][ T5648] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 608.200842][T22762] syzkaller1: entered promiscuous mode [ 608.241406][T22762] syzkaller1: entered allmulticast mode [ 608.415720][T22774] syzkaller1: entered promiscuous mode [ 608.434730][T22774] syzkaller1: entered allmulticast mode [ 608.462393][T22780] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4312'. [ 608.746531][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.775600][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4314'. [ 609.453909][T22758] lo speed is unknown, defaulting to 1000 [ 609.720737][T22812] netlink: 'syz.8.4318': attribute type 1 has an invalid length. [ 609.744615][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'. [ 609.781137][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4318'. [ 609.925940][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.074749][ T5648] Bluetooth: hci9: command tx timeout [ 610.111913][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4323'. [ 610.115924][T22828] net_ratelimit: 30 callbacks suppressed [ 610.115943][T22828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.280890][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4323'. [ 610.400649][T22826] : entered promiscuous mode [ 610.415887][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 610.739583][T22758] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.760627][T22758] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.782659][T22758] bridge_slave_0: entered allmulticast mode [ 610.811534][T22758] bridge_slave_0: entered promiscuous mode [ 610.844817][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 610.849567][T22858] netlink: 'syz.8.4329': attribute type 1 has an invalid length. [ 610.860966][T22858] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4329'. [ 610.876446][T22758] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.881230][T22858] netlink: 658 bytes leftover after parsing attributes in process `syz.8.4329'. [ 610.907875][T22758] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.926859][T22858] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4329'. [ 610.931800][T22758] bridge_slave_1: entered allmulticast mode [ 610.964495][T22758] bridge_slave_1: entered promiscuous mode [ 611.015245][T22859] netlink: 'syz.8.4329': attribute type 1 has an invalid length. [ 611.023473][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 611.049720][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 611.119745][T22758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.149001][T22758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.258508][T19049] bond0: (slave bond_slave_0): interface is now down [ 611.312225][T19049] bond0: (slave bond_slave_1): interface is now down [ 611.354940][ T5648] Bluetooth: hci3: command 0x0406 tx timeout [ 611.368927][T22758] team0: Port device team_slave_0 added [ 611.428604][T22758] team0: Port device team_slave_1 added [ 611.618175][T22758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.652752][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.699726][T22758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.786912][T22758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.822515][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.878529][T22758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.045464][T22889] xt_TCPMSS: Only works on TCP SYN packets [ 612.047704][T22758] hsr_slave_0: entered promiscuous mode [ 612.071575][T22892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4337'. [ 612.077590][T22758] hsr_slave_1: entered promiscuous mode [ 612.098666][T22758] debugfs: 'hsr0' already exists in 'hsr' [ 612.105957][T22758] Cannot create hsr debugfs directory [ 612.158957][ T5635] Bluetooth: hci9: command tx timeout [ 612.207947][T13065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.248631][T22899] netlink: 'syz.8.4341': attribute type 21 has an invalid length. [ 612.257448][T22895] vlan2: entered allmulticast mode [ 612.275696][T22895] bond0: entered allmulticast mode [ 612.288156][T22895] bond_slave_0: entered allmulticast mode [ 612.292263][T22902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4340'. [ 612.312093][T22903] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4341'. [ 612.323228][T22895] bond_slave_1: entered allmulticast mode [ 612.334928][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 612.484980][T22908] netlink: 'syz.6.4342': attribute type 1 has an invalid length. [ 612.623963][T22908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.767199][T22910] bond7: (slave veth0_to_bond): making interface the new active one [ 612.797794][T22910] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 612.859242][T10425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 612.917325][T22918] geneve3: entered promiscuous mode [ 612.955812][T13060] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 57521 - 0 [ 612.967535][T13060] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 57521 - 0 [ 612.990509][T13060] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 57521 - 0 [ 613.027369][T13060] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 57521 - 0 [ 613.244889][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 613.260513][T22936] xt_TCPMSS: Only works on TCP SYN packets [ 613.336382][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.449729][T22942] netlink: Unknown conntrack attr (type=2304, max=9) [ 613.460980][T10425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 613.923662][T22958] netlink: 'syz.8.4356': attribute type 1 has an invalid length. [ 613.924598][T19047] bond0: (slave bond_slave_0): interface is now down [ 613.944411][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 613.960280][T19047] bond0: (slave bond_slave_1): interface is now down [ 614.030106][T22958] bond2: option mode: invalid value (7) [ 614.037775][T22961] netlink: 'syz.8.4356': attribute type 10 has an invalid length. [ 614.058643][T22958] bond2 (unregistering): Released all slaves [ 614.254603][ T5635] Bluetooth: hci9: command tx timeout [ 614.354218][T22961] H: entered promiscuous mode [ 614.449275][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.559974][T22758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 614.787137][T22758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.806269][T22758] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 614.843668][T22758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.022619][T22758] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 615.110018][T22758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.152021][T22758] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 615.206781][T22758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.338776][T19049] net_ratelimit: 3 callbacks suppressed [ 615.338797][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 615.605618][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.615066][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 615.813621][T22758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.837779][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 615.857385][T23010] __nla_validate_parse: 5 callbacks suppressed [ 615.857407][T23010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4366'. [ 615.902136][T23010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4366'. [ 616.010896][T22758] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.103879][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.111406][T10425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.173826][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.181292][T10425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.255917][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 616.315640][ T5635] Bluetooth: hci9: command tx timeout [ 616.439525][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4368'. [ 616.464983][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4368'. [ 616.477413][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 616.554529][ T13] bond0: (slave bond_slave_0): interface is now down [ 616.585844][ T13] bond0: (slave bond_slave_1): interface is now down [ 616.671868][ T13] bond0: now running without any active interface! [ 616.734398][T10425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 616.765810][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.849939][T23031] netlink: 'syz.6.4371': attribute type 1 has an invalid length. [ 617.043840][T23031] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.075722][T23032] bond7: (slave veth0_to_bond): Releasing active interface [ 617.114923][T23032] bond8: (slave veth0_to_bond): making interface the new active one [ 617.148646][T23032] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 617.206231][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 617.232463][T23040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4373'. [ 617.340296][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 617.487614][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 617.575346][T23054] netlink: 'syz.1.4376': attribute type 12 has an invalid length. [ 617.620378][T23058] netlink: 'syz.6.4377': attribute type 1 has an invalid length. [ 617.655688][T23058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4377'. [ 617.684903][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 617.692698][T23054] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4376'. [ 617.702979][T23058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4377'. [ 617.779253][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4377'. [ 617.935542][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 618.053108][T23070] bridge_slave_0: left allmulticast mode [ 618.078073][T23070] bridge_slave_0: left promiscuous mode [ 618.094654][T23070] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.121287][T23070] bridge_slave_1: left allmulticast mode [ 618.137340][T23070] bridge_slave_1: left promiscuous mode [ 618.144291][T23070] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.179090][T23070] bond0: (slave bond_slave_0): Releasing backup interface [ 618.189434][T23070] bond_slave_0: left allmulticast mode [ 618.203708][T23070] bond0: (slave bond_slave_1): Releasing backup interface [ 618.221020][T23070] bond_slave_1: left allmulticast mode [ 618.249352][T23070] team_slave_0: left promiscuous mode [ 618.261879][T23070] team0: Port device team_slave_0 removed [ 618.269222][T23070] team_slave_1: left promiscuous mode [ 618.278959][T23070] team0: Port device team_slave_1 removed [ 618.286761][T23070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.294730][T23070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.303837][T23070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.313613][T23070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.361591][T22758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.375103][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4381'. [ 619.065108][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 619.338566][T23110] netlink: 'syz.8.4389': attribute type 1 has an invalid length. [ 619.562648][T22758] veth0_vlan: entered promiscuous mode [ 619.626511][T22758] veth1_vlan: entered promiscuous mode [ 619.735727][T22758] veth0_macvtap: entered promiscuous mode [ 619.803435][T22758] veth1_macvtap: entered promiscuous mode [ 619.856757][T22758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.893945][T22758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.949790][T10425] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.981125][T10425] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.017199][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.051387][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.223543][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 620.387164][T13060] net_ratelimit: 17 callbacks suppressed [ 620.387185][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.549970][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.553181][T19049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.600857][T19049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.731179][T15130] IPVS: starting estimator thread 0... [ 620.774620][T19047] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.837842][T19048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.857414][T23152] IPVS: using max 27 ests per chain, 64800 per kthread [ 620.904913][T19048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.964920][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 621.196903][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 621.359119][T23167] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 621.398724][T23171] vlan3: entered allmulticast mode [ 621.407818][T23171] veth1_virt_wifi: entered allmulticast mode [ 621.428793][T19048] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 621.572578][T10425] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 621.717134][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 622.435089][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 622.567147][T19047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.575724][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 622.707761][T23223] __nla_validate_parse: 4 callbacks suppressed [ 622.707780][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4420'. [ 622.724582][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 622.754433][T23233] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 622.754981][T23228] IPVS: stopping master sync thread 23233 ... [ 622.769555][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4420'. [ 622.857559][T23229] netdevsim netdevsim6: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 622.903722][T23228] x_tables: duplicate underflow at hook 1 [ 623.439937][T23255] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4430'. [ 623.456760][T23257] netlink: 'syz.9.4429': attribute type 21 has an invalid length. [ 623.489522][T23257] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.569481][T23263] netlink: 16215 bytes leftover after parsing attributes in process `syz.9.4429'. [ 623.737557][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 623.862341][T23273] x_tables: duplicate underflow at hook 1 [ 624.011722][T23285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4439'. [ 624.077230][T23285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4439'. [ 624.126266][T23285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4439'. [ 624.669134][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.930742][T23324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4447'. [ 624.948160][T19048] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.957157][T23327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4447'. [ 625.088529][T23333] macvtap0: entered allmulticast mode [ 625.140787][T23333] veth0_macvtap: entered allmulticast mode [ 625.370452][T23347] netlink: 'syz.1.4453': attribute type 7 has an invalid length. [ 625.499476][T23354] net_ratelimit: 20 callbacks suppressed [ 625.499497][T23354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.653792][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4454'. [ 625.663539][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 625.766617][T19048] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.796922][T19048] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.833541][T19048] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.870210][T19048] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.926371][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.087839][T13060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 626.095163][T23364] netlink: 'syz.9.4458': attribute type 23 has an invalid length. [ 626.376568][T23368] IPv6: sit2: Disabled Multicast RS [ 626.399833][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.534816][T13060] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.689826][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.854738][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.934993][T23393] netlink: 'syz.2.4467': attribute type 1 has an invalid length. [ 626.986276][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 627.135010][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 627.170450][T23405] netlink: 'syz.6.4472': attribute type 1 has an invalid length. [ 627.213635][T23405] netlink: 'syz.6.4472': attribute type 30 has an invalid length. [ 627.294532][ T157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 627.348454][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 627.622393][T23423] netlink: 'syz.2.4479': attribute type 27 has an invalid length. [ 627.657257][T23423] netlink: 'syz.2.4479': attribute type 4 has an invalid length. [ 627.716462][T23425] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 627.735812][T23425] __nla_validate_parse: 11 callbacks suppressed [ 627.735832][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4478'. [ 628.241655][T23456] netlink: 'syz.6.4487': attribute type 9 has an invalid length. [ 628.329404][T23456] netlink: 180916 bytes leftover after parsing attributes in process `syz.6.4487'. [ 628.486721][ T157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 628.629438][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4489'. [ 628.701168][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4489'. [ 629.131181][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'. [ 629.227497][T23497] macvlan2: entered allmulticast mode [ 629.233018][T23497] dummy0: entered allmulticast mode [ 629.239996][T23497] dummy0: entered promiscuous mode [ 629.262916][T23499] tipc: Enabling of bearer rejected, failed to enable media [ 629.571105][T23513] netlink: 'syz.8.4503': attribute type 1 has an invalid length. [ 629.585003][T23512] netlink: 'syz.8.4503': attribute type 1 has an invalid length. [ 629.618795][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 630.564553][ T12] net_ratelimit: 25 callbacks suppressed [ 630.564577][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 630.581543][T23549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4511'. [ 630.586547][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4512'. [ 630.740208][T23556] openvswitch: netlink: IPv4 tun info is not correct [ 630.820027][T19049] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 630.847084][T19048] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 630.948393][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 631.148034][ T1152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 631.228166][T23577] sctp: [Deprecated]: syz.8.4520 (pid 23577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.228166][T23577] Use struct sctp_sack_info instead [ 631.285260][T13065] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 631.309580][T23579] syzkaller1: entered promiscuous mode [ 631.324941][T23579] syzkaller1: entered allmulticast mode [ 631.566157][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 631.685146][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 631.800411][T23597] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4524'. [ 631.965819][T23606] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4526'. [ 631.987979][T19049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.999167][T23604] netlink: 'syz.2.4524': attribute type 21 has an invalid length. [ 632.014528][T23606] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4526'. [ 632.065193][T13062] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 632.237153][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 633.047689][T23643] xt_hashlimit: size too large, truncated to 1048576 [ 633.080270][T23650] netlink: 'syz.1.4538': attribute type 5 has an invalid length. [ 633.109535][T23650] __nla_validate_parse: 2 callbacks suppressed [ 633.109556][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4538'. [ 633.133372][T13065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 633.376912][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4543'. [ 633.581446][T23671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.147878][T23690] : entered promiscuous mode [ 634.169328][T23693] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4552'. [ 634.240740][ T30] INFO: task syz.3.3250:18719 blocked for more than 143 seconds. [ 634.268232][ T1152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.283073][ T30] Not tainted syzkaller #0 [ 634.305783][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.331092][ T30] task:syz.3.3250 state:D stack:25320 pid:18719 tgid:18718 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 634.357338][ T30] Call Trace: [ 634.362623][ T30] [ 634.367616][ T30] __schedule+0x1821/0x5740 [ 634.373066][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 634.387214][ T30] ? __pfx___schedule+0x10/0x10 [ 634.403490][ T30] ? schedule+0x90/0x360 [ 634.408697][ T30] schedule+0x164/0x360 [ 634.423734][ T30] schedule_preempt_disabled+0x13/0x30 [ 634.432014][ T30] __mutex_lock+0x7f7/0x1550 [ 634.444694][ T30] ? __mutex_lock+0x608/0x1550 [ 634.451663][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 634.459917][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 634.465330][ T30] ? __nlmsg_put+0xef/0x1b0 [ 634.470066][ T30] ? genlmsg_put+0x137/0x2e0 [ 634.487589][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 634.498182][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 634.525764][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 634.532589][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 634.542748][ T30] ? __asan_memcpy+0x40/0x70 [ 634.547632][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.553864][ T30] genl_rcv_msg+0x61c/0x7a0 [ 634.576057][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.598090][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 634.614066][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.621137][ T30] netlink_rcv_skb+0x232/0x4b0 [ 634.626460][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.631575][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.640698][ T30] ? down_read+0x270/0x2e0 [ 634.650902][ T30] ? genl_rcv+0xd/0x40 [ 634.655453][ T30] genl_rcv+0x28/0x40 [ 634.659710][ T30] netlink_unicast+0x75c/0x8e0 [ 634.665084][ T30] netlink_sendmsg+0x813/0xb40 [ 634.669992][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.675553][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.680568][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.686024][ T30] ____sys_sendmsg+0x972/0x9f0 [ 634.690857][ T30] ? __might_fault+0xaf/0x130 [ 634.695748][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.701074][ T30] ? import_iovec+0x73/0xa0 [ 634.705936][ T30] ___sys_sendmsg+0x2a5/0x360 [ 634.710710][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 634.715851][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.721315][ T30] ? futex_wait+0x2a2/0x390 [ 634.726481][ T30] ? __fget_files+0x2a/0x420 [ 634.731206][ T30] ? __fget_files+0x3a0/0x420 [ 634.736251][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.741400][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.747588][ T30] ? rcu_is_watching+0x15/0xb0 [ 634.752476][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.761769][ T30] do_syscall_64+0x174/0x580 [ 634.766679][ T30] ? trace_irq_disable+0x3b/0x140 [ 634.772037][ T30] ? clear_bhb_loop+0x40/0x90 [ 634.776950][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.782906][ T30] RIP: 0033:0x7f2c7c79ce59 [ 634.787510][ T30] RSP: 002b:00007f2c7d676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.796158][ T30] RAX: ffffffffffffffda RBX: 00007f2c7ca15fa0 RCX: 00007f2c7c79ce59 [ 634.804686][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 000000000000000e [ 634.812729][ T30] RBP: 00007f2c7c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.822732][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.832563][ T30] R13: 00007f2c7ca16038 R14: 00007f2c7ca15fa0 R15: 00007ffe21da3a68 [ 634.840901][ T30] [ 634.844163][ T30] INFO: task syz.5.3308:18941 blocked for more than 143 seconds. [ 634.852104][ T30] Not tainted syzkaller #0 [ 634.857725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.869445][ T30] task:syz.5.3308 state:D stack:26752 pid:18941 tgid:18940 ppid:17338 task_flags:0x400140 flags:0x00080002 [ 634.876309][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.889000][ T30] Call Trace: [ 634.894443][ T30] [ 634.897872][ T30] __schedule+0x1821/0x5740 [ 634.902548][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 634.907761][ T30] ? __pfx___schedule+0x10/0x10 [ 634.912784][ T30] ? schedule+0x90/0x360 [ 634.917282][ T30] schedule+0x164/0x360 [ 634.921733][ T30] schedule_preempt_disabled+0x13/0x30 [ 634.928926][ T30] __mutex_lock+0x7f7/0x1550 [ 634.933573][ T30] ? __mutex_lock+0x608/0x1550 [ 634.939719][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 634.945563][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 634.950651][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 634.964336][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 634.970524][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 634.980241][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 634.986853][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 634.992477][ T30] ? __asan_memcpy+0x40/0x70 [ 634.997245][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.003477][ T30] ? bpf_lsm_capable+0x9/0x20 [ 635.008322][ T30] ? security_capable+0x7e/0x2c0 [ 635.013312][ T30] genl_rcv_msg+0x61c/0x7a0 [ 635.018382][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.023475][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 635.029922][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.040741][ T30] netlink_rcv_skb+0x232/0x4b0 [ 635.045996][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.051275][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.062426][ T30] ? down_read+0x270/0x2e0 [ 635.071811][ T30] ? genl_rcv+0xd/0x40 [ 635.077086][ T30] genl_rcv+0x28/0x40 [ 635.081209][ T30] netlink_unicast+0x75c/0x8e0 [ 635.088197][ T30] netlink_sendmsg+0x813/0xb40 [ 635.093277][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.099151][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.104238][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.109583][ T30] ____sys_sendmsg+0x972/0x9f0 [ 635.114969][ T30] ? __might_fault+0xaf/0x130 [ 635.119758][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.125296][ T30] ? import_iovec+0x73/0xa0 [ 635.129840][ T30] ___sys_sendmsg+0x2a5/0x360 [ 635.134744][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 635.139811][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.147302][ T30] ? futex_wake+0x4ac/0x580 [ 635.151898][ T30] ? __fget_files+0x2a/0x420 [ 635.156746][ T30] ? __fget_files+0x3a0/0x420 [ 635.161521][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.167903][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.173688][ T30] ? rcu_is_watching+0x15/0xb0 [ 635.178700][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.184973][ T30] do_syscall_64+0x174/0x580 [ 635.189637][ T30] ? trace_irq_disable+0x3b/0x140 [ 635.214170][ T30] ? clear_bhb_loop+0x40/0x90 [ 635.219094][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.229557][ T30] RIP: 0033:0x7f824079ce59 [ 635.252590][ T30] RSP: 002b:00007f823e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.262920][ T30] RAX: ffffffffffffffda RBX: 00007f8240a15fa0 RCX: 00007f824079ce59 [ 635.271455][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 635.284533][ T30] RBP: 00007f8240832d6f R08: 0000000000000000 R09: 0000000000000000 [ 635.292818][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.301079][ T30] R13: 00007f8240a16038 R14: 00007f8240a15fa0 R15: 00007ffcdf745188 [ 635.309654][ T30] [ 635.312877][ T30] [ 635.312877][ T30] Showing all locks held in the system: [ 635.322461][ T30] 1 lock held by khungtaskd/30: [ 635.348882][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.359608][ T30] 3 locks held by kworker/1:2/995: [ 635.365055][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 635.376689][ T30] #1: ffffc90005447c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 635.388204][ T30] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 635.399828][ T30] 1 lock held by syslogd/4980: [ 635.405485][ T30] 2 locks held by getty/5387: [ 635.410220][ T30] #0: ffff8880369700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.415473][T13062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 635.420627][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 635.440373][ T30] 3 locks held by kworker/u8:16/13060: [ 635.453724][ T30] #0: ffff88803197e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 635.466587][ T30] #1: ffffc900037bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 635.488491][ T30] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 635.498280][ T30] 5 locks held by kworker/u8:19/13065: [ 635.503792][ T30] 3 locks held by kworker/0:14/15131: [ 635.509672][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 635.521370][ T30] #1: ffffc9000d127c40 ((work_completion)(&pool->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 635.533615][ T30] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: xp_release_deferred+0x29/0x180 [ 635.543369][ T30] 2 locks held by syz.0.2851/16866: [ 635.548793][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.566634][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 635.577985][ T30] 2 locks held by syz.3.3250/18719: [ 635.583308][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.592652][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 635.604476][ T30] 2 locks held by syz.5.3308/18941: [ 635.610823][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.619300][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 635.629424][ T30] 3 locks held by kworker/u8:23/19049: [ 635.635239][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 635.649407][ T30] #1: ffffc9000ce87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 635.660755][ T30] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 635.669907][ T30] 2 locks held by syz.7.3660/20280: [ 635.679020][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.700571][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 635.725358][ T30] 2 locks held by syz.4.4191/22336: [ 635.730676][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.745055][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 635.757872][ T30] 2 locks held by syz.1.4544/23668: [ 635.763212][ T30] #0: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 635.772272][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 635.783363][ T30] 2 locks held by dhcpcd/23707: [ 635.788280][ T30] #0: ffff888053e38260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 635.798293][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 635.809438][ T30] [ 635.811804][ T30] ============================================= [ 635.811804][ T30] [ 635.833215][ T30] NMI backtrace for cpu 1 [ 635.833237][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 635.833256][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.833266][ T30] Call Trace: [ 635.833273][ T30] [ 635.833280][ T30] dump_stack_lvl+0xe8/0x150 [ 635.833305][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 635.833326][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.833346][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 635.833369][ T30] sys_info+0x135/0x170 [ 635.833387][ T30] watchdog+0xfd3/0x1030 [ 635.833417][ T30] ? watchdog+0x1c9/0x1030 [ 635.833450][ T30] kthread+0x389/0x470 [ 635.833471][ T30] ? __pfx_watchdog+0x10/0x10 [ 635.833491][ T30] ? __pfx_kthread+0x10/0x10 [ 635.833512][ T30] ret_from_fork+0x514/0xb70 [ 635.833532][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 635.833549][ T30] ? __switch_to+0xc79/0x1410 [ 635.833573][ T30] ? __pfx_kthread+0x10/0x10 [ 635.833594][ T30] ret_from_fork_asm+0x1a/0x30 [ 635.833628][ T30] [ 635.833663][ T30] Sending NMI from CPU 1 to CPUs 0: [ 635.842442][T19048] net_ratelimit: 19 callbacks suppressed [ 635.842460][T19048] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.847472][ C0] NMI backtrace for cpu 0 [ 635.847487][ C0] CPU: 0 UID: 0 PID: 19048 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 635.847505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.847515][ C0] Workqueue: bond2 bond_mii_monitor [ 635.847537][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 635.847559][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b f5 88 f5 cc [ 635.847571][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000002 [ 635.847584][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000010001 [ 635.847594][ C0] RDX: 0000000000795829 RSI: ffffffff8e215e66 RDI: ffffffff8c28b6e0 [ 635.847605][ C0] RBP: 00000000ffffffff R08: ffffffff9a47c81b R09: 1ffffffff348f903 [ 635.847616][ C0] R10: dffffc0000000000 R11: fffffbfff348f904 R12: 0000000000000046 [ 635.847627][ C0] R13: ffff88802b9a5d00 R14: ffffffff8e95cd60 R15: 0000000000000003 [ 635.847637][ C0] FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 635.847650][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.847660][ C0] CR2: 00005643f79a3028 CR3: 0000000075f9c000 CR4: 00000000003526f0 [ 635.847676][ C0] Call Trace: [ 635.847682][ C0] [ 635.847688][ C0] lock_is_held_type+0xdf/0x150 [ 635.847707][ C0] rcu_read_lock_sched_held+0x33/0x70 [ 635.847727][ C0] task_group_account_field+0x77/0x1a0 [ 635.847749][ C0] irqtime_account_process_tick+0x1f1/0x410 [ 635.847772][ C0] update_process_times+0x24/0x2f0 [ 635.847789][ C0] tick_nohz_handler+0x42b/0x770 [ 635.847808][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 635.847824][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 635.847842][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 635.847856][ C0] __hrtimer_run_queues+0x375/0xa20 [ 635.847881][ C0] hrtimer_interrupt+0x44b/0x950 [ 635.847917][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 635.847937][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 635.847958][ C0] [ 635.847964][ C0] [ 635.847969][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.847985][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 635.848003][ C0] Code: 0f 84 44 ff ff ff e8 a2 2b 21 00 fb eb 44 e8 9a 2b 21 00 e8 95 ba 02 0a 4d 85 f6 74 94 e8 8b 2b 21 00 fb 48 c7 c7 c0 f0 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 18 [ 635.848015][ C0] RSP: 0018:ffffc90006d7f580 EFLAGS: 00000293 [ 635.848027][ C0] RAX: ffffffff81a48b15 RBX: ffffffff81a4898f RCX: ffff88802b9a5d00 [ 635.848038][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e94f0c0 [ 635.848047][ C0] RBP: ffffc90006d7f630 R08: ffffffff903023f7 R09: 1ffffffff206047e [ 635.848058][ C0] R10: dffffc0000000000 R11: fffffbfff206047f R12: 0000000000000000 [ 635.848068][ C0] R13: 000000000000003a R14: 0000000000000200 R15: 1ffff92000dafeb4 [ 635.848081][ C0] ? vprintk_emit+0x2cf/0x560 [ 635.848099][ C0] ? vprintk_emit+0x455/0x560 [ 635.848121][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 635.848143][ C0] _printk+0xdd/0x130 [ 635.848164][ C0] ? __pfx__printk+0x10/0x10 [ 635.848185][ C0] ? __netdev_printk+0x36f/0x480 [ 635.848204][ C0] netdev_warn+0x11e/0x180 [ 635.848225][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 635.848244][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 635.848266][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 635.848286][ C0] ? ___ratelimit+0x58c/0x8d0 [ 635.848309][ C0] bond_mii_monitor+0x1ab0/0x2fd0 [ 635.848328][ C0] ? bond_mii_monitor+0x167/0x2fd0 [ 635.848347][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 635.848361][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 635.848387][ C0] ? process_scheduled_works+0xa70/0x1860 [ 635.848403][ C0] ? process_scheduled_works+0xa70/0x1860 [ 635.848420][ C0] ? process_scheduled_works+0xa70/0x1860 [ 635.848444][ C0] ? process_scheduled_works+0xa70/0x1860 [ 635.848458][ C0] process_scheduled_works+0xb5d/0x1860 [ 635.848485][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.848503][ C0] ? assign_work+0x3d5/0x5e0 [ 635.848519][ C0] worker_thread+0xa53/0xfc0 [ 635.848545][ C0] kthread+0x389/0x470 [ 635.848563][ C0] ? __pfx_worker_thread+0x10/0x10 [ 635.848578][ C0] ? __pfx_kthread+0x10/0x10 [ 635.848596][ C0] ret_from_fork+0x514/0xb70 [ 635.848613][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 635.848628][ C0] ? __switch_to+0xc79/0x1410 [ 635.848649][ C0] ? __pfx_kthread+0x10/0x10 [ 635.848668][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.848691][ C0] [ 635.885313][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 635.885337][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 635.885358][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.885369][ T30] Call Trace: [ 635.885378][ T30] [ 635.885387][ T30] vpanic+0x56c/0xa60 [ 635.885414][ T30] ? __pfx___schedule+0x10/0x10 [ 635.885441][ T30] ? __pfx_vpanic+0x10/0x10 [ 635.885470][ T30] panic+0xc5/0xd0 [ 635.885489][ T30] ? __pfx_panic+0x10/0x10 [ 635.885510][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 635.885540][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 635.885568][ T30] watchdog+0x102c/0x1030 [ 635.885600][ T30] ? watchdog+0x1c9/0x1030 [ 635.885630][ T30] kthread+0x389/0x470 [ 635.885660][ T30] ? __pfx_watchdog+0x10/0x10 [ 635.885682][ T30] ? __pfx_kthread+0x10/0x10 [ 635.885706][ T30] ret_from_fork+0x514/0xb70 [ 635.885728][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 635.885747][ T30] ? __switch_to+0xc79/0x1410 [ 635.885775][ T30] ? __pfx_kthread+0x10/0x10 [ 635.885798][ T30] ret_from_fork_asm+0x1a/0x30 [ 635.885834][ T30] [ 635.890293][ T30] Kernel Offset: disabled