last executing test programs: 36.358992519s ago: executing program 4 (id=3254): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac14140064010102440c0503ac1e000100000009890777ac1414aa070200000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00e10090780000"], 0x0) (async) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001e40)=0x0) (async, rerun: 32) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000360200000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08100100", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a0304000000688c3475000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) sendmmsg$nfc_llcp(r4, &(0x7f0000003c00)=[{&(0x7f0000000180)={0x27, 0x0, 0x1, 0x6, 0x4, 0x9, "38aa69098e667bc9d5cd3659725f969e56b75687a3fc80f2e170c515cbe5f49139eccfac8df01d8809ee960e88f0732a5d284e7ccdb578d82120d389cab353", 0x1c}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000500)="d4b838201956399572b4d9725f44de3917efbefba7e023cea70a160a28e674228b901f7a40302b4c3a2199a47fab356ae3b64cb5282902a95ed308858c11ebcc504158986c1ec9fab0f947b3c964092fafebac55a53813efbfc7811fa4b341ef3f", 0x61}, {&(0x7f0000000600)="fe7dcf0697c61c003eb97e9cc291c11024474b55f6b84cb47d083a19a53d9e6e8bded90156115870b7ab053a36c7e64c75d6c03d609059dde101f9f55d42a93ffddab4031ba8c6f69c2ea0f2831648c66ffc205a8fc35f87483e00a280ee3db037af66b412f54f75935ce2fec37848d4d5a0383f73cb86befb3f8a91b2d1db2252e7503c6a84170ded1b38dc951ca4ab07407d304deaac9183bd23a6b9a3f6f3a1fe2152a99c393f73aee7e7d447de9e2d1a98409f6f5c62051f8442a64f7a28572912fd4602d502c562704890473dd1eeeddc01fbf1475be6ae15bd44aa22fab06e3d73f8f3df9b58a5a68a9a20", 0xee}], 0x2, &(0x7f0000000740)={0x18, 0x10a, 0x9, "9428952bd8983536"}, 0x2, 0x4004040}, {&(0x7f0000000800)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0xf, "9b69f7b5cf1a8a88b3cb1e734207a5901e0fc2354e872fb6294f00b6e181e1e966e4436a97719cc4d28812511ab59e7dc583c3560fb541f70e54cc88757f77", 0x35}, 0x60, &(0x7f0000001d00)=[{&(0x7f0000000880)="6aee37a3a5fd241d06f4eba4a7dfcec954450640efabe9edba5fc9884148e3dc0d94cd3cbe0241d6f0e4275c0bd662f63b95779f9ed4c4cdc95cbfa66125e7d07378f4c11fcf5967d2613814dc0d3b8a68f9f204a35259d271d04f886214b02ec089e8dfaaefb8e78dfb42", 0x6b}, {&(0x7f0000000900)="efdec5a8f1ffc733c45dfc3b7912834f9995e511d9c7487269381cdd46e4a0b9cc7bcf3ae1fb8d018d8032dce237ad7d6098c8cf169417cbfa03f080c89911195abda306a47c7aa9ee265a15a01a5475fde7eeac4071fba754bf940adda9cb7f92de978843e59d4b2a6b30acc684823f4f67b6744fcf7f5fb96d7b098697b055426f4aa3132ad9e6c81a797ba3c432493127f90926e30a557608b106fca035046963a131d584197cbd627e974ec885a9d8c32797ee463eca60ed096326c02470", 0xc0}, {&(0x7f00000009c0)="24dc94acbb229b65b344aea54ad6057729d327d74d3b79e0beac3539be08e594ecc1c897c00898da9ee7f70f1b97cc3d3ad415578ba3963df6e85c767d4d8dc4dc2e94e7ea6de83578a7d427cee49698689fe5a0c65516079874b985323781", 0x5f}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="1a0e7d696a1cbe287a1dbafb5869df22d40a1b857201e4b86cf2c62e58aaf4529bafcd92605c3742fc356589344348cd", 0x30}, {&(0x7f0000001c00)="9e3fddbe7114a31543d1507e374c648a13d68284fbc15d652b97dfe973d0d13b91d638fa855bcc12e43af9f27942bd628b0d0b49b16418627b0e7a6b01c35e2e85320277c013dc5e39a79a1ce8c54d0ccff1c62e4fbc9b0933a89edc04de8dbb01ef48f821e15a2e04587b710dc51c3e02ed921dfc5f5800a7f1b99db36159478e9b90b52dc3d08fb840be9d6cd08c871ff85598a5fb4eb9cca0ac9d8c0d81f20080c3e690aacbe3ac7e8ff308fe7f3dcc2f6dca357ff0b4447dc1c486b7cfecd44eb256310024982df7e831bea3d95d600a600b13", 0xd5}], 0x6, &(0x7f0000001d80)={0xb0, 0x107, 0x800, "5fab0708c8362adc8dbfe7124d4e080f630d9a8569841ef7e81672fc5ad1d38af84d82863f99eb0c49f0fd30f21363b8b174062d6e96bfc85ffa800df5196c50d7fb6800aeaa01f0119cc7280efaa4e4daee934acdc2bd1dfbd5133b353523104c931786994cbcb02fdd7fe4ecd543ef22da8539b7eda972212427efb2feb6bf38662eb13f1ed23fee68bc14357643fd62ad3cdf9c3606aed648"}, 0xb0, 0x24000004}, {&(0x7f0000001e80)={0x27, r6, 0x0, 0x2, 0x2, 0x5, "eeb3f342a23dde38afa06766c3633d0bc5282faca485eb5920ce4325a1f4e878c99d8e435120308c10b12567aca12cec33f7e0ef17fbf8d75ebfee8396779a", 0x12}, 0x60, &(0x7f00000021c0)=[{&(0x7f0000001f00)="2479020621feb1db86a25a77030ab07360ef32abce92955e9844f0a2af2748c3c16d75d2f67bc2a4f97908fd775f352b79511923fc0613e012e6a6e2ad81fc899d47e05a79256db2709685e1cd95925a5249c87c10cd90057daf7755832bb30260377d9b7c883d27aa6d88b10289813abafac394dcd6febbb2bf39f7a60caf3e83bd794fc4d62ff9271805e76aa1d88bc93b21d7096ebfb515aeffdb", 0x9c}, {&(0x7f0000001fc0)="1abc7e68c5a14b6f76d82d216d7b6b7e2948ee30d9039ca6b4c02c7681a1c9b896982839dbbc472f644f68591c3b9d33856322bb3db3b7e2cc5f05de32e8bc5ff85264c57831095c2baf22adb7ab0806be0da8efe6b8d4a37d7b247cebd8de82d41440427ddd35d46c3e282651c5b40ac2d2a46ab64a9fbf75613d71464c52bd06a56113cbd9c57ac71d3c1e4d03ba8753d758ebae1a8c5fd4c36ff41905eefa95d7815ae15926e3a1a0f9f8f331b690609737cc4ade971d55c8e292dfb2a1208ba8d4cf0816fbd9d9f57adf6a", 0xcd}, {&(0x7f00000020c0)="64766764eb323c519d212a7b7ecb6fda583523fa723edec710587ae748f24af08a2c1708461182f42acf3b533a1d8db1241ee0c1ba24c51eee939592ecb10bcdeff442b71fb34bbe919a001cd46c312ab78f77a070f8d5dc951c7c41abf8e5c71a43d408d611c3f505ad9447ede97cb4098ed9af1c82fdcbcd6d0c4889fd8bb8c984b9cc694d8bf9c40011ce276ea6013854dd78e4ee908ff16640c5575b7555cab3c1f83131d07776a91c61d5f12c1bcd250fb030df794b64fa4cb792158f775efb8ddadd696709cce74dc82efe282134f504441fa5fb7b76cfbb4752d8f472900c71b2", 0xe4}], 0x3, &(0x7f0000002200)={0xf0, 0x102, 0x9, "993eed498f72a3f8235a96ea6215807adb809d9aac5a721ee51d8f91b0a9a5d2ec395b67f4e14a162928f3de009a53aa4e46f77952bfd9f6fe5c95c9efd48dd10d71826b7f3464c1551c21d0afe8036de75dd288b4ca9c9d0aea1518640e2e2771de33a8f07368ff23b21e5eed6be5b1530b7d47f7918f545674e7b7a7234bd8bc23cdac41bd1d1eb2bbb18ec1077e44b0b0b98a41b3e07b6de81166caa57548ed7e6eb4bc01d2f1227f4992edd04a2785b67c8194454f1dddc16721130cedf3ed9cb5786134c7de03399c7324b17ff0e14c64e7c245ab6ad97f"}, 0xf0, 0x20000084}, {&(0x7f0000002300)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5e, "e17f9a930578fd055ce3a73c93610f5567280aabe2f143bf494407991137d30b124adef4b235214f2329d41a033195085aaba147709d12d30be44c29562494", 0x2b}, 0x60, &(0x7f0000002b00)=[{&(0x7f0000002380)="25d42051dd7c1e15c9b6e1a71cdc526e801c604f731e8d259a8ac6109566e73469f58a5eaab6bf5d75bff68f0276e6", 0x2f}, {&(0x7f00000024c0)="a4491624c3e489bc5f45d7d9214739bed69972373c494e9df4d0d9f01d049fc20463f53a389d313a00f9ea3e39e46515bc79c745d86dcc2b7a63c83206a9f8ddbb7ebc0dc77f58b1d6fe4b854d03459e3c7eff6b0d864307bf2f00a993e4d0ce9271f21af4e2fde5e987d9a2cd537c17120cf97b8918a0e7c86156fc37cdebb34b01614aac085eb43a65559bfc97dd0c817f", 0x92}, {&(0x7f0000002580)="32cc5d241fe3c5e89e7b6daf8432f69702a3eeef2f8a850f20af0087d80c75960259f19ed4234a158610e6fceebc58c29b55a98e48ee654335a5c83d3b8c891629074f33ff03c6d5ae0ffb259b5150c694fdcad0a79fb509298e129c74b5512723e354e06a806125c0d2a3a35b0207de6c7c7375f0e5442227f525c3cdf8baa1e2ccc34e97779320f08b3155e02e57450e4ba5f5a7b4837da4cb4c37cdf55083c259c8f29b17680141e72facf9d08db14b3f4e59908f19abcb8108fb936c473e6033cb7310eac63dac1727110c7dc8a9ad86b0", 0xd3}, {&(0x7f0000002680)="6d63621a4639fbf730f3ee06de23a26062bd819671270c0cbc9543aaa9db03d830c91422d1dc1dd96b98333346476605972133a0175a12cb2282781720468015b7e8772b0b23a5cb5c83a6eafa9dc525a58f8d27827d5395dd85e7b54590ddc524fc88acb73455ac69997eeba1a13674de7daff1dd942fdea57fa857328481bf8eafde9f713c78418f2354755360ac31f65194d84f874f752db5ea8408d93bbab7e8c95a9f017f5b2c8e86408fc8b15f963e01f15730544ffbe14ae3ba284e39bf8d07179d150c95cb102afdeb1f", 0xce}, {&(0x7f0000002780)="9f99eda6d5a17dcbd36e61ce438b01d9e4923884fe3951a9f24cef88647d5474a2672ac6e0d4", 0x26}, {&(0x7f00000027c0)="fc37cd3dab4d3314dba0e800012a82686cb2eaa573c66b9f9e6214307734dc9508ab80a5697acd2fe9fcf93a5a12b6b472fe2965e8ca57887beb201d616adcb0376fb146b3748bdb28f2d01704a6b0f2500a89126175f7b4ce61b3e5c6731ed99bb8f6f3194e3d46765589d87a8b63c93932b7a7da89cd82b1c3110ccf524447a6", 0x81}, {&(0x7f0000002880)="073b1850129a56fa75cfb2d84b057b526747a82c2a4b4ef66f6ed891c6436483ea3240170095602793c40b300fdb22ddfd85d03df8b0578dbed81ec8e330ced8b616a3cce4c92f93bddd6525e99a16ba2c150e6e9d023c38665d5c5f0ef4cd93bf32be502dab891b8bf2a4", 0x6b}, {&(0x7f0000002900)="4138c3ec2699b735dce0014130166ec064784ac2769b978dee94d98f55974ec08564b53e6d249f0cf6c82f597091b411a89159f644106bea9ae126c8b79fefd19d1cbdd27b0e1719a8f20be7c401f3c157baf50276220984e6b48aa9a83de402e3c13079b138f35004dd95cd505e79004317e0cfd85ace149aafddf6660ddf7adb99537c0bbedce77d95e53620a674e20dbb7f0b53e2a4829f2ee53bea777aec48d0709f5c4bf129f469c597512aef6c4cfb671f2f1f58356ff4c1cbf27e7bc0e12a", 0xc2}, {&(0x7f0000002a00)}], 0x9, &(0x7f0000002bc0)={0x1010, 0x119, 0x9, "1320abf5bbd622d7a89beb93a59d48f585d693cecdc59f0199c1ec21e62b32fb45fc7a853ec141f910768aa235787ead705fd4fd810b1b3667dfa58d3672b4fa78e5d63723c75b8e3f203b83249dfc478a70a4321cfbbcb4fe7e6e189d1df0d94065e5a6ed13bbd42e243ba813f76e86df22e6ee385b05ae23528747f339e53eac05cd84e988a4c79d9ce9b76b969e9a01c4b8cda04be4f5345af6b3e724d63f2d7bace541bb837a2049fa5a3991c315e9ace26a777776885fba5a788e5d33f05704d0c489862c4c2f04e054e942f6d815432f6e43247c192374cb48d155f5709784053c6b3b653d4abdd67965fa16f5cd7c892d99cea4806077a9eacdb8f5ffae235cd96157c46ada9b587a41557cdc178e2fc30e63c92dbf6d9dde55fd573ef8fcf89d52b3792aaa41ffd024c9ed6375f7346dd5439ed7c660d403a378905f7c48b9a3121bbbf82cceed8407120b087684a4b31fa05d41c460c7af6631587c52dd5348b5bc2aa1efe9f6e905e5ee60799db1d6d0e27d816c804f2b155ff3d6a50f423e24a84fc67a15d00308d4648dcf6ed20b07fc3c6139e78fcf0dd89740bc831da27d84f81f1da6f8a938b92923d4c2ce6aa6a01af5dd7d57777658293dcfad99f079b72cef7ee06b2fdbe3d7f8a7da58f941bd5fbd05d794541486bfe954ea3324c47a80b847f22b21475a6ccd5198fc912c287e4812ba5d50824eceb36a9af1c56bbbd1037aca12388afedd3b7f45015aeb2193235c77c25938567e9973ce9c775f26460de2997f8d5b7bd266a79dda456eb76ee269d5e673816558fcc803840c482649a6effc1ce46749306fabebbf7686572d9eb2b83ea5e427571f2822795f89427706dcb0f36c4cae27de53e5ac200e55bec363db0bdc1538e1335cf322ef9711db8df7f62284a3930c63357a0cc34a3fdeb7a61fa30775bccfdc72a5a6f6d3638a7b81746ab36c091f21b160b63a9e3938f79d8bbf96c629936a89b968bb7e6274481a19266a6ee4de095fb59cd24c7e664f4205275f69c02284fd745f4182e584fc59ee8fffebb221c1ad0cb7d370a970b5133ea612461d9a9948fd7d3e4db0a39f920d1497e24563b7604c04693de14330bed443a195bdef344050098ae0186ec3273dcbac9b2e2f94dca33ce09bdb406a81ade250e350eb69eaadda4581d3f4b8a03f4e4b6d985a257851311edbeda6a91e98e6e99c5d49df9208c521cd4ac1083a0b337ffb60046eae58e588c3526f3674798e496aa4ec20da4b83ffd4877f680562ac30a6029c562b9160f83236e8a2edcbfac6fd34f389acee1d1ede05380b8693a4ab1a81c446611759c69631a44fdb4923d0e5c48671ff04a96cf7c8db28e19375c47cb5890c083a90399dfbe3e0c869443bc961ba8418a2f4c17a9b44e16412092f34cd4ef1f2d080673ebf46bee4e8be9cd782f3dd44cbaf355868c88d5b0be7decc70416e5b166823df67a5811ce9848bef0c833265f93d7d2069d1c21029031e846db5960f984a4a4840d5739bbb92df335a18837e10c7015a1c93875daccf29ab4f1d3d01e73e076d001c0773fd90d1993b4bc4bf69179cd9acf0217330d170e87a98c9249362b043616d1e7ffd646bd57afa783c4ad044ae095f52d0f307e9c43c0a94bdb491f2b6426ae93debd52e95fffe6459b09da91e7cdcd89e0ab0620f2da49f746b64a3750ca4eac3c43889d372a1ed68db76e2080e3781ffcfb6707f0da3d957ac25b7c1b58c3e04ed708afd5de9e6ff2a2a284a7889dbd7eaede8cfd6c5f0fe25653f015953ea00071a7eec03a9c19799c654cac93ac8324f9c2aa6f7a4a53efb054d6e916066191aa1ae075fdaca28c4d2e68653afbf9a4354f270ce15e3e801cc89fb87b813c838886cdfa6f1b30b6edacc30cd3d2f622abb7d92541bc58f36e337aacbd1a6c503be154645e9663b7f258bb7119fae1488957216fdf3ac11c3d2547d1dddaef5b7d1662ed7aed9192d1e43c9b125955c4aa9ff99050ed61b782a6c1fee73e100b244ea39b0a6f54197f913c6abfb0a288c3743c6f02476b68bce7996c525fa7085f44dbf590d36a7398d32ee3714dff5f64434ead7e04f464e6339347745acfb8e1820156c2d7d25dbabf93f411d91a0b01d178c99b4147760235d5e331b77a7d2b1eb1cc35f71de1b4444453964d97da5b33400b14a0bd8f05f5d856f181611562082ef2d68a4aae767fd1649b941fa8edf1e63916ce304b9fd6fe26a347729de7e1e542b522e85ddc3472440681c26d168bc3a2d97e4838bd6198b778b221720c793ff863160913f6b3ba073582db2ade18a8687b4457ca3a204f25c92bc989814857e9a3058a64f41f3bd4fe0eed8f9d555d3e46ebe72637867839e24c051ee2adc5ab1888ce7e3798588b376d08dcfdbef3a57eda8dd809f6713e2b36f08b85dd17e12b5e4e0cd27a72686e6992a42f6dcc7582231ca0aead0945c5694dd59621aaee4501d9a1693124394ca159f0278dd5d2001eb31b7cd623caa2a5b7c76deb3168bfe0ec4150942d93a0cba815734c119c162d4dd43bfba50ea24289db62e86a6a19fb2e64ed2676cbdf018e6c7c79f8f9206c050cf9f29b2a288bd2e6b18dc7c4c786c0e2fe148e86b450c6217c64df4191b5054ea1cc4a0782a6924405054c0e3ee2e7d4ae0a0e2c63fbe71b34b6e8aa42b705c978cd9cc01da7148545be9ea6152dd094f8a2958a21c2cffec8b8453947d185a72d83c7a7563a8266066b5fbc597792d4c30a834c1cd87ea0d6bbd31767718c2ca1a24505a5a3cd44ce5213523bd2827020c5678b391c7f79d2b74ce72bec7a8b221a5c50335db50fca824b476313c5fe84db382b9f1b2de8759fc1fbcbb6b96c583b301b775cac7e3edb28d031543832bca930e37b453e8b3b9a4a33b01b499938f9f07fe357d3f75a4f31a26f70a0e6a76adf265ca191fe1ea195e87f1e501498807dfb169eca6ffe8dc0bbd102b9bfcc8df6bd033286e4c82a4763061f0cc318c407c03e2ecde1302e310548bf96c982e62fe0551a80ed77551060aeec61edca7650ffbdd511491363b9bf348d657c494a2238642d4ff2872bf7b5644569707be6c938d19450b7e0ae0afa5c303f51db9fd7de292897a8f1da0e293aa1b050365bb20bfe3e5a7b2a06b4362d609572e06bb98a9880ce9b5d76ba9ea683acbca07ffb30a7029600b23aa0efecb6416e9a6def4a5f20dd526517c082234a3a0d74fd152a77943a10964b3aea749a24e104b0c667788029aa3d327097babf3c32292de76c1a7bc0b458438b6581fe282c03bb526ed9760bf35516b4c3d57c215f83b0a0948f9a77381fb99fdaea58bfc945ccc9ba9c708ef1fdc45fd0da942e2685e0489962cb09f4cff9930743e2605d573657b89be644412d51ba47328683d2c527f4c222def5f3d5e1cf2a5bdd515f14414220013c319dc30c5cda1b398a5f7ee4745ac4471401805ee0cf3c352867950a7d8d8997c5cd2ccfffacaf617ed12e25a75a74bb6cacae3de84d0c12765e5a447825f7e5499f3202b106fd232a0e408d3bd721ad060459fc2ccfbc8718955f360a1cf376f16ec90763f8c1725d7ee262054584e196e3bdb4d42a09c61f0d0808493202e64500cc6952926bf0c6d69359c66c0b45c4f7fc4094ac7a3d3f5cf780a9207899f5a37b953aa7520c795a36600b95cc9e85c685a06e17d7ab6aa62acbdc4fbfbd82ecc7e1b55b81a3b507f475d8311748fecdcd16a4813502c6dadfc6c3c3ee9146458f1a2d43229d8b995757a64b006fdd9e806ef429c7e37d3b3da45e4163b4dd14a56bca4e48bbf1e9df823c58cedbac302b83c83decd4e946ed7591778d5b2bec3bd7b1f6de38f8312b9cdabbbc578905fb5dc5385c463b01c74e05fc7505a8e401beae87397e0040d4bb3425fb192e6cf2ebb1e58452af635862b59ff471af8d3051b1911525f7948c286edbb1542ed21cc3f1c028f0c4390eca303e6e1c8a88bdbbde0ecbba265558ca0447605d617f0780af7002f163a7325cd45efcd9e1226eb6ef3b2016f9dfdcf2c150231e9ab7de1c85175da36b13b825ba6ab699e0eaee4632916211a8efa34ff643e3e9ce192802cc29f5b684c9b8baed50b140e32bf04dbe5f406144fff8c722ee3faf55ae990a8fbf414ab98f44a9c67fb10c5332b54532d995e93300ebee48ddebdafcfcde3546b496f88537a6994cd8d95dcd9a047b54a2c20b0b7f37261f0442974ffbd5cedf05d94e965f6783556691f0a8b657b5a507ced0290039cc0028db6b098ed5d0e8fa648acd248216eb45623cb6f1795fc5dd2f1ea22e57ccbd89e718732fdc2110edc63d8d9caef9a5f87377214b920c60a131a7d1f26ea614b4e9dac938c69608ea2132088099d0f00c2cb9fc9371c8879ca33d0fb4246e24060bf2ee4b1e8b86abc248bc5905e70fb4c7147d53bf32054699bb125d75cd7b3f4c4d8d9e9fb2603c67811eb0f7fc71f93a38fa9a827aa5281abc8d18137f26f8968638ef7c94ea289c8fbe4c80a1e79b782542c143c3b1d1bbca94ffff503f930e36d2d8e3236d0a75009f5ddcc83df89b6eb7b4de8390c8585c0089bd8eda5411c81b8ab0a90c89a598d5eb360af9fda598dccf060311f19364e7fdb71dce65c67f9f39255bdf7ceb4c1b56a4881d73eda87faeeaa01f21b656749cb6ce7faa110e7cd275419da2a208559fa3e9444ad502f4bef79e17ff26be6eb92979a552500c8d1ca96744bcf76ca9993064a289ba92cecaf7652d32583182ed3bde06fb155b26ff8f33be1bef52a05816ea0e2877ab802e9cd01c9bc1b9ed387174c2b118e5f68a27b1023e475df42117a5fbd94bd6d64b5a7dc12be68dd6778afc33e2569ba8021b21faa8298e63bf74f7de23c287a8a7965bc01a4f965f9b3f41f21aaa12dd10edc8eb0f8526de4d15a9baf62cff21b12f15b4cf1c1df042adc31c11e25987efc79aad868eed25c944aadf8ba4f4f41bd86f085ceaea98dea258e939ad0b3765d985c2633c4ce42c977d8d8f7229b2548e582565561e4cf744ed55f94eda954dd43154b62a3b9e2b35f3a74907dea8714dd9e46fadbd779cc5b2fd86e214feda8dc693f13dcd1dd63c8ed03752f8b2d4c25e7f139d107ce365409d7df4c411949bd06f91bd155614f427137927cc4c904f4500dd2a9170f814d463e530fadb6c4fadbdd2c95f468c22277d36383a319896885233d6195052c72c6ae5b4050f9ce15357f26dff1e60487b0850ac533f29caa2be9dd52942982d98fdda16b0c2c7232cf78262fbef65723f06b93f27769c52e31f74ca9774441a80d90743ba8db1738f421c503adee83f2fbc464aece40a5a6cc2c8430c0549487b937601ddd460a0c28794dca927197099e4615eefdc7b298b678e2dc13ce38cd7009bc645029577eb529a75f57c19cf72e5e168069f63c16509bd122ab55baa0057b9112369591a4a6389f88398bd97bfb0a31fbed404dd9fc8275615bac4e3fae4a6b6e221d82091cb5a5fb877116b72b47b2664630c44ab0215e821b20ce363c1347794aec1d1ecf7b2d5803114e1592f38f835a9d2fa579ce49138087005d789cd42b556db0fdb4549a08fb280c779b6257872dff6f20e85b033f0dc5a3e5f662dabc342be5d78beadf0757169723bb16585a6df6f974fc8c94c502460da34e01faf35a19e4d551166d2beb88bfa066a24de19f5e82f44bb38aa26a269e4631212e1f2ef0f2c4514ec56b6cb7a31169f660dba757acc70ecc72b2c44565b62a49e843c00ba44148aeca4fc1"}, 0x1010, 0x404c084}], 0x4, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r11, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0xfffa}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x40}, @TCA_U32_HASH={0x8, 0x2, 0x200}, @TCA_U32_HASH={0x8, 0x2, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 34.540469889s ago: executing program 0 (id=3270): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) getsockopt(r0, 0xd5, 0x48, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xdc9b, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000de1a30000000000fe8000000002000000000000000000bb0000000000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000001780)={@val={0x0, 0x8859}, @val={0x2, 0x1, 0xfffa, 0x1, 0xcd, 0x6}, @llc={@snap={0xaa, 0xaa, "38c4", "e47599", 0x5, "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"}}}, 0x1017) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r5, 0x8b21, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r4, 0x927bb000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 34.222148489s ago: executing program 0 (id=3272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000040), 0x4) 34.190631046s ago: executing program 1 (id=3273): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080) close(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'memory'}, {0x2d, 'net_prio'}]}, 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8090) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r7, 0x1, 0x123, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x4048004) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 33.785651877s ago: executing program 0 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r3, r3, 0x2f, 0x4, 0x4, @void, @value=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000500000005000200f30000000800050009000000540001801400020073797a6b616c6c65f54100000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000000800030002000000"], 0x78}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000000b000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x1, r5, 0x30}, @generic={0xf, "0331244cc8c9892fc098c058700e"}, @hci={0x1f, 0x0, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='tunl0\x00', 0x56f, 0x8, 0x6}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="141e0000", @ANYRES16=r1, @ANYBLOB="210325bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x80c0) 33.782254232s ago: executing program 4 (id=3275): syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8038, 0x10, 0x3, 0x200, {{0x6, 0x4, 0x0, 0xd, 0x18, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @empty, {[@end]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(r1, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000007000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x40800}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}], 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e21, 0x9, 0x4e21, 0x101, 0xa, 0x10, 0xa0, 0x0, r0, r4}, {0x10, 0x8, 0x9, 0x0, 0xf, 0x9, 0x8, 0x396d}, {0x1f29, 0x2b, 0x8001}, 0x10000, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0xff}, 0xa, @in6=@local, 0x3501, 0x0, 0x1, 0x5, 0x9, 0xec, 0x6}}, 0xe8) socket$tipc(0x1e, 0x5, 0x0) 33.781060081s ago: executing program 4 (id=3276): socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) socket$kcm(0xa, 0x1, 0x106) (async) r2 = socket$kcm(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000900)={'vxcan0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x65, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6196}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x65, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6196}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffff0000, @private2, 0x7}}, 0x0, 0xffff}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r12, 0x6, 0x2d, &(0x7f00000001c0)=0xb, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 33.779143961s ago: executing program 1 (id=3277): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000b701c6aaf4bd140600"/28], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) recvmsg$unix(r6, &(0x7f0000000900)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/46, 0x2e}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001900000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x200006}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(r6) r8 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x3, 0x20000001, 0x0, 0x1, 0x900, 0x0, 0xfffffffc}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f00000042c0)=[{0x0}], 0x1) sendfile(r10, r10, 0x0, 0x4) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x1d, 0x2, 0x9, 0x7ff}]}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f00000004c0)=@deltfilter={0x840, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0xe, 0xffff}, {0x4, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x7, 0x81, 0xf1b0, 0x8, 0x101, 0x7, 0x99a, 0x8, 0x0, 0x5, 0x8351, 0xf, 0x4, 0x0, 0x4e7, 0x10001, 0x5, 0x7, 0x0, 0x4, 0x9, 0xfffffe00, 0x3, 0xd, 0xffffffff, 0x9, 0x9, 0x9, 0x3, 0x5, 0x121, 0x6, 0x7d, 0x200, 0x1fce, 0x8001, 0xceb1, 0x6, 0x8, 0x9, 0x50, 0x401, 0x8000, 0x36, 0xffff8001, 0x44d, 0x1, 0x47, 0x54378dd7, 0x8, 0x9, 0x1000, 0x7, 0xfff, 0xf, 0x5, 0x10001, 0x200, 0x1, 0x401, 0x6, 0x5, 0x9, 0x9, 0x0, 0x623, 0x0, 0x9, 0xd, 0xe4, 0xa0, 0x2, 0x0, 0x8, 0x97, 0x7, 0x4, 0x30, 0x9, 0x0, 0x90000, 0xd1, 0x3, 0x1, 0x1, 0x4, 0x2, 0x8, 0x9, 0x7, 0x8000, 0x3ff, 0x4, 0x2, 0x2, 0x7, 0x3, 0x5, 0x3ff, 0x1, 0x7, 0x1, 0x8001, 0x3, 0x9, 0x6, 0x0, 0x3, 0x4, 0xa, 0xd, 0x9, 0x6, 0x8, 0x800, 0x7, 0x2f, 0x80000001, 0x1, 0x1, 0x0, 0x1, 0x12357adf, 0x7, 0xfffffffc, 0xf2, 0xa6f4, 0x9, 0x3, 0x6, 0x0, 0x15562237, 0x7, 0x8, 0x74, 0x200, 0xce, 0x3, 0xae, 0x0, 0x0, 0x9, 0x64e313cf, 0x8653, 0x3, 0x5, 0x8, 0x1, 0x0, 0x4f, 0x6, 0x5, 0x2015, 0x9, 0x7, 0x7, 0x81, 0x100, 0xd, 0x1, 0x8001, 0x7ff, 0x3, 0x7fff, 0x9f46, 0xd164, 0xd, 0x5d, 0x7, 0x401, 0x10000, 0x2, 0x4, 0xffffffff, 0x7fff, 0x57, 0x5e8, 0x2, 0x1000, 0xa5f, 0x5, 0xfffffb3a, 0x6, 0x4, 0x7, 0xe112fd9, 0x9, 0x9, 0x4, 0x2, 0x38, 0x2, 0x4b9, 0x1, 0x10001, 0x6, 0x4ab7, 0x4, 0x8, 0x9, 0x4, 0x80000000, 0x3, 0x0, 0xc4c, 0x1, 0x4, 0x6, 0x9, 0x0, 0x65185107, 0xf, 0x6, 0x10000, 0xe, 0x6, 0x7fff, 0xc, 0xfffffffa, 0x6, 0xffff7fff, 0xb, 0x10000, 0x7, 0x20d3, 0xc9, 0x0, 0xb, 0x1ff, 0x0, 0x40, 0x5, 0x7, 0x400, 0x8, 0xffff81ee, 0x10001, 0x9b667135, 0x6, 0x1, 0x598, 0x1, 0x10000, 0x0, 0x3, 0x5, 0xfb, 0x7f, 0x912a, 0x5, 0x2, 0x7, 0xfffffff9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4c, 0x4, 0x5, 0x51, 0xfffffffd, 0x9, 0x81, 0xffc00000, 0xe, 0x10001, 0xc56, 0x10001, 0x278, 0xe, 0x8d, 0xf, 0x0, 0x3, 0x6, 0x8, 0x1, 0x10, 0x3, 0x6, 0x7, 0x0, 0x4, 0x6, 0x40, 0x2, 0x1, 0xa28b, 0xfffffffe, 0x82ab, 0x5e, 0x2, 0x707, 0x4, 0x9, 0x3, 0x9, 0xfffffffb, 0x1, 0x2, 0x0, 0x6, 0x60000000, 0x8001, 0x1, 0x2, 0x7, 0xffff, 0x2, 0xfffffffc, 0x3, 0x9243834a, 0x0, 0xfff, 0x9, 0x0, 0x43, 0x6, 0x8, 0x8, 0x1, 0x8, 0x0, 0x28, 0x4, 0x5e7a, 0x3ff, 0x8, 0x4, 0x8, 0xb21c, 0x1000, 0xd52, 0x3, 0x7fffffff, 0x446b0f9, 0x7ff, 0xd, 0x7, 0x1000, 0xec1, 0x3550, 0x8, 0x0, 0x3, 0x8, 0x0, 0x6, 0x4, 0x7, 0x800, 0x9e1c, 0x26837357, 0x7f, 0xa, 0x6, 0xb, 0x53e3, 0x4, 0xaa46, 0x5, 0x10, 0x8, 0xc, 0x6, 0xdba3924, 0x3, 0x6, 0xb139, 0xa374, 0x200, 0xfffffff7, 0xc, 0xf7ef, 0x800, 0xffff0000, 0xa, 0xff, 0x8000, 0x81, 0x3, 0xc479, 0xa392d54, 0x8, 0x6, 0x2, 0x1ff, 0x0, 0x3, 0xe, 0xffff, 0x2, 0x1ff, 0xfffff800, 0x3, 0x2, 0x5, 0x3, 0x3ffa7e8a, 0x49c, 0xa72, 0x7f, 0x5, 0x6fd, 0x3fdf, 0x8, 0x2, 0x400, 0xd, 0x8, 0xfff, 0xbe82, 0x401, 0x40, 0x5, 0x8, 0x9, 0x10, 0x4, 0x8, 0x2b2, 0x80000001, 0x1, 0x3, 0x8, 0x9, 0x7, 0xe, 0x9, 0x2, 0x81, 0x6, 0x3, 0x5, 0x400, 0xffff, 0x200, 0x7, 0x8, 0xa8b, 0xf10d, 0x9, 0x8, 0x8, 0x6, 0x484a, 0x4, 0x5, 0x400, 0x2, 0x8, 0x401, 0x7fff, 0x8, 0x0, 0x9, 0x8, 0x5, 0x4, 0x1, 0x3, 0x5c2, 0x0, 0x3, 0xff, 0x7, 0xb97, 0xe, 0x1, 0x10, 0x4, 0xe9a, 0x1, 0xffffffff, 0x2, 0x2, 0x7, 0x5573, 0x100, 0x7, 0x4, 0x3, 0x9, 0x5, 0x7, 0x3, 0x800, 0x3, 0x4, 0x7c89, 0x4, 0x4, 0x9, 0xfffffff9, 0x1, 0x3ff, 0x7, 0x52a5, 0x80000001, 0x7, 0x243f, 0x7fff, 0x2, 0x8, 0x11, 0x0, 0x3, 0xe4, 0x929, 0x9, 0x3f0, 0xa52]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r12], 0x1c}}, 0x0) 33.695249283s ago: executing program 0 (id=3278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x41) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc7}], 0x1}, 0x40880) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00817b00000000000000b20c00fe0501f0ffffff0000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) listen(r2, 0x3) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c00018014000300000000000000000000000000000000011400", @ANYRES16=r6], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x4084071, 0xffffffffffffffff, 0xd0fb8000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r8, 0x5421, &(0x7f0000000040)=0x9) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) 33.401743895s ago: executing program 2 (id=3279): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x8040480) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) write$ppp(r2, &(0x7f0000000100)="29285ba9443b7c964c6134b02b1f7427d0be248919f41b9e302494795cd4651d100060987818cf816a2cf4539bfbb3cab55dd71605e988acbabe5733b80de3726b3439af7dfc96e9b7b1720f23aeb4ee43", 0x51) r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000040)=0xde) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) 33.396510024s ago: executing program 3 (id=3280): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 33.111697663s ago: executing program 3 (id=3281): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xcb, @v={0x7, 0x1, 0x5, 0x6, 0x7, 0x4, 0x7, {0x4, 0x0, "1bc5eaf31bcc05ca"}, 0x6, 0x2, 0x0, 0x1, 0xda, "d9033c7c36b1af3e7f9cd31ebcd1b12fef5f0db05e3e0e6570e3529af7852933bf24192ae82ae93970a0b9e81558f19cdd4c9aaf31b26c502fcbb2e3ea03d901d16bf2b0b62afc9e13a00794e01805b4c48605ad445b971d6a8a2063031f62540d8b64859092b7760476e9841b84bf758e0fa53061580687469ccfd8af3fd136bcf43ebc6c3ed2a7566da9cf6d776d53b6e480e21f57b297feec90b26866244df6db9c88a125a0c1cb26bf19cbedb836ff32e01ecfb9925b3a718ed638fa091aa3673feb74ed16bd5fc93edcbe92b46db14b82c5ba77578f2e50"}}, 0xf3) 32.879616187s ago: executing program 4 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x1}, {r1, 0x80}, {r4, 0x793}], 0x3, &(0x7f0000000280)={r5, r6+60000000}, &(0x7f0000000340)={[0x28000000000000]}, 0x8) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000140)=0x2, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="a4af70ee492afaae50a7fa4c4ff2b0bf88940ae51bcd16ae2e8e1ebdcd708959e34a170fe4ad13078c2b49eff17398daaaa6dfe974e9d5959da1bd7736e14cea01368e8b0b6be30f19050f02e2fdf62e3cf56095cfde871597604fbba79abef08b23b7212c3372940ef5a319e820635efc547b56f8bf0ac77d1507bea04878769fd1ef716f3c8afc32faeb40cc8d8541d15e035aab4653d30cf16aa359a165c1aefa05324297d73ae40923a8316c365189cb07a7758507592ebc75cf4901dc756cfa", 0xc2}, {&(0x7f00000004c0)="922fdaeab06f598e33097984f747da934bcd1234c9b7040ff8d468e4d6047db38754ff28b0dae4b53c09737d7713e9ea6c89faf4187a007fd8713ba34f2086acb5ad8bedd97897d2807b700005d848731434bc99c6a58b210edbd809c66e688c38c38348ebf47fa6ff72ace240425222f36772ab8647630e8397af5a51fed060feae63e3963ef1560a45de0801407f809000000200", 0x95}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x24040855) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8814) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 32.776799318s ago: executing program 1 (id=3283): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r1, 0x400454cc, r4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010003904000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0198000002000000480012800c0001006d6163766c616e0038000280280005800a0a0400aaaaaaaaa9957b3c0a000400aaaaaaaaaa0ffaff0a000400aaaaaaaa991800000a0006"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, &(0x7f0000000000), &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x13}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000131658f000000000000050000001800038008000400455b58e32360032cc79ed96b9600009977d58202000900000004000100180001801400020073797a5f74756e0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r8) 32.678265328s ago: executing program 0 (id=3284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x241a01417d289bcb}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff40a7}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048b1}, 0x8c0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x6a1, [{0xb, 0x4, 0x9}]}, @fwd={0xe}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xc}, {0xc, 0x7ff}, {0x10, 0x10000}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f00000003c0)=""/142, 0x89, 0x8e, 0x1, 0x17c7b380, 0x10000}, 0x28) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x3, 0x6, 0x2, 0xdc, 0xfff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}]}, &(0x7f0000000200)='GPL\x00', 0x80000000, 0xb5, &(0x7f0000000240)=""/181, 0x41100, 0x20, '\x00', r3, 0x17, r4, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22a01, r5, 0x2, &(0x7f0000000640)=[r0, r0, r6], &(0x7f0000000680)=[{0x2, 0x5, 0xf, 0x8}, {0x0, 0x4, 0x10, 0x4}], 0x10, 0x8f72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x241a01417d289bcb}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff40a7}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048b1}, 0x8c0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x6a1, [{0xb, 0x4, 0x9}]}, @fwd={0xe}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xc}, {0xc, 0x7ff}, {0x10, 0x10000}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f00000003c0)=""/142, 0x89, 0x8e, 0x1, 0x17c7b380, 0x10000}, 0x28) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x3, 0x6, 0x2, 0xdc, 0xfff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}]}, &(0x7f0000000200)='GPL\x00', 0x80000000, 0xb5, &(0x7f0000000240)=""/181, 0x41100, 0x20, '\x00', r3, 0x17, r4, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22a01, r5, 0x2, &(0x7f0000000640)=[r0, r0, r6], &(0x7f0000000680)=[{0x2, 0x5, 0xf, 0x8}, {0x0, 0x4, 0x10, 0x4}], 0x10, 0x8f72}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) 32.479651136s ago: executing program 3 (id=3285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}}], 0x1, 0x640400d9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000580)={r2, &(0x7f0000000400)='syz1\x00', 0x121180, &(0x7f00000004c0)={@_ha_fsid={[0x8ca, 0x7d]}, {0x3, 0x0, 0x5, 0x7ff}}, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f00000000c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x4, 0x7, 0xa, 0x6, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xc, 0x8, 0xa6bd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x8dd0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x4, 0x9, 0xb0, 0x0, "5370b9f283d76027f999713125a9df01e8152260010d"}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @private2, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xd2ef, @private1, 0x9}}]}, 0x90}, 0x1, 0x7}, 0x800) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r6, r5, 0x36, 0x0, @void}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000000)={0xffffffff, 0x10, 0xfffffff7}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1}, &(0x7f00000003c0)=0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000200)={r7, &(0x7f0000000080)='\x80\n', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x3572]}, {0x4c46, 0x5, 0x4, 0x9}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) setsockopt$inet6_udp_int(r9, 0x11, 0x66, &(0x7f0000000240)=0x100, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x4c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x28, 0x2, 0x0, 0x1, [@nested={0x22, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a57d9766"]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 32.360861259s ago: executing program 2 (id=3286): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001003f50025bbe5ad6000271fb2340f09", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="7e597304402cf355bda8fa93f6c774e76ad74290050874913ab4469307fa6e3fe969466dfc4479700736e631c01e0a7af839b73d96d44a5e623dfb863cea2d914f1ffc1907ad0dfe2a1b89420abed556885c36131f8cefbc7ca7693d26c2eca3f2444af328f615237445e344cde27f84522257de210e97dfa2010b891306ebd3e6e1b3ad21c03d1b8f2c133f209d4fb1a25f16464e58bf1c3d8e9d41bce99519", 0xa0}, {&(0x7f0000002d40)="714bb68ff14e0d938d519f3dfce8889eeab926ad9b0fe3ff08e110969d1b00b846520c6c958f4a9eea211693397894e7f99dd7920e2d8b7ad67b738c978e7648f485b951ae6f26cb8c930d82b6822d9fac843abfbe64ffc21352f30fe9dd68b5190cc952a347ff99c17cac480ed6b54a5bb0c94666ab0c", 0x77}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="780000000000000084000000010000003ebe34cf85a2f464ed5f68d70d743599c5bc9e0cb43c8944db1c4618b09b1f43f468bbb6efcdfbe7ee46de568a22ba50a4d3b12ccc09cb79b728319638189a1d6ead1a6b0afc565b97539dd0ecbcd0269f601133be01964e9cdedce6f1fff1e73e0a000000000000"], 0x78}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000540)="c10e4e0766be79cdd1176a11a4898657980a5b4c8df038f97366063e791742269e2b8c8a9ce0efb230468d72b5944a54db48", 0x32}, {&(0x7f0000000580)="90ee65b6f0fb27c9d2ab050fcd869f7f7707a72c8834db93fc70ec988e2fa2e0e0fef972c931f9a1ea4c09a2466e26a43ef9e272d0b91e210785f387d9aa70690de57d6d9cde7d8e34b104fd4841b48e", 0x50}, {&(0x7f0000000600)="425e3521ce3d142a82230797682576e8d121883a5c1b238f9de4de63c122af851c0c14", 0x23}, {&(0x7f0000000680)="33904b545af3860b49dfdf634b38ca79a0b373a3bb482d390ac9524e6401b515da49e5c0a1054fe2495dc3060dd1212f3d38f9019aeb21b13150622fe3c546640deec91a80ad220e98d419acd0f62a754ca361f1f6af1679909fcff36ecbd10f8f08240659412f5dd49d4117fbaedf87080aaaba623a6e9c88179b74718f527f02160c7fde3aab5c1e0b415d59cc9352e3fbf63a5f837fa9500aa3458e3ce4b367c4492b44f8eb3506f8f6391cc22c333a6dd4212c195b078d9a0855", 0xbc}, {&(0x7f0000000740)="b180ea25a2ffb578b1aa8e71bc6ea340379bbf6b1cc0a40d40a0f4abf816b4f801c149937391353948daff93692ac2b4dcc0cbacb0c3b41ba3e4344cd1e49c8d4f2b0c6d069af86f8b7453cd1ba6d5326a054266019eb6a35051af8bec339f76bed9e347f958cac4feb1582c910d99d13bb7cfaed31f0adc5d567ef789c3abded56cc77cd51ee103d24c509356979f7c353108d5b7605e03ac315225be808223f67e171c191928454f912abd3da08936dc0be664bc59f6121c19a5c3e1780ce19d88d1ed58463e215f9b79ffda7eec70aef9fd9aa09a40c5814b", 0xda}, {&(0x7f0000000840)="7d1043df2b79bc92314b2462fc9b0f30f0dbe049e529d29733abb76402d810604bc14bb38ad278306eb90a940000000f9341511dd71e15b12d9b956863dad5fe2f24378a8c7608a84d1134fba657e5a620e087a307d0161a1310ac40ef0688c744bebe25c85959db52a3951a9c56fe7eca8586d959ce52dc2d3f36696de6238739c7ddb85d8c1b117107c389cebe4b696ac2d428c3d62c88ade6531522f4b662b2dbd7e6653af2b66a882f534528a07fc320c701650aac5a38e003b358685da70c555cafc67d5c2faae7694d8c11b571f64afbc3aaf2bad86247625019e379213f569e1126f1a605c1a9d95c7addacd0b2993c1fd5", 0xf5}, {&(0x7f0000000940)="4367ef52b0fda9e39fc5507d9cc2171a4ebc4f5d55645b23eca8868f838d6ab24148c5b502cb8e7dfbc2eb6f520a2f2cd963088c0144f00b0e2a4854be358dda6adc5592ab9c75729ee6c15434e49ef4ebd8f8b373a5382fcac2761b8682b1672cccba8406499c73e30593ee6851fc5b13ff46b339e640a58a71f1f8939d7b86f5adab22b4a4acc6", 0x88}, {&(0x7f0000000a00)="06c37e705191a5f0e1f7dea3922a79ff7877c9a8dcb57f48647d79b6621e63c39571574abdbee62e2d15b65de02567b797b112ebb56a862b148792f9841b5070f20dd2114653a86b77062584047d3fbf61f22c7efbe64e38bafc17fde9106c09d4a7f2eb12a3264513a8467586bb109256e0d4c4c6109e0630da72666f7c916ea9e65157f169463a3ba2445441821bfb8285727a7879526880b07b22dba5109f05a7a0a684db879856dfc0092f06329ef756b6c78922eb7f2231c5266818f0c7d125ac8dd3198b3cf00cab76f45e0e94bb52ce843834b1594362c69bb5400ea2a2944214e3b3512fb620157a8d4fc34e79173ae92f07cb64498c4a468c66d5247ccb0bcde93fff41ab23b4b3400809c30e25d9309eec260d53bccdddd2b662048bef7f72f5eeea7befbb6220d742a507cb6588715ece6b271e349e7ea19ee38c80f10bed3e59ffa0c76b8510c30aa22ac9c060ae3e858a11d85e2aacbecb5af71dee0d3df003a9d70679488068abe494ccabd47b98f9f63c68075fa9276192f7f890d38a2f4e3ff14c587bf1298f4492d3b492ac90d16cfa92a400eb6096decbc100e2a12460e29ff59266ec1926a1d449f8617808cb3dd7b13a58e14886a444c4e9fdbc8832fc47faffde96d901540f9d53f834d03b08ddeceeb58f16b9af8c317e6ae8d3f4840eafa8bdea885dc69d252ffff5562c78063282ae93764f3b33a1834766c2920f57668e7c5655b7af2ae2b158e637c69592ed4799275226c95ef7f2c3cd1c76e5d981f9f4fca8952d7d8b0da0e79ec2a86e823857d603dcd6936f1d61e3845d151e60047543081290dc201e6d91e2eb0522556b174cc86941a8ee4831b13fe4756b09b702bcd738cad36fe697eaf3704c0d558030aa9fcb6f790623f5923a7f2824521e653fce8e192aa90a7c89f5b57a5379de51000d7a0036a0a6c5d9ff383de400b7280469a05640bdee7edd8773989d9b0c8f4ffc852f767b3ce3741c2f115080f8afdf9d5918fb2599adc4cc27392c226c654d126a70fdf6efaae99e177544803042f71132b53212a3f8e262255d04bf2acb999098fdcc44c5d683d0ddc4cfe6f28bde99a9ee3289574ad089ae1231892bb4e46e457e804f8f3f2cffc202869f99be8d8561bb85b0c577fc02cdd0283c4894a93cb637d012ce22849beff25f8e97b3e525c72a4fabaa0691ea50c15eabaa4b02aade370ca72ceb56d1e22db0460a1f5754d22c4fcec779cf9e66f1c927d694d573393c55c2ef588cd8ddec3bc9b8a007ed44d33adf8e955360a5a64659f09c06deb11b9a1bb4f8bae3f55641beffef150ab0a4caf70054045e8a4a16422b64e7d0c498732ecb2b6fe0314a9f16e38df8fae11afc2150b87c6d136b7a58dfa1d7402f50108cf824dd130c1886849d5e8fdd56fd43b2899b3bbb0b1107e9801ca38df0fe7632f4451d4345c452962517e4bf316c47c4a63edf4f0db576093fd4d3643eedb21b8714d30386f60c3167c18de6c3551cd347c30f6708a0ef745528d44635eeec031aae4af086dc7fd1fa321c0702545dff11c378b014f624e13d2a293461faccd3f311c923faa827ec2700a0b95a0819be0012231d67751bf8df31727d1e30234192959546833f73c31cd23d6aa1b7c86363d7f74f814c6e73218ea4e3c3d7425840721ab176c4074bcf34a5196e8e3bb88946dba6e818abadd64bb87f4b59931229b294e8d4f553cd44e83b1f9a97075ac5b61fdf2c3f9f1f468e2cc46a5b211f16e2f2fb9637bd99bd1f6f665a59f91b088219938d609264d69e6c09de8d9de978629b73f8ef12be12858643e331bb64b1d2cd90dbe25f5f2674146aefa7e883a81a5a0e615e356eb91e712d7c39124cc94be1fa3db2187997b5d4f856c04b0b7e316227dc4c2020b64c3a07fc670090fbfd10704e8b9baa9c93c2b504cf9923d595945674e3dd166d1bc4d2229484231dc39b78362c3153a10c6fe638da57a9fd2c11e620ed14b5b66db7d438a4e1e9b98e986316ac7bbb57c60ff3a271c99686e772e641e1da062706b46c0e1383ec5ed25d6a72d46fb297d1df83507b3667a4df17bdd4995fb6cd2da08aab9a275b8cf951fada9e1d2a621a5b755cf05af7b2528ffccb680957c04e7b7197a53aafb56a4298a2dd91ae35c4fe2181f474ae13c2650fe9ce1f9153eba81caea8859e3e7cc125bd0f323d23f9554adb5760879020b3ffdb7af943ed1f6ff585ebc9383c24886d7adcb6150f905fa07e8dc50b70a75fed13c337b6d726932bf59a72d5a7b9ec6d38e335a03d59d92b057299f5d519405534a122c1c28153f4224b933f61b4e5a20bebed1cea417f03c0d5b00b38f1c7216e435e99152ef3323b54ae9e6c0d931a86106169dd8bb4ecc225a7fc98037e1f40967d75ed74ce1248ff70db5afe9787dd66c31830503a1567dae676fe28f558129ac197b3388a398b6a3a367ac7fd7e32ef913fe73fabbfbbcfdcb9f0213fd53a4d613afd9f84fd2c2454bdcea9a211483adb2ae665313f49dafd7b21cf1bb85caa2860e3dadd6dafbdadfdf4ee684d28957bf5dd0c6af47541baae50d365961b11dd76255f18f0e2e3b1253db000e03f7b9a40d11ae3d950a60be01a2e201fa5387574357ef7b9f977a8ce8d893aec4ea5280d55433071b99384eb37422de55c4aa24826c49dbd5cc0d74ac7a3a91c3894004935d6eb429c0acf3c5abcc346004159a63b5c6efc3dd22179571aeb05d487bcf54fea2649f3875f2dd0ce347066a63018b51892b053c2b5a3f9a873cdabdb411a09b02ad2e1e1224671ef550c6aba7c3033f5235da9ebfe043a99a02c8444ed62a4221ec213e21337638cad1d6c47a548ac9e13e3639db8954789855581b509b9000c93266ff6bbdaa44190e4f2234002309ad14052ccc65b4d7f398e8dcb5cc031c25d2ee9e62551dd0cac3ce6874c49227e96168f9c9c47a7a2cd4035393b3f9081d475e13cda6378cdaccc4848d35b8f4d8b7a7e8b56c04a5dc6c3fc36e6aa3833a079ae6e26bc90f29924bb6d367cf9fd5fde193e31c267f968eaf48e87c6417b0f7814bc48686b7aa2859732d8ee68a5cb712d65430b60e32a3d22b75768379afcec8a03de9120b608ffc80b3d931be2151ce4665c07e7bc3c6c549c476e728e439822edb78bbc3afea86ecd9d039c5ca44c1e752084fb569160f757d76771b3f8e33259f737f501ba0e6fe2dd039197555a16c2818044f7a6342dceb083d4608ad6080b995099c6a9c5ecff2bf72ece1edb26dfd216d93cc86e4ab63b71536ab0381a3842c58343d74c284e6310f8bcfbe998231c9f19db8bdf2c78c63388ce3d52e56b568d68e677078e977338df157e019a35faa90d1adef5062472b9c0c08cd4547b06778f6616236d2497c98516a04f365c6c1baaf940c1ba3762138864f1d420d4ec8295cd9083fcd105ad255a6cf15cc5e286186c5be1003173a9094b7e1c1738455d3a8102cf75972b8ce72e54f56433d16b1b5ba256a4f01892d64c53cfaf6851944a14a198b7f6e46e320f4ca058fa387f2e6556373c6f16d2d9879f4056eeb17b41be9d92a251fe12c3e0b036b554d34f51e1068e952bd82cedb7e148e176ef514f79670cdb5ee6659b6710dd98beae92f90d9354a12e1a35a758a100bc482643052e483229c7e66f6676c85a24183d7d5e246f5b9016b10732177e0fccac5a7f2bc7f8f726d2c173d19cb1a1ef9e019d17ee3cf9bd97507345733cedf855109fea9effd0194627a2549200dea11bd754f7c9f4a4efcae4c98ce34489355bae4a2757362749068085921f7a8171bd1b9425630dc5bd3711962efacf4d2e37295b53c538a329d38c02f794c6fda76df890bb0144fe065c4264c087a703648aef625eb57f5ec3db6c1190362b6d0de12bb98db2ff96273fbc26e94188605da162a3fad0eaed6a145e7f77a5f9cca699fa125e6bfcc049fab936adc0cc3a3994e5f40559e0cf9ad3bff40f02d4c5ae3d7ed60e8be5bba922cc58f4dfff33cb50496acdf8b502213e31b6914ba4bf75ddcd2199978f408a002e58235f59fab41c4f337f1933df3e6e19429e877195d24d2c9f77d2fb26c6d65595d35c72baac88ef9a64c0b429f9e98e7e41634f62cdca6ce9dbb30d498655b77a0d04cb1b17e4e15b98ce151df352dadd8587ccddad52fbc725b33663a00f390853cf715fecc74a847a9c6b9c5c3070f1abadfb698329e0377631ba3ec79c8d4dc383691b79aee588f7d124b1239e25c87a61d7de5fd0a59a5c9e76399526eff575820a4b41fa64c1861e36fb682cece2805633e42540277b0f55b2eb1fddbe67caf6c21005ecf73493613b71587587a16401b6306d0bff014fa8af85c0b266964062d2832effd2c8ebb0239db28e90ff684080582e03d077d02330f27138110b3e308cfbae27580ee0372932918913f238d3950f4f876ba11486a8c90b169a06fa80d0530cc19f7c18deded784ac3cf0fce43a0b785b1be9a7f8145557131e35d7e3630babf40e721824e636106dc41ef1d55ff03454613f7f082aa533a45a0cf40497988907d2278f1dab5c3561830ba5057161feed656272b7952833ada3b564e89bf4bf94c8cbd57502d485ee3ee1dfc4610a375002dc51eb75137b0868b1abbeeb0d3a0e1acdf192c5bf4015ac8114f0037c095d8e892494e3f33379c21bdc50a4611c4f9c7b4048f9dbbeabdfb5fc91f4697efd7cb236d75f42cd9ad947290c051abb5d6d5db6cf0672602dc4f7cc6bcfe06559b9607bea464adc6fb47a40f0a1def991a6ca47bb119a07cfb789b137fd3295a839b779dcf7732c4bbfc0b3040dcea3347c70faf555429cca0aa909ce457e918a98ae07fe9a88fa500531cffc18055cc2c5e8e15dfa369489cab0817ba3d9e97816a809a76470363fc6e87d4ad0130c8487e058b2e769144de7f894669a69e6b6a749f98b4371328af7566818c01ee9ed88c92226e08e12c22ce518b34a68bf2c7ea37ee2bf89293d694be6aadf79ef18ab9bab6708686656e5ee39789b986035d5408027f665cf791dff518550f04353e109268f304024a36a6ec8d8b9278bfc8612acfb87c0774bf8a33965ad6d18638673845a8983e0f36253a800ea65ea61f8c9fc2d099b9950223a79d7b711daca1b3f7eb1e6ae77c85135d173d5c71e210cb620faa63077c636827f7348021e8cdccc18b54e4fe8b3ec24c269357bd9a336cb19a97a15f403604b0cdb52747e6353845e2b9b4d178b4f6e72505446082c39950c124f6b6fa59408e10e7751004187f6df33d9f6fa4a32febb125a1f9b77259c66017bf280ae54e17964b9a72b8632bf28d862c81e6f7bf43ba223397905d630c1377c37a230f803c87cbff55dcd9e96c76419cff6ee5b5a21459a14ce50582ba3d50d3c0dc062daf2d111259f325c655d2b842cc75285c305c2e64edea8b654c0bbb864edc759cf5663cc79bc53c85c88aed00cafb62dd8679b70e5bd1b40d75ffa6e058b48a50e12930d2573052ee95cc2ed49b045d1362a7d53c06e695340d461a519283ae32e8575d5f116bb9c4dfe19d664dc577c331473ddc6009b3f12a478f71ceac2fa1531c883f1d84701ed9b1f1cdb43b9fa2cb7dcbcb8ce37c3ce6fa57577bccb06905e132e4dd8aff781501eac573b272f4640de410cf93af901d2d6a70641b90be503c9e1fe5417e71f92bc4318bc8b585dafbee34a32c43439bec2605c1924a04bf053a880fb3eeeb88dbb6e10c16ce1797f6b55a86e7375a83e2cd54f0fbcd6d9a5f259a6985631", 0x1000}, {&(0x7f0000001a00)="3f218af4b9f7408d3bf7db467c56f0a19db7b6bea9eddbc5e1d03c6672d97aa14aca2619ad7283a1cc8ba53af6463f4737f94a19021382471460fd69b6eb3e6863d55b7136df86ae2b6e5a4945af115228bcc2ce4523bc7b6d97144f7379cf05a1c9bd93a9ac063f9d60ed9cce484985da4db0d4fab599c1e1f52a860fc36d2efbd80f4c16a3161c2d6e52d111fd1aa4bbb52c65f474046eee9682e97741805554ed400e01d70433da4d6fe466177bf64e231d72a9aeb988e16098d60611b6212590b92edece4e3944bba18be301c90cd2381c1dd66539023362ad85489364590f77e76892139b449ab0ad34d4facadd27ddb65575c288f6bd56eaf56955dc1822cf9a41bb92ecff11f41ebdf298b25a7dbfcfded5325cf935677e0d06a52e536abb2631b2e590fffe5ad513963310f7d9edfb1e1d76ee4397295944d1beab58172ee7a67323591d5be2b0569559c14ba57095be4b29b097d3cba1b7aea3db967eef0f48914ae6a3c94b40caa3343588698f911663000fd2b959b3b5f856f719928904deac625009a79e116a5e6ebddc338721b55b28362441a07381ba6dbf07ed6cfafd9c1ef2572f5c00d6294ba3266f7d27243c864cda24f0080b326530515b2b7b99a5bd22974fe2fbd7e9ab8aae3d0f52b4440f96d12a1d02a2787e21e5e815f1164a8d41f5ba019a7054b739dad1cc43edf9f026c9927260a4b5241977356304e59cb6a1c902b690e4f73c2b831e6489a526be5bcefd660b06dd8454f5733a4a283c85f13f43672bb347c4688faf83dfc77da238387ff999c3cb24ef7e089a5adc989ce244ec059ccfec0fea80a826eabe7f1916b2c4f339e20773e3006c2f654eb58cb7ec8faf121e0e9f45784d35aeb9356d10c77306b2b2a31ed5805290a83f88e7a1dc5e5f94aafc379e2f13dca206f12fa96569a408c7569dd621b18ef85895e1d662929ceab831ccc0e8c4b03b3f21589a5fef43ac7350f95045ef2d10d0d042c6ea3a128dd6547cea0b9f0cff764f3e7f038d79690a9b57d985864c5c68575b2bc33f7dee13a09222dc9b147ae58b4efc2f8c3ceb11b2d40d8dc711db45c5fd2401170157c6bc311b679a52d6ae94563f82299b8c97f6ad5e5114d793687375f7a0899ff1ee07a691262d8f57218d758724a2f1ed7446ab1e780797ec71da18e7d3e82c2e6dbe9602175cbff0d09e20939f9bd7fb0624c9280c504267a5506c1927a6e2b12b7ab9ce61bf3c0d3a801185ec530dbc19c33cf2af337467609ec56c0e22491949e6b416af6e4dafc6b5772a3805b8a36668a790b55dfb83162a4b4d04471afb9d2017e97b91464d44824679aa2d3353995c0d633fd7d4f8cd8a07fc63ab2f0e50a78681bad4814474d1e0157f43eec8862d4c957d94a3eaacd89f4826a29ee3c77959330c0da802b7918d7f6c64b3fea981609a1049961217047da62b8c8d12145d55fa7c0aef3517cb11d748f21f0d8a2bed82779316ec7c6cb7ed8e6524737642805b9b61668cd777094722bd8c42696d288b7a3b1fa6a1aece6b42263c62412c7f86ef444b85e56201e2794549d1e392d70d377b61a58c863fea96552bbbf243504c4670dae88e64ac3a178eb1e88fb0ceae419b0a6449c07251c9547fc103dd2bcca232123be403d7feeb08bb0de56dd6331e49c829476297bb163ea2879076522838db48b9023040fe12f881fc0210041855abf69502d1393208593f516238a185b074858d2e3a9ace6f695de1b26f7d07d34a7dc0cc5b72bc74ded899c4becb7ba85a37aadcdc8104b2cbaa653a65507ae59b0500979968f012084e6c307641485ec084d6336f9edd956f3800630eae9aeaaa1bc0065a92fb125b80f6620616f82283928c3bbbebbb7a07ce2f0ecd1c05e2e8bdcfe332a3cd869faca0e2fc8f05278fb60531efabfef87f114d1415390d4e011f904ae38602f97b9d0f8d14ae3fa88a510f39e3c5c21332e2c3b1a0a1a1611e03425b035c4cc4b67fa0f03542f4dcd0f22bf2bf4896f3bb41f307affca3d3391e8416fdeaaae7183629cb7c70ed8fde3a99c868f63656ee39a9ac599e5f787a43ee0a6f4968a4f4aaad77bbde65d792b8311614572685161659159e2a50b924dce62bf4a6a9f0b983a6c766852c7521fa43754485abc12c823e016c4e81d8a4dd4ed52729854ccdc64886514ecc0c2be84a83dd12121d465ce7c83dd9812032b851603b6b0288c47d89a8e98f686e6bee8f91e670123f01230624ae9c938dc56e3f64db03125e19eb96a9680029128bea756071b20f313a9e56224296a04ebda2cd0aaf96d78a859126aa6910b6183d37375c5cbacff51989273b7b9725d2bf77cd7bf1d0542838a5580531fc3d02c7aadbb9654a7e0a51f8e80d18c1bd30fc7694dac12a8abc2f1d821f8736ece81fbf03e617df64f030e91abca389a869f083c72008528c8b82a92cedfca6e4d05262d152b6a960f656dd395d456a2001e2f701f28866207a04d71a37406bcd83cc60c1e903f291b1acc668149d99a4763e4b41a60d009ce964b312b45494865c215de07e15253b7ecdcac8588b6aa47703c1eb1bbc101b6c5d98be206ac38af5a6c0e78bfb09db6ce6a52ff825f063b3ec2cbaea03a2e4f1189ae8c5f02a45eec4704a1be6e0b6de097e25fbf9e2e5c5188b820fc961c41880a6cecd638bf460d393d63da98c2b46c385f5345804fa6033fd3d92ee58cd2a7510eb2e5173b9a9654bb38967ad4b5bf667b4252237de25c0978d0e5c33d11eb6f1dbe49d1de84ce701a88485bf2309ce7d3198599584ed07af09e66c1ad9e08e3f772f6ae33233ba00bdaae5ca65be6e455bcc8f9e0702d495bed5ae026e1775f6cd6ea03a46f0f30de9c13a1e5adcbbf8dfca33e43f06a15076bed4add9aae8d592e4858b2982b1d713aa9c43578a230e5f6b52b30d01a00f684fc77eca30287a418437f141362f34d70072e3953182b6ad5d4bbb7caed28cecdb31a4fa95ef8d6d967e516584ad2fa2ff70af641073569c54137103e9cb134572456c2c84a551057749c5ee11ae630e5f22db7f0a75686f0ba7e4ab271924f311a9ac15efc44c2ddec4c173664ec28e23020197cf4d7b359acae5017f17a4b08f8c7a0b64478c101c264b4a6a0f36f7fec06c650bbc0d141d7b3d6ca5efb40c571a5c4aa89bf4289ba80fadc1243f0b65a13b0ff369b67af3c690b5f1aa887bae7b3af39d64c64b8cc8cca0ceacaf4e23202d0cbf105e04e6305d6b436787e7abecc5db89f93e1867001fcc5ec6a5378e9e399e09940291356e2df4190578f71bfd29cfd93450fb5c1237835f6371611ef92874200e61d887ee58f2232e31276066935d9a099cedeec8183e490f9376efcdc356a65b58a20b2f23c8a4cfefd5afff0c99c8c4850bf1e99ace2446ac915b9880eafa4e6eaa91e1ed3cf2d39a7fcb6f3d48dca33388d9ce31da51e700b0ee1b8418fc95f34553ce27755f9209ad92c6e6f2b06a364125c50fd3c5f062c0976f435814e36c880aff0c1163f59145c0608585e5b28bdb77a86f9e3f38c5f1b5e345a30d2e9029819fa270e0bf62d1fabd6f66840455e4cc6780391b3d5e11e35cc695e90518ec6ec4a7f161663abeab56f24bc3b1eb43a10318aa52450f0c6d6a0fcfa9072bd671fc840dd40dcf8ca3a878192c490b31fb18a160af1ac323dde662e73e1f8f1c8afa193a58f5214710206740ea17dbd079c23548e63118f2617fc16f1893e86721d2071fdf9a85524b9da66e3e7bed3d279659a5797be39972f35697bdd624f15ea4f69b6e33affb59da62b1127590f2e28323246b26ab9af2ae056ecb935091d3944be0adddd4dbe192151a0889038ac3a534ac228e34081d422af76607068a5496c8f99fd835d405039cc7fd65e9e4d1cfee1ebfc604f1679cdf90fa4e2197825c5397b7632cd69b61f935675a5c6fed421208bea34e86d3fc553eb40039efafb2680051c0eeed9e5d672add76163513b90e1101975d397f18bbfe08d1c508bedf70be9906516626c9b5b86a9e2fc77e81aa46321319352edfb76b82e2c4fff88bce930b3895719e18d9004c046b1ce5579be8e7084345673e2d2750491cc100d62d78af6e18c3de275a4b6956ab5067419e66e585d114f0843baf02400d23ab548b72abf273fe969bc330cb0dd28003962856ffdf95cdf5824f83bf734e17e13a7547529d4e0b01860ca07868813e5aebd294ef4154c3a8a5e9bb75612b0eb9e76dd87c1264e4082adbf3bbec12f874ef64ed404c6a916d86ed96166c0f7ac5be0be0f15946d061a5e5bc332ed6fa66b437a57fb8131bf2207af5cb5aa0af3d15b7729bc850e14cbaee05a9ea415eb4bf852ef0b380855de2b67c0d4afe203520cb710793dd1e99059da1b093ac3db12e7daff75ef8074a6c6cc2e6fbc7b06621f18a0694e414f39d453c6fd7c7906678c5e9d0694978ce64adc20665f1d9e08c48fd4e21c6ef9c598af1d93b8dbdc519817fbdbe7a852eeef60452952d1d4ceb4e7273b51175bc689d68f90e71093c4db53a8d6e1551e4f983014f5b2a5d7b1cd0814b2127a6ee5dc2399b9b44c7da16825c786a8faf8ac2f5243360cfa310620bb22e75939f614f132737639e52a5128ce7545facd6d75ec198cadfdd719d6a8bd220ef48c46bcf38ff0ca75ef2fde9e277079df3387f6714b05084bfaa8fb194e5835393f5ad073a837ecee4635572c1da01d0d06e2376b1550db07596f47db8250726888688f9aab4e2f62ecfef233e8a380c8545bb799597efd22a2e9a05c535132335936943a2d31d436ab4f3792aaf2e541ab71049dcfa3ca9c77642ce7816a9bf57e8d6358e8b391d9a0592ee9e4a95ac5a4508585793c29e444c9d36d81a860f25a14fe3a661a2815cab9ef63280868dea3f5474d4204bbd0d6a950ae0c07222e0b469befacf06ba770fb41605b7898f678ee51c841283b75d449e078f32ca902e6ed7e50d5f7bdfb036e4afc8f038008983249dfe156744874aa7318538d9c85e42729a8f8da69c5fe107c5c18ab2b6bc3d46ba53f7735abf3f2c7330351455a8f5be8b078c18d2c2199662468426d7173c9b96c3afe4aadd9e4bc24a3eec65b4d998fe696c4120a8e985596af87271b7f50d7690c020f271f48efb0330e37edce6eaa135c9c5c6cc90e3d2aa45ed273e27b3e3386d2ebdf3a8c9abebc5787e356672ff4f85e47d077c36c8fc69ca2a44b4ca8cb29cd5373dcf255e60a5dd72caf44aa5fa08266fdcf57a1ae5cf797f166f0dbca68d5d6932c2cc8f8138146aa1dddd9ab144f8124e73e25af4b02abc9bae1817800134f793579cfd1353d94f7f03e86f0d5d4d1075225e1f874df144165c5dcde95ff4a8fdfd2232223ca5497546ecc105f823d94ec3975c6b12a7ef1a433cf59cdfe8d0fadafed8460cacd95dab9a08f4ef92b8219956afcfa8a0a40533b7b4b03bece775d37ca11475fab977788bafbefa1383fc83b1d7aa9f9e983c8c385a97344b1f914553112c8be7ba3623c545769c677ee46edd71730bcdd7b65c4efe51864d85715c4277b72d98811dec2fee67b73c1321481a8b86ec9549ed59dd23545c355914fcf9eeee048f52b1cdae7540949203072df363e898b262b8866de03de9da519e76fb4050f9f3af137fb2af90c3d1c81d263cf63faf8c2f22b227ba94ededbf8891425b719d7082a572e4a7a2ba1ecffc26463b48a8ff3495875c4003d0fc915c1259363a0e5c16e66640042f8ce150549bf454b3a8c99089c9bbc1e250b53143e3ce771dde35", 0x1000}, {&(0x7f0000002a00)="0137c4a29a5fe0aff1038fd09c136843c71f1b78a6effcc0a0e6e19a39ce13dc18c5132b1b9d1e598244924c75843d9b168ac4253f9acda4b437108367fddbae27c7e73dd0ab00990b159bdf42a4f77cde183de9f726be10e20da7886076cc75e7568a6a580f9f08be89fcdd05b0bdb883f29d4b6119b26c0b65c972524a2285574790", 0x83}], 0xa, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0x138}}], 0x2, 0x40000e1) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000380), 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x32}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x101) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004810) shutdown(r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x33, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) 31.837476464s ago: executing program 2 (id=3287): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='%-{\x00', 0x567a41, &(0x7f0000000040)={@align=0x401, {0x8, 0x5, 0x1, 0x1}}, 0x28, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}, {[0x1, 0x5, 0x2, 0xa]}, 0x1, 0xd1, &(0x7f0000000100)=""/209}) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x118, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9920}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10000}, 0x40000d0) (async, rerun: 64) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000004c0)={0x8, 0x1, 0x4, 0x5, 0x7, 0x8, 0x4, 0x4}) (async, rerun: 64) r2 = socket(0x1f, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x48000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=0xffffffffffffffff, 0x2, 0x0, 0x4, &(0x7f0000000680)=[0x0], 0x1, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0}, 0x40) (async) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r0, r0, 0x12, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, r0, 0x34, 0x2000, 0x0, @value=r7, @void, @void, @void, r6}, 0x20) (async) vmsplice(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000840)="3e6f37385f69e68aafc3393565cc3a945f3ba9deaf06a164515f68d25d3f4d1b8f864ab134c1cac23583b8ecefb109051761b8588578508cea9015d4b41b5ed819a2f10221ee91ef7826d6b24197c4", 0x4f}, {&(0x7f00000008c0)="c225f83a23d27dc6ecdd598cf25fa141b6d3239d0f5db9d87bcd5584408205ad69a7dc91382ad40bb4cdf0cde2e9f24f2b0426bd7142795d4e13cc7e311f687b5db20ecab3cd83e9653805c6ce6ff9c894e63d234434abdceaaf27b0a79f6752433b4a9bb3f8c0f456fe3ba788fba9ccda0b6c06a807a0904c77b2a8c9349a", 0x7f}, {&(0x7f0000000940)="57e509a5bdcabe3c27dec0d1fd608a206718eea2015e1284b204a44396c8a3aa584d16bd16bf3c5f0423310150558f38389c0a72e6c575927f3bc509c5fdb313d5ccb170336ae553add7683306e66df0e9859335b51be5a70cdfc8f0a5c9bb22b4f68d9ebdb5d313b5da1faeb4f394eef48d4ab6618d45d313cbd4e54007", 0x7e}], 0x3, 0x2) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000b00)={&(0x7f0000000a00)=[{0x0, 0x0, 0x9, 0xe, 0x3, 0x2, 0x2}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x8000000000000001, 0x9, 0x5}, {0x0, 0x0, 0x1, 0x7, 0x7, 0x7, 0x9, 0x7f}, {0x0, 0x0, 0xa, 0x1000, 0xfff, 0x1, 0x0, 0x7}], 0x4, 0x38, 0x0, 0xffff}) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x110, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x199}, @CTA_ZONE={0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xc4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x10}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}]}}]}, 0x110}}, 0xc810) (async, rerun: 64) ioctl$FICLONE(r0, 0x40049409, r3) (async) r8 = accept4$packet(r2, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d80)=0x14, 0x80000) getpeername$packet(r8, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e00)=0x14) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e80), r2) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x911}, 0x20000001) (async) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000f80)={{r5}, "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"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/235, 0xeb, 0x0, &(0x7f0000002080)=""/135, 0x87}, &(0x7f0000002180)=0x40) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000021c0)={'netpci0\x00', 0x200}) (async) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000002200)=0x3, &(0x7f0000002240)=0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xa, 0xfff2}, {0x6, 0x2}, {0xfff3, 0xc}}, [{0x8, 0xb, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) socket$inet6_sctp(0xa, 0x1, 0x84) write$tun(0xffffffffffffffff, &(0x7f00000023c0)={@void, @void, @ipv4=@generic={{0x31, 0x4, 0x1, 0x26, 0x192, 0x67, 0x0, 0x0, 0x11, 0x0, @multicast2, @private=0xa010100, {[@end, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x1f, 0xd6, [@multicast2, @multicast1, @empty, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x5, [{@local}, {@local, 0xcf}, {@loopback, 0x80}, {@multicast2, 0xf}, {@remote, 0xff}]}, @noop, @generic={0x89, 0x9, "f8e35c76372fef"}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x10, "04d15d6f8ddb260f14f1f855045d"}, {0x0, 0x12, "ac6a0e3580fe5e784731805a78fab671"}, {0x1, 0x6, "51152805"}]}, @rr={0x7, 0x27, 0xe0, [@loopback, @rand_addr=0x64010100, @local, @loopback, @empty, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @empty]}]}}, "b46c3efd19ade367e2454a4c249b13523cb3c1e77d39ae9a1a99389b4ddd10149095db74c1f7407cad645ac95236bc8f5b617e60b75c18b900311ac48e32804d6ed023f167936219bcf0a9f884e0947262491185d825100435c33a2e6becca624d9655d4e813327880e72ca05529ed9f87b4136a92c8e77608e7ad2f36a51ce1797e5bf487f8f203e1f1717fd278763df26437e21e80938cfdfc48ddcfaa6d47dbac47982820a5d9b5508d59d24403b2150b0ca66159d55076c04c4d38c57b6e73b3a0ccc5f6c1ce71699d2f81ba"}}, 0x192) syz_emit_ethernet(0x80, &(0x7f0000002580)={@random="45af4b16eb3b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@snap={0x1, 0x1, "dae2", "6e2f18", 0x805, "9678597c996e778c76f1e48506dcfe215ee4248711260c09e8d56fd3507cbadea9bdc138007d019d0ae90d4691212841cfa4006416a1db0a763dcaab4bd032f0153fc5a0986b9d36ccd62a09019352deefb58498846089a5dc2d981c8c879376e7"}}}}}, &(0x7f0000002600)={0x0, 0x2, [0xb70, 0x825, 0x835, 0xead]}) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x48, r11, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 31.564335229s ago: executing program 2 (id=3288): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @random="b331687b8145", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "62d308", 0x18, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25030000005800018044000400200001000a004e200000000cff01000000000000000000000000000000000000200002000a004e2200000004fc0100000000000000000000000000008d0100000d0001007564703a73"], 0x6c}}, 0x810) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x3, 0x10, @loopback, @mcast2, 0x7800, 0x10, 0xba, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x80, 0xff40, 0x5, 0x1, {{0x1d, 0x4, 0x2, 0x27, 0x74, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x20}, {[@rr={0x7, 0x17, 0xb2, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @local, @local]}, @timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0x1, [{@remote, 0x2}]}, @noop, @noop, @rr={0x7, 0x17, 0xec, [@multicast1, @remote, @multicast1, @rand_addr=0xfffffbc7, @dev={0xac, 0x14, 0x14, 0x1b}]}, @lsrr={0x83, 0x23, 0x60, [@loopback, @empty, @remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, @local]}]}}}}}) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x304}, "4dac927cdb9a2da4", "2efa67deceb87eba91b09b8680046d50fd04345ef7209450282aa9e08af6d77c", "6ded94ba", "340272f139cef7f0"}, 0x38) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fedbdf25150000001c0007800c00030005000000000000000c000300d606000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80ccfc760a0a000200010000f40000000000000000009e8fbf83fdc20ec22c2c1a5fde5f23f10ddb276552de14f496a27b27b585cc4a05e2d7f6ae7d3394fc7a28b7787ffc32934c8bbea8eb06b6b1640c03aa34c6bd12e03f65bc7c31ac1400bac39c436bc4bb2049c21a509f889d278f32765f958f41b3e8ddd669809a86c6891012685cac45ede745a4df7b84dad0be11f1f3a976769544f95b817d2ca859ed44f54304575fb416793268cb7cc530a7f76803f0d84806062a2f014ce6ddf93459b196e6f0fceb90"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 31.563714265s ago: executing program 3 (id=3289): unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000440)=[{r0, 0x2000}], 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000340)="b9ff0300600d220962f0480d0600fb9e14f0", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000011700000000000000000000000a7c000000060a010400000000000000000a000005500004804c0001800900010068617368000000003c00028008000140000000160800044000000000080003400000008108000240000000170800014000000005080004400000007f08000340000000560900010073797a31000000000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x1a, &(0x7f0000000f00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @ringbuf_query, @exit], &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0xb, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffffff4c}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000353bd8e7f0e9117e686724bc3f9b692bbbf2577dc619be5ed2d96b42784364f4b6569f43da3a866e84cfbda41077de317e8d1463cec5f79b448fe8615b39cb9fe74468204246950904a86b55f58954079372cd6a0bbc578c3ba3708cef470b1bf09c8117fa28e15d45ac667a937b", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x20) r8 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000900)=0x60, 0xc0800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000d00)=0x4) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000000bc0)={0x959, 0x10, [0x66, 0x6, 0x5, 0xea], &(0x7f0000000940)=[0x0, 0x0]}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000004e8e4e72000000000000000018110000b7af453ae7eb78b0036c08bc1b2447c236beeff4f62d97d812eb2e8aa030c595a9f80936a160fc92ec3f3e06358df8110cbc026fea55c137ac64bc60c254da75fa251eb6ad80b943b7cd315dfe8d344bc6a32a27a799a6e73079135717d40c1939b8c183cf32b91bb3aafb78115b8c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000100), 0x41000, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x6, 0xa, 0x4}, 0x10, 0x4633, r6, 0x5, &(0x7f0000000980)=[r7, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x5, 0x3}, {0x2, 0x4, 0x0, 0x6}, {0x2, 0x5, 0xf, 0x7}, {0x2, 0x1, 0xc, 0x5}, {0x4, 0x5, 0x1, 0x1}], 0x10, 0x4}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x6, 0x8, 0x4, 0x7fff, 0x10, 0x3}) 31.421412216s ago: executing program 3 (id=3290): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x193, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x5, 0x4}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x10, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) 31.202443956s ago: executing program 0 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x7, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x7fff, 0xc9, 0xa, 0x9}, {0x4, 0x1, 0x1, 0x4}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x8, 0x0, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @local, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xd6, [@loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @multicast2, @private=0xa010101, @local]}, @ssrr={0x89, 0x23, 0x4b, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @multicast2, @multicast1, @rand_addr=0x64010100, @local, @local, @multicast2]}, @end, @noop, @timestamp_addr={0x44, 0x34, 0x58, 0x1, 0x8, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x7}, {@local, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@loopback, 0x6}]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000700)={r0, &(0x7f0000000600)='syz1\x00', 0x2, &(0x7f0000000640)={@align=0x6, {0x6, 0x13af, 0x4, 0x5}}, 0x8, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x1a}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x503, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000000280)=""/176, 0x40f00, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000840)=[r2, r3, r4, r5, r6], &(0x7f0000000880)=[{0x5, 0x3, 0x3, 0x3}, {0x0, 0x3, 0x7, 0xd6606a697e28f7fe}, {0x3, 0x4, 0xd, 0x3}, {0x0, 0x2, 0x8, 0x5}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x3, 0x1, 0xb}, {0x5, 0x5, 0xf, 0x4}, {0x1, 0x3, 0x4, 0xa}, {0x0, 0x4, 0x5, 0xb}], 0x10, 0xc000000}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000a80)=[{{0x3, 0x1}, {0x4, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000000b40)={{[0x3, 0xa7, 0xffffff6d, 0x49]}, 0x0, 0x3, 0x10, 0x0, &(0x7f0000000ac0)=[{{@_ha_fsid={[0x1, 0xf1]}, {0x4, 0x2, 0x2}}, 0x4, 0x0, '@.-\x00'}, {{@align, {0x6, 0x4, 0x0, 0x5}}, 0x8, 0x0, 'syz1\x00'}, {{@_ha_fsid={[0x1ab, 0x7]}, {0x0, 0x6, 0x0, 0x2}}, 0x8, 0x0, '(}]\x00'}]}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x900, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000bc0)={'ipvlan1\x00', 0x1}) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000c00)=0x3) syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r11, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x48000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', r4, 0x4000, r0}, 0x18) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xac, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "e8b1c02f3699ef808167ea518b919393"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "e088fcbe12a8d9e9247582efe420e814"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f989261f4b4297fa78f4b2996d461798"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8b6fd46b606a82b376d2d99a68e82b2c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x7, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @fwd={0x8}, @datasec={0x6, 0xa, 0x0, 0xf, 0x2, [{0x4, 0x2, 0xfffffffc}, {0x4, 0x8, 0xfffffffe}, {0x2, 0x1, 0x5}, {0x5, 0xfffffffc, 0x100}, {0x2, 0x3, 0x8001}, {0x2, 0x4, 0x6}, {0x5, 0x80, 0x4}, {0x5, 0x7, 0x5}, {0x5, 0x6, 0x1}, {0x2, 0x1, 0x736}], "1e38"}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f0000001200)=""/100, 0xbf, 0x64, 0x0, 0xffffff8c, 0x10000, @value=r4}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r4, 0x20, &(0x7f0000001440)={&(0x7f0000001340)=""/101, 0x65, 0x0, &(0x7f00000013c0)=""/66, 0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x15, &(0x7f0000001000)=@raw=[@generic={0x99, 0x0, 0x7, 0x1ff, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x5b}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @alu={0x7, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffff0, 0x8}], &(0x7f00000010c0)='syzkaller\x00', 0x7, 0x3b, &(0x7f0000001100)=""/59, 0x41100, 0x22, '\x00', r1, @fallback=0x34, r12, 0x8, &(0x7f00000012c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x5, 0xa, 0x0, 0x2}, 0x10, r13, r4, 0x2, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r4], &(0x7f00000016c0)=[{0x0, 0x4, 0xb, 0x6}, {0x2, 0x4, 0xa, 0x8}], 0x10, 0x54a}, 0x94) 31.042415327s ago: executing program 4 (id=3292): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e65766500001400028005000d000200000005000c00fd00000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x8, 0x80005, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0x1}}}], 0x18}, 0x0) 30.956736257s ago: executing program 2 (id=3293): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000002300)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x1, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000006c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x3}, 0x4, 0xe, 0x7, 0x200, 0x3, 'syz0\x00', "716a1bf48d5380999c0854bc413cf2b2f8dca55c840e2d8a42eaa2ad39e310c4", "3ea3fcd10fc0a691c4dcd066f65a30d105aa046a17a7e7394de41c20f6515e2a", [{0x10, 0x0, {0x2, 0x100}}, {0x1, 0x5b07, {0x1, 0x3}}, {0x3a9, 0x6, {0x2, 0x5}}, {0x0, 0x1, {0x1, 0xc8b0}}, {0xd85a, 0x113, {0x0, 0x5}}, {0x1, 0x101, {0x0, 0x4}}, {0xf42, 0x1, {0x3, 0x6}}, {0x400, 0x8, {0x1, 0x400001}}, {0x8, 0x7f, {0x2, 0x2bf1}}, {0x5, 0x2, {0x1, 0x4}}, {0x7, 0x3, {0x1, 0x2}}, {0x8, 0x0, {0x1, 0x3}}, {0x4, 0x3, {0x0, 0x4}}, {0x9, 0x7fff, {0x0, 0x7}}, {0x81, 0x7, {0x0, 0x1}}, {0x8, 0x2, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x401}}, {0xc65, 0xd, {0x3, 0x2}}, {0xd, 0x62, {0x3, 0x8}}, {0x8, 0x0, {0x1, 0x2}}, {0x81, 0x2, {0x0, 0x80000000}}, {0x40, 0x101, {0x3, 0x2e}}, {0xf64, 0x4, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x6}}, {0x3, 0x6, {0x2, 0xd}}, {0x769a, 0x2a52, {0x1, 0x8}}, {0x9961, 0x1, {0x0, 0x1}}, {0xd0e3, 0x4827, {0x2, 0x6}}, {0x4, 0xa8, {0x0, 0x101}}, {0x1, 0xe5, {0x2, 0x9}}, {0x9, 0xf, {0x1, 0xfffffff9}}, {0x100, 0x5, {0x2, 0x1a78}}, {0x6e6, 0x7, {0x3, 0x4}}, {0x9, 0x9, {0x1, 0x800}}, {0x4, 0xfffc, {0x1}}, {0x3, 0x7992, {0x3, 0xfffffffb}}, {0xe0f3, 0xf4, {0x2, 0x2}}, {0xffff, 0x9, {0x1, 0x80000000}}, {0x4, 0xa970, {0x1, 0x401}}, {0x1a00, 0xbec, {0x2, 0xc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x739, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRESDEC=r1, @ANYRES64, @ANYRES8=r1, @ANYRES8, @ANYRES8=r1, @ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) 30.921085931s ago: executing program 1 (id=3294): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}, 0x1, 0x100000}, 0x0) 30.668418699s ago: executing program 2 (id=3295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x24004080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) 30.564653667s ago: executing program 1 (id=3296): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 30.516404628s ago: executing program 3 (id=3297): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c) unshare(0x8040480) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) r5 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getpeername$packet(r5, 0x0, &(0x7f0000000240)=0x34) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400743, &(0x7f0000000040)={@_ha_fsid={[0xed1a]}, {0x4, 0x2, 0xa, 0x3}}, 0x9, &(0x7f00000000c0), &(0x7f0000000140)=0x3e}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 30.418069584s ago: executing program 4 (id=3298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x541b, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) sendmmsg$inet(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002800)="c9", 0x1}], 0x1}}], 0x3, 0x40488c1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x8, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) close(0x4) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x10) 30.234500472s ago: executing program 1 (id=3299): setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r3, &(0x7f0000000800)={@void, @val={0x3, 0x3, 0x8, 0x26, 0x16, 0xc}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x1a, 0x3c, 0x64, 0x3c, 0xe, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x3, 0x2, 0xa, 0x0, 0x3, 0x7, 0x4, 0x2, 0x3, 0x1000, 0x3, 0x4e21, 0x4e21}, 0x2, 0x2}, 0x1, 0x2}}}}}, 0x46) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r7, 0x0, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000040)={0x2f}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000280)={r9, 0xffff}, &(0x7f00000002c0)=0x8) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000180)={0x3c, 0xc, 0x0, 0xff, 0x0, [@private1, @mcast1, @remote, @private0, @private0, @remote]}, 0x68) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r11, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4080) 0s ago: executing program 32 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x7, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x7fff, 0xc9, 0xa, 0x9}, {0x4, 0x1, 0x1, 0x4}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x8, 0x0, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @local, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xd6, [@loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @multicast2, @private=0xa010101, @local]}, @ssrr={0x89, 0x23, 0x4b, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @multicast2, @multicast1, @rand_addr=0x64010100, @local, @local, @multicast2]}, @end, @noop, @timestamp_addr={0x44, 0x34, 0x58, 0x1, 0x8, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x7}, {@local, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@loopback, 0x6}]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000700)={r0, &(0x7f0000000600)='syz1\x00', 0x2, &(0x7f0000000640)={@align=0x6, {0x6, 0x13af, 0x4, 0x5}}, 0x8, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x1a}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x503, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000000280)=""/176, 0x40f00, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000840)=[r2, r3, r4, r5, r6], &(0x7f0000000880)=[{0x5, 0x3, 0x3, 0x3}, {0x0, 0x3, 0x7, 0xd6606a697e28f7fe}, {0x3, 0x4, 0xd, 0x3}, {0x0, 0x2, 0x8, 0x5}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x3, 0x1, 0xb}, {0x5, 0x5, 0xf, 0x4}, {0x1, 0x3, 0x4, 0xa}, {0x0, 0x4, 0x5, 0xb}], 0x10, 0xc000000}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000a80)=[{{0x3, 0x1}, {0x4, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000000b40)={{[0x3, 0xa7, 0xffffff6d, 0x49]}, 0x0, 0x3, 0x10, 0x0, &(0x7f0000000ac0)=[{{@_ha_fsid={[0x1, 0xf1]}, {0x4, 0x2, 0x2}}, 0x4, 0x0, '@.-\x00'}, {{@align, {0x6, 0x4, 0x0, 0x5}}, 0x8, 0x0, 'syz1\x00'}, {{@_ha_fsid={[0x1ab, 0x7]}, {0x0, 0x6, 0x0, 0x2}}, 0x8, 0x0, '(}]\x00'}]}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x900, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000bc0)={'ipvlan1\x00', 0x1}) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000c00)=0x3) syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r11, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x48000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', r4, 0x4000, r0}, 0x18) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xac, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "e8b1c02f3699ef808167ea518b919393"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "e088fcbe12a8d9e9247582efe420e814"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f989261f4b4297fa78f4b2996d461798"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8b6fd46b606a82b376d2d99a68e82b2c"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x7, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @fwd={0x8}, @datasec={0x6, 0xa, 0x0, 0xf, 0x2, [{0x4, 0x2, 0xfffffffc}, {0x4, 0x8, 0xfffffffe}, {0x2, 0x1, 0x5}, {0x5, 0xfffffffc, 0x100}, {0x2, 0x3, 0x8001}, {0x2, 0x4, 0x6}, {0x5, 0x80, 0x4}, {0x5, 0x7, 0x5}, {0x5, 0x6, 0x1}, {0x2, 0x1, 0x736}], "1e38"}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f0000001200)=""/100, 0xbf, 0x64, 0x0, 0xffffff8c, 0x10000, @value=r4}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r4, 0x20, &(0x7f0000001440)={&(0x7f0000001340)=""/101, 0x65, 0x0, &(0x7f00000013c0)=""/66, 0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x15, &(0x7f0000001000)=@raw=[@generic={0x99, 0x0, 0x7, 0x1ff, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x5b}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @alu={0x7, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffff0, 0x8}], &(0x7f00000010c0)='syzkaller\x00', 0x7, 0x3b, &(0x7f0000001100)=""/59, 0x41100, 0x22, '\x00', r1, @fallback=0x34, r12, 0x8, &(0x7f00000012c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x5, 0xa, 0x0, 0x2}, 0x10, r13, r4, 0x2, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r4], &(0x7f00000016c0)=[{0x0, 0x4, 0xb, 0x6}, {0x2, 0x4, 0xa, 0x8}], 0x10, 0x54a}, 0x94) kernel console output (not intermixed with test programs): 5766] ? __pfx_bpf_check+0x10/0x10 [ 409.078937][T15766] ? bpf_obj_name_cpy+0x194/0x1e0 [ 409.078966][T15766] bpf_prog_load+0x14d6/0x1c20 [ 409.078998][T15766] ? __pfx_bpf_prog_load+0x10/0x10 [ 409.079043][T15766] __sys_bpf+0xd0d/0xd90 [ 409.079071][T15766] ? __pfx___sys_bpf+0x10/0x10 [ 409.079100][T15766] ? __fget_files+0x2a/0x420 [ 409.079142][T15766] ? ksys_write+0x242/0x270 [ 409.079172][T15766] ? __pfx_ksys_write+0x10/0x10 [ 409.079203][T15766] __x64_sys_bpf+0xba/0xd0 [ 409.079223][T15766] do_syscall_64+0x166/0x520 [ 409.079246][T15766] ? trace_irq_disable+0x3b/0x140 [ 409.079264][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.079281][T15766] ? clear_bhb_loop+0x70/0xc0 [ 409.079303][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.079322][T15766] RIP: 0033:0x7f886679e159 [ 409.079339][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.079354][T15766] RSP: 002b:00007f88676a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.079375][T15766] RAX: ffffffffffffffda RBX: 00007f8866a25fa0 RCX: 00007f886679e159 [ 409.079389][T15766] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 409.079401][T15766] RBP: 00007f88676a0090 R08: 0000000000000000 R09: 0000000000000000 [ 409.079412][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.079423][T15766] R13: 00007f8866a26038 R14: 00007f8866a25fa0 R15: 00007ffdd595d938 [ 409.079454][T15766] [ 409.209190][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 409.636999][T15797] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 409.686614][T15797] bond8: (slave geneve2): making interface the new active one [ 409.688857][T15797] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 409.710266][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2497'. [ 409.723944][T15797] bond8: entered promiscuous mode [ 409.723966][T15797] geneve2: entered promiscuous mode [ 409.729920][T15797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 409.773453][T15797] tipc: Resetting bearer [ 409.796192][ T5896] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 409.797730][ T5896] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 409.797814][ T5896] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 409.797885][ T5896] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 409.799609][ T6119] lo speed is unknown, defaulting to 1000 [ 410.079754][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 410.082744][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'. [ 410.132755][T15820] FAULT_INJECTION: forcing a failure. [ 410.132755][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 410.132777][T15820] CPU: 0 UID: 0 PID: 15820 Comm: syz.0.2502 Not tainted syzkaller #0 PREEMPT(full) [ 410.132788][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.132795][T15820] Call Trace: [ 410.132799][T15820] [ 410.132803][T15820] dump_stack_lvl+0xe8/0x150 [ 410.132823][T15820] should_fail_ex+0x410/0x560 [ 410.132839][T15820] should_failslab+0xa8/0x100 [ 410.132853][T15820] __kvmalloc_node_noprof+0x176/0x820 [ 410.132866][T15820] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 410.132879][T15820] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 410.132895][T15820] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 410.132908][T15820] ? __pfx_jit_fill_hole+0x10/0x10 [ 410.132925][T15820] bpf_int_jit_compile+0xa16/0x17e0 [ 410.132952][T15820] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 410.132972][T15820] ? _copy_to_user+0x8a/0xb0 [ 410.132986][T15820] ? bpf_log_attr_finalize+0x150/0x1e0 [ 410.132999][T15820] __bpf_prog_select_runtime+0x53e/0xbf0 [ 410.133016][T15820] bpf_check+0x23e7/0x2e10 [ 410.133036][T15820] ? ktime_get_with_offset+0x93/0x2d0 [ 410.133057][T15820] ? __pfx_bpf_check+0x10/0x10 [ 410.133078][T15820] ? bpf_obj_name_cpy+0x194/0x1e0 [ 410.133105][T15820] bpf_prog_load+0x14d6/0x1c20 [ 410.133133][T15820] ? __pfx_bpf_prog_load+0x10/0x10 [ 410.133157][T15820] __sys_bpf+0xd0d/0xd90 [ 410.133172][T15820] ? __pfx___sys_bpf+0x10/0x10 [ 410.133189][T15820] ? __fget_files+0x2a/0x420 [ 410.133211][T15820] ? ksys_write+0x242/0x270 [ 410.133228][T15820] ? __pfx_ksys_write+0x10/0x10 [ 410.133244][T15820] __x64_sys_bpf+0xba/0xd0 [ 410.133261][T15820] do_syscall_64+0x166/0x520 [ 410.133273][T15820] ? trace_irq_disable+0x3b/0x140 [ 410.133284][T15820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.133294][T15820] ? clear_bhb_loop+0x70/0xc0 [ 410.133306][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.133316][T15820] RIP: 0033:0x7fd8cc19e159 [ 410.133326][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.133335][T15820] RSP: 002b:00007fd8cd076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.133346][T15820] RAX: ffffffffffffffda RBX: 00007fd8cc425fa0 RCX: 00007fd8cc19e159 [ 410.133353][T15820] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 410.133360][T15820] RBP: 00007fd8cd076090 R08: 0000000000000000 R09: 0000000000000000 [ 410.133366][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.133371][T15820] R13: 00007fd8cc426038 R14: 00007fd8cc425fa0 R15: 00007ffd3b7702e8 [ 410.133388][T15820] [ 410.171166][T15818] netlink: 'syz.1.2500': attribute type 16 has an invalid length. [ 410.171185][T15818] netlink: 'syz.1.2500': attribute type 17 has an invalid length. [ 410.171469][T15818] tipc: Resetting bearer [ 410.173730][T15818] syzkaller0: left promiscuous mode [ 410.209197][T15818] bond8: left promiscuous mode [ 410.209217][T15818] geneve2: left promiscuous mode [ 410.335773][ T41] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 410.335814][ T41] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 410.335844][ T41] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 410.335873][ T41] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 410.396693][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2503'. [ 410.723958][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 410.873862][T15842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2508'. [ 410.973462][T15845] lo speed is unknown, defaulting to 1000 [ 410.982011][T15845] lo speed is unknown, defaulting to 1000 [ 411.298261][T15859] ip_tables: iptables: counters copy to user failed while replacing table [ 411.441683][T15863] FAULT_INJECTION: forcing a failure. [ 411.441683][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 411.441714][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.0.2513 Not tainted syzkaller #0 PREEMPT(full) [ 411.441735][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.441746][T15863] Call Trace: [ 411.441753][T15863] [ 411.441761][T15863] dump_stack_lvl+0xe8/0x150 [ 411.441792][T15863] should_fail_ex+0x410/0x560 [ 411.441814][T15863] should_failslab+0xa8/0x100 [ 411.441841][T15863] __kvmalloc_node_noprof+0x176/0x820 [ 411.441865][T15863] ? check_max_stack_depth+0x5c/0x2160 [ 411.441886][T15863] ? check_max_stack_depth+0x5c/0x2160 [ 411.441913][T15863] check_max_stack_depth+0x5c/0x2160 [ 411.441942][T15863] ? kasan_quarantine_put+0xbb/0x1f0 [ 411.441961][T15863] ? lockdep_hardirqs_on+0x7b/0x110 [ 411.441988][T15863] ? bpf_remove_fastcall_spills_fills+0xabc/0xb00 [ 411.442016][T15863] bpf_check+0x1947/0x2e10 [ 411.442047][T15863] ? ktime_get_with_offset+0x93/0x2d0 [ 411.442072][T15863] ? __pfx_bpf_check+0x10/0x10 [ 411.442094][T15863] ? bpf_obj_name_cpy+0x194/0x1e0 [ 411.442123][T15863] bpf_prog_load+0x14d6/0x1c20 [ 411.442153][T15863] ? __pfx_bpf_prog_load+0x10/0x10 [ 411.442193][T15863] __sys_bpf+0xd0d/0xd90 [ 411.442220][T15863] ? __pfx___sys_bpf+0x10/0x10 [ 411.442249][T15863] ? __fget_files+0x2a/0x420 [ 411.442288][T15863] ? ksys_write+0x242/0x270 [ 411.442323][T15863] ? __pfx_ksys_write+0x10/0x10 [ 411.442352][T15863] __x64_sys_bpf+0xba/0xd0 [ 411.442373][T15863] do_syscall_64+0x166/0x520 [ 411.442394][T15863] ? trace_irq_disable+0x3b/0x140 [ 411.442412][T15863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.442430][T15863] ? clear_bhb_loop+0x70/0xc0 [ 411.442453][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.442472][T15863] RIP: 0033:0x7fd8cc19e159 [ 411.442490][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.442504][T15863] RSP: 002b:00007fd8cd076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.442525][T15863] RAX: ffffffffffffffda RBX: 00007fd8cc425fa0 RCX: 00007fd8cc19e159 [ 411.442538][T15863] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 411.442549][T15863] RBP: 00007fd8cd076090 R08: 0000000000000000 R09: 0000000000000000 [ 411.442560][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.442571][T15863] R13: 00007fd8cc426038 R14: 00007fd8cc425fa0 R15: 00007ffd3b7702e8 [ 411.442602][T15863] [ 411.496822][T15859] bond4: option arp_validate: invalid value (8192) [ 411.528334][T15859] bond4 (unregistering): Released all slaves [ 411.615302][ T5627] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 411.729104][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'. [ 411.791616][T15866] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 411.812602][T15866] hsr_slave_1 (unregistering): left promiscuous mode [ 412.067043][T15879] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 412.380625][T15882] bond5: option ad_user_port_key: invalid value (65535) [ 412.380647][T15882] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 412.382218][T15882] bond5 (unregistering): Released all slaves [ 412.587347][T15886] netlink: 'syz.1.2520': attribute type 16 has an invalid length. [ 412.587365][T15886] netlink: 'syz.1.2520': attribute type 17 has an invalid length. [ 412.717039][T15888] tipc: New replicast peer: 127.0.0.1 [ 412.717578][T15888] tipc: Enabled bearer , priority 10 [ 412.720803][T15888] x_tables: duplicate underflow at hook 1 [ 413.060900][T15905] syzkaller1: entered promiscuous mode [ 413.060921][T15905] syzkaller1: entered allmulticast mode [ 413.062070][T15907] ip_tables: iptables: counters copy to user failed while replacing table [ 413.104022][T15907] bond5: option arp_validate: invalid value (8192) [ 413.113271][T15907] bond5 (unregistering): Released all slaves [ 413.159499][T15905] syzkaller1: left promiscuous mode [ 413.159519][T15905] syzkaller1: left allmulticast mode [ 413.368922][T15920] lo: entered allmulticast mode [ 413.659385][T15929] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 413.677357][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.687216][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.692628][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.700951][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.702789][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.705941][T15931] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 413.734689][T15931] __nla_validate_parse: 16 callbacks suppressed [ 413.734706][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.747886][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.764487][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.840909][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.916620][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.917736][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.918297][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.918810][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.919218][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 413.919790][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 414.037764][T15917] lo: left allmulticast mode [ 414.304418][T15968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 414.691341][T15981] pim6reg: entered allmulticast mode [ 415.665064][T16022] x_tables: duplicate underflow at hook 1 [ 415.936807][T16039] x_tables: duplicate underflow at hook 1 [ 417.495990][T16092] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.713844][T16100] validate_nla: 67 callbacks suppressed [ 417.713864][T16100] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 417.728163][T16100] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.742019][T16100] .`: (slave team0): Enslaving as an active interface with an up link [ 418.521013][T16115] bond12: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 418.521053][T16115] bond12: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 418.531975][T16115] bond12: entered allmulticast mode [ 418.532397][T16115] 8021q: adding VLAN 0 to HW filter on device bond12 [ 418.682503][T16122] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 418.683429][T16120] tipc: Enabling of bearer rejected, already enabled [ 418.690485][T16120] syzkaller0: entered promiscuous mode [ 418.690503][T16120] syzkaller0: entered allmulticast mode [ 418.755598][T16122] syzkaller0: mtu less than device minimum [ 419.309383][T16151] Bluetooth: ISO socket layer initialized [ 419.772156][T16162] netlink: 'syz.2.2589': attribute type 16 has an invalid length. [ 419.772178][T16162] netlink: 'syz.2.2589': attribute type 17 has an invalid length. [ 419.877626][T16162] erspan0: left promiscuous mode [ 419.935157][T16171] __nla_validate_parse: 61 callbacks suppressed [ 419.935176][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2589'. [ 420.045931][T16162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.048756][T16162] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.067688][T16162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.211330][T16162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.236662][T16162] veth1_vlan: left promiscuous mode [ 420.239420][T16162] veth0_vlan: left promiscuous mode [ 420.244779][T16162] veth0_vlan: entered promiscuous mode [ 420.253236][T16162] veth1_vlan: entered promiscuous mode [ 420.269128][T16162] veth0_macvtap: left promiscuous mode [ 420.271921][T16162] veth0_macvtap: entered promiscuous mode [ 420.297141][ T62] batman_adv: batadv2: MLD Querier disappeared - multicast optimizations disabled [ 420.328440][T16162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.333106][T16162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.377065][T16162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.384323][T16162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.404132][T16193] netlink: 'syz.1.2594': attribute type 10 has an invalid length. [ 420.436664][T16182] openvswitch: netlink: IP tunnel attribute has 60 unknown bytes. [ 420.471517][T16162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.482161][T16162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.591973][T16162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.596256][T16162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.602775][T16162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.650991][T16162] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 420.652965][T16162] bridge0: port 1(batadv2) entered blocking state [ 420.653140][T16162] bridge0: port 1(batadv2) entered forwarding state [ 420.653634][T16162] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 420.660593][T16162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.662769][T16162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 420.700899][T16162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 420.703308][T16162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 420.709068][T16162] 8021q: adding VLAN 0 to HW filter on device bond10 [ 420.712481][T16162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 420.720972][T16162] erspan0: entered promiscuous mode [ 420.771312][T16162] bond12: left allmulticast mode [ 420.803567][T11779] bridge0: port 2(veth0) entered blocking state [ 420.803667][T11779] bridge0: port 2(veth0) entered forwarding state [ 421.061094][T16203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2596'. [ 421.061119][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 421.137929][T16199] tipc: Started in network mode [ 421.137956][T16199] tipc: Node identity 72db3a9e241e, cluster identity 4711 [ 421.138085][T16199] tipc: Enabled bearer , priority 0 [ 421.140930][T16199] syzkaller0: entered promiscuous mode [ 421.140949][T16199] syzkaller0: entered allmulticast mode [ 421.191899][T16199] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 421.273673][T15701] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 421.313989][T16199] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 421.316090][T12922] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 421.363591][T16199] tipc: Resetting bearer [ 421.413374][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 421.424140][T16198] tipc: Resetting bearer [ 422.007845][ T6131] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 422.155964][T16198] tipc: Disabling bearer [ 422.168499][T11779] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 422.168530][T11779] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 422.168551][T11779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.168784][T11779] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 422.168806][T11779] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 422.168827][T11779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.170296][T11779] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 422.170318][T11779] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 422.170340][T11779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.171785][T11779] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 422.171806][T11779] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 422.171827][T11779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.174625][T16215] tipc: Resetting bearer [ 422.308015][T16215] tipc: Disabling bearer [ 422.443533][T12922] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 422.444008][T12922] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 422.576085][ T6131] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 422.835813][T16272] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 422.871548][T16275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2611'. [ 422.911377][T16278] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 422.999150][T16281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2612'. [ 423.211481][T15702] udevd[15702]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 423.470948][T16292] ip_tables: iptables: counters copy to user failed while replacing table [ 423.601743][T16302] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2617'. [ 423.840395][T16308] sctp: [Deprecated]: syz.1.2619 (pid 16308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.840395][T16308] Use struct sctp_sack_info instead [ 423.976143][T16304] netlink: 'syz.4.2618': attribute type 4 has an invalid length. [ 424.603734][T16340] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 424.975187][T16359] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 425.062866][T16363] SET target dimension over the limit! [ 425.182401][T16360] gretap1: entered allmulticast mode [ 425.193260][T16360] bond5: (slave gretap1): making interface the new active one [ 425.207599][T16360] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 425.208633][T16369] sctp: [Deprecated]: syz.2.2633 (pid 16369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.208633][T16369] Use struct sctp_sack_info instead [ 425.374084][T16377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.603077][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'. [ 426.190480][T16411] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 426.202078][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2647'. [ 426.312946][T16416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.321939][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2646'. [ 426.323266][T16416] bond5: (slave bond6): Enslaving as an active interface with an up link [ 426.391130][T16414] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 426.449588][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'. [ 426.466996][T16414] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 426.468149][T16416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.583562][T16425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2649'. [ 426.583593][T16425] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 426.852599][T16442] IPv6: Can't replace route, no match found [ 426.852814][T16441] IPv6: Can't replace route, no match found [ 426.885658][ C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 427.761261][T16473] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 427.761743][T16473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.782037][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'. [ 427.898558][T16479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2658'. [ 427.970366][T16486] wg2 speed is unknown, defaulting to 1000 [ 427.970434][T16486] wg2 speed is unknown, defaulting to 1000 [ 427.990577][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.006847][T16486] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 428.006886][T16486] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 428.006922][T16486] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 428.061929][T16486] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 428.124556][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.150936][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.175854][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.179550][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.188790][T16486] wg2 speed is unknown, defaulting to 1000 [ 428.296083][T16501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2670'. [ 428.296114][T16501] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 428.345344][T16504] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2672'. [ 428.527225][T16518] netlink: 'syz.4.2675': attribute type 8 has an invalid length. [ 428.527645][T16518] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 428.573997][T16518] macvtap0: entered allmulticast mode [ 428.603448][T16518] macvtap1: entered allmulticast mode [ 428.660673][T16518] bond6: (slave bridge7): making interface the new active one [ 428.674047][T16518] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 428.817165][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'. [ 429.360206][T16565] netlink: 'syz.0.2683': attribute type 1 has an invalid length. [ 429.460901][T16576] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 429.465364][T16565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.538246][T16574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.538622][T16574] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 429.540766][T16574] bond7: (slave ipip0): Error -95 calling set_mac_address [ 429.942558][T16594] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 430.171633][T16589] bridge0: port 2(veth0) entered disabled state [ 430.172131][T16589] bridge0: port 1(batadv2) entered disabled state [ 430.371594][T16613] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 431.332144][T16594] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 431.345015][ T41] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 431.345048][ T41] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 431.345071][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.345106][ T41] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 431.345129][ T41] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 431.345152][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.345184][ T41] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 431.345207][ T41] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 431.345229][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.345260][ T41] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 431.345282][ T41] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 431.345304][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.569016][T16626] __nla_validate_parse: 9 callbacks suppressed [ 431.569035][T16626] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2694'. [ 431.653417][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'. [ 431.744665][T16640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2698'. [ 431.756356][T16640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2698'. [ 431.875889][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 431.920271][T16635] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 432.019611][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 432.354711][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 432.369480][T16670] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2703'. [ 432.372328][T16670] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2703'. [ 432.534672][T16684] syzkaller0: entered promiscuous mode [ 432.534703][T16684] syzkaller0: entered allmulticast mode [ 432.690306][T16693] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2712'. [ 433.294613][T16707] x_tables: duplicate underflow at hook 3 [ 433.329091][T16712] syzkaller0: entered promiscuous mode [ 433.329112][T16712] syzkaller0: entered allmulticast mode [ 433.512739][T16719] netlink: 'syz.1.2720': attribute type 15 has an invalid length. [ 433.512915][T16719] netlink: 'syz.1.2720': attribute type 15 has an invalid length. [ 433.650011][T16726] syzkaller0: entered promiscuous mode [ 433.650027][T16726] syzkaller0: entered allmulticast mode [ 433.837254][T16728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.020635][T16750] vlan0: entered promiscuous mode [ 434.338227][T16757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.636330][T16775] netlink: 'syz.4.2733': attribute type 17 has an invalid length. [ 434.800447][T16781] block nbd4: server does not support multiple connections per device. [ 434.800742][T16781] block nbd4: shutting down sockets [ 434.914747][T16785] syzkaller0: entered promiscuous mode [ 434.914767][T16785] syzkaller0: entered allmulticast mode [ 434.938402][T16780] netlink: 'syz.1.2734': attribute type 16 has an invalid length. [ 434.938424][T16780] netlink: 'syz.1.2734': attribute type 17 has an invalid length. [ 435.036623][T16780] tipc: Resetting bearer [ 435.036873][T16780] syzkaller0: left promiscuous mode [ 435.036889][T16780] syzkaller0: left allmulticast mode [ 435.101688][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.699188][T16819] netlink: 'syz.0.2744': attribute type 21 has an invalid length. [ 435.704779][T16819] netlink: 'syz.0.2744': attribute type 21 has an invalid length. [ 435.845286][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 435.892654][T16827] ip_tables: iptables: counters copy to user failed while replacing table [ 436.056881][T16832] bond13: option arp_validate: invalid value (8192) [ 436.061104][T16832] bond13 (unregistering): Released all slaves [ 436.182239][T16840] syzkaller0: entered promiscuous mode [ 436.182262][T16840] syzkaller0: entered allmulticast mode [ 436.392371][T16851] digital: digital_start_poll: Unknown protocol [ 436.427484][T16850] syzkaller1: entered promiscuous mode [ 436.427505][T16850] syzkaller1: entered allmulticast mode [ 436.916526][T16888] ip_tables: iptables: counters copy to user failed while replacing table [ 436.955093][T16888] bond4: option arp_validate: invalid value (8192) [ 436.956653][T16888] bond4 (unregistering): Released all slaves [ 437.079421][T16899] __nla_validate_parse: 15 callbacks suppressed [ 437.079441][T16899] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2764'. [ 437.643147][T16934] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2774'. [ 437.749109][T16938] ip_tables: iptables: counters copy to user failed while replacing table [ 437.766669][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 437.772459][T16938] bond13: option arp_validate: invalid value (8192) [ 437.773434][T16938] bond13 (unregistering): Released all slaves [ 437.862385][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 437.875556][T16943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2777'. [ 437.875593][T16943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2777'. [ 438.079948][T16948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2779'. [ 438.151893][T16953] netlink: 'syz.2.2779': attribute type 3 has an invalid length. [ 438.151913][T16953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2779'. [ 438.224398][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 438.244605][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 440.006342][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.018543][T16964] netlink: 'syz.1.2782': attribute type 3 has an invalid length. [ 441.082741][T16968] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 441.531725][T16988] bond7: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 441.942311][T17009] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 442.241535][T17034] __nla_validate_parse: 4 callbacks suppressed [ 442.241630][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2798'. [ 442.256747][T17034] bridge10: port 1(erspan0) entered blocking state [ 442.256915][T17034] bridge10: port 1(erspan0) entered disabled state [ 442.257057][T17034] erspan0: entered allmulticast mode [ 442.259598][T17034] erspan0: left allmulticast mode [ 442.260482][T17034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2798'. [ 442.293813][T17036] netlink: 'syz.0.2799': attribute type 10 has an invalid length. [ 442.293832][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2799'. [ 442.474298][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'. [ 442.518605][T17041] x_tables: duplicate underflow at hook 3 [ 443.248949][T17046] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2802'. [ 443.378853][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 443.408196][T17047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.460719][T17047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.460743][T17047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.462047][T17047] veth1_macvtap: left promiscuous mode [ 443.463119][T17047] veth0_macvtap: left promiscuous mode [ 443.464167][T17047] veth0_macvtap: entered promiscuous mode [ 443.517424][T17047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.518391][T17047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.520993][T17047] veth1_macvtap: entered promiscuous mode [ 443.524086][T17047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.530138][T17047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.531199][T17047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.538718][T17047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.547414][T17047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.578979][T17047] 8021q: adding VLAN 0 to HW filter on device eth0 [ 443.580121][T17047] 8021q: adding VLAN 0 to HW filter on device eth1 [ 443.581294][T17047] 8021q: adding VLAN 0 to HW filter on device eth2 [ 443.582437][T17047] 8021q: adding VLAN 0 to HW filter on device eth3 [ 443.599273][T17047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.608577][T17047] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 443.613321][ T6135] lo speed is unknown, defaulting to 1000 [ 443.613376][ T6135] syz0: Port: 1 Link ACTIVE [ 443.613443][ T6135] lo speed is unknown, defaulting to 1000 [ 443.650817][T17053] netlink: 'syz.0.2803': attribute type 14 has an invalid length. [ 443.676799][ T41] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 443.676821][ T41] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.677045][ T41] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.725794][ T41] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.725827][ T41] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 443.725852][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.725876][ T41] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.726362][ T41] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.726389][ T41] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 443.726412][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.726436][ T41] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.726469][ T41] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.726495][ T41] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 443.729626][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.729652][ T41] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.729685][ T41] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.729707][ T41] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 443.729728][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.729749][ T41] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.729851][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.345201][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.576797][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.779400][T17012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.970689][T17059] xt_hashlimit: size too large, truncated to 1048576 [ 444.970913][T17059] xt_hashlimit: max too large, truncated to 1048576 [ 445.023785][T17064] ip_tables: iptables: counters copy to user failed while replacing table [ 445.339387][T17081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2814'. [ 445.466963][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 445.466987][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2814'. [ 445.672902][T12922] tipc: Subscription rejected, illegal request [ 445.845880][T17101] ip_tables: iptables: counters copy to user failed while replacing table [ 446.333043][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 447.525997][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.263139][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 448.319465][T17127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2821'. [ 448.320054][T17127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2821'. [ 448.320061][T17131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2821'. [ 448.484760][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.496282][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.500142][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.504378][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.527042][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.556990][T17136] bridge0: port 1(veth1_to_bridge) entered blocking state [ 448.557205][T17136] bridge0: port 1(veth1_to_bridge) entered disabled state [ 448.557357][T17136] veth1_to_bridge: entered allmulticast mode [ 448.559153][T17136] veth1_to_bridge: entered promiscuous mode [ 448.562923][T17136] bridge0: port 1(veth1_to_bridge) entered blocking state [ 448.563075][T17136] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 448.781921][T17143] ipvlan2: entered allmulticast mode [ 448.781943][T17143] macvlan1: entered allmulticast mode [ 448.783219][T17143] batman_adv: batadv0: Adding interface: ipvlan2 [ 448.783233][T17143] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.783717][T17143] batman_adv: batadv0: Interface activated: ipvlan2 [ 448.914272][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'. [ 448.917831][T17147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'. [ 449.172337][T17157] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 449.487670][T17133] lo speed is unknown, defaulting to 1000 [ 449.494650][T17133] lo speed is unknown, defaulting to 1000 [ 449.798613][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 450.348646][T17133] wg2 speed is unknown, defaulting to 1000 [ 450.513688][T17230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2841'. [ 450.565944][ T5627] Bluetooth: hci5: command tx timeout [ 451.000734][ T50] bridge0: left allmulticast mode [ 451.015822][ T50] pim6reg: left allmulticast mode [ 452.645020][ T5627] Bluetooth: hci5: command tx timeout [ 452.657545][ T50] bond0 (unregistering): Released all slaves [ 452.669809][ T50] bond1 (unregistering): Released all slaves [ 452.682124][ T50] bond2 (unregistering): Released all slaves [ 452.715905][ T50] bond3 (unregistering): Released all slaves [ 452.719663][T15699] smbdirect: ib_dev[syz1] removed [ 452.784723][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.002928][ T50] tipc: Left network mode [ 453.115367][T17282] siw: device registration error -23 [ 453.173154][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 453.183722][T17292] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2850'. [ 453.434317][T17304] openvswitch: netlink: Message has 8 unknown bytes. [ 453.616455][T17291] erspan0: left promiscuous mode [ 453.738341][T17291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.743199][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.753952][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.836632][T17291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.839141][T17291] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 453.864392][T17291] veth1_vlan: left promiscuous mode [ 453.868681][T17291] veth0_vlan: left promiscuous mode [ 453.872441][T17291] veth0_vlan: entered promiscuous mode [ 453.883475][T17291] veth1_vlan: entered promiscuous mode [ 453.884741][T17291] veth1_vlan: entered allmulticast mode [ 453.923798][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.939754][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.948779][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.959269][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.023120][T17291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.029595][T17341] __nla_validate_parse: 1 callbacks suppressed [ 454.029613][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2855'. [ 454.032017][T17291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.090828][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 454.098893][T17291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.101932][T17291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.104722][T17291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.141077][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 454.141254][T17342] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2859'. [ 454.151987][T17291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.171625][T17291] bridge0: port 1(batadv2) entered blocking state [ 454.171733][T17291] bridge0: port 1(batadv2) entered forwarding state [ 454.171965][T17291] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 454.184183][T17291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.189200][T17291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 454.239766][T17291] 8021q: adding VLAN 0 to HW filter on device bond8 [ 454.242088][T17291] 8021q: adding VLAN 0 to HW filter on device bond9 [ 454.244634][T17291] 8021q: adding VLAN 0 to HW filter on device bond10 [ 454.249071][T17291] 8021q: adding VLAN 0 to HW filter on device bond11 [ 454.254565][T17291] erspan0: entered promiscuous mode [ 454.308857][T17291] 8021q: adding VLAN 0 to HW filter on device bond12 [ 454.405446][T12922] bridge0: port 2(veth0) entered blocking state [ 454.405549][T12922] bridge0: port 2(veth0) entered forwarding state [ 454.483906][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.487427][T16986] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 454.624188][T16986] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 454.683114][T17359] FAULT_INJECTION: forcing a failure. [ 454.683114][T17359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.683159][T17359] CPU: 1 UID: 0 PID: 17359 Comm: syz.0.2863 Not tainted syzkaller #0 PREEMPT(full) [ 454.683180][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.683195][T17359] Call Trace: [ 454.683206][T17359] [ 454.683214][T17359] dump_stack_lvl+0xe8/0x150 [ 454.683247][T17359] should_fail_ex+0x410/0x560 [ 454.683275][T17359] _copy_from_user+0x2d/0xb0 [ 454.683301][T17359] copy_from_sockptr+0x5e/0x90 [ 454.683454][T17359] packet_setsockopt+0x94c/0x1510 [ 454.683475][T17359] ? __pfx_packet_setsockopt+0x10/0x10 [ 454.683498][T17359] ? ksys_write+0x1e6/0x270 [ 454.683530][T17359] ? aa_sk_perm+0x713/0x900 [ 454.683558][T17359] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.683581][T17359] ? aa_sock_opt_perm+0x142/0x1e0 [ 454.683605][T17359] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 454.683625][T17359] ? __pfx_packet_setsockopt+0x10/0x10 [ 454.683641][T17359] do_sock_setsockopt+0x17c/0x1b0 [ 454.683665][T17359] __x64_sys_setsockopt+0x13d/0x1b0 [ 454.683687][T17359] do_syscall_64+0x166/0x520 [ 454.683706][T17359] ? trace_irq_disable+0x3b/0x140 [ 454.683721][T17359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.683736][T17359] ? clear_bhb_loop+0x70/0xc0 [ 454.683753][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.683768][T17359] RIP: 0033:0x7fd8cc19e159 [ 454.683782][T17359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.683794][T17359] RSP: 002b:00007fd8cd076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.683810][T17359] RAX: ffffffffffffffda RBX: 00007fd8cc425fa0 RCX: 00007fd8cc19e159 [ 454.683821][T17359] RDX: 0000000000000013 RSI: 0000000000000107 RDI: 0000000000000003 [ 454.683829][T17359] RBP: 00007fd8cd076090 R08: 0000000000000004 R09: 0000000000000000 [ 454.683838][T17359] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 454.683847][T17359] R13: 00007fd8cc426038 R14: 00007fd8cc425fa0 R15: 00007ffd3b7702e8 [ 454.683871][T17359] [ 454.735665][ T5627] Bluetooth: hci5: command tx timeout [ 454.828667][T11779] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 454.828698][T11779] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 454.828720][T11779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.828768][T11779] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 454.828790][T11779] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 454.828812][T11779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.828844][T11779] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 454.828865][T11779] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 454.828885][T11779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.830675][T11779] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 454.830698][T11779] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 454.830720][T11779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.086905][T17370] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 455.219180][T17384] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 455.254262][T17370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 455.297303][T17372] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 455.365487][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.847608][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.847715][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.847883][T17133] bridge_slave_0: entered allmulticast mode [ 455.855970][T17133] bridge_slave_0: entered promiscuous mode [ 455.866290][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.869769][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.869899][T17133] bridge_slave_1: entered allmulticast mode [ 455.878784][T17133] bridge_slave_1: entered promiscuous mode [ 455.959765][T17415] Bluetooth: hci0: unsupported parameter 5134 [ 455.959786][T17415] Bluetooth: hci0: unsupported parameter 8192 [ 455.959797][T17415] Bluetooth: hci0: unsupported parameter 5134 [ 455.959818][T17415] Bluetooth: hci0: unsupported parameter 8192 [ 456.086483][T17418] FAULT_INJECTION: forcing a failure. [ 456.086483][T17418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.086514][T17418] CPU: 1 UID: 0 PID: 17418 Comm: syz.2.2873 Not tainted syzkaller #0 PREEMPT(full) [ 456.086535][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.086546][T17418] Call Trace: [ 456.086553][T17418] [ 456.086561][T17418] dump_stack_lvl+0xe8/0x150 [ 456.086593][T17418] should_fail_ex+0x410/0x560 [ 456.086619][T17418] prepare_alloc_pages+0x223/0x600 [ 456.086647][T17418] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 456.086674][T17418] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.086699][T17418] ? __pfx_policy_nodemask+0x10/0x10 [ 456.086725][T17418] ? __mutex_lock+0x30b/0x1550 [ 456.086842][T17418] alloc_pages_mpol+0x21e/0x390 [ 456.086872][T17418] alloc_pages_noprof+0xb1/0x2b0 [ 456.086898][T17418] __pud_alloc+0x3a/0x460 [ 456.086929][T17418] huge_pte_alloc+0x4f6/0x630 [ 456.086952][T17418] ? down_read+0x2be/0x330 [ 456.086975][T17418] ? hugetlb_vma_lock_read+0x99/0x2d0 [ 456.087012][T17418] hugetlb_fault+0x412/0x1440 [ 456.087042][T17418] ? __pfx_hugetlb_fault+0x10/0x10 [ 456.087090][T17418] handle_mm_fault+0x24fc/0x3750 [ 456.087121][T17418] ? mt_find+0x186/0x630 [ 456.087181][T17418] ? __pfx_mt_find+0x10/0x10 [ 456.087203][T17418] ? handle_mm_fault+0xf1/0x3750 [ 456.087239][T17418] ? __pfx_handle_mm_fault+0x10/0x10 [ 456.087268][T17418] ? find_vma+0xed/0x160 [ 456.087299][T17418] ? __pfx_find_vma+0x10/0x10 [ 456.087327][T17418] ? __lock_acquire+0x747/0x2de0 [ 456.087355][T17418] ? lock_mm_and_find_vma+0xa7/0x340 [ 456.087386][T17418] do_user_addr_fault+0x746/0x1340 [ 456.087424][T17418] exc_page_fault+0x6a/0xc0 [ 456.087449][T17418] asm_exc_page_fault+0x26/0x30 [ 456.087467][T17418] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 456.087524][T17418] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e [ 456.087539][T17418] RSP: 0018:ffffc90006317c10 EFLAGS: 00050202 [ 456.087561][T17418] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 456.087574][T17418] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc90006317de0 [ 456.087587][T17418] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 456.087597][T17418] R10: dffffc0000000000 R11: fffff52000c62fbc R12: fffff52000c62f90 [ 456.087611][T17418] R13: 0000000000000013 R14: ffffc90006317de0 R15: 0000200000000080 [ 456.087642][T17418] _copy_from_user+0x7a/0xb0 [ 456.087667][T17418] copy_from_sockptr+0x5e/0x90 [ 456.087693][T17418] packet_setsockopt+0x94c/0x1510 [ 456.087717][T17418] ? __pfx_packet_setsockopt+0x10/0x10 [ 456.087742][T17418] ? ksys_write+0x1e6/0x270 [ 456.087774][T17418] ? aa_sk_perm+0x713/0x900 [ 456.087803][T17418] ? __pfx_aa_sk_perm+0x10/0x10 [ 456.087828][T17418] ? aa_sock_opt_perm+0x142/0x1e0 [ 456.087856][T17418] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 456.087879][T17418] ? __pfx_packet_setsockopt+0x10/0x10 [ 456.087901][T17418] do_sock_setsockopt+0x17c/0x1b0 [ 456.087931][T17418] __x64_sys_setsockopt+0x13d/0x1b0 [ 456.087960][T17418] do_syscall_64+0x166/0x520 [ 456.087983][T17418] ? trace_irq_disable+0x3b/0x140 [ 456.088001][T17418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.088021][T17418] ? clear_bhb_loop+0x70/0xc0 [ 456.088043][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.088062][T17418] RIP: 0033:0x7f886679e159 [ 456.088078][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.088093][T17418] RSP: 002b:00007f88676a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.088112][T17418] RAX: ffffffffffffffda RBX: 00007f8866a25fa0 RCX: 00007f886679e159 [ 456.088125][T17418] RDX: 0000000000000013 RSI: 0000000000000107 RDI: 0000000000000003 [ 456.088137][T17418] RBP: 00007f88676a0090 R08: 0000000000000004 R09: 0000000000000000 [ 456.088148][T17418] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 456.088160][T17418] R13: 00007f8866a26038 R14: 00007f8866a25fa0 R15: 00007ffdd595d938 [ 456.088194][T17418] [ 456.373542][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.404191][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.618658][T17429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 456.630194][T17133] team0: Port device team_slave_0 added [ 456.664926][T17133] team0: Port device team_slave_1 added [ 456.784537][T17433] netlink: 'syz.4.2877': attribute type 10 has an invalid length. [ 456.815771][ T5627] Bluetooth: hci5: command tx timeout [ 456.837066][T17437] netlink: 'syz.4.2877': attribute type 10 has an invalid length. [ 456.871622][T17438] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2879'. [ 456.941687][T17433] team0: Port device dummy0 added [ 457.049403][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 457.133938][T17437] team0: Port device dummy0 removed [ 457.185947][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.185963][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.185986][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.193896][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.194303][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.194328][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.295696][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 457.665653][ T5896] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 457.673565][ T5896] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 457.813834][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 457.832598][T17475] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 458.324639][T17133] hsr_slave_0: entered promiscuous mode [ 458.331789][T17133] hsr_slave_1: entered promiscuous mode [ 458.332206][T17133] debugfs: 'hsr0' already exists in 'hsr' [ 458.332223][T17133] Cannot create hsr debugfs directory [ 458.363995][T17474] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 458.398813][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 458.570935][ T30] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 458.683653][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 458.692734][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 458.699076][T17471] lo speed is unknown, defaulting to 1000 [ 458.749697][T17471] lo speed is unknown, defaulting to 1000 [ 458.819603][T17491] netlink: 'syz.4.2886': attribute type 16 has an invalid length. [ 458.819625][T17491] netlink: 'syz.4.2886': attribute type 17 has an invalid length. [ 458.908990][T17491] gretap1: left allmulticast mode [ 458.911997][T17491] macvtap0: left allmulticast mode [ 458.912152][T17491] macvtap1: left allmulticast mode [ 458.981624][ T50] IPVS: stop unused estimator thread 0... [ 459.077079][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.095456][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.099201][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.100716][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.102680][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.107050][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.115317][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.124159][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.133972][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.142955][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 459.404083][T17471] wg2 speed is unknown, defaulting to 1000 [ 459.720917][T17518] batman_adv: batadv0: Adding interface: ip6gretap1 [ 459.720936][T17518] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.720960][T17518] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 459.721480][T17523] hsr0: entered allmulticast mode [ 459.721494][T17523] hsr_slave_0: entered allmulticast mode [ 459.858851][T17523] hsr_slave_0: left promiscuous mode [ 459.862897][T17523] hsr0 (unregistering): left allmulticast mode [ 460.563638][T17540] bridge11: entered allmulticast mode [ 460.686518][T17544] syzkaller0: entered promiscuous mode [ 460.686542][T17544] syzkaller0: entered allmulticast mode [ 460.929861][T17133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.960248][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.962586][T17133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.987384][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.991315][T17133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.021237][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.022053][T17133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.051218][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.171619][T17568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.171637][T17568] IPv6: NLM_F_CREATE should be set when creating new route [ 461.171742][T17568] IPv6: NLM_F_CREATE should be set when creating new route [ 461.199077][T17569] openvswitch: netlink: IPv4 tunnel dst address is zero [ 461.236892][T17568] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 461.355189][T17574] netlink: 'syz.0.2898': attribute type 16 has an invalid length. [ 461.355211][T17574] netlink: 'syz.0.2898': attribute type 17 has an invalid length. [ 461.360823][T17574] vlan0: left promiscuous mode [ 461.851665][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.903053][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.931098][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.931203][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.966412][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.966541][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.993376][ T41] nci: nci_rx_work: unknown MT 0x6 [ 462.007060][ C1] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 462.054281][T17613] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 462.130413][T17613] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 462.802136][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.874934][T17133] veth0_vlan: entered promiscuous mode [ 462.883658][T17133] veth1_vlan: entered promiscuous mode [ 462.929179][T17133] veth0_macvtap: entered promiscuous mode [ 462.940357][T17133] veth1_macvtap: entered promiscuous mode [ 462.961169][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.971924][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.997214][T12922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.997489][T12922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.997522][T12922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.997553][T12922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.823340][T17604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.836534][T17616] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 464.836555][T17616] __nla_validate_parse: 63 callbacks suppressed [ 464.836568][T17616] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2909'. [ 465.006555][T12922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.006575][T12922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.054094][T12922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.054114][T12922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.177484][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 465.408626][T17710] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 465.494488][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2918'. [ 465.517344][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2918'. [ 465.600047][T17714] netlink: 'syz.4.2918': attribute type 16 has an invalid length. [ 465.600069][T17714] netlink: 'syz.4.2918': attribute type 17 has an invalid length. [ 465.723420][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.739220][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.744292][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.744716][T17718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2920'. [ 465.752909][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.760704][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.791918][T17718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2920'. [ 466.209769][T12922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 466.209803][T12922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 466.209827][T12922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.441566][T12922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 466.441600][T12922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 466.441624][T12922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.512449][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 466.531332][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2929'. [ 466.588858][T17751] netlink: 'syz.3.2929': attribute type 16 has an invalid length. [ 466.588880][T17751] netlink: 'syz.3.2929': attribute type 17 has an invalid length. [ 466.708022][T12922] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 466.711317][T12922] team0: Port device netdevsim1 removed [ 466.726486][T12922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 466.726516][T12922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 466.726540][T12922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.766137][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 466.858153][T17765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2932'. [ 466.880409][T17751] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.880837][T17751] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.941045][T17751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.945695][T17751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.090524][T12922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 467.090558][T12922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 467.090582][T12922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.165838][T17716] lo speed is unknown, defaulting to 1000 [ 467.178236][T17716] lo speed is unknown, defaulting to 1000 [ 467.188802][T11779] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.189221][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.189255][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.189284][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.762154][T12922] veth0: left allmulticast mode [ 467.762180][T12922] veth0: left promiscuous mode [ 467.765209][T12922] bridge0: port 2(veth0) entered disabled state [ 467.822183][T12922] batadv2: left allmulticast mode [ 467.822209][T12922] batadv2: left promiscuous mode [ 467.825004][T12922] bridge0: port 1(batadv2) entered disabled state [ 467.845232][ T5627] Bluetooth: hci1: command tx timeout [ 468.048275][T12922] pim6reg: left allmulticast mode [ 468.948607][T12922] bond7 (unregistering): (slave geneve2): Releasing active interface [ 469.038748][T12922] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 469.078901][T12922] bond0 (unregistering): (slave team0): Releasing backup interface [ 469.079352][T12922] team0: left promiscuous mode [ 469.079363][T12922] bond3 (unregistering): left promiscuous mode [ 469.081196][T12922] bond0 (unregistering): Released all slaves [ 469.117661][T12922] bond1 (unregistering): Released all slaves [ 469.131503][T12922] bond2 (unregistering): Released all slaves [ 469.146168][T12922] team0: Port device bond3 removed [ 469.146979][T12922] bond3 (unregistering): Released all slaves [ 469.173178][T12922] bond4 (unregistering): (slave veth7): Releasing backup interface [ 469.188450][T12922] bond4 (unregistering): Released all slaves [ 469.197152][T12922] bond5 (unregistering): Released all slaves [ 469.209027][T12922] bond6 (unregistering): Released all slaves [ 469.217699][T12922] bond7 (unregistering): Released all slaves [ 469.232047][T12922] bond8 (unregistering): Released all slaves [ 469.243844][T12922] bond9 (unregistering): Released all slaves [ 469.259580][T12922] bond10 (unregistering): Released all slaves [ 469.274751][T12922] bond11 (unregistering): (slave veth11): Releasing active interface [ 469.289547][T12922] bond11 (unregistering): Released all slaves [ 469.298694][T12922] bond12 (unregistering): Released all slaves [ 469.319368][T17716] wg2 speed is unknown, defaulting to 1000 [ 469.324613][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 469.787606][T12922] : left promiscuous mode [ 469.877817][T17854] ip_tables: iptables: counters copy to user failed while replacing table [ 469.928364][ T5627] Bluetooth: hci1: command tx timeout [ 469.950448][T17859] __nla_validate_parse: 6 callbacks suppressed [ 469.950598][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 470.011663][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2944'. [ 470.085523][T17868] netlink: 'syz.1.2944': attribute type 16 has an invalid length. [ 470.085537][T17868] netlink: 'syz.1.2944': attribute type 17 has an invalid length. [ 470.148735][T17866] bond9: option arp_validate: invalid value (8192) [ 470.155949][T17866] bond9 (unregistering): Released all slaves [ 470.256994][T12922] tipc: Disabling bearer [ 470.257189][T12922] tipc: Left network mode [ 470.542276][T17868] bridge0: port 1(veth1_to_bridge) entered disabled state [ 470.728329][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 471.010826][T17868] tipc: Resetting bearer [ 471.267479][T16986] lo speed is unknown, defaulting to 1000 [ 471.267522][T16986] syz0: Port: 1 Link DOWN [ 471.426341][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 471.443773][T16986] lo speed is unknown, defaulting to 1000 [ 471.466567][T17891] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 471.467002][T17894] batadv_slave_1: entered promiscuous mode [ 471.474994][T12916] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.475022][T12916] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 471.475045][T12916] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.475065][T12916] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.475098][T12916] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.475120][T12916] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 471.475141][T12916] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.475162][T12916] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.475193][T12916] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.475214][T12916] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 471.475242][T12916] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.475263][T12916] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.475293][T12916] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.475313][T12916] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 471.475335][T12916] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.475355][T12916] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.649354][T17892] batadv_slave_1: left promiscuous mode [ 472.005785][ T5627] Bluetooth: hci1: command tx timeout [ 472.128608][T17925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2954'. [ 472.183889][T17925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2954'. [ 472.382857][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 472.432837][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2955'. [ 472.529756][T17943] netlink: 'syz.3.2955': attribute type 16 has an invalid length. [ 472.529777][T17943] netlink: 'syz.3.2955': attribute type 17 has an invalid length. [ 472.633255][T17716] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.633625][T17716] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.633777][T17716] bridge_slave_0: entered allmulticast mode [ 472.637951][T17716] bridge_slave_0: entered promiscuous mode [ 472.645172][T17716] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.645297][T17716] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.650409][T17716] bridge_slave_1: entered allmulticast mode [ 472.657840][T17716] bridge_slave_1: entered promiscuous mode [ 472.757069][T17716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.768781][T17716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.878276][T17716] team0: Port device team_slave_0 added [ 472.888857][T17716] team0: Port device team_slave_1 added [ 473.008997][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 473.119435][T17716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.119452][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.119472][T17716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.123664][T17716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.123679][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.123701][T17716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.326450][T17967] netlink: 'syz.3.2960': attribute type 4 has an invalid length. [ 473.381806][T17968] netlink: 'syz.3.2960': attribute type 4 has an invalid length. [ 473.429725][T17716] hsr_slave_0: entered promiscuous mode [ 473.430872][T17716] hsr_slave_1: entered promiscuous mode [ 473.433549][T17716] debugfs: 'hsr0' already exists in 'hsr' [ 473.433568][T17716] Cannot create hsr debugfs directory [ 473.508920][T12922] hsr_slave_0: left promiscuous mode [ 473.511418][T12922] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 473.511473][T12922] batman_adv: batadv0: Removing interface: ipvlan2 [ 473.572663][T12922] veth1_vlan: left allmulticast mode [ 473.572700][T12922] veth1_vlan: left promiscuous mode [ 473.572777][T12922] veth0_vlan: left promiscuous mode [ 474.063188][T17995] netlink: 'syz.1.2964': attribute type 1 has an invalid length. [ 474.085210][ T5628] Bluetooth: hci1: command tx timeout [ 474.233935][T17998] xt_CONNSECMARK: invalid mode: 254 [ 474.282399][T17975] vlan0: entered promiscuous mode [ 474.282413][T17975] macvlan0: entered promiscuous mode [ 474.309136][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2964'. [ 474.334085][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 474.393392][T18002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2965'. [ 474.445571][T18005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2965'. [ 474.532284][T17996] bond9: (slave veth7): Enslaving as an active interface with a down link [ 474.620036][T17997] bond9: (slave veth9): Enslaving as an active interface with a down link [ 474.637707][T17998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 474.935359][T18017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2967'. [ 475.021280][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 475.073002][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 475.121897][T18029] netlink: 'syz.1.2969': attribute type 16 has an invalid length. [ 475.121919][T18029] netlink: 'syz.1.2969': attribute type 17 has an invalid length. [ 475.311293][T12922] IPVS: stop unused estimator thread 0... [ 475.324347][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2970'. [ 475.684287][T18046] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 476.118182][T18063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2976'. [ 476.476126][T18076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2977'. [ 476.476899][T18076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2977'. [ 476.498853][T17716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 476.524481][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.530046][T17716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 476.546542][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.551705][T17716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 476.565708][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.570157][T17716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 476.582249][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.869103][T17716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.922444][T17716] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.924557][T18103] netlink: 'syz.4.2981': attribute type 4 has an invalid length. [ 476.942727][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.942813][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.983656][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.983748][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.451511][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 477.567917][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2984'. [ 477.575470][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 477.650841][T18135] netlink: 'syz.3.2984': attribute type 16 has an invalid length. [ 477.650864][T18135] netlink: 'syz.3.2984': attribute type 17 has an invalid length. [ 477.779200][T17716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.898555][T17716] veth0_vlan: entered promiscuous mode [ 477.919456][T17716] veth1_vlan: entered promiscuous mode [ 477.980047][T17716] veth0_macvtap: entered promiscuous mode [ 477.992745][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 477.993229][T17716] veth1_macvtap: entered promiscuous mode [ 478.275158][T18130] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 478.306824][T18130] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 478.976353][T17716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.000638][T17716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.075573][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.075869][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.075897][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.076038][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.392353][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.392373][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.503460][T12922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.503480][T12922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.693717][T18218] netlink: 'syz.0.2995': attribute type 16 has an invalid length. [ 479.693737][T18218] netlink: 'syz.0.2995': attribute type 17 has an invalid length. [ 480.477195][T18207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.619740][T18248] __nla_validate_parse: 5 callbacks suppressed [ 480.619761][T18248] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2999'. [ 480.838546][T18257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3003'. [ 480.866539][T18257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3003'. [ 480.869590][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.876441][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.886153][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.909252][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.913329][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.996234][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 481.727776][T18297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3008'. [ 481.727811][T18297] netlink: 'syz.3.3008': attribute type 7 has an invalid length. [ 481.727823][T18297] netlink: 'syz.3.3008': attribute type 8 has an invalid length. [ 481.727834][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3008'. [ 482.066900][T18309] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 482.182010][T18262] lo speed is unknown, defaulting to 1000 [ 482.196076][T18262] lo speed is unknown, defaulting to 1000 [ 482.513949][T18326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3015'. [ 482.513969][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 482.818550][T18262] wg2 speed is unknown, defaulting to 1000 [ 482.968630][ T5628] Bluetooth: hci4: command tx timeout [ 483.635011][T18359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3022'. [ 484.798466][T18392] wg0: Master is either lo or non-ether device [ 484.874420][T18388] syzkaller0: entered promiscuous mode [ 484.874442][T18388] syzkaller0: entered allmulticast mode [ 485.044898][ T5628] Bluetooth: hci4: command tx timeout [ 485.089003][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.089184][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.089325][T18262] bridge_slave_0: entered allmulticast mode [ 485.093664][T18262] bridge_slave_0: entered promiscuous mode [ 485.127785][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.127895][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.128029][T18262] bridge_slave_1: entered allmulticast mode [ 485.130172][T18262] bridge_slave_1: entered promiscuous mode [ 485.191466][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.194476][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.241029][T18262] team0: Port device team_slave_0 added [ 485.242891][T18262] team0: Port device team_slave_1 added [ 485.275527][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.275544][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.275566][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.279065][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.279078][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.279100][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.349499][T18262] hsr_slave_0: entered promiscuous mode [ 485.351264][T18262] hsr_slave_1: entered promiscuous mode [ 487.124982][ T5628] Bluetooth: hci4: command tx timeout [ 487.539758][T18379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.585631][T18262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.611183][T18262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.612001][T18262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.646892][T18262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.649316][T18262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.683310][T18262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.684224][T18262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.702189][T18262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.854049][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 487.942068][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.967091][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.974887][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.974986][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.986440][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.986545][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.080380][T18262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.472091][T18465] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 488.515544][T18465] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.521713][T18465] bond0: (slave team0): Enslaving as an active interface with an up link [ 489.101809][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.207013][ T5628] Bluetooth: hci4: command tx timeout [ 489.301545][T18490] sctp: [Deprecated]: syz.3.3045 (pid 18490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.301545][T18490] Use struct sctp_sack_info instead [ 489.311370][T18490] sctp: [Deprecated]: syz.3.3045 (pid 18490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.311370][T18490] Use struct sctp_sack_info instead [ 489.356524][T18490] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 489.356543][T18490] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3045'. [ 489.395033][T18490] sctp: [Deprecated]: syz.3.3045 (pid 18490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.395033][T18490] Use struct sctp_sack_info instead [ 489.418490][T18498] sctp: [Deprecated]: syz.3.3045 (pid 18498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.418490][T18498] Use struct sctp_sack_info instead [ 489.446131][T18502] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 489.446150][T18502] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3045'. [ 489.558193][T18501] bond1: entered promiscuous mode [ 489.890405][T18262] veth0_vlan: entered promiscuous mode [ 489.939763][T18262] veth1_vlan: entered promiscuous mode [ 489.956849][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3051'. [ 489.999878][T18262] veth0_macvtap: entered promiscuous mode [ 490.011734][T18262] veth1_macvtap: entered promiscuous mode [ 490.057220][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.080665][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.156863][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.157212][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.157245][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.157277][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.426002][T18544] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 490.427203][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.427220][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.459764][T18541] xt_IDLETIMER: timeout value is too big [ 490.536133][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.536156][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.915031][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 491.333443][T18583] vlan2: entered promiscuous mode [ 491.333468][T18583] bridge0: entered promiscuous mode [ 491.437256][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.514377][T18556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.903321][T18622] syz.1.3069: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.903402][T18622] CPU: 0 UID: 0 PID: 18622 Comm: syz.1.3069 Not tainted syzkaller #0 PREEMPT(full) [ 491.903425][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.903436][T18622] Call Trace: [ 491.903444][T18622] [ 491.903453][T18622] dump_stack_lvl+0xe8/0x150 [ 491.903486][T18622] warn_alloc+0x24d/0x270 [ 491.903507][T18622] ? kasan_save_track+0x4f/0x80 [ 491.903526][T18622] ? kasan_save_track+0x3e/0x80 [ 491.903549][T18622] ? __pfx_warn_alloc+0x10/0x10 [ 491.903565][T18622] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 491.903590][T18622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.903629][T18622] __vmalloc_node_range_noprof+0x127/0x1540 [ 491.903687][T18622] ? rcu_is_watching+0x16/0xb0 [ 491.903715][T18622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.903742][T18622] ? __kmalloc_cache_noprof+0x321/0x600 [ 491.903762][T18622] ? __kmalloc_cache_noprof+0x14d/0x600 [ 491.903779][T18622] ? xskq_create+0x56/0x220 [ 491.903804][T18622] xskq_create+0x148/0x220 [ 491.903826][T18622] ? xsk_init_queue+0x8a/0xe0 [ 491.903847][T18622] xsk_init_queue+0x8a/0xe0 [ 491.903870][T18622] xsk_setsockopt+0x5e0/0x960 [ 491.903893][T18622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 491.903914][T18622] ? __pfx_aa_sk_perm+0x10/0x10 [ 491.903940][T18622] ? aa_sock_opt_perm+0x142/0x1e0 [ 491.903968][T18622] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 491.903989][T18622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 491.904010][T18622] do_sock_setsockopt+0x17c/0x1b0 [ 491.904037][T18622] __x64_sys_setsockopt+0x13d/0x1b0 [ 491.904070][T18622] do_syscall_64+0x166/0x520 [ 491.904093][T18622] ? trace_irq_disable+0x3b/0x140 [ 491.904113][T18622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.904132][T18622] ? clear_bhb_loop+0x70/0xc0 [ 491.904154][T18622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.904173][T18622] RIP: 0033:0x7f4c53f9e159 [ 491.904190][T18622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.904205][T18622] RSP: 002b:00007f4c54dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.904226][T18622] RAX: ffffffffffffffda RBX: 00007f4c54225fa0 RCX: 00007f4c53f9e159 [ 491.904240][T18622] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 491.904251][T18622] RBP: 00007f4c5403506b R08: 0000000000000004 R09: 0000000000000000 [ 491.904261][T18622] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.904273][T18622] R13: 00007f4c54226038 R14: 00007f4c54225fa0 R15: 00007ffdcf5c6688 [ 491.904304][T18622] [ 491.904331][T18622] Mem-Info: [ 491.904341][T18622] active_anon:8587 inactive_anon:0 isolated_anon:0 [ 491.904341][T18622] active_file:2 inactive_file:43460 isolated_file:0 [ 491.904341][T18622] unevictable:0 dirty:165 writeback:0 [ 491.904341][T18622] slab_reclaimable:12099 slab_unreclaimable:108951 [ 491.904341][T18622] mapped:29639 shmem:1505 pagetables:3412 [ 491.904341][T18622] sec_pagetables:0 bounce:0 [ 491.904341][T18622] kernel_misc_reclaimable:0 [ 491.904341][T18622] free:1231068 free_pcp:6292 free_cma:0 [ 491.904390][T18622] Node 0 active_anon:34348kB inactive_anon:0kB active_file:8kB inactive_file:173640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118556kB dirty:656kB writeback:0kB shmem:6020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15000kB pagetables:13480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 491.904437][T18622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 491.904487][T18622] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.904536][T18622] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 491.904572][T18622] Node 0 DMA32 free:969772kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34348kB inactive_anon:0kB active_file:8kB inactive_file:173640kB unevictable:0kB writepending:656kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:25168kB local_pcp:10032kB free_cma:0kB [ 491.904626][T18622] lowmem_reserve[]: 0 0 0 0 0 [ 491.904665][T18622] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.904714][T18622] lowmem_reserve[]: 0 0 0 0 0 [ 491.904749][T18622] Node 1 Normal free:3939140kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.078653][T18622] lowmem_reserve[]: 0 0 0 0 0 [ 492.078696][T18622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.078807][T18622] Node 0 DMA32: 131*4kB (UME) 363*8kB (M) 1089*16kB (UME) 2982*32kB (UM) 1653*64kB (UM) 804*128kB (UME) 354*256kB (UME) 182*512kB (UM) 85*1024kB (UME) 5*2048kB (UE) 85*4096kB (UM) = 954228kB [ 492.078959][T18622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.079050][T18622] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 5*16kB (UM) 3*32kB (UM) 6*64kB (UM) 2*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939140kB [ 492.079201][T18622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.079216][T18622] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 492.079241][T18622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.079256][T18622] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 492.079272][T18622] 45438 total pagecache pages [ 492.079282][T18622] 0 pages in swap cache [ 492.079289][T18622] Free swap = 124996kB [ 492.079296][T18622] Total swap = 124996kB [ 492.079304][T18622] 2097051 pages RAM [ 492.079311][T18622] 0 pages HighMem/MovableOnly [ 492.079317][T18622] 428705 pages reserved [ 492.079324][T18622] 0 pages cma reserved [ 492.343098][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.376492][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.381724][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.447928][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.464309][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.877056][T18647] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3072'. [ 493.013823][T18654] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3073'. [ 493.013844][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3073'. [ 493.093572][T18654] tipc: Enabling of bearer rejected, failed to enable media [ 493.365939][T18638] lo speed is unknown, defaulting to 1000 [ 493.369244][T18638] lo speed is unknown, defaulting to 1000 [ 493.916163][T18638] wg2 speed is unknown, defaulting to 1000 [ 494.490515][T18717] syzkaller0: entered promiscuous mode [ 494.490538][T18717] syzkaller0: entered allmulticast mode [ 494.576127][ T5628] Bluetooth: hci0: command tx timeout [ 494.812658][T18638] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.812825][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.812948][T18638] bridge_slave_0: entered allmulticast mode [ 494.833227][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 494.837467][T18638] bridge_slave_0: entered promiscuous mode [ 494.846464][T18638] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.846560][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.846787][T18638] bridge_slave_1: entered allmulticast mode [ 494.852378][T18638] bridge_slave_1: entered promiscuous mode [ 494.862606][T18741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3087'. [ 494.966873][T18739] netlink: 'syz.2.3088': attribute type 9 has an invalid length. [ 494.973295][T18735] vlan2: entered allmulticast mode [ 494.973313][T18735] veth1_to_bridge: entered allmulticast mode [ 494.991369][T18638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.177386][T18638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.255582][T18638] team0: Port device team_slave_0 added [ 495.271030][T18638] team0: Port device team_slave_1 added [ 495.369775][T18638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.369791][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.369814][T18638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.374508][T18638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.374525][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.374546][T18638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.510626][T18638] hsr_slave_0: entered promiscuous mode [ 495.518685][T18638] hsr_slave_1: entered promiscuous mode [ 495.524594][T18638] debugfs: 'hsr0' already exists in 'hsr' [ 495.524615][T18638] Cannot create hsr debugfs directory [ 495.692948][T18760] netlink: Unknown conntrack attr (0) [ 495.807473][T18771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3094'. [ 495.870239][T18769] syzkaller0: entered promiscuous mode [ 495.870263][T18769] syzkaller0: entered allmulticast mode [ 495.903245][T18769] netlink: 'syz.2.3093': attribute type 11 has an invalid length. [ 496.110681][T18774] syzkaller0: entered promiscuous mode [ 496.110704][T18774] syzkaller0: entered allmulticast mode [ 496.150919][T18779] syzkaller1: entered promiscuous mode [ 496.150941][T18779] syzkaller1: entered allmulticast mode [ 496.251303][T18791] netlink: 'syz.2.3099': attribute type 23 has an invalid length. [ 496.644996][ T5628] Bluetooth: hci0: command tx timeout [ 496.649484][T18638] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 496.671095][T18638] team0: Port device netdevsim1 removed [ 497.381512][T18822] syzkaller0: entered promiscuous mode [ 497.381534][T18822] syzkaller0: entered allmulticast mode [ 497.415498][T18825] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 497.415528][T18825] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3109'. [ 497.415563][T18825] NCSI netlink: No device for ifindex 0 [ 497.502616][T18829] FAULT_INJECTION: forcing a failure. [ 497.502616][T18829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.502648][T18829] CPU: 1 UID: 0 PID: 18829 Comm: syz.3.3111 Not tainted syzkaller #0 PREEMPT(full) [ 497.502674][T18829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.502685][T18829] Call Trace: [ 497.502692][T18829] [ 497.502699][T18829] dump_stack_lvl+0xe8/0x150 [ 497.502732][T18829] should_fail_ex+0x410/0x560 [ 497.502758][T18829] _copy_from_user+0x2d/0xb0 [ 497.502782][T18829] ___sys_sendmsg+0x1c6/0x360 [ 497.502807][T18829] ? __lock_acquire+0x747/0x2de0 [ 497.502832][T18829] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.502890][T18829] ? __fget_files+0x2a/0x420 [ 497.502914][T18829] ? __fget_files+0x3a2/0x420 [ 497.502949][T18829] __x64_sys_sendmsg+0x1b1/0x290 [ 497.502976][T18829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.503028][T18829] do_syscall_64+0x166/0x520 [ 497.503057][T18829] ? trace_irq_disable+0x3b/0x140 [ 497.503075][T18829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503094][T18829] ? clear_bhb_loop+0x70/0xc0 [ 497.503117][T18829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503136][T18829] RIP: 0033:0x7fe757b9e159 [ 497.503152][T18829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.503167][T18829] RSP: 002b:00007fe758b4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.503187][T18829] RAX: ffffffffffffffda RBX: 00007fe757e25fa0 RCX: 00007fe757b9e159 [ 497.503201][T18829] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.503213][T18829] RBP: 00007fe758b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 497.503224][T18829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.503235][T18829] R13: 00007fe757e26038 R14: 00007fe757e25fa0 R15: 00007fff717f59e8 [ 497.503266][T18829] [ 497.543654][T18638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.601704][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.604181][T18638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.647668][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.648526][T18638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.676140][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.676977][T18638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.755505][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.087719][T18638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.167268][T18638] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.214036][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.214154][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.241567][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.241672][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.442670][T18856] lo speed is unknown, defaulting to 1000 [ 498.461368][T18856] lo speed is unknown, defaulting to 1000 [ 498.725103][ T5628] Bluetooth: hci0: command tx timeout [ 498.930352][T18856] wg2 speed is unknown, defaulting to 1000 [ 498.934617][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 498.981550][T18865] vlan0: entered allmulticast mode [ 498.981570][T18865] bond0: entered allmulticast mode [ 498.981582][T18865] ip6gretap0: entered allmulticast mode [ 498.986803][T18865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3116'. [ 499.084229][T18871] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3117'. [ 499.403392][T18638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.520730][T18885] FAULT_INJECTION: forcing a failure. [ 499.520730][T18885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.520760][T18885] CPU: 1 UID: 0 PID: 18885 Comm: syz.1.3123 Not tainted syzkaller #0 PREEMPT(full) [ 499.520780][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.520791][T18885] Call Trace: [ 499.520799][T18885] [ 499.520807][T18885] dump_stack_lvl+0xe8/0x150 [ 499.520838][T18885] should_fail_ex+0x410/0x560 [ 499.520865][T18885] _copy_from_user+0x2d/0xb0 [ 499.520889][T18885] __copy_msghdr+0x390/0x590 [ 499.520919][T18885] ___sys_sendmsg+0x213/0x360 [ 499.520942][T18885] ? __lock_acquire+0x747/0x2de0 [ 499.520966][T18885] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.521025][T18885] ? __fget_files+0x2a/0x420 [ 499.521050][T18885] ? __fget_files+0x3a2/0x420 [ 499.521084][T18885] __x64_sys_sendmsg+0x1b1/0x290 [ 499.521112][T18885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.521158][T18885] do_syscall_64+0x166/0x520 [ 499.521180][T18885] ? trace_irq_disable+0x3b/0x140 [ 499.521198][T18885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.521217][T18885] ? clear_bhb_loop+0x70/0xc0 [ 499.521240][T18885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.521258][T18885] RIP: 0033:0x7f4c53f9e159 [ 499.521275][T18885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.521290][T18885] RSP: 002b:00007f4c54dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.521310][T18885] RAX: ffffffffffffffda RBX: 00007f4c54225fa0 RCX: 00007f4c53f9e159 [ 499.521331][T18885] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 499.521359][T18885] RBP: 00007f4c54dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 499.521370][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.521381][T18885] R13: 00007f4c54226038 R14: 00007f4c54225fa0 R15: 00007ffdcf5c6688 [ 499.521412][T18885] [ 499.630299][T18638] veth0_vlan: entered promiscuous mode [ 499.643797][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 499.643820][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 499.652054][T18887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3121'. [ 499.652074][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 499.668192][T18638] veth1_vlan: entered promiscuous mode [ 499.868083][T18638] veth0_macvtap: entered promiscuous mode [ 499.896791][T18638] veth1_macvtap: entered promiscuous mode [ 499.976677][T18638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.038040][T18638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.246402][T18909] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 500.365010][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.386124][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.386167][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.386198][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.644220][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.644243][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.750603][T12916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.750625][T12916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.807890][ T5627] Bluetooth: hci0: command tx timeout [ 501.001511][T18921] syzkaller0: Caught tx_queue_len zero misconfig [ 501.428258][T18936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.614119][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 501.633795][T18936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.633819][T18936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.668137][T18936] veth1_macvtap: left promiscuous mode [ 501.672366][T18936] veth0_macvtap: left promiscuous mode [ 501.688668][T18936] veth0_macvtap: entered promiscuous mode [ 501.752582][T18936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.753521][T18936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.759861][T18936] veth1_macvtap: entered promiscuous mode [ 501.763334][T18936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.773281][T18936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 501.774126][T18936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.786198][T18936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.794136][T18936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.813605][T18957] Bluetooth: MGMT ver 1.23 [ 501.813635][T18957] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 501.829699][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 501.902680][T18970] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 501.909131][ T62] IPVS: starting estimator thread 0... [ 502.018041][T18974] IPVS: using max 31 ests per chain, 74400 per kthread [ 502.078419][T18936] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.125451][T18983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.168656][T18936] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 502.231526][T18936] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 502.261877][T18936] 8021q: adding VLAN 0 to HW filter on device bond9 [ 502.299078][T18936] 8021q: adding VLAN 0 to HW filter on device eth0 [ 502.335964][T18936] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.370925][T18936] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.393531][T18936] 8021q: adding VLAN 0 to HW filter on device eth3 [ 502.408210][ T10] lo speed is unknown, defaulting to 1000 [ 502.408246][ T10] syz0: Port: 1 Link ACTIVE [ 502.411301][T12922] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 502.411477][T12922] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 502.411734][T12922] bond9: (slave veth7): making interface the new active one [ 502.414554][T12922] bond9: active interface up! [ 502.455216][T18996] openvswitch: netlink: EtherType 2 is less than min 600 [ 502.470036][T12916] bridge0: port 1(veth1_to_bridge) entered blocking state [ 502.470128][T12916] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 502.529440][T18981] syzkaller0: entered promiscuous mode [ 502.529462][T18981] syzkaller0: entered allmulticast mode [ 502.530772][ T10] lo speed is unknown, defaulting to 1000 [ 502.538536][T18996] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 502.539019][T18996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.541450][T18996] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 502.643874][T18998] xt_time: unknown flags 0x4 [ 502.782125][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3143'. [ 502.865725][T19002] ipvlan2: entered allmulticast mode [ 502.865741][T19002] syz_tun: entered allmulticast mode [ 502.886807][ T5627] Bluetooth: hci0: command 0x0405 tx timeout [ 502.962942][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.963162][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.985559][ T5798] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.985751][ T5798] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 503.029903][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.029936][ T50] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.029960][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.029982][ T50] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.031183][T12916] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.031211][T12916] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.031231][T12916] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.031250][T12916] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.031362][T12916] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.031386][T12916] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.031409][T12916] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.031431][T12916] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.031474][T12916] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.031494][T12916] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.031516][T12916] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.031537][T12916] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.097367][T19006] netlink: zone id is out of range [ 503.097382][T19006] netlink: zone id is out of range [ 503.097389][T19006] netlink: zone id is out of range [ 503.097396][T19006] netlink: zone id is out of range [ 503.097402][T19006] netlink: zone id is out of range [ 503.097409][T19006] netlink: zone id is out of range [ 503.097416][T19006] netlink: zone id is out of range [ 503.097423][T19006] netlink: zone id is out of range [ 503.136002][T19012] netlink: 'syz.2.3144': attribute type 10 has an invalid length. [ 503.191965][T19014] block nbd4: Unsupported socket: should be TCP or UNIX. [ 503.202109][T19012] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 503.550007][T19033] netlink: 'syz.1.3151': attribute type 28 has an invalid length. [ 503.860802][ T6137] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 504.363013][T19065] __nla_validate_parse: 2 callbacks suppressed [ 504.363031][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 504.387668][T19087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3163'. [ 504.443472][T19065] syzkaller0: entered promiscuous mode [ 504.443495][T19065] syzkaller0: entered allmulticast mode [ 504.450893][T19077] netlink: 'syz.2.3159': attribute type 5 has an invalid length. [ 504.450912][T19077] netlink: 'syz.2.3159': attribute type 4 has an invalid length. [ 504.474436][T19066] syzkaller0: left promiscuous mode [ 504.474455][T19066] syzkaller0: left allmulticast mode [ 504.496332][T19065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3159'. [ 504.497337][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 504.497374][T19090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3165'. [ 504.883911][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3169'. [ 507.132643][T12922] bridge_slave_1: left allmulticast mode [ 507.132671][T12922] bridge_slave_1: left promiscuous mode [ 507.132867][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.199669][T12922] bridge_slave_0: left allmulticast mode [ 507.199694][T12922] bridge_slave_0: left promiscuous mode [ 507.199907][T12922] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.303301][T19121] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 507.338914][T12922] pim6reg: left allmulticast mode [ 507.365866][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.682343][T12922] bond5 (unregistering): (slave gretap1): Releasing active interface [ 507.785275][T12922] bond0 (unregistering): (slave geneve2): Releasing active interface [ 507.871035][T12922] bond6 (unregistering): (slave bridge7): Releasing active interface [ 507.899499][T12922] bond2 (unregistering): (slave .`): Releasing active interface [ 507.917532][T12922] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.918871][T12922] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.920275][T12922] .` (unregistering): (slave team0): Releasing backup interface [ 507.920893][T12922] .` (unregistering): Released all slaves [ 507.946925][T12922] bond1 (unregistering): Released all slaves [ 507.992309][T12922] bond2 (unregistering): Released all slaves [ 508.031675][T12922] bond0 (unregistering): Released all slaves [ 508.073829][T12922] bond3 (unregistering): (slave veth5): Releasing active interface [ 508.079904][T12922] bond3 (unregistering): Released all slaves [ 508.094297][T12922] bond4 (unregistering): Released all slaves [ 508.115259][T12922] bond5 (unregistering): Released all slaves [ 508.178045][T12922] bond6 (unregistering): Released all slaves [ 508.208168][T12922] bond7 (unregistering): Released all slaves [ 508.222485][T12916] IPVS: starting estimator thread 0... [ 508.262211][T19145] syzkaller0: entered promiscuous mode [ 508.262234][T19145] syzkaller0: entered allmulticast mode [ 508.304956][T19160] IPVS: using max 35 ests per chain, 84000 per kthread [ 508.510973][T12922] : left promiscuous mode [ 508.563245][T19174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3183'. [ 508.563983][T19175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3183'. [ 508.600000][T12922] ovs-s!: left promiscuous mode [ 508.728274][T19182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3183'. [ 508.728383][T19183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3183'. [ 508.774430][T12922] tipc: Disabling bearer [ 508.774563][T12922] tipc: Left network mode [ 509.031226][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.031403][ T5896] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.031437][ T5896] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.031468][ T5896] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.617994][T19224] syzkaller0: entered promiscuous mode [ 509.618017][T19224] syzkaller0: entered allmulticast mode [ 509.919544][T19244] netlink: 'syz.1.3199': attribute type 9 has an invalid length. [ 510.062462][T19243] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3198'. [ 510.621646][T12922] team0 (unregistering): Port device team_slave_1 removed [ 510.641356][T12922] team0 (unregistering): Port device team_slave_0 removed [ 510.739159][T15698] smbdirect: ib_dev[syz2] removed [ 511.131307][T19278] syzkaller0: entered promiscuous mode [ 511.131327][T19278] syzkaller0: entered allmulticast mode [ 511.308425][T12922] IPVS: stop unused estimator thread 0... [ 511.350961][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.415821][T19290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.434234][T19283] net_ratelimit: 8 callbacks suppressed [ 511.434253][T19283] netlink: zone id is out of range [ 511.434261][T19283] netlink: zone id is out of range [ 511.434268][T19283] netlink: zone id is out of range [ 511.434276][T19283] netlink: zone id is out of range [ 511.434283][T19283] netlink: zone id is out of range [ 511.434290][T19283] netlink: zone id is out of range [ 511.434564][T19283] netlink: zone id is out of range [ 511.434582][T19283] netlink: zone id is out of range [ 511.434590][T19283] netlink: zone id is out of range [ 511.434597][T19283] netlink: zone id is out of range [ 511.477476][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.503676][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.885857][T19316] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 511.885875][T19316] netlink: 'syz.0.3220': attribute type 12 has an invalid length. [ 511.885888][T19316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3220'. [ 512.103043][T19318] xt_hashlimit: size too large, truncated to 1048576 [ 512.122109][T19313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3219'. [ 512.161312][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'. [ 512.187999][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3221'. [ 512.387555][T19337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3223'. [ 512.539204][T19337] netlink: 'syz.1.3223': attribute type 21 has an invalid length. [ 512.539225][T19337] netlink: 'syz.1.3223': attribute type 22 has an invalid length. [ 512.539238][T19337] netlink: 'syz.1.3223': attribute type 23 has an invalid length. [ 512.539250][T19337] netlink: 'syz.1.3223': attribute type 25 has an invalid length. [ 512.539261][T19337] netlink: 'syz.1.3223': attribute type 26 has an invalid length. [ 512.539274][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3223'. [ 512.702442][T19341] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3225'. [ 512.702474][T19341] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 512.762798][T19345] syzkaller0: entered promiscuous mode [ 512.762820][T19345] syzkaller0: entered allmulticast mode [ 512.978426][T19359] Cannot find set identified by id 0 to match [ 513.107229][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 513.634713][T19393] netlink: 'syz.2.3238': attribute type 2 has an invalid length. [ 513.634735][T19393] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3238'. [ 513.783062][T19356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.783086][T19356] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 514.428342][T19356] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 514.428365][T19356] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 514.563004][T19356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.563027][T19356] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 514.732162][ T30] hid-generic 0005:046D:0009.0003: item fetching failed at offset 0/1 [ 514.734718][ T30] hid-generic 0005:046D:0009.0003: probe with driver hid-generic failed with error -22 [ 514.783075][T19356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 514.783098][T19356] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 515.006384][T19452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.011426][T19356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 515.011449][T19356] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 515.077476][T19451] __nla_validate_parse: 2 callbacks suppressed [ 515.077498][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3254'. [ 515.122524][T19454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 515.133624][T19451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3254'. [ 515.451003][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 515.536411][T19473] lo speed is unknown, defaulting to 1000 [ 515.538068][T19473] lo speed is unknown, defaulting to 1000 [ 515.857027][T19484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.009089][T19492] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3265'. [ 516.167953][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.682353][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3267'. [ 516.746659][T19508] bridge_slave_1 (unregistering): left allmulticast mode [ 516.746686][T19508] bridge_slave_1 (unregistering): left promiscuous mode [ 516.746773][T19508] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.797204][T19512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3270'. [ 517.159456][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3272'. [ 517.206226][T19518] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 517.214054][T19518] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 517.253478][T19523] netlink: 'syz.1.3273': attribute type 1 has an invalid length. [ 517.253499][T19523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3273'. [ 517.556355][T19533] netlink: 'syz.4.3276': attribute type 2 has an invalid length. [ 517.556380][T19533] netlink: 'syz.4.3276': attribute type 2 has an invalid length. [ 517.719565][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 518.769577][T19564] net_ratelimit: 149 callbacks suppressed [ 518.769599][T19564] ip_tables: iptables: counters copy to user failed while replacing table [ 518.920859][T19576] netlink: 'syz.1.3283': attribute type 6 has an invalid length. [ 518.979179][T19564] bond1: option arp_validate: invalid value (8192) [ 519.116115][T19583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.933871][T19564] bond1 (unregistering): Released all slaves [ 520.130224][T19605] tipc: Enabling of bearer rejected, failed to enable media [ 520.152851][T19612] __nla_validate_parse: 2 callbacks suppressed [ 520.152870][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3288'. [ 520.391572][T19621] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 520.534022][T19621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.649820][T19625] bond1: (slave geneve2): making interface the new active one [ 520.679113][T19625] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 521.001678][T19630] bond2: entered allmulticast mode [ 521.743972][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 526.494806][ C0] sched: DL replenish lagged too much [ 534.728534][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.207553][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.806622][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 669.239087][ T32] INFO: task kworker/u8:11:5896 blocked for more than 146 seconds. [ 669.239124][ T32] Not tainted syzkaller #0 [ 669.239134][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.239143][ T32] task:kworker/u8:11 state:D stack:21544 pid:5896 tgid:5896 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 669.239194][ T32] Workqueue: events_unbound linkwatch_event [ 669.239338][ T32] Call Trace: [ 669.239346][ T32] [ 669.239360][ T32] __schedule+0x17db/0x58f0 [ 669.239422][ T32] ? __pfx___schedule+0x10/0x10 [ 669.239452][ T32] ? schedule+0x90/0x2b0 [ 669.239477][ T32] schedule+0x164/0x2b0 [ 669.239502][ T32] schedule_preempt_disabled+0x13/0x30 [ 669.239535][ T32] __mutex_lock+0x7c1/0x1550 [ 669.239569][ T32] ? __mutex_lock+0x5d4/0x1550 [ 669.239597][ T32] ? linkwatch_event+0xe/0x60 [ 669.239626][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 669.239651][ T32] ? lock_acquire+0x115/0x350 [ 669.239683][ T32] ? rcu_is_watching+0x16/0xb0 [ 669.239708][ T32] ? process_scheduled_works+0x97a/0x1630 [ 669.239736][ T32] linkwatch_event+0xe/0x60 [ 669.239763][ T32] process_scheduled_works+0xc3d/0x1630 [ 669.239820][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.239852][ T32] ? assign_work+0x3cf/0x5d0 [ 669.239883][ T32] worker_thread+0xa47/0xfb0 [ 669.239924][ T32] ? __kthread_parkme+0x71/0x1f0 [ 669.239961][ T32] kthread+0x38b/0x480 [ 669.239981][ T32] ? __pfx_worker_thread+0x10/0x10 [ 669.240005][ T32] ? __pfx_kthread+0x10/0x10 [ 669.240026][ T32] ret_from_fork+0x514/0xb70 [ 669.240049][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 669.240069][ T32] ? __switch_to+0xc89/0x1420 [ 669.240122][ T32] ? __pfx_kthread+0x10/0x10 [ 669.240143][ T32] ret_from_fork_asm+0x1a/0x30 [ 669.240189][ T32] [ 669.240206][ T32] INFO: task kworker/0:13:6137 blocked for more than 146 seconds. [ 669.240221][ T32] Not tainted syzkaller #0 [ 669.240230][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.240240][ T32] task:kworker/0:13 state:D stack:23968 pid:6137 tgid:6137 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 669.240288][ T32] Workqueue: events netdev_work_proc [ 669.240374][ T32] Call Trace: [ 669.240381][ T32] [ 669.240394][ T32] __schedule+0x17db/0x58f0 [ 669.240436][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.240469][ T32] ? __pfx___schedule+0x10/0x10 [ 669.240500][ T32] ? schedule+0x90/0x2b0 [ 669.240525][ T32] schedule+0x164/0x2b0 [ 669.240549][ T32] schedule_preempt_disabled+0x13/0x30 [ 669.240570][ T32] __mutex_lock+0x7c1/0x1550 [ 669.240599][ T32] ? __mutex_lock+0x5d4/0x1550 [ 669.240625][ T32] ? netdev_work_proc+0x209/0x780 [ 669.240655][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 669.240677][ T32] ? kthread+0x38b/0x480 [ 669.240703][ T32] ? netdev_work_proc+0x12b/0x780 [ 669.240734][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 669.240764][ T32] netdev_work_proc+0x209/0x780 [ 669.240795][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 669.240826][ T32] ? rcu_is_watching+0x16/0xb0 [ 669.240851][ T32] ? process_scheduled_works+0x97a/0x1630 [ 669.240877][ T32] process_scheduled_works+0xc3d/0x1630 [ 669.240939][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.240973][ T32] ? assign_work+0x3cf/0x5d0 [ 669.241003][ T32] worker_thread+0xa47/0xfb0 [ 669.241056][ T32] kthread+0x38b/0x480 [ 669.241076][ T32] ? __pfx_worker_thread+0x10/0x10 [ 669.241100][ T32] ? __pfx_kthread+0x10/0x10 [ 669.241128][ T32] ret_from_fork+0x514/0xb70 [ 669.241150][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 669.241169][ T32] ? __switch_to+0xc89/0x1420 [ 669.241197][ T32] ? __pfx_kthread+0x10/0x10 [ 669.241218][ T32] ret_from_fork_asm+0x1a/0x30 [ 669.241263][ T32] [ 669.241285][ T32] INFO: task kworker/u8:24:12922 blocked for more than 146 seconds. [ 669.241299][ T32] Not tainted syzkaller #0 [ 669.241309][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.241317][ T32] task:kworker/u8:24 state:D stack:23232 pid:12922 tgid:12922 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 669.241363][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 669.241438][ T32] Call Trace: [ 669.241445][ T32] [ 669.241457][ T32] __schedule+0x17db/0x58f0 [ 669.241494][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 669.241521][ T32] ? unwind_next_frame+0x8f/0x2550 [ 669.241554][ T32] ? __pfx___schedule+0x10/0x10 [ 669.241585][ T32] ? schedule+0x90/0x2b0 [ 669.241609][ T32] schedule+0x164/0x2b0 [ 669.241641][ T32] schedule_preempt_disabled+0x13/0x30 [ 669.241664][ T32] __mutex_lock+0x7c1/0x1550 [ 669.241698][ T32] ? __mutex_lock+0x5d4/0x1550 [ 669.241734][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 669.241784][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 669.241837][ T32] addrconf_dad_work+0x116/0x15c0 [ 669.241868][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 669.241899][ T32] ? rcu_is_watching+0x16/0xb0 [ 669.241923][ T32] ? process_scheduled_works+0x97a/0x1630 [ 669.241949][ T32] process_scheduled_works+0xc3d/0x1630 [ 669.242006][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.242039][ T32] ? assign_work+0x3cf/0x5d0 [ 669.242069][ T32] worker_thread+0xa47/0xfb0 [ 669.242129][ T32] kthread+0x38b/0x480 [ 669.242149][ T32] ? __pfx_worker_thread+0x10/0x10 [ 669.242173][ T32] ? __pfx_kthread+0x10/0x10 [ 669.242194][ T32] ret_from_fork+0x514/0xb70 [ 669.242217][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 669.242236][ T32] ? __switch_to+0xc89/0x1420 [ 669.242265][ T32] ? __pfx_kthread+0x10/0x10 [ 669.242285][ T32] ret_from_fork_asm+0x1a/0x30 [ 669.242331][ T32] [ 669.242377][ T32] INFO: task syz.3.3297:19639 blocked for more than 146 seconds. [ 669.242392][ T32] Not tainted syzkaller #0 [ 669.242401][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.242410][ T32] task:syz.3.3297 state:D stack:28808 pid:19639 tgid:19633 ppid:17133 task_flags:0x400140 flags:0x00080002 [ 669.242459][ T32] Call Trace: [ 669.242466][ T32] [ 669.242478][ T32] __schedule+0x17db/0x58f0 [ 669.242515][ T32] ? unwind_get_return_address+0x4d/0x90 [ 669.242538][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.242568][ T32] ? __pfx___schedule+0x10/0x10 [ 669.242600][ T32] ? schedule+0x90/0x2b0 [ 669.242625][ T32] schedule+0x164/0x2b0 [ 669.242648][ T32] schedule_preempt_disabled+0x13/0x30 [ 669.242669][ T32] __mutex_lock+0x7c1/0x1550 [ 669.242691][ T32] ? __se_sys_ioctl+0x47/0x170 [ 669.242717][ T32] ? __mutex_lock+0x5d4/0x1550 [ 669.242745][ T32] ? addrconf_del_ifaddr+0x10b/0x180 [ 669.242767][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 669.242812][ T32] addrconf_del_ifaddr+0x10b/0x180 [ 669.242832][ T32] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 669.242853][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 669.242885][ T32] inet6_ioctl+0x11c/0x2e0 [ 669.242948][ T32] ? __pfx_inet6_ioctl+0x10/0x10 [ 669.242974][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 669.243037][ T32] ? do_vfs_ioctl+0x116f/0x1530 [ 669.243061][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 669.243089][ T32] sock_do_ioctl+0x101/0x320 [ 669.243119][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 669.243136][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 669.243205][ T32] sock_ioctl+0x57a/0x7e0 [ 669.243236][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 669.243265][ T32] ? __fget_files+0x2a/0x420 [ 669.243289][ T32] ? __fget_files+0x3a2/0x420 [ 669.243314][ T32] ? __fget_files+0x2a/0x420 [ 669.243343][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 669.243371][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 669.243398][ T32] __se_sys_ioctl+0xfc/0x170 [ 669.243422][ T32] do_syscall_64+0x166/0x520 [ 669.243445][ T32] ? trace_irq_disable+0x3b/0x140 [ 669.243465][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.243486][ T32] ? clear_bhb_loop+0x70/0xc0 [ 669.243510][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.243530][ T32] RIP: 0033:0x7fe757b9e159 [ 669.243548][ T32] RSP: 002b:00007fe758b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.243568][ T32] RAX: ffffffffffffffda RBX: 00007fe757e26090 RCX: 00007fe757b9e159 [ 669.243583][ T32] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003