last executing test programs: 2m39.587544866s ago: executing program 1 (id=2147): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x9, 0x7, {{0x29, 0x4, 0x0, 0x2, 0xa4, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x3, [{@broadcast, 0x7e0f6533}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x9}]}, @lsrr={0x83, 0x1f, 0xf5, [@broadcast, @broadcast, @multicast1, @loopback, @multicast2, @loopback, @multicast2]}, @cipso={0x86, 0x28, 0x3, [{0x0, 0x12, "b3af97d98aa5fb07de40c3cd2d18afb6"}, {0x7, 0x10, "6e5d62d08f75863ef953beb42398"}]}, @rr={0x7, 0xf, 0xb2, [@remote, @remote, @rand_addr=0x64010101]}, @noop, @timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x0, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@bridge_delvlan={0x50, 0x71, 0x800, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r0}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x6220c0, 0x0) write$rfkill(r2, &(0x7f00000000c0)={0x2, 0x8, 0x3, 0x1, 0x1}, 0x8) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x5, 0xfffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000) 2m39.303031513s ago: executing program 1 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000200)="7a7fa22c2a7588df53ef2a2d280fb983d1fcf4ebcc61a9c1f19bfc40e6daafc055df", 0x0, 0x9fc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x2c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000400000000002cb29625ab0001006774700020000280050005000000000000e6ff000000000000000000010000000000000042c3b7104536322b6cd5ff4879cf48dac5907e729754d6940d488a139190d0e7c25d4fc93e5a68536eb66df40c35a772059b6dec8347db986f47cedaeed240e577ec9db1931a440ad76b7e96735cf849c8"], 0x4c}}, 0x40) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ccfbf0e7d5a8242b6f51f0bb30906ae779217d8781e24a82f0cb9d34888a6a6ee598775b5975e27f25b49284a2c4a396156efdd906fff59408eb969e8", @ANYRES16=r7, @ANYRESOCT=r7], 0x6c}}, 0x20004150) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000380), &(0x7f00000000c0)=r10}, 0x20) socket$packet(0x11, 0x2, 0x300) 2m39.126745289s ago: executing program 1 (id=2155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa8, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_INIT={0xfffffffffffffdfa, 0x2, {0x3, 0x1, 0x2}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xef1, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa356, 0x3d}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4e, 0xd}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) (async, rerun: 32) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2m38.684811944s ago: executing program 1 (id=2159): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='/*^(\\]}*,@,%-!+{\x00', 0x2000, &(0x7f00000000c0)={@align=0xcc, {0x1, 0x8471, 0x5d6d, 0x8}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)=0x6}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7, 0x9, [0xffff, 0x8, 0x3, 0xd, 0x6, 0x8, 0x8001, 0xdc, 0xb5]}, &(0x7f0000000200)=0x1a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x8000}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x1c) r4 = gettid() sendmsg$netlink(r1, &(0x7f0000000500)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000340)={0x134, 0x37, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x111, 0x136, 0x0, 0x1, [@typed={0x15, 0x42, 0x0, 0x0, @str='/*^(\\]}*,@,%-!+{\x00'}, @generic="0bdf5802b03f6e0b8380d88692050b6398c9091d1580c026e1a9dc5a38800bd47a22ff24b3ca097a2e11cf7e7173a0d129d67b407e6b32042eda3940699a8647564a1ebdf23266d0af078587ac63a5990b4de43dc5b7a321bc9331b737c83759bd92916a7e3b04bb5dfc6b48a4130a3009cde9076bdc1ac4a4bde856d72eb44450ba6de1eb176a218eefa3dc75ee74d82c037bf731039d61a2a4f255e72d7a4bf13637dfb9824257a40fdedcfe2335028601a4c70c58c26b6f2e2fed30793e53437a8fb95fc438754bf78ba4526b6f2be83f40dc72a6694a833306d48c6c5339e7710ba456f4d3b6a86b1ab3f8c8a6", @nested={0x4, 0x112}, @generic="21bc"]}, @nested={0x8, 0xe2, 0x0, 0x1, [@nested={0x4, 0x8c}]}, @typed={0x8, 0xac, 0x0, 0x0, @pid=r4}]}, 0x134}], 0x1, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x8001}, 0x20000800) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000540)=0x10) write$nbd(r1, &(0x7f0000000580)={0x67446698, 0x0, 0x4, 0x0, 0x4, "b360e4dff85730bdf6ce8317dfcde974cc8553011052c3da5a5d40cdd9ac056653b647ca5e13a4ec2b77520327383e1a87f28b83284d90fc13f3466e288714c3a607e2d91e97292f8102f9a26f009ee0a2a15741950c1b57a8e2f257c9bd53b483a381b69ee2afa5afc0dc870575a316726b747eeda457be247973bffa83416b03f829a7b193d7546f53aeafa4cd85fe2d34da4262033bd0acd1dd71325ca4ba9ff71bcda8d75bf24e330c7e"}, 0xbc) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c) getpid() getpeername$netlink(r1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x61ea13277ebc975b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x2804c010) socket(0x1d, 0x6, 0x401) connect$inet6(r3, &(0x7f0000000840)={0xa, 0x4e24, 0xbf93, @local, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) recvmmsg$unix(r6, &(0x7f00000013c0)=[{{&(0x7f00000008c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000000a40)=""/237, 0xed}], 0x2, &(0x7f0000000b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)=""/129, 0x81}, {&(0x7f0000000d00)=""/134, 0x86}, {&(0x7f0000000dc0)=""/128, 0x80}], 0x3, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000001300)=[{&(0x7f0000000f40)=""/198, 0xc6}, {&(0x7f0000001040)=""/44, 0x2c}, {&(0x7f0000001080)=""/115, 0x73}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/35, 0x23}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/85, 0x55}], 0x7, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x3, 0x12062, &(0x7f0000001480)) r15 = openat$cgroup_procs(r12, &(0x7f00000014c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r15, &(0x7f0000001500)=r14, 0x12) sendmsg$AUDIT_SET(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x2, r11, 0xed1, 0x10001, 0xb, 0x7900, 0x0, 0x6, 0x6}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000c1) sendto$l2tp6(r13, &(0x7f0000001640)="d828071820c7b847fbedf34f042f87e989314bc88a0814404b22c77ef228fae4142fd921a7634b6f14732237dcf3fc19bbc47024587ce6d0231c24fa4b604e006aa05b221cf8965654b6bd0d2ea56907c131b64f0d01362d3c19fd1b602af67c7a31c96c0b6d18e23da64ca963514440dec90c2621dca40924c16691e43d232a20b894ef84be6aff23b0a63d6c211cccd5befeb1f859e1ac2bcb36f055f26e82dbd42b9649dbef023d4e71566be900f35fbf90cc9ae4fd832cacb557ab3f9b623c32d08f37150271bb3f", 0xca, 0x4000, &(0x7f0000001740)={0xa, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x20) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001780)) sendmsg$nl_route(r10, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@getneigh={0x14, 0x1e, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x48055) openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x4000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$unix(r9, &(0x7f0000001ac0)={&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)="e33c1b0e073591299e1aed8ebf4678e5d5ebfc7467649da9c099b79c9cae45fe13140ed237972a27b0af", 0x2a}, {&(0x7f00000019c0)="83813fcfb7cbf14459bd8531981608373cdf5abe81cc29126eb1385b6e682148927fd66ff3d225700efd91343d9c49b922ff6fd8057239189b7a0ca6dd19714f10e8db75f1dae50c10e24f9f5c59d812575ca2274cb3c8097e33a077cd194085bc8c1ca0ce0546a5d9f7bd", 0x6b}], 0x2, &(0x7f0000001a80)=[@rights={{0x20, 0x1, 0x1, [r8, r9, r13, r7]}}], 0x20, 0x10}, 0x20000000) 2m38.444374276s ago: executing program 1 (id=2161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x91) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be", @ANYRES32], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2m38.217300849s ago: executing program 1 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) 2m23.151481613s ago: executing program 32 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) 1m35.6760456s ago: executing program 4 (id=2691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014fd068008001240000000030500150000000000050001000600000005003c000000000005000400000000000900020073797a300000000011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) 1m35.408951839s ago: executing program 4 (id=2693): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000e, 0x40010, 0xffffffffffffffff, 0x78135000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a000000004e110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) 1m35.323345646s ago: executing program 4 (id=2694): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x38, 0x80, 0xfe, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x20008004) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e74657200"], 0x15c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={0x0, 0x0, 0x29, 0x0, 0x9}, 0x28) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f00000002c0)) (async) r9 = socket$packet(0x11, 0x3, 0x300) (async) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8, 0x1, {0x1, 0xff}, 0xfd}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfbc9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1m33.208930289s ago: executing program 4 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x800}, 0x10}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000000000001200000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) close(0x3) r8 = socket(0x2, 0x80805, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async, rerun: 64) sendmmsg$inet_sctp(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f00000001c0)=0x8000400, 0x4) (async, rerun: 64) sendmsg$inet6(r9, &(0x7f0000000080)={&(0x7f0000000480)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x18}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="28000000d44a000029000000390000003b02020400000000fe8000000000000000000000000000bb"], 0x28}, 0x40000c4) (async, rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x250400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x56}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x151) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="5fa301747df64cfde4ac4d717d777f0f94e70a685e7e112441bebccad42d3abba1f1212a5b4a163e350c1a3aef2e81898b0ce051df130773fc1809216950a877ea742cee3e2a0dff1e4bea3f105d2c1341ddc63f9b6e6f921e34b1aa4925bc74f869bfd7f8423724e890d63169b584c9c60eb069ed901a2c5b", @ANYRES64=0x0], 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='ipoib\x00', 0x800, &(0x7f0000000080)={@align=0x64a2, {0x80, 0x1000, 0x8, 0x10001}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bind$xdp(r12, &(0x7f0000000280)={0x2c, 0x8, r13, 0x18, r14}, 0xeb4e74dbbec9d228) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0xfffffffa, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20044000) 1m32.892221653s ago: executing program 4 (id=2700): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000200)="0883e026e9e0e86fe3d37f50451edd912e70248ea27ce26ebfeefacf41bdde94e2c6554b279c", 0x26}], 0x2}}], 0x1, 0x9200000004000080) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0xfffffe59) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) syz_emit_ethernet(0x48, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x10}}, 0xc050) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000200)="0883e026e9e0e86fe3d37f50451edd912e70248ea27ce26ebfeefacf41bdde94e2c6554b279c", 0x26}], 0x2}}], 0x1, 0x9200000004000080) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0xfffffe59) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) (async) syz_emit_ethernet(0x48, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x10}}, 0xc050) (async) 1m32.560738446s ago: executing program 4 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'batadv0\x00', @random="f16ad8c4345b"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'batadv0\x00', @random="f16ad8c4345b"}) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 1m17.465947627s ago: executing program 33 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'batadv0\x00', @random="f16ad8c4345b"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'batadv0\x00', @random="f16ad8c4345b"}) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 31.008939303s ago: executing program 3 (id=2984): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="000000e3b697f700914788000100000000000000001ab74fa0cf5786451bac671589b3fc4ddcdf0cc7", 0x29, 0x20000000, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x7, 0x6, @remote}, 0x14) unshare(0x20000400) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000000, &(0x7f0000007380)) 26.739094708s ago: executing program 3 (id=2993): r0 = socket(0x2, 0xa, 0x300) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000400)={0x200, 0x6, 0x40, 0xfffffff9}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10) (async) r2 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0xffffffffffffff12, 0x800) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="66a53240a6482a2b5a6b0b27da2f2da54468901fcc7c53189c98c27a78323224c19971165f102b7522d49bfbdd3c9a8862e56870ce3a49bde821"}], 0x33, 0x6) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x3d, 0x4b, &(0x7f0000000140)="36ff6239b8228160989b626f5cba31b4530e7b2c9afb351415530c0d4ce84dca76b52408688da2af1e375899c5c39dcdde96858cc4836cd0287c4437e0", &(0x7f00000001c0)=""/75, 0x200, 0x0, 0xc0, 0x45, &(0x7f0000000240)="408e1eb0b0461aa7e1735fe46c64c0f5913027081b9a2865ad74c8e39058aad79f810a57cb6a67a4c51edaf4b8925a91a7079ed0baee609a07132ad9f3092537538eaa88f7274093c11b5d9e7e107d026438272f477965ce57e7827d2640870d4da243022dddc8b24a1d222ac9d78baa2a74e3947b7521045864eec9e0556937c160ed5c211f5fb8805778f6a2a893b34aa7fae2a6a722122a10b8f9cb5df87a195e703635251e40d25cb1a0db9140b04a1636b84325aa3df7e0cd261fd32375", &(0x7f0000000300)="7873ed41ecc6b87b2e3b39ec618723b2bec4ec6902fd875917d46818a2246dbb984d205575845854073a47631dd4f10ed2fdc0ed8f16f5290db131de388746659448c1e004", 0x3, 0x0, 0x9}, 0x50) 26.449678206s ago: executing program 3 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x94, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0xffffffffffffffff}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x94}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@generic={0x21, "91bea74626c8da8872605dde726e404fc559099ff8c4093f9d2765b54ffe87ab5bba3fe6bb37ef0dfe59b366c326e20bdb08d4340ee45a55b4d34b17fb7e20c332c8f94ff7e4e26a6019e090fe39006ef4c55f6e639694007a5c5b366db2f506928228e8a35f66882541d0192dc6ba0fcef0fa3aa0bf1c44b8ab2c5dca7b"}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0xfd4f, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x85}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x7, 0x8000, 0x8, 0x7, 0x1, 0x8, 0x9, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r7, 0x36}, 0x8) 26.304250546s ago: executing program 6 (id=2998): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x26, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 25.933103269s ago: executing program 6 (id=3001): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0xefcf}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r5, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r8, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x40001) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xec, r5, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xce}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$nl_generic(r4, &(0x7f0000002e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000001b00)={0x1288, 0x37, 0xa, 0x70bd26, 0x25dfdbff, {0x1a}, [@nested={0xfb, 0x156, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r2}, @generic="008a4e7b5a83babdd8c4e63b50c3808a2e754010c775fa54ed65813489a934743fcf4005ec3849d13cc91a93afec6691a6b9f1ee38b24d3a03f4c2ab0f0b0454e476f5f764061ad9eb8fc447394764e2c72ad06e2160d3b11b349b9cf460c4fff8ef539e1ad0434c3dca64c4cec4158239229e702a7be742e9490a8c66a750e4fbd9bb67b07002073d15dc0d92fb02bd38b4ca7286ebb0985ab064da77a0a79b3d0d991e0cd2aa25357b2ebb9fb18a45267d88503448e77c0be5beae0aed67343a430541a0b603432e3c1fdf9b4484", @typed={0x8, 0x100, 0x0, 0x0, @uid=0xee00}, @typed={0xb, 0x46, 0x0, 0x0, @str='r)#(.@\x00'}, @nested={0x4, 0xf}]}, @generic="c0b53bfcef7f0a768cd37b81aa134ae1fd149356c24a1d4f098e927d687a2a49a339d2d9670a2e9b1f662282d19236a51d96a127acc1b58739f8128659b166bc42b594be56e750446cdd827bae8255124a8e185ed3d4d125b1f6349dbf5e9f0e6649ac865ed98d1b674af454fa18ab1ab3cf1354da4f373b447d5d71", @typed={0x4, 0x39}, @nested={0x1039, 0x11c, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @u32=0x9}, @generic="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", @nested={0x4, 0xe6}, @generic="5e2514fb034e6ac20fd929985443c369bdeeca414a0e7acc4ac747f6eeb6a295573a9bd0a027672ac3"]}, @generic="82829584fa7ef1d6fda8b426fbdfb8945e905932349f5722c5dccc16c8fad3f238461f52a99758deb2a00ace6124f439f7043e01501ba2140479dcb7ad48e9a13e85a95823f8c24680a800c63dfd63c1580143092c0767f820e06f43f1954d7f35435dd31b58861fb2693313b6bf3af74f33ac856a8efd4dfa49f3950f34ec3b792e87a41c2f07d2f327adb0a79a32d20bcb7c8e4810b9a9628dd8cabcff8d240d06c22dcf6be9b8348ec4c2f3c7bc2214439812ba11497b9c07"]}, 0x1288}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80000000, @local, 0x7fffffff}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x1, @private1, 0x742}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r10, 0x4) 24.297680412s ago: executing program 6 (id=3003): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c000280050003000100007d0800024000000009080001400000000f14000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80880000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0xe0b, 0xfffffffc, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x2, 0xa00, 0x100, 0x987, 0x200ff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x662, 0x20000, 0x0, 0x82e2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x572ebfd7, 0xde88}}]}}}]}, 0x6c}}, 0x4000080) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) 23.392988366s ago: executing program 3 (id=3004): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x40004) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @multicast}, &(0x7f00000000c0)=0x80) sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x594, 0x30, 0x10, 0x9a9, 0x25dfdbff, {0x6}, [@typed={0x4, 0xa4}, @nested={0x10, 0x33, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x85}]}, @nested={0x238, 0x72, 0x0, 0x1, [@typed={0x14, 0x127, 0x0, 0x0, @ipv6=@local}, @typed={0xf5, 0x2, 0x0, 0x0, @binary="6d628722f0fba0bf84746c8e4eb67268e0c758292bb415fc62e18d3b0bfa8842d2f31a46f6c28d73d4bbbd65183ecba9ee031a1b7d44296b10fa4db041185bed5f2f754831ec4e2f7cc109ff1b4b6531a1ab84a39920871515f8e7cdc8bd00ac38a7550066bdd6d561704a19a22fdb60ed575132cc6387a168501b28478b5afa354260b03f850523f2d35567c1a163d628852c975efc3625dbc2831ad4a16cc3aacc75422d86839528657de936632dca264d7b3ec86ca2f36602dfe2cf76c1be39167b2cdef96e59b36422e76aa92eb343cf2f488516be11a8ac55d61290451377a848b1e8b8599fa4dde8199a9d31f823"}, @nested={0x4, 0x66}, @generic="75661148ee4fabba281e19603029e5c6e092313109907f09acda23ac", @nested={0x4, 0x99}, @generic="a60a696067775d28ee30b108f799f9cf20adea363fcf2f6b1f33bfc31b568b181a173e154ab8c8affc8d7b6e78420ad57703f650aee1f08df14ebdfe20d8b12bd5b14828ff13dcb79b1dadc29dd13c4f42a264ba7e0e0d6ea0a5c4fc3ef8053d12318226161c1fb72db296a70667b43cc31ac5440e9ecd232d7aed6cbb0d360097216846545019e66b1df327027d0a6fd72edce5cc27587f06f0ee5a382557a4600505b0e72ff01a367a79978c031f5f992279d32cef75df78c992f5096bb790da6db33e708e65d31882b5041a6e72a5355efece30903f3faaa718bbd05a9fcbd25dfafd7bf51fca", @nested={0x4, 0x149}, @nested={0x4, 0x9}, @typed={0x14, 0x101, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="e64267ba7d8265eaaeac493758a19ede0f6cff7d769e81d0c66ad5d5dec0f109877ac5383bb4686e8102e7fdc6f97c3d58ca4f79d996058a53304a3a2cd23a6da7a4636ef6d66a2a6fd96a28b61007f930a67ed6fc5236dab19f11ac8010602b7161f76e48096de6aa73a0a721b2196d64c549e8a7be55394273d43a83ca37add0c8be47bb0ef0bccc8d3d41a5ace6d0c4852e17998be0206f4109827fb1b29e9648656026b4f63d284ecffe4da48336c2a7a56b8aebac05548b160fdd0d2454843a29809d15e96940e733ee50d19f705cab", @nested={0x1e1, 0x12d, 0x0, 0x1, [@typed={0x14, 0x45, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x23, 0x0, 0x0, @fd=r0}, @generic="44691cd763ce46d155ab8e80159756a9638bb640d9f6da00eef08e5d91e49c6c1e854e2aacfa85d211c665ee2c8bee89ee350ee9d7d0680df6694444e8772ddd0aa916d9f1bebdb94dbb273202", @nested={0x4, 0xb0}, @generic="1ec59adb77d004228531b5e367e64d0568716a9a74bb6837982b786987acb036f706fb6218ece2b1f72a1d64b5732bd835afa3f64194acecafa0e8f5f8c8d12472a90d698f2b0f7df4ef89347f043c25082b85e56b800288bcc3e320bc5e827fdde2a8d4d05436b389689dfc07b54439ad1827f2c1472446dea545bccb8e7a9a8480065d68eab1f8c0a8ce4c4178a2657904d2206be21df64432678fbc5ba51b7425089ce0788d379a7daafe3fb3c70b8fcfbfc09b2eb9fbfaf745170cb760bb7fa702cb9c7117d631ec9ed8", @generic="2d303905aa9f6cc7bd502187a6f801c83090fb7693babec3480736a07f1e934d2e8442bbe0e584699dfa6d767a62808f74321aacc415a184d415e65f873ec2895e3209734725af28a5c0644022e3e45dec863838d46f4a992829a2b2f22ebfe7649f6587fd4916b2dc2e3482e8b32f4cc1debf03d3417bc07f261d478d5967bea78e9c18e7d4b7e12085ee1f30b25501", @typed={0x14, 0x12d, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x79, 0x6, 0x0, 0x1, [@generic="038ee75b9ac6fbcbee7d8b750e7b1349898a404d949aa9905edf906d547b58112d469973132aee61cea8e2c8aff41c815a11b14e576bdfc631bbd03f52a4aa3db3b894234bd6ab0cc6204e7c7f418d5575a5e8e8eaff8ac2e875a1484a", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xfd}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x1}, 0xc800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x200000000000, 0x100000000}) 23.270520448s ago: executing program 6 (id=3006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000005440)={r3, 0x1, 0x59, 0x1, 0x3, 0xf000, 0x29, 0x8, {r3, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x6, 0xffffffff, 0x80, 0xe6b}}, &(0x7f0000005500)=0xb0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x2, 0x0, 0x1d}, 0x12000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r7) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/uts\x00') r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x1402, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x24040880) (async) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x8, 0xef5b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r12, 0x0, 0x4800) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) socket$kcm(0x2, 0xa, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) 23.112619806s ago: executing program 3 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601080000000000000000070000000900020073797a310000000005000100070000002c00078005000180"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r4, 0x201, 0x70bd24, 0x25dfdbf8, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4040000) listen(r1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write(r7, &(0x7f0000000000)="f1002000", 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r7, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="f3450000000000000000000008000000850000007b1c0000950000000000e30200"/47], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r10, @ANYBLOB="f69f900524734f21add45f6461ded795b13739b5805c8ef3fdfcf1359bafbd512c8ac35fbbb1ab9b020de58295c5ae601a48a74c57665ebecbaf7a653a84bcce348f4ea19b095427211876717a9480a3ee386bb2432317f6bbe1d5995b246cb713bf7e124c5c91372efe5cbf33acb229bc72ff7051126f5e06db58a7eee3c8a458a73cc14840a8826345e14f7b", @ANYRESDEC=r10], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0x4050) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x17}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x40000010) 22.926874449s ago: executing program 6 (id=3010): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f00000005c0)=@dstopts={0x2c, 0x0, '\x00', [@ra]}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c050400"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0) 22.814231546s ago: executing program 0 (id=3011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080430900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200890000002c000180090001007866726d000000001c000280fffffffffffffffc080004400000000308000240000000010900010073797a30"], 0x100}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2a, 0x26, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="050003"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xeba5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000640)=""/23, 0x41100, 0x19, '\x00', r7, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x9, 0x7, 0x8}, 0x10, r1, r3, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, {[@window={0x3, 0x3}]}}}}}}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0200000000000000000000000000000000005407c8e6723df0f800000000000000000500000000000000000002000020080000000000000000000090fd7b44d3f0f2f4c13dda40be390bbecde5d8fc0d449a8ce9448bdc82d1be17c17183c3a7f73fd9d89df9be4320766f0f41eb7b44d2b522f029d035ee1179", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 22.487818221s ago: executing program 3 (id=3013): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000400002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e4b603000001000000850700002f0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x50) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000000308000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000cb000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005e03000085000000d2000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x0, 0x0, 0x5, 0x7fff, 0x7]}, &(0x7f0000000200)=0x54) 22.421577452s ago: executing program 5 (id=3014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd00001100000800000060ec970000382c00fe8000000000000000000000000000aaff02000000000000000000aa000000013a0000000000005e489ef9fdb878826a61cbe71ffe0a5600030090780800000060aabc2b0002842325c9319ef80a74000000000000003d2c2a2bc56ace7303492cd921f51700aafc0200"/141], 0xfdef) 22.082515098s ago: executing program 0 (id=3015): r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21.897057461s ago: executing program 5 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x2408c855}, 0x400c040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r7, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x18103, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0x7, 0xc}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x24, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000076630a21d4c3a5a636fa934f5188511ad56d2a1873d211956c4b9786f5b63e396599128deacb406cdfcb91b24331d921a4d2b0b5e1bab22b3a96fab1f2b3697d262e6a5a630d4a269c86fa3c744331a3606b20a2fcd1fd84b1777c539903cd7ac7917ce7a8a3aab1e44ae205060e7a6b1e8a0ec74a80f3f2ff9b05a52c2990fb123aff02b9d9f278d7718c5b6c493ded016ecc1a010ebc57e3192ccb02becd8671b715beffdacc25d50f5b487ce43f87250765e7e9009cdad4dde9bf634d9a8423e36713e5010400009502ca887a419900"/251], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@delqdisc={0xfc, 0x25, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {0xc, 0xfff3}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x18, 0x6, 0x3, 0xffff0001, 0x1, 0x2b96, 0x400, 0x2}}, {0x8, 0x2, [0x4, 0x2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x1, 0x1, 0x0, 0x9, 0x7, 0x7}}, {0x12, 0x2, [0x0, 0x1000, 0x499, 0xdd, 0x1, 0xbf, 0x9]}}, {{0x1c, 0x1, {0x7, 0xb, 0xb, 0x5, 0x2, 0xccb, 0x200, 0x2}}, {0x8, 0x2, [0x9, 0x5]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "77cb34f43b0b2de176f1ada3a8f4b2f2"}}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x8c0) socket$packet(0x11, 0x3, 0x300) 21.74091012s ago: executing program 0 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x27, "5c76276f6c86622447099377e66e2ebe9d615061f3ca96d04070448e9da4558e5466a5baa878f2"}}) r2 = socket(0xa, 0x2, 0x0) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x7, 0x7fffffff, 0x40, @rand_addr=' \x01\x00', @mcast1, 0x8008, 0x0, 0x401, 0x5}}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x4, r6, 0x4300, 0x1000000}}, 0x20}, 0x1, 0x1000000, 0x0, 0x20000054}, 0x24028044) 21.419458614s ago: executing program 6 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200210a0500140003006e657464657673696d3000000000000084001680800001807c000c801400010001000000010000810000001400010009000000a00c0000ff00000088a800001400010003000000ff0d00000800000088a800001400010007000000200d00000500000088a80000140001000200000076070000070000008100000014000100010000001c090000b0a90000811a000014001400776c616e31000000000000000000000008001300b233dd4a692c312645d4ecc4cd33cea28456d842f70de207e58ce62361e2c7920cd59f41340d31ffd7c71fe2a60981e643755931542428", @ANYRES32=r3, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0xc1}, 0x4c814) 21.121793902s ago: executing program 2 (id=2883): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000314a001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r1, 0x3, {0x3, 0x1}, 0xfc}, 0x18, &(0x7f0000000240)={&(0x7f00000000c0)="e763251aedbb0e00969779c4256f9a748a50a7b8acf14f6c85d5e045e2617391481cbaaf", 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=r1, @ANYBLOB="560609000000000050001980140005004aa0a26cd54dd00216059b4ae508fd03b6cbd87341fd4d6c09000200626f6e64000000001400040013d48dc4a48a8c923281a20249666aa405000200000000000600020039000000"], 0x70}, 0x1, 0x0, 0x0, 0x690}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) 20.621323373s ago: executing program 0 (id=3019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000003c863216adb55a71283d5872872339d189590061125000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 20.614488177s ago: executing program 5 (id=3020): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295"], 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0xc080}, 0x4004) (async) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44012}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4044010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000480)={{[0x5, 0x8, 0x2, 0xf]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000400)=[{{@align=0x8, {0x0, 0x9, 0x8, 0xa}}, 0x9eec, 0x0, 'veth0_to_batadv\x00'}, {{@_ha_fsid={[0xfffffff7, 0xfff]}, {0xff, 0x2, 0xffffff81, 0x5b}}, 0x1, 0x0, 'hsr0\x00'}]}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xff57, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d4}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000001740)={0x148, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004844}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r10}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000000000)="b1990c83d742104e5e93ffdb75115c92297af520111eebbbe398e66636b71cc3ce0543c2c68fe4e674163c5dc97c7019ff0e8dcfc563d605cce7cf311ccf2ca3890c6dc14a61de0d0b6152662e2c92abe995d5d06b1a5598e80877d7c8bcf2c14b78a67da49fe10fd94a58ac6c410a8fb8f8648bb3df9e6963264d00f096b860af1ba7b8e8330dbcecdb7ac572414844ddfb5b5a557c16fcd2ed6361d3a6691772acfba46827671033ed400100e521", &(0x7f0000001200)=""/214, &(0x7f0000001300)="17f7f3ce2b82e331496da37f261bc54afc6d9be8ba4058c33dfb14882be53841e24b73034237e572522318c37be9351fd30925a7a6ba218395becb15ffb45321ff89ce6ff56f497bb8aa7761b0215a2868122f9436c9e9eae6103c90e977434b006c5b1b44264608f6e27a3bb83df32db6c208eff809a4d76d0c07e1b03aa823f8cef1c2ee738a269a586fc91e4f49cc0200a28daa1d509ee94a5625344489a56b005193b589382ae232b94cf6d21bcf145de7929df8d60bdbe2f5ec8a2cde5bf2f013315f72a2aadec06e0cb4cd6a9050317d5ddd427fa435a565129c29731d29dcf46bd28c0d2264b5493d93d4d4ef54e56fc7a327cb", &(0x7f0000001400)="b161df0a631600e6ebb8973aafe569787381371f57ad724ca1effbe616a6bf9021d036ebaa7f3eaeaa4f4564eb0b5a6c536bddffcc287943315a80c9844e1c2b7a42120ac09e0005929cc3d83f154fe14a07618b5ce276b9e26c7fce8eccfeee6825011edcf0368c63b4773ca4934433614fc8557303faf0167b3b9c80cf97b1488ffae58387bb8fe5dd3138680f6358efd72e72f72d3d53c7f8b7cfc00ad2d3658d1ed18d74e4afcc9ffbdb15d9f798fbf032b71bccb6ba5fe49290ff4a86745c334217e33abbd0418079042e8d289fb1fb304cf36d40d964296ebc3b1f1bf8bf7c9a8493ce6756fd642d0e5e", 0x0, r0, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001640)="12643fef44edce783e7af0885740392a075cae02f70fbf351143a6f0f0f8316ce5c3d3364bdcb0c83dfcd6ac5f1f3f3d78efd4dd8dfa9a85c90bd72d549f494ec73755493f75161ebee19d2bb8339d263db772e705103880ddc4d925372aa621c6018373d96a870eef62ffd739a26d8f41c769d85ed2741df4d0ffe28e59bb8d340096564e6df358b3200ed3f3b074c4782f045691e0368c9752bbfdce2e6def8c8294f7b70bc3bd68014a78b54a3415ae79f9f58614440368e3a8817dac489828fe63b50904dfd54ee4c6fbe93329e46775021c3811d5a30bd899f52c01b01471364499fdc4c03a891edb9c992f816135d870eb3c319b5a9df8e2d5778bc2de", 0x5, r0}, 0x38) 20.353004907s ago: executing program 2 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) (async) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300030000000800", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xaa0f4000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 20.144683282s ago: executing program 0 (id=3022): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000099b3371d4cba325f9c53fe000100"/28], 0x50) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000bc0)={r0, &(0x7f0000000a40)='{&&/\x00', 0x201, &(0x7f0000000a80)={@align=0x5, {0x674, 0xe, 0x4, 0x401}}, 0x8, &(0x7f0000000b40), &(0x7f0000000b80)=0x3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="d5010000", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2510000000"], 0x14}}, 0x20000014) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r1}, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x108, 0x2b8, 0xffffffff, 0x108, 0x0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e23], [0x4e22, 0x4e21], 0x22, 0xa4, 0xc2, 0x8}}, @common=@ah={{0x30}, {[0x80000000, 0x8], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @multicast1, @local, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1d, @loopback, @remote, @gre_key=0x8000, @gre_key=0x3}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0xff, 'ip6erspan0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2f}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x5f, 0x1}}, @common=@ah={{0x30}, {[0x3, 0x45e7]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @empty, @loopback, @port=0x4e22, @port=0x4e20}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'nr0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x2, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x8b, 0x400, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x9}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1e, @multicast1, @private=0xa010101, @icmp_id=0x65, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r13 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r13, &(0x7f0000000040)=ANY=[], 0xfdef) close(r13) (async) recvmsg(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080128bd000000040000000002fbffffff00080002000000000000000000", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async, rerun: 32) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r8) sendmsg$NL802154_CMD_SET_CCA_MODE(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002dbd7000fddbdf250d000000080001", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000079d6468e41a1b955e40e57b979c554340c9c3d60bb02782d524f80359734"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc052) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r15, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xeed}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 20.014514131s ago: executing program 2 (id=3023): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="991e2916aecc71b48a059c4e3bd5b579384b09d1cd42cd12d46dab2c93ff2dac7ae3fbc52bc7d438fdd35a7d87360416ac68ef54aa5f3c32b4a8a1fefcdb6d8510be8aa55c25d54d6d398e8679277fb4e6b4e3d00c93012677ed2a41212bd7497098c33fe27ae0654bb500a53f918aa41faf66d38f0bd1db6b80c21f22e4fb5d23bd571d42c70c67dd7536f1a449cf40e23a3a7195d59e8c226372bee2349a4aa9ae60ea476ba894d8bbb10b559e85a338f6cfc6d96660545cbce2f8685c8917d3c08cee477672769a7071b564ebc506ad8461c96352dad3ff722a817f98e214ffae380692cc", 0xe7}], 0x60, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x71}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x0, 0x1, 0x24, 0x1}}, @mark={{0x0, 0x1, 0x24, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0xc0}, 0x64044840) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_genetlink_get_family_id$team(&(0x7f0000000340), r5) 19.605643537s ago: executing program 0 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x8, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x3, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x9, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x1, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x4, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x168, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x1, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x4003, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16c, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x8, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80010000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0xfffe, 0x9f98, 0xbb, 0x8, 0x66a}, {0x9, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e6, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x9, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x5, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x1, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x5, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0x4, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1fd}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x8, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0xb}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0xa, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x9, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0xffffffff, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0x4}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0xfe0, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x0, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000feffff048ffb0a50000000090a010400000000007700000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001cdf61d1d6f727c310c000b070000000000000006140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.83722494s ago: executing program 5 (id=3026): pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000565dc49f91c10cc1000e00000010000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)=""/241, &(0x7f0000000140)=0xf1) close(r0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 18.636625043s ago: executing program 2 (id=3027): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$nl_generic(r0, &(0x7f0000002980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002940)={&(0x7f0000001880)={0x10a8, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2}, [@generic, @generic="5c9d0743559ad6c8849889143ea97ab71f1475697221fe4197e49a431dc405d09c910b936e101dc58529c5f67a18a7031cda0c7b9c66d48f11df29c657dc04f1b46259bade2c0a1b53a66592156b746d7c25e2c5ada5952bbf476568c1606a84274caaebe2bcedcf30b2bcc7088c9c0fb53d80eeea4db8fca9e0c3bf0b3e799ef19dad70f51b8dfa4b426c27429ad4899687d3", @generic="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"]}, 0x10a8}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x180, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd77d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe298}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa93e}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x14}, 0x4004800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) unshare(0x400) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xdc, r4, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_IE={0x1c, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x8, 0x3, 0x0, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x0, 0xb1, 0x3ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x3, 0xb1, 0xc}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 17.924490113s ago: executing program 5 (id=3028): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x5, 0xfff, 0x93, 0x5, 0xb4e43486}, &(0x7f0000000180)=0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240400c5}, 0x4044) 17.425027673s ago: executing program 2 (id=3029): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000480)={@multicast, @random="0100000000c9", @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x0, 0x89, 0x0, @remote, @mcast2}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r2, 0xfffffffd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="abc7153306", 0x75f32760, 0x4000805, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/230, 0xe6}], 0x4}, 0x2}], 0x1, 0x22, 0x0) r4 = epoll_create(0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x6, "8a5ecb05fc9c"}, &(0x7f0000000100)=0x2a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000740)={0x40000004}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd606ff1af00302f00fc000000000000000000000040000000fee54b"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x80, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, @address_reply={0x12, 0x0, 0x0, 0xbc17}}}}}, 0x0) 17.05481619s ago: executing program 5 (id=3030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x200}}, 0x0) 15.890318828s ago: executing program 2 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, 0x0, 0x0, 0x4a71, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x4200}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x0, 0x0, 0x44024, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de774fc79872f0b8fa15bf788c9914c00"}}]}]}, 0x58}}, 0x48010) 5.730280117s ago: executing program 34 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200210a0500140003006e657464657673696d3000000000000084001680800001807c000c801400010001000000010000810000001400010009000000a00c0000ff00000088a800001400010003000000ff0d00000800000088a800001400010007000000200d00000500000088a80000140001000200000076070000070000008100000014000100010000001c090000b0a90000811a000014001400776c616e31000000000000000000000008001300b233dd4a692c312645d4ecc4cd33cea28456d842f70de207e58ce62361e2c7920cd59f41340d31ffd7c71fe2a60981e643755931542428", @ANYRES32=r3, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0xc1}, 0x4c814) 3.569887337s ago: executing program 35 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x8, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x3, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x9, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x1, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x4, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x168, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x1, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x4003, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16c, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x8, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80010000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0xfffe, 0x9f98, 0xbb, 0x8, 0x66a}, {0x9, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e6, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x9, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x5, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x1, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x5, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0x4, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1fd}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x8, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0xb}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0xa, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x9, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0xffffffff, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0x4}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0xfe0, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x0, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000feffff048ffb0a50000000090a010400000000007700000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001cdf61d1d6f727c310c000b070000000000000006140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.228031306s ago: executing program 36 (id=3030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x200}}, 0x0) 0s ago: executing program 37 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, 0x0, 0x0, 0x4a71, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x4200}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x0, 0x0, 0x44024, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de774fc79872f0b8fa15bf788c9914c00"}}]}]}, 0x58}}, 0x48010) kernel console output (not intermixed with test programs): nk: 'syz.4.2240': attribute type 1 has an invalid length. [ 313.068722][T14084] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.135045][T14087] bond7: (slave veth11): Enslaving as an active interface with a down link [ 313.218938][T14092] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 313.553978][T14106] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 313.568804][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 313.571531][T14106] bond4 (unregistering): Released all slaves [ 313.584918][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 313.668610][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 313.678238][T14113] veth1_macvtap: left promiscuous mode [ 313.833771][T14117] syzkaller0: entered promiscuous mode [ 313.839771][T14117] syzkaller0: entered allmulticast mode [ 314.039650][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2254'. [ 314.337535][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 314.514023][T14150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2261'. [ 314.960495][T14172] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2268'. [ 315.270752][T14191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2273'. [ 315.625545][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 315.654660][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 316.005655][T14218] netlink: 'syz.3.2284': attribute type 4 has an invalid length. [ 316.055964][ T24] lo speed is unknown, defaulting to 1000 [ 316.057910][T14222] netlink: 'syz.3.2284': attribute type 4 has an invalid length. [ 316.066247][ T24] syz2: Port: 1 Link DOWN [ 316.123940][ T5354] lo speed is unknown, defaulting to 1000 [ 316.132887][ T5354] syz2: Port: 1 Link ACTIVE [ 316.473737][T14242] netlink: 'syz.2.2291': attribute type 10 has an invalid length. [ 316.586955][T14245] netlink: 'syz.4.2294': attribute type 15 has an invalid length. [ 316.751299][T14253] netlink: 'syz.4.2299': attribute type 4 has an invalid length. [ 316.823962][T14253] netlink: 'syz.4.2299': attribute type 4 has an invalid length. [ 317.082756][T14274] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 317.727544][T14294] netlink: 'syz.0.2311': attribute type 23 has an invalid length. [ 317.894830][T14304] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 317.960087][T14304] bond7: entered promiscuous mode [ 317.965195][T14304] bond7: entered allmulticast mode [ 317.971071][T14304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.032060][T14308] pimreg: entered allmulticast mode [ 318.063072][T14308] pimreg: left allmulticast mode [ 318.212946][T14316] bond8: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 318.222403][T14316] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 318.237474][T14316] bond8: entered allmulticast mode [ 318.580026][T14348] __nla_validate_parse: 10 callbacks suppressed [ 318.580042][T14348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2324'. [ 318.607389][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2324'. [ 318.624488][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 318.731766][T14356] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 318.801304][T14356] bond8: entered promiscuous mode [ 318.810077][T14356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.863430][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2330'. [ 318.910391][T14365] macvtap2: entered allmulticast mode [ 318.935869][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 318.978992][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2331'. [ 319.024211][T14356] macvtap3: entered allmulticast mode [ 319.025950][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 319.193829][T14383] sctp: [Deprecated]: syz.2.2335 (pid 14383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.193829][T14383] Use struct sctp_sack_info instead [ 319.330205][T14393] netlink: 'syz.4.2337': attribute type 10 has an invalid length. [ 319.390547][T14393] bond_slave_1: entered promiscuous mode [ 319.718887][T14384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2336'. [ 319.729846][T14384] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2336'. [ 319.740360][T14384] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2336'. [ 319.754737][T14410] veth0_macvtap: Caught tx_queue_len zero misconfig [ 320.210953][T14429] sctp: [Deprecated]: syz.3.2348 (pid 14429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.210953][T14429] Use struct sctp_sack_info instead [ 320.369107][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.382444][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.393278][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.401364][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.411112][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.612588][T14440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.699454][T14450] tipc: Enabling of bearer rejected, already enabled [ 320.865600][T14463] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 321.094157][T14476] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 321.408992][T14435] xfrm0 speed is unknown, defaulting to 1000 [ 321.438951][T14488] xt_addrtype: ipv6 does not support BROADCAST matching [ 321.751867][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.760639][T14501] validate_nla: 2 callbacks suppressed [ 321.760655][T14501] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 321.782215][T14495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.878348][T14495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.892937][T14495] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 321.902547][T14495] veth1_macvtap: left promiscuous mode [ 321.909913][T14495] veth0_macvtap: left promiscuous mode [ 321.916997][T14495] veth0_macvtap: entered promiscuous mode [ 321.925624][T14495] veth1_macvtap: entered promiscuous mode [ 321.942265][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.952149][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.961726][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.970984][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.982197][T14495] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 321.991462][T14495] bond1: left promiscuous mode [ 321.996411][T14495] erspan1: left promiscuous mode [ 322.003268][T14495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.017513][T14495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.032590][T14495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.040701][T14495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.052379][T14495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.061388][T14495] batman_adv: batadv0: Interface activated: gretap1 [ 322.072172][T14495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.090621][T14495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.100803][T14495] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.120053][T14501] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 322.150500][T14435] lo speed is unknown, defaulting to 1000 [ 322.156231][ T1016] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.211982][ T1016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.282043][T14512] sctp: [Deprecated]: syz.2.2368 (pid 14512) Use of int in maxseg socket option. [ 322.282043][T14512] Use struct sctp_assoc_value instead [ 322.320258][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.383651][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.389998][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.424035][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.486405][ T5633] Bluetooth: hci5: command tx timeout [ 322.497203][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.537684][T14510] smbdirect: ib_dev[sqz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.565712][T14510] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.587478][ T133] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.597055][ T133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.605927][ T133] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.617909][T14510] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 322.628869][ T133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.650441][T14510] infiniband sqz0: RDMA CMA: cma_listen_on_dev, error -98 [ 322.699389][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.709758][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.739751][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.753451][ T57] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 322.777512][ T57] bond0: now running without any active interface! [ 322.848111][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.880900][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 322.947038][T14510] ipvlan0 speed is unknown, defaulting to 1000 [ 323.407418][ T8798] udevd[8798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.435279][T14435] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.443279][T14435] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.451699][ T8686] udevd[8686]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.454444][T14435] bridge_slave_0: entered allmulticast mode [ 323.469218][T14435] bridge_slave_0: entered promiscuous mode [ 323.478585][T14435] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.485897][T14435] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.494526][T14435] bridge_slave_1: entered allmulticast mode [ 323.503027][T14435] bridge_slave_1: entered promiscuous mode [ 323.602310][T14435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.626036][T14435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.657932][T14435] team0: Port device team_slave_0 added [ 323.670657][T14435] team0: Port device team_slave_1 added [ 323.790204][T14435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.797603][T14435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.824167][T14435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.844156][T14435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.856407][T14435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.888478][T14435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.013762][T14435] hsr_slave_0: entered promiscuous mode [ 324.020745][T14435] hsr_slave_1: entered promiscuous mode [ 324.027613][T14435] debugfs: 'hsr0' already exists in 'hsr' [ 324.033457][T14435] Cannot create hsr debugfs directory [ 324.043866][T14575] __nla_validate_parse: 7 callbacks suppressed [ 324.043886][T14575] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2383'. [ 324.060206][T14575] tc_dump_action: action bad kind [ 324.072657][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 324.093820][T14575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2383'. [ 324.229007][T14583] sctp: [Deprecated]: syz.3.2384 (pid 14583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.229007][T14583] Use struct sctp_sack_info instead [ 324.566372][ T5633] Bluetooth: hci5: command tx timeout [ 324.639721][T14602] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 324.720666][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 325.392292][T14615] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 325.492440][T14618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2392'. [ 325.528637][T14612] xfrm0 speed is unknown, defaulting to 1000 [ 326.213411][T14435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.274343][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.306778][T14639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.317222][T14435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.396870][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.432783][T14435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.493988][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.526734][T14435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.562057][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.589289][T14612] lo speed is unknown, defaulting to 1000 [ 326.639314][T14612] ipvlan0 speed is unknown, defaulting to 1000 [ 326.648789][ T5633] Bluetooth: hci5: command tx timeout [ 326.825830][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 326.901464][T14658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.070700][T14669] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2404'. [ 327.598540][T14435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.667796][T14435] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.830131][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.837318][ T9458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.882234][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.912522][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.919741][ T9458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.981809][T14683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.378801][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2412'. [ 328.419799][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'. [ 328.727198][ T5633] Bluetooth: hci5: command tx timeout [ 328.852767][T14709] syzkaller0: entered allmulticast mode [ 328.902813][T14712] set match dimension is over the limit! [ 328.927759][T14709] set match dimension is over the limit! [ 329.218964][T14728] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 329.662587][T14725] __nla_validate_parse: 1 callbacks suppressed [ 329.662606][T14725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2419'. [ 329.706485][T14725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2419'. [ 330.080941][T14435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.731101][T14770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2429'. [ 330.777829][T14764] netdevsim netdevsim3: Direct firmware load for á failed with error -2 [ 330.869488][T14764] netdevsim netdevsim3: Falling back to sysfs fallback for: á [ 331.069085][T14775] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2430'. [ 331.412111][T14435] veth0_vlan: entered promiscuous mode [ 331.491296][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 331.501430][T14435] veth1_vlan: entered promiscuous mode [ 331.718070][T14435] veth0_macvtap: entered promiscuous mode [ 331.790238][T14435] veth1_macvtap: entered promiscuous mode [ 331.917773][T14435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.023705][T14435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.067271][T14790] bridge0: port 2(wlan1) entered blocking state [ 332.092229][T14790] bridge0: port 2(wlan1) entered disabled state [ 332.124441][T14790] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 332.168763][T14790] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 332.250891][T14790] vlan2: entered promiscuous mode [ 332.267493][T14790] geneve0: entered promiscuous mode [ 332.346538][ T9460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.372028][ T9460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.448360][ T9458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.547029][ T9460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.016012][T14793] bridge0: port 1(wlan1) entered disabled state [ 333.495544][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.550113][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.687173][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 333.720819][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.720815][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 333.720845][T14825] openvswitch: netlink: Flow actions attr not present in new flow. [ 333.757458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.825913][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 333.884556][T14830] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.144377][T14839] xt_hashlimit: size too large, truncated to 1048576 [ 334.259578][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2445'. [ 334.660731][T14856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2449'. [ 334.691618][T14856] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 334.777966][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2451'. [ 335.799163][T14892] pim6reg1: entered promiscuous mode [ 335.809890][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 335.838726][T14892] pim6reg1: entered allmulticast mode [ 336.136877][T14907] netlink: 'syz.3.2460': attribute type 4 has an invalid length. [ 336.207528][T14914] netlink: 'syz.3.2460': attribute type 4 has an invalid length. [ 336.260608][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 336.277752][ T5756] lo speed is unknown, defaulting to 1000 [ 336.311306][T14912] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 336.344834][ T5354] lo speed is unknown, defaulting to 1000 [ 336.356202][T14912] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.2461'. [ 336.998819][T14937] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2467'. [ 337.036198][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 337.075065][T14942] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2467'. [ 337.114241][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 337.292220][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2469'. [ 338.297390][T14964] syzkaller1: entered promiscuous mode [ 338.328384][ T5770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.354614][T14964] syzkaller1: entered allmulticast mode [ 338.584773][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2476'. [ 338.642398][T14985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 338.736889][ T5770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.748779][T14989] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 338.752424][T14988] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 338.798504][T14991] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 339.062894][T15004] 0: reclassify loop, rule prio 0, protocol 800 [ 339.139989][T15010] atomic_op ffff88804d7031e0 conn xmit_atomic 0000000000000000 [ 339.179776][T15010] netlink: 'syz.4.2483': attribute type 1 has an invalid length. [ 339.232730][T15013] netlink: 'syz.0.2484': attribute type 1 has an invalid length. [ 339.435804][T15024] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 339.451593][T15010] bond9: entered promiscuous mode [ 339.489702][T15010] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.549428][T15035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.585262][T15015] ipvlan0: entered allmulticast mode [ 339.614510][T15015] bond9: entered allmulticast mode [ 339.742145][T15005] ipvlan1: entered allmulticast mode [ 339.991643][T15043] __nla_validate_parse: 5 callbacks suppressed [ 339.991661][T15043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2489'. [ 340.009717][T15019] bond9: (slave bridge0): making interface the new active one [ 340.027273][T15044] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2488'. [ 340.046169][T15019] bridge0: entered promiscuous mode [ 340.052982][T15019] bridge0: entered allmulticast mode [ 340.084776][T15019] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 340.330808][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 340.660080][T15068] netlink: 'syz.2.2496': attribute type 11 has an invalid length. [ 340.725345][T15069] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2494'. [ 341.145202][T15086] syzkaller0: entered promiscuous mode [ 341.160307][T15086] syzkaller0: entered allmulticast mode [ 341.315580][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 341.536891][T15098] openvswitch: netlink: Flow actions attr not present in new flow. [ 341.828443][T15107] pimreg: entered allmulticast mode [ 341.836646][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 341.847331][T15112] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2508'. [ 341.866907][T15107] pimreg: left allmulticast mode [ 341.924805][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 342.074452][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2508'. [ 342.152686][T15129] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2514'. [ 342.905030][T15149] tipc: Enabled bearer , priority 0 [ 342.933252][T15149] syzkaller0: entered promiscuous mode [ 342.952093][T15149] syzkaller0: entered allmulticast mode [ 343.040580][T15149] xt_l2tp: invalid flags combination: 8 [ 343.095416][T15148] tipc: Resetting bearer [ 343.180054][T15148] tipc: Disabling bearer [ 343.764237][T15183] FAULT_INJECTION: forcing a failure. [ 343.764237][T15183] name failslab, interval 1, probability 0, space 0, times 0 [ 343.813965][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.4.2531 Not tainted syzkaller #0 PREEMPT(full) [ 343.813996][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.814025][T15183] Call Trace: [ 343.814033][T15183] [ 343.814041][T15183] dump_stack_lvl+0xe8/0x150 [ 343.814076][T15183] should_fail_ex+0x40c/0x560 [ 343.814105][T15183] should_failslab+0xa8/0x100 [ 343.814135][T15183] __kmalloc_cache_noprof+0xa8/0x660 [ 343.814163][T15183] ? nfnetlink_rcv+0x1021/0x28c0 [ 343.814185][T15183] ? nfnetlink_rcv+0x1021/0x28c0 [ 343.814213][T15183] nfnetlink_rcv+0x1021/0x28c0 [ 343.814270][T15183] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.814309][T15183] ? ref_tracker_free+0x689/0x830 [ 343.814366][T15183] ? skb_clone+0x246/0x3a0 [ 343.814395][T15183] ? __netlink_deliver_tap+0x811/0x860 [ 343.814429][T15183] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.814453][T15183] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.814483][T15183] netlink_unicast+0x7bb/0x940 [ 343.814516][T15183] netlink_sendmsg+0x813/0xb40 [ 343.814553][T15183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.814584][T15183] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.814612][T15183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.814637][T15183] sock_sendmsg_nosec+0x13a/0x180 [ 343.814671][T15183] ____sys_sendmsg+0x54e/0x850 [ 343.814702][T15183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.814737][T15183] ? import_iovec+0x73/0xa0 [ 343.814760][T15183] ___sys_sendmsg+0x2a5/0x360 [ 343.814784][T15183] ? __lock_acquire+0x683/0x2cf0 [ 343.814816][T15183] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.814876][T15183] ? __fget_files+0x2a/0x420 [ 343.814901][T15183] ? __fget_files+0x3a2/0x420 [ 343.814938][T15183] __x64_sys_sendmsg+0x1b1/0x290 [ 343.814966][T15183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.815010][T15183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.815031][T15183] do_syscall_64+0x174/0x580 [ 343.815058][T15183] ? trace_irq_disable+0x3b/0x140 [ 343.815084][T15183] ? clear_bhb_loop+0x40/0x90 [ 343.815108][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.815128][T15183] RIP: 0033:0x7fc31c99e0d9 [ 343.815147][T15183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.815165][T15183] RSP: 002b:00007fc31d7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.815186][T15183] RAX: ffffffffffffffda RBX: 00007fc31cc25fa0 RCX: 00007fc31c99e0d9 [ 343.815200][T15183] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 343.815214][T15183] RBP: 00007fc31d7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.815227][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.815238][T15183] R13: 00007fc31cc26038 R14: 00007fc31cc25fa0 R15: 00007fff43c6b958 [ 343.815271][T15183] [ 345.102112][T15200] __nla_validate_parse: 5 callbacks suppressed [ 345.102131][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 345.975144][T15229] FAULT_INJECTION: forcing a failure. [ 345.975144][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 346.016023][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.2.2542 Not tainted syzkaller #0 PREEMPT(full) [ 346.016055][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.016065][T15229] Call Trace: [ 346.016072][T15229] [ 346.016080][T15229] dump_stack_lvl+0xe8/0x150 [ 346.016111][T15229] should_fail_ex+0x40c/0x560 [ 346.016139][T15229] should_failslab+0xa8/0x100 [ 346.016169][T15229] __kmalloc_cache_noprof+0xa8/0x660 [ 346.016196][T15229] ? nft_trans_rule_add+0x59/0x440 [ 346.016223][T15229] ? nft_trans_rule_add+0x59/0x440 [ 346.016252][T15229] nft_trans_rule_add+0x59/0x440 [ 346.016286][T15229] nf_tables_newrule+0x1b50/0x28a0 [ 346.016322][T15229] ? __pfx_nf_tables_newrule+0x10/0x10 [ 346.016340][T15229] ? nfnl_pernet+0x23/0x240 [ 346.016362][T15229] ? nfnl_pernet+0x23/0x240 [ 346.016392][T15229] ? __nla_parse+0x40/0x60 [ 346.016422][T15229] nfnetlink_rcv+0x1288/0x28c0 [ 346.016478][T15229] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 346.016516][T15229] ? ref_tracker_free+0x689/0x830 [ 346.016564][T15229] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.016589][T15229] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.016613][T15229] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 346.016658][T15229] netlink_unicast+0x7bb/0x940 [ 346.016691][T15229] netlink_sendmsg+0x813/0xb40 [ 346.016725][T15229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.016753][T15229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.016780][T15229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.016803][T15229] sock_sendmsg_nosec+0x13a/0x180 [ 346.016834][T15229] ____sys_sendmsg+0x54e/0x850 [ 346.016863][T15229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.016896][T15229] ? import_iovec+0x73/0xa0 [ 346.016918][T15229] ___sys_sendmsg+0x2a5/0x360 [ 346.016940][T15229] ? __lock_acquire+0x683/0x2cf0 [ 346.016969][T15229] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.017024][T15229] ? __fget_files+0x2a/0x420 [ 346.017047][T15229] ? __fget_files+0x3a2/0x420 [ 346.017081][T15229] __x64_sys_sendmsg+0x1b1/0x290 [ 346.017105][T15229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.017137][T15229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.017154][T15229] do_syscall_64+0x174/0x580 [ 346.017174][T15229] ? trace_irq_disable+0x3b/0x140 [ 346.017193][T15229] ? clear_bhb_loop+0x40/0x90 [ 346.017210][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.017226][T15229] RIP: 0033:0x7f5dc5d9e0d9 [ 346.017240][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.017253][T15229] RSP: 002b:00007f5dc6bdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.017276][T15229] RAX: ffffffffffffffda RBX: 00007f5dc6025fa0 RCX: 00007f5dc5d9e0d9 [ 346.017287][T15229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 346.017297][T15229] RBP: 00007f5dc6bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 346.017306][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.017315][T15229] R13: 00007f5dc6026038 R14: 00007f5dc6025fa0 R15: 00007ffd7b3e3058 [ 346.017339][T15229] [ 346.775349][T15239] netlink: 'syz.0.2546': attribute type 1 has an invalid length. [ 346.989446][T15239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.041454][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2548'. [ 347.067445][T15237] bond9: entered allmulticast mode [ 347.095832][T15237] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2546'. [ 347.598874][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2551'. [ 347.707259][T15265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2551'. [ 348.494130][T15288] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 348.898843][T15293] bond10: (slave veth3): Enslaving as an active interface with a down link [ 348.965205][T15301] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 349.093104][T15295] ip6gre2: entered promiscuous mode [ 349.121175][T15295] ip6gre2: entered allmulticast mode [ 349.172319][T15299] IPVS: Error connecting to the multicast addr [ 349.343679][ T9458] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.370682][ T5354] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.372027][ T9458] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.627976][ T5721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.671397][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2564'. [ 349.714266][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 349.741846][T15323] netlink: 'syz.4.2564': attribute type 12 has an invalid length. [ 349.808661][T15326] ip6erspan0: entered allmulticast mode [ 350.120179][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 350.166468][ T5770] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.423853][T15348] team0: Port device team_slave_0 removed [ 351.404658][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 351.468887][T15374] netlink: 'syz.4.2576': attribute type 5 has an invalid length. [ 351.481121][T15386] openvswitch: netlink: Missing key (keys=40, expected=80) [ 352.305249][T15410] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 352.347230][T15414] FAULT_INJECTION: forcing a failure. [ 352.347230][T15414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.374087][T15408] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 352.386245][T15414] CPU: 1 UID: 0 PID: 15414 Comm: syz.0.2585 Not tainted syzkaller #0 PREEMPT(full) [ 352.386293][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.386316][T15414] Call Trace: [ 352.386407][T15414] [ 352.386484][T15414] dump_stack_lvl+0xe8/0x150 [ 352.386637][T15414] should_fail_ex+0x40c/0x560 [ 352.386730][T15414] _copy_from_user+0x2d/0xb0 [ 352.386785][T15414] ___sys_sendmsg+0x1c6/0x360 [ 352.386905][T15414] ? __lock_acquire+0x683/0x2cf0 [ 352.386994][T15414] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.387053][T15414] ? __fget_files+0x2a/0x420 [ 352.387099][T15414] ? __fget_files+0x3a2/0x420 [ 352.387134][T15414] __x64_sys_sendmsg+0x1b1/0x290 [ 352.387168][T15414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.387210][T15414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.387247][T15414] do_syscall_64+0x174/0x580 [ 352.387358][T15414] ? trace_irq_disable+0x3b/0x140 [ 352.387398][T15414] ? clear_bhb_loop+0x40/0x90 [ 352.387419][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.387436][T15414] RIP: 0033:0x7f931099e0d9 [ 352.387484][T15414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.387499][T15414] RSP: 002b:00007f93117b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.387614][T15414] RAX: ffffffffffffffda RBX: 00007f9310c25fa0 RCX: 00007f931099e0d9 [ 352.387627][T15414] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 352.387638][T15414] RBP: 00007f93117b7090 R08: 0000000000000000 R09: 0000000000000000 [ 352.387649][T15414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.387661][T15414] R13: 00007f9310c26038 R14: 00007f9310c25fa0 R15: 00007ffc07f76738 [ 352.387692][T15414] [ 352.575346][T15410] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 352.709375][T15424] vlan0: entered promiscuous mode [ 353.136212][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.502017][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 353.517891][T15449] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 353.534416][T15451] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 353.557725][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 353.594201][T15449] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.626215][T15451] geneve0: entered promiscuous mode [ 353.648922][T15451] geneve0: entered allmulticast mode [ 353.917365][T15454] bond10: (slave gretap2): making interface the new active one [ 354.000860][T15454] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 354.106621][T15474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2596'. [ 354.608864][T15490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2602'. [ 354.835404][T15496] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2605'. [ 355.113553][T15496] xfrm0 speed is unknown, defaulting to 1000 [ 355.264178][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2608'. [ 355.392666][T15526] Cannot find add_set index 1 as target [ 356.176488][T15496] lo speed is unknown, defaulting to 1000 [ 356.229147][T15496] ipvlan0 speed is unknown, defaulting to 1000 [ 356.292911][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 356.430675][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 356.465151][T15542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2616'. [ 357.005933][T15548] syzkaller0: entered promiscuous mode [ 357.022072][T15548] syzkaller0: entered allmulticast mode [ 357.298476][T15558] ip_vti0: left allmulticast mode [ 357.338854][T15558] syz_tun: left promiscuous mode [ 357.365994][T15558] dummy0: left promiscuous mode [ 357.435699][T15558] bond_slave_1: left promiscuous mode [ 357.456384][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.471376][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.718044][T15558] batman_adv: batadv0: Interface deactivated: gretap2 [ 357.731512][T15558] tipc: Resetting bearer [ 357.744975][T15558] syzkaller0: left promiscuous mode [ 357.752696][T15558] syzkaller0: left allmulticast mode [ 357.760172][T15558] vlan3: left allmulticast mode [ 357.765315][T15558] bond0: left allmulticast mode [ 357.775857][T15558] bond_slave_0: left allmulticast mode [ 357.785435][T15558] bond_slave_1: left allmulticast mode [ 357.796252][T15558] syz_tun: left allmulticast mode [ 357.810065][T15558] bridge3: left promiscuous mode [ 357.822812][T15558] bridge3: left allmulticast mode [ 357.843024][T15558] ip6gre1: left promiscuous mode [ 357.862675][T15558] ip6gre1: left allmulticast mode [ 357.882530][T15558] bond5: left promiscuous mode [ 357.895559][T15558] veth5: left promiscuous mode [ 357.945641][T15558] batman_adv: batadv0: Interface deactivated: gretap3 [ 358.003683][T15558] bond8: left allmulticast mode [ 358.025884][T15558] bond9: left promiscuous mode [ 358.046001][T15558] ipvlan0: left allmulticast mode [ 358.060290][T15558] ipvlan1: left allmulticast mode [ 358.068423][T15558] bond9: left allmulticast mode [ 358.073456][T15558] bridge0: left allmulticast mode [ 358.084806][T15558] ip6gre2: left promiscuous mode [ 358.093693][T15558] ip6gre2: left allmulticast mode [ 358.116851][T15558] vlan0: left promiscuous mode [ 358.357563][ T9460] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.406007][ T9460] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.458168][ T9460] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.502520][ T9460] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.570144][ T57] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.631158][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.663485][ T57] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.748905][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.010221][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2629'. [ 359.062306][T15603] openvswitch: netlink: Missing key (keys=40, expected=80) [ 359.285506][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 360.230423][T15650] geneve1: entered promiscuous mode [ 360.250305][T15650] geneve1: entered allmulticast mode [ 360.433240][T15657] netlink: 550 bytes leftover after parsing attributes in process `syz.4.2646'. [ 360.970230][T15675] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 360.989328][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 361.063740][T15675] openvswitch: netlink: Missing key (keys=40, expected=80) [ 361.175476][T15682] macvtap1: entered promiscuous mode [ 361.198159][T15682] macvtap1: entered allmulticast mode [ 361.229369][T15682] veth1_to_bridge: entered allmulticast mode [ 361.247579][T15682] veth1_to_bridge: entered promiscuous mode [ 361.275214][T15682] team0: Device macvtap1 failed to register rx_handler [ 361.321284][T15682] veth1_to_bridge: left allmulticast mode [ 361.331310][T15682] veth1_to_bridge: left promiscuous mode [ 361.393147][T15688] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 361.416604][T15688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 361.473786][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2656'. [ 361.524154][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2656'. [ 361.545362][T15694] SET target dimension over the limit! [ 361.801656][T15694] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 361.890475][T15694] bond1: (slave bond0): Releasing active interface [ 362.773410][T15732] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2664'. [ 362.871885][T15732] openvswitch: netlink: Message has 4 unknown bytes. [ 363.010586][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2667'. [ 363.050324][T15737] tipc: Started in network mode [ 363.055412][T15744] openvswitch: netlink: Missing key (keys=40, expected=80) [ 363.071888][T15737] tipc: Node identity ac14140f, cluster identity 4711 [ 363.107738][T15737] tipc: Enabled bearer , priority 10 [ 363.404157][T15755] veth1_to_bond: entered allmulticast mode [ 363.411237][T15753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 363.436166][T15753] openvswitch: netlink: Missing key (keys=40, expected=80) [ 363.439459][T15757] veth1_to_bond: entered promiscuous mode [ 363.446471][T15753] FAULT_INJECTION: forcing a failure. [ 363.446471][T15753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.465779][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 363.478285][T15753] CPU: 0 UID: 0 PID: 15753 Comm: syz.2.2669 Not tainted syzkaller #0 PREEMPT(full) [ 363.478309][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.478327][T15753] Call Trace: [ 363.478334][T15753] [ 363.478343][T15753] dump_stack_lvl+0xe8/0x150 [ 363.478377][T15753] should_fail_ex+0x40c/0x560 [ 363.478407][T15753] _copy_to_user+0x31/0xb0 [ 363.478429][T15753] simple_read_from_buffer+0xe1/0x170 [ 363.478480][T15753] proc_fail_nth_read+0x1bb/0x230 [ 363.478521][T15753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.478551][T15753] ? rw_verify_area+0x24a/0x4c0 [ 363.478597][T15753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.478634][T15753] vfs_read+0x213/0xa80 [ 363.478669][T15753] ? __pfx___mutex_lock+0x10/0x10 [ 363.478769][T15753] ? __pfx_vfs_read+0x10/0x10 [ 363.478790][T15753] ? __fget_files+0x2a/0x420 [ 363.478820][T15753] ? __fget_files+0x3a2/0x420 [ 363.478844][T15753] ? __fget_files+0x2a/0x420 [ 363.478878][T15753] ksys_read+0x150/0x270 [ 363.478899][T15753] ? __pfx_ksys_read+0x10/0x10 [ 363.478927][T15753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.478947][T15753] do_syscall_64+0x174/0x580 [ 363.478971][T15753] ? trace_irq_disable+0x3b/0x140 [ 363.478995][T15753] ? clear_bhb_loop+0x40/0x90 [ 363.479019][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.479038][T15753] RIP: 0033:0x7f5dc5d5e90e [ 363.479063][T15753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.479079][T15753] RSP: 002b:00007f5dc6bdbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.479099][T15753] RAX: ffffffffffffffda RBX: 00007f5dc6bdc6c0 RCX: 00007f5dc5d5e90e [ 363.479113][T15753] RDX: 000000000000000f RSI: 00007f5dc6bdc0a0 RDI: 0000000000000004 [ 363.479125][T15753] RBP: 00007f5dc6bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 363.479136][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.479147][T15753] R13: 00007f5dc6026038 R14: 00007f5dc6025fa0 R15: 00007ffd7b3e3058 [ 363.479180][T15753] [ 363.699495][T15755] veth1_to_bond (unregistering): left promiscuous mode [ 363.706471][T15755] veth1_to_bond (unregistering): left allmulticast mode [ 363.765274][T15755] bond0: (slave bond_slave_1): Releasing backup interface [ 364.107013][ T9] tipc: Node number set to 2886997007 [ 364.429447][T15788] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2677'. [ 364.441360][T15785] batman_adv: batadv0: Adding interface: gretap2 [ 364.480951][T15785] batman_adv: batadv0: Interface activated: gretap2 [ 365.311040][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2682'. [ 365.338089][T15816] openvswitch: netlink: Missing key (keys=40, expected=80) [ 366.241858][T15835] sctp: [Deprecated]: syz.3.2685 (pid 15835) Use of int in maxseg socket option. [ 366.241858][T15835] Use struct sctp_assoc_value instead [ 366.774745][T15845] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20002 [ 367.599240][T15849] __nla_validate_parse: 1 callbacks suppressed [ 367.599287][T15849] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2691'. [ 370.060671][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 370.861208][T15896] xfrm0 speed is unknown, defaulting to 1000 [ 371.264854][T15917] veth1_macvtap: left promiscuous mode [ 371.301052][T15917] macsec0: entered promiscuous mode [ 371.361710][ T9] ipvlan0 speed is unknown, defaulting to 1000 [ 371.411971][ T9] sqz0: Port: 1 Link DOWN [ 371.784006][T15927] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.791295][T15927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.882838][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.922219][T15931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2709'. [ 372.053333][T15927] veth1_macvtap: entered promiscuous mode [ 372.094850][T15927] macsec0: left promiscuous mode [ 372.237341][T15927] bond3: left promiscuous mode [ 372.274652][T15927] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 372.375214][T15896] lo speed is unknown, defaulting to 1000 [ 372.381252][ T1243] ipvlan0 speed is unknown, defaulting to 1000 [ 372.458354][T15948] FAULT_INJECTION: forcing a failure. [ 372.458354][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 372.485178][T15896] ipvlan0 speed is unknown, defaulting to 1000 [ 372.510406][ T1243] sqz0: Port: 1 Link ACTIVE [ 372.572070][T15948] CPU: 0 UID: 0 PID: 15948 Comm: syz.5.2711 Not tainted syzkaller #0 PREEMPT(full) [ 372.572097][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.572108][T15948] Call Trace: [ 372.572116][T15948] [ 372.572123][T15948] dump_stack_lvl+0xe8/0x150 [ 372.572158][T15948] should_fail_ex+0x40c/0x560 [ 372.572189][T15948] should_failslab+0xa8/0x100 [ 372.572220][T15948] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 372.572292][T15948] ? ethnl_default_set_doit+0x9a4/0x1080 [ 372.572438][T15948] ? ethnl_default_set_doit+0x9a4/0x1080 [ 372.572468][T15948] ? ethnl_default_set_doit+0x169/0x1080 [ 372.572500][T15948] kmemdup_noprof+0x2b/0x70 [ 372.572542][T15948] ethnl_default_set_doit+0x9a4/0x1080 [ 372.572583][T15948] genl_family_rcv_msg_doit+0x233/0x340 [ 372.572642][T15948] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.572676][T15948] ? bpf_lsm_capable+0x9/0x20 [ 372.572707][T15948] ? security_capable+0x7e/0x2c0 [ 372.572786][T15948] genl_rcv_msg+0x614/0x7a0 [ 372.572813][T15948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.572831][T15948] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 372.572861][T15948] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.572939][T15948] netlink_rcv_skb+0x226/0x4a0 [ 372.572966][T15948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.572987][T15948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.573028][T15948] ? down_read+0x2be/0x330 [ 372.573051][T15948] genl_rcv+0x28/0x40 [ 372.573069][T15948] netlink_unicast+0x7bb/0x940 [ 372.573103][T15948] netlink_sendmsg+0x813/0xb40 [ 372.573138][T15948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.573168][T15948] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.573250][T15948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.573281][T15948] sock_sendmsg_nosec+0x13a/0x180 [ 372.573315][T15948] ____sys_sendmsg+0x54e/0x850 [ 372.573346][T15948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.573380][T15948] ? import_iovec+0x73/0xa0 [ 372.573427][T15948] ___sys_sendmsg+0x2a5/0x360 [ 372.573451][T15948] ? __lock_acquire+0x683/0x2cf0 [ 372.573482][T15948] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.573544][T15948] ? __fget_files+0x2a/0x420 [ 372.573570][T15948] ? __fget_files+0x3a2/0x420 [ 372.573606][T15948] __x64_sys_sendmsg+0x1b1/0x290 [ 372.573633][T15948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.573677][T15948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.573699][T15948] do_syscall_64+0x174/0x580 [ 372.573724][T15948] ? trace_irq_disable+0x3b/0x140 [ 372.573749][T15948] ? clear_bhb_loop+0x40/0x90 [ 372.573772][T15948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.573791][T15948] RIP: 0033:0x7f893979e0d9 [ 372.573810][T15948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.573827][T15948] RSP: 002b:00007f893a6d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.573847][T15948] RAX: ffffffffffffffda RBX: 00007f8939a25fa0 RCX: 00007f893979e0d9 [ 372.573861][T15948] RDX: 0000000014008080 RSI: 00002000000013c0 RDI: 0000000000000003 [ 372.573873][T15948] RBP: 00007f893a6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 372.573885][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.573897][T15948] R13: 00007f8939a26038 R14: 00007f8939a25fa0 R15: 00007fff2478d1e8 [ 372.573929][T15948] [ 373.134625][T15953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2713'. [ 373.322005][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 373.874437][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 373.949019][T15970] netlink: 'syz.3.2716': attribute type 4 has an invalid length. [ 374.063182][ T5633] Bluetooth: hci5: link tx timeout [ 374.074663][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.110628][ T5633] Bluetooth: hci5: link tx timeout [ 374.117141][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.153329][ T5633] Bluetooth: hci5: link tx timeout [ 374.158934][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.167793][ T5633] Bluetooth: hci5: link tx timeout [ 374.173105][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.191887][ T5633] Bluetooth: hci5: link tx timeout [ 374.198711][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.207174][ T5633] Bluetooth: hci5: link tx timeout [ 374.212433][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.220911][ T5633] Bluetooth: hci5: link tx timeout [ 374.226228][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.234460][ T5633] Bluetooth: hci5: link tx timeout [ 374.239878][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.248391][ T5633] Bluetooth: hci5: link tx timeout [ 374.253766][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.262306][ T5633] Bluetooth: hci5: link tx timeout [ 374.268006][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.275876][ T5633] Bluetooth: hci5: link tx timeout [ 374.281541][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.289361][ T5633] Bluetooth: hci5: link tx timeout [ 374.294634][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.303040][ T5633] Bluetooth: hci5: link tx timeout [ 374.308641][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.316531][ T5633] Bluetooth: hci5: link tx timeout [ 374.321802][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.330054][ T5633] Bluetooth: hci5: link tx timeout [ 374.335312][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.343155][ T5633] Bluetooth: hci5: link tx timeout [ 374.348619][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.356619][ T5633] Bluetooth: hci5: link tx timeout [ 374.361910][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.369761][ T5633] Bluetooth: hci5: link tx timeout [ 374.375019][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.383914][ T5633] Bluetooth: hci5: link tx timeout [ 374.389735][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.397641][ T5633] Bluetooth: hci5: link tx timeout [ 374.404710][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.413236][ T5633] Bluetooth: hci5: link tx timeout [ 374.419035][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.617121][ T1016] IPVS: starting estimator thread 0... [ 374.726199][T15975] IPVS: using max 29 ests per chain, 69600 per kthread [ 374.973973][T15987] bond11 (unregistering): Released all slaves [ 375.028663][T15992] netlink: 'syz.5.2723': attribute type 20 has an invalid length. [ 375.062586][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2723'. [ 375.195156][T15992] netlink: 'syz.5.2723': attribute type 20 has an invalid length. [ 375.216130][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2723'. [ 375.237030][ T9457] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.268743][ T9457] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.301328][ T9457] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.328590][ T9457] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.342307][T15998] FAULT_INJECTION: forcing a failure. [ 375.342307][T15998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.407929][T15998] CPU: 0 UID: 0 PID: 15998 Comm: syz.2.2725 Not tainted syzkaller #0 PREEMPT(full) [ 375.407956][T15998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.407967][T15998] Call Trace: [ 375.407975][T15998] [ 375.407983][T15998] dump_stack_lvl+0xe8/0x150 [ 375.408017][T15998] should_fail_ex+0x40c/0x560 [ 375.408047][T15998] _copy_to_user+0x31/0xb0 [ 375.408069][T15998] simple_read_from_buffer+0xe1/0x170 [ 375.408102][T15998] proc_fail_nth_read+0x1bb/0x230 [ 375.408133][T15998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.408178][T15998] ? rw_verify_area+0x24a/0x4c0 [ 375.408199][T15998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.408226][T15998] vfs_read+0x213/0xa80 [ 375.408249][T15998] ? __pfx___mutex_lock+0x10/0x10 [ 375.408278][T15998] ? __pfx_vfs_read+0x10/0x10 [ 375.408299][T15998] ? __fget_files+0x2a/0x420 [ 375.408328][T15998] ? __fget_files+0x3a2/0x420 [ 375.408352][T15998] ? __fget_files+0x2a/0x420 [ 375.408386][T15998] ksys_read+0x150/0x270 [ 375.408407][T15998] ? __pfx_ksys_read+0x10/0x10 [ 375.408442][T15998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.408466][T15998] do_syscall_64+0x174/0x580 [ 375.408492][T15998] ? trace_irq_disable+0x3b/0x140 [ 375.408517][T15998] ? clear_bhb_loop+0x40/0x90 [ 375.408541][T15998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.408560][T15998] RIP: 0033:0x7f5dc5d5e90e [ 375.408577][T15998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.408594][T15998] RSP: 002b:00007f5dc6bdbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.408614][T15998] RAX: ffffffffffffffda RBX: 00007f5dc6bdc6c0 RCX: 00007f5dc5d5e90e [ 375.408638][T15998] RDX: 000000000000000f RSI: 00007f5dc6bdc0a0 RDI: 0000000000000004 [ 375.408650][T15998] RBP: 00007f5dc6bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 375.408661][T15998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.408673][T15998] R13: 00007f5dc6026038 R14: 00007f5dc6025fa0 R15: 00007ffd7b3e3058 [ 375.408704][T15998] [ 376.096829][T16020] openvswitch: netlink: Message has 5 unknown bytes. [ 376.168735][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 376.352323][T16023] pim6reg1: entered promiscuous mode [ 376.373346][T16023] pim6reg1: entered allmulticast mode [ 376.381010][T16027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2733'. [ 376.662155][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2732'. [ 376.964925][T16048] netlink: 'syz.3.2739': attribute type 16 has an invalid length. [ 376.986130][T16048] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2739'. [ 377.169776][T16053] bridge0: port 2(vlan0) entered blocking state [ 377.195176][T16053] bridge0: port 2(vlan0) entered disabled state [ 377.218313][T16053] vlan0: entered allmulticast mode [ 377.246263][T16053] bridge0: entered allmulticast mode [ 377.268690][T16064] warn_alloc: 1 callbacks suppressed [ 377.268706][T16064] syz.0.2743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 377.275967][T16053] vlan0: left allmulticast mode [ 377.283009][T16064] ,cpuset= [ 377.314473][T16053] bridge0: left allmulticast mode [ 377.323015][T16064] /,mems_allowed=0-1 [ 377.327258][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.0.2743 Not tainted syzkaller #0 PREEMPT(full) [ 377.327289][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.327301][T16064] Call Trace: [ 377.327308][T16064] [ 377.327316][T16064] dump_stack_lvl+0xe8/0x150 [ 377.327349][T16064] warn_alloc+0x24c/0x270 [ 377.327401][T16064] ? stack_depot_save_flags+0x33/0x800 [ 377.327426][T16064] ? __pfx_warn_alloc+0x10/0x10 [ 377.327451][T16064] ? kasan_save_track+0x3e/0x80 [ 377.327475][T16064] ? __kasan_kmalloc+0x93/0xb0 [ 377.327502][T16064] ? xsk_setsockopt+0x52a/0x960 [ 377.327629][T16064] ? do_sock_setsockopt+0x17c/0x1b0 [ 377.327649][T16064] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 377.327667][T16064] ? do_syscall_64+0x174/0x580 [ 377.327689][T16064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.327716][T16064] __vmalloc_node_range_noprof+0x12c/0x1730 [ 377.327768][T16064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.327795][T16064] ? __kasan_kmalloc+0x93/0xb0 [ 377.327821][T16064] ? __kmalloc_cache_noprof+0x32d/0x660 [ 377.327845][T16064] ? __kmalloc_cache_noprof+0x150/0x660 [ 377.327871][T16064] vmalloc_user_noprof+0xad/0xe0 [ 377.327896][T16064] ? xskq_create+0xbf/0x170 [ 377.327919][T16064] xskq_create+0xbf/0x170 [ 377.327946][T16064] xsk_init_queue+0x8a/0xe0 [ 377.327971][T16064] xsk_setsockopt+0x52a/0x960 [ 377.328007][T16064] ? __fget_files+0x2a/0x420 [ 377.328033][T16064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.328056][T16064] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.328080][T16064] ? aa_sock_opt_perm+0xff/0x1a0 [ 377.328103][T16064] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 377.328123][T16064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.328147][T16064] do_sock_setsockopt+0x17c/0x1b0 [ 377.328174][T16064] __x64_sys_setsockopt+0x13d/0x1b0 [ 377.328200][T16064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.328220][T16064] do_syscall_64+0x174/0x580 [ 377.328244][T16064] ? trace_irq_disable+0x3b/0x140 [ 377.328268][T16064] ? clear_bhb_loop+0x40/0x90 [ 377.328297][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.328316][T16064] RIP: 0033:0x7f931099e0d9 [ 377.328333][T16064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.328349][T16064] RSP: 002b:00007f93117b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.328367][T16064] RAX: ffffffffffffffda RBX: 00007f9310c25fa0 RCX: 00007f931099e0d9 [ 377.328381][T16064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 377.328392][T16064] RBP: 00007f9310a35024 R08: 0000000000000004 R09: 0000000000000000 [ 377.328403][T16064] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.328415][T16064] R13: 00007f9310c26038 R14: 00007f9310c25fa0 R15: 00007ffc07f76738 [ 377.328445][T16064] [ 377.328459][T16064] Mem-Info: [ 377.381375][T16068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2744'. [ 377.606311][T16064] active_anon:7520 inactive_anon:5 isolated_anon:0 [ 377.606311][T16064] active_file:514 inactive_file:42977 isolated_file:0 [ 377.606311][T16064] unevictable:768 dirty:100 writeback:0 [ 377.606311][T16064] slab_reclaimable:11341 slab_unreclaimable:117711 [ 377.606311][T16064] mapped:34745 shmem:1420 pagetables:1489 [ 377.606311][T16064] sec_pagetables:0 bounce:0 [ 377.606311][T16064] kernel_misc_reclaimable:0 [ 377.606311][T16064] free:1289610 free_pcp:10563 free_cma:0 [ 377.671332][T16064] Node 0 active_anon:30080kB inactive_anon:20kB active_file:2056kB inactive_file:171708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138980kB dirty:400kB writeback:0kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14456kB pagetables:5808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 377.709630][T16064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 377.749223][T16064] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.781773][T16064] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 377.789679][T16064] Node 0 DMA32 free:1204260kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30040kB inactive_anon:20kB active_file:2056kB inactive_file:171708kB unevictable:1536kB writepending:412kB zspages:0kB present:3129332kB managed:2548500kB mlocked:0kB bounce:0kB free_pcp:42472kB local_pcp:21168kB free_cma:0kB [ 377.858019][T16064] lowmem_reserve[]: 0 0 0 0 0 [ 377.872646][T16064] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.921356][T16064] lowmem_reserve[]: 0 0 0 0 0 [ 377.927260][T16064] Node 1 Normal free:3938916kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.141153][T16064] lowmem_reserve[]: 0 0 0 0 0 [ 378.168024][T16064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 378.234455][T16074] netlink: 'syz.5.2746': attribute type 1 has an invalid length. [ 378.310920][T16064] Node 0 DMA32: 416*4kB (UME) 60*8kB (UM) 423*16kB (UM) 465*32kB (UME) 335*64kB (UME) 243*128kB (UME) 152*256kB (UM) 106*512kB (UME) 58*1024kB (UM) 10*2048kB (UME) 233*4096kB (UM) = 1203760kB [ 378.406260][T16064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 378.526253][T16064] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 11*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938916kB [ 378.590285][T16064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.623829][T16064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.685980][T16064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.729628][T16064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.765686][T16103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2750'. [ 378.790810][T16064] 44907 total pagecache pages [ 378.815381][T16064] 0 pages in swap cache [ 378.838024][T16064] Free swap = 124996kB [ 378.867758][T16064] Total swap = 124996kB [ 378.891183][T16064] 2097051 pages RAM [ 378.920856][T16064] 0 pages HighMem/MovableOnly [ 378.956261][T16064] 428246 pages reserved [ 378.966600][T16064] 0 pages cma reserved [ 379.161891][T16110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2753'. [ 379.212413][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 379.464220][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.478135][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.488889][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.497829][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.509282][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.860554][T16130] netlink: 'syz.3.2759': attribute type 4 has an invalid length. [ 379.912148][T16132] netlink: 'syz.3.2759': attribute type 4 has an invalid length. [ 379.973266][ T9] lo speed is unknown, defaulting to 1000 [ 379.979244][ T10] lo speed is unknown, defaulting to 1000 [ 380.287328][T16138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2761'. [ 380.327636][T16139] netlink: zone id is out of range [ 380.334452][T16139] netlink: del zone limit has 4 unknown bytes [ 380.615655][T16148] x_tables: unsorted entry at hook 2 [ 380.809291][T16121] xfrm0 speed is unknown, defaulting to 1000 [ 381.506014][T16121] lo speed is unknown, defaulting to 1000 [ 381.538115][T16121] ipvlan0 speed is unknown, defaulting to 1000 [ 381.608926][ T5633] Bluetooth: hci6: command tx timeout [ 382.501390][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2772'. [ 382.547180][T16195] netlink: 'syz.5.2772': attribute type 11 has an invalid length. [ 382.614968][T16121] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.632360][T16121] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.642509][T16121] bridge_slave_0: entered allmulticast mode [ 382.653750][T16121] bridge_slave_0: entered promiscuous mode [ 382.693621][T16121] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.703986][T16121] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.736370][T16121] bridge_slave_1: entered allmulticast mode [ 382.750702][T16121] bridge_slave_1: entered promiscuous mode [ 382.775063][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 382.910475][T16121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.964424][T16121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.096664][T16121] team0: Port device team_slave_0 added [ 383.173734][T16213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 383.203662][T16121] team0: Port device team_slave_1 added [ 383.382788][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 383.419480][T16121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.455504][T16121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.546011][T16121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.686224][ T5633] Bluetooth: hci6: command tx timeout [ 383.702901][T16219] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.735437][T16121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.771910][T16121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.869241][T16121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.059456][T16121] hsr_slave_0: entered promiscuous mode [ 384.090854][T16121] hsr_slave_1: entered promiscuous mode [ 384.120249][T16121] debugfs: 'hsr0' already exists in 'hsr' [ 384.149028][T16121] Cannot create hsr debugfs directory [ 384.267011][T16236] syzkaller0: entered promiscuous mode [ 384.282716][T16236] syzkaller0: entered allmulticast mode [ 384.303979][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2782'. [ 384.555395][T16246] netlink: 'syz.5.2785': attribute type 4 has an invalid length. [ 384.600795][T16246] netlink: 'syz.5.2785': attribute type 4 has an invalid length. [ 384.887260][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.380807][T16121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.415071][T16121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.445313][T16121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.518760][T16273] x_tables: duplicate entry at hook 1 [ 385.719945][T16121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.761582][T16121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.772600][ T5633] Bluetooth: hci6: command tx timeout [ 385.802747][T16121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 386.103352][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.123072][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.135373][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.179599][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.198383][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.266939][T16121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.296243][T16121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.322500][T16121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 386.604960][T16121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.631735][T16121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.649919][T16121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 387.398397][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2805'. [ 387.810661][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 387.813281][T16324] xfrm0 speed is unknown, defaulting to 1000 [ 387.846511][ T5633] Bluetooth: hci6: command tx timeout [ 388.141945][T16121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.214197][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.248394][ T5633] Bluetooth: hci1: command tx timeout [ 388.257022][T16121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.298659][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.301197][T16341] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2810'. [ 388.319738][T16121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.345233][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.360652][T16121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.400635][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.699221][T16121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.710121][T16288] xfrm0 speed is unknown, defaulting to 1000 [ 388.716315][T16324] lo speed is unknown, defaulting to 1000 [ 388.746776][T16324] ipvlan0 speed is unknown, defaulting to 1000 [ 388.784142][T16121] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.847012][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.854200][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.963720][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.970923][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.273796][T16288] lo speed is unknown, defaulting to 1000 [ 389.302476][T16288] ipvlan0 speed is unknown, defaulting to 1000 [ 389.701760][T16361] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 389.701760][T16361] Please contact the netfilter-devel mailing list or update your nftables rules. [ 390.282035][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2819'. [ 390.326403][ T5633] Bluetooth: hci1: command tx timeout [ 390.450375][T16387] RDS: rds_bind could not find a transport for ::ffff:172.20.20.41, load rds_tcp or rds_rdma? [ 390.738665][T16394] nbd: socks must be embedded in a SOCK_ITEM attr [ 390.740620][T16288] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.752495][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.760602][T16288] bridge_slave_0: entered allmulticast mode [ 390.767672][T16396] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 390.768589][T16288] bridge_slave_0: entered promiscuous mode [ 390.844388][T16396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.853014][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 390.883342][T16288] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.894370][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.902104][T16288] bridge_slave_1: entered allmulticast mode [ 390.918675][T16288] bridge_slave_1: entered promiscuous mode [ 391.055776][T16396] bond1: (slave geneve2): making interface the new active one [ 391.068283][T16403] netlink: 'syz.2.2823': attribute type 12 has an invalid length. [ 391.089464][T16396] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 391.109978][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.164459][T16121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.229807][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.264611][ T9458] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.278769][ T9458] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.402111][T16288] team0: Port device team_slave_0 added [ 391.444126][T16288] team0: Port device team_slave_1 added [ 391.505586][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.524869][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.574566][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.598824][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.614013][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.645179][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.865560][T16288] hsr_slave_0: entered promiscuous mode [ 391.887279][T16288] hsr_slave_1: entered promiscuous mode [ 391.911483][T16288] debugfs: 'hsr0' already exists in 'hsr' [ 391.934987][T16288] Cannot create hsr debugfs directory [ 391.959290][T16416] netlink: 'syz.2.2827': attribute type 4 has an invalid length. [ 391.989025][T16121] veth0_vlan: entered promiscuous mode [ 392.024460][T16416] netlink: 'syz.2.2827': attribute type 4 has an invalid length. [ 392.090748][T16121] veth1_vlan: entered promiscuous mode [ 392.259596][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 392.345755][T16121] veth0_macvtap: entered promiscuous mode [ 392.362481][T16422] tipc: Enabled bearer , priority 0 [ 392.406562][ T5633] Bluetooth: hci1: command tx timeout [ 392.433394][T16422] syzkaller0: entered promiscuous mode [ 392.439341][T16422] syzkaller0: entered allmulticast mode [ 392.445722][T16422] tipc: Resetting bearer [ 392.483508][T16121] veth1_macvtap: entered promiscuous mode [ 392.499895][T16422] tipc: Resetting bearer [ 394.491029][ T5633] Bluetooth: hci1: command tx timeout [ 396.022953][T16422] tipc: Disabling bearer [ 396.256484][T16437] FAULT_INJECTION: forcing a failure. [ 396.256484][T16437] name failslab, interval 1, probability 0, space 0, times 0 [ 396.301291][T16435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2832'. [ 396.325144][ T1243] ipvlan0 speed is unknown, defaulting to 1000 [ 396.332307][T16437] CPU: 1 UID: 0 PID: 16437 Comm: syz.5.2833 Not tainted syzkaller #0 PREEMPT(full) [ 396.332341][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.332351][T16437] Call Trace: [ 396.332358][T16437] [ 396.332365][T16437] dump_stack_lvl+0xe8/0x150 [ 396.332398][T16437] should_fail_ex+0x40c/0x560 [ 396.332423][T16437] should_failslab+0xa8/0x100 [ 396.332451][T16437] __kmalloc_noprof+0xfe/0x720 [ 396.332473][T16437] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 396.332501][T16437] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 396.332528][T16437] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 396.332555][T16437] genl_family_rcv_msg_doit+0xda/0x340 [ 396.332579][T16437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.332605][T16437] ? apparmor_capable+0x126/0x170 [ 396.332631][T16437] ? bpf_lsm_capable+0x9/0x20 [ 396.332652][T16437] ? security_capable+0x7e/0x2c0 [ 396.332675][T16437] genl_rcv_msg+0x614/0x7a0 [ 396.332697][T16437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.332716][T16437] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 396.332842][T16437] netlink_rcv_skb+0x226/0x4a0 [ 396.332867][T16437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.332885][T16437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.332922][T16437] ? down_read+0x2be/0x330 [ 396.332943][T16437] genl_rcv+0x28/0x40 [ 396.332959][T16437] netlink_unicast+0x7bb/0x940 [ 396.332988][T16437] netlink_sendmsg+0x813/0xb40 [ 396.333022][T16437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.333054][T16437] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.333078][T16437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.333099][T16437] sock_sendmsg_nosec+0x13a/0x180 [ 396.333129][T16437] ____sys_sendmsg+0x54e/0x850 [ 396.333157][T16437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.333190][T16437] ? import_iovec+0x73/0xa0 [ 396.333213][T16437] ___sys_sendmsg+0x2a5/0x360 [ 396.333233][T16437] ? __lock_acquire+0x683/0x2cf0 [ 396.333263][T16437] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.333320][T16437] ? __fget_files+0x2a/0x420 [ 396.333345][T16437] ? __fget_files+0x3a2/0x420 [ 396.333377][T16437] __x64_sys_sendmsg+0x1b1/0x290 [ 396.333402][T16437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.333444][T16437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.333464][T16437] do_syscall_64+0x174/0x580 [ 396.333497][T16437] ? trace_irq_disable+0x3b/0x140 [ 396.333521][T16437] ? clear_bhb_loop+0x40/0x90 [ 396.333544][T16437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.333562][T16437] RIP: 0033:0x7f893979e0d9 [ 396.333580][T16437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.333596][T16437] RSP: 002b:00007f893a6d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.333615][T16437] RAX: ffffffffffffffda RBX: 00007f8939a25fa0 RCX: 00007f893979e0d9 [ 396.333628][T16437] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 396.333638][T16437] RBP: 00007f893a6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 396.333649][T16437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.333659][T16437] R13: 00007f8939a26038 R14: 00007f8939a25fa0 R15: 00007fff2478d1e8 [ 396.333688][T16437] [ 396.343975][T16121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.954660][T16288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.982481][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.039366][T16121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.089636][T16288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.144638][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.201234][T16288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.248608][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.304913][T16461] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 397.330546][T16288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.361811][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.518076][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.560178][T16469] netlink: 'syz.3.2839': attribute type 4 has an invalid length. [ 397.589495][T16469] netlink: 'syz.3.2839': attribute type 4 has an invalid length. [ 397.605278][ T5770] lo speed is unknown, defaulting to 1000 [ 397.617189][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.626384][ T5770] syz2: Port: 1 Link DOWN [ 397.655680][T16476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'. [ 397.669741][ T5745] lo speed is unknown, defaulting to 1000 [ 397.697497][ T5745] syz2: Port: 1 Link ACTIVE [ 397.718661][T16476] netlink: 'syz.2.2840': attribute type 11 has an invalid length. [ 397.751598][ T9458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.899597][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.182847][T16288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.192813][T16480] syzkaller0: entered promiscuous mode [ 398.200503][T16480] syzkaller0: entered allmulticast mode [ 398.219560][T16485] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2842'. [ 398.234257][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.259398][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.304245][T16288] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.334570][T16480] tipc: Enabled bearer , priority 0 [ 398.344701][T16480] tipc: Resetting bearer [ 398.359459][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.377606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.384813][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.394494][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.434630][T16479] tipc: Resetting bearer [ 398.511967][T16479] tipc: Disabling bearer [ 398.611113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.618311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.664866][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2844'. [ 398.672968][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 398.704105][T16489] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2844'. [ 399.571890][T16525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.579214][T16525] IPv6: NLM_F_CREATE should be set when creating new route [ 401.071413][T16576] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2855'. [ 401.108857][T16574] ip6gre1: entered allmulticast mode [ 401.192154][T16574] netlink: 'syz.0.2855': attribute type 4 has an invalid length. [ 401.503205][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.892006][T16582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.910369][T16582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.084511][T16582] batman_adv: batadv0: Interface deactivated: gretap1 [ 402.245044][T16582] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 402.291290][T16572] xfrm0 speed is unknown, defaulting to 1000 [ 402.298621][ T1055] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.317935][ T1055] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.816235][ T9] ipvlan0 speed is unknown, defaulting to 1000 [ 402.829605][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.847546][ T9] sqz0: Port: 1 Link DOWN [ 403.123908][T16609] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 403.167843][T16572] lo speed is unknown, defaulting to 1000 [ 403.177998][ T757] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.214601][ T757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.248036][T16572] ipvlan0 speed is unknown, defaulting to 1000 [ 403.255465][ T757] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.278511][ T757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.425536][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'. [ 403.492514][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'. [ 403.747025][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2866'. [ 403.875065][T16633] netlink: 'syz.5.2866': attribute type 13 has an invalid length. [ 404.144185][T16288] veth0_vlan: entered promiscuous mode [ 404.169298][T16645] tipc: Enabled bearer , priority 0 [ 404.197989][T16645] syzkaller0: entered promiscuous mode [ 404.214713][T16645] syzkaller0: entered allmulticast mode [ 404.235034][T16288] veth1_vlan: entered promiscuous mode [ 404.291463][T16645] tipc: Resetting bearer [ 404.334785][T16644] tipc: Resetting bearer [ 404.415583][T16644] tipc: Disabling bearer [ 404.585206][T16288] veth0_macvtap: entered promiscuous mode [ 404.649552][T16288] veth1_macvtap: entered promiscuous mode [ 404.755198][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.812744][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.898397][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.945355][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2872'. [ 404.961252][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.150232][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.205870][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 405.216420][T16663] syzkaller0: entered promiscuous mode [ 405.229313][T16663] syzkaller0: entered allmulticast mode [ 405.270715][T16663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.574753][T16665] geneve1: left promiscuous mode [ 405.585975][T16665] geneve1: left allmulticast mode [ 405.592529][T16665] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 405.635687][T16665] bond1: left allmulticast mode [ 405.643324][T16665] erspan1: left allmulticast mode [ 405.673860][T16665] batman_adv: batadv0: Interface deactivated: gretap1 [ 405.685997][T16665] xfrm1: left allmulticast mode [ 405.750682][ T5722] lo speed is unknown, defaulting to 1000 [ 405.768430][ T5722] syz2: Port: 1 Link DOWN [ 405.807391][ T1164] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.841492][ T1164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.881154][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.909828][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.054899][T16676] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2877'. [ 406.077197][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.094882][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.108013][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.118420][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.137388][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.175420][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.215771][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.250720][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.566341][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.620029][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 406.853641][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 407.144715][T16701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2879'. [ 407.491523][T16701] bridge0: entered promiscuous mode [ 407.542464][T16701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.621241][T16701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.061095][T16701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.151023][T16701] veth1_macvtap: left promiscuous mode [ 408.214448][T16701] veth0_macvtap: left promiscuous mode [ 408.249007][T16701] veth0_macvtap: entered promiscuous mode [ 408.255986][ T4938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.273234][ T4938] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 408.278516][T16701] veth1_macvtap: entered promiscuous mode [ 408.288878][ T4938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 408.306327][ T4938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 408.314425][ T4938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.357255][T16701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.392208][T16701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.451136][T16701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.484611][T16701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.551305][T16701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.594652][T16701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.665774][T16701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.688839][T16701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.738116][T16701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.771549][T16701] batman_adv: batadv0: Interface activated: gretap1 [ 408.809198][T16701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.855810][T16701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 408.884886][T16701] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.903355][T16701] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.924046][T16701] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.944764][T16701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 408.963471][ T5756] lo speed is unknown, defaulting to 1000 [ 408.986056][ T5756] syz2: Port: 1 Link ACTIVE [ 409.250624][T16738] syzkaller0: entered promiscuous mode [ 409.283119][T16738] syzkaller0: entered allmulticast mode [ 409.307144][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2885'. [ 409.483929][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 409.540359][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 409.579610][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 409.672765][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2885'. [ 409.780865][T16769] bond2 (unregistering): Released all slaves [ 410.428018][ T4938] Bluetooth: hci7: command tx timeout [ 412.497544][ T4938] Bluetooth: hci7: command tx timeout [ 413.136442][ T1016] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.145276][ T1016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.154745][ T1016] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.163983][ T1016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.184902][ T1016] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.209209][ T5354] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.220808][ T1016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.337380][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.347423][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.819489][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.006427][ T5770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.566551][ T4938] Bluetooth: hci7: command tx timeout [ 414.844838][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 415.546472][T16744] xfrm0 speed is unknown, defaulting to 1000 [ 415.595298][ T757] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.649425][ T757] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.016452][ T5354] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.254409][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.277496][T16867] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.320249][T16867] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.338172][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.574006][T16744] lo speed is unknown, defaulting to 1000 [ 416.592365][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.630109][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 416.646523][ T4938] Bluetooth: hci7: command tx timeout [ 416.656604][T16744] ipvlan0 speed is unknown, defaulting to 1000 [ 417.048924][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 417.093959][T16866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 417.259001][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2906'. [ 418.463122][T16933] syzkaller0: entered promiscuous mode [ 418.526642][T16933] syzkaller0: entered allmulticast mode [ 419.013764][T16952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.098415][T16957] netlink: 'syz.5.2914': attribute type 1 has an invalid length. [ 419.130749][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.139218][T16744] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.147020][T16744] bridge_slave_0: entered allmulticast mode [ 419.155987][T16744] bridge_slave_0: entered promiscuous mode [ 419.172865][T16952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.210763][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.228733][T16744] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.238269][T16744] bridge_slave_1: entered allmulticast mode [ 419.265325][T16744] bridge_slave_1: entered promiscuous mode [ 419.382560][T16957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.423388][T16744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.437150][T16744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.526263][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.711911][T16744] team0: Port device team_slave_0 added [ 419.747667][T16744] team0: Port device team_slave_1 added [ 419.909964][T16974] __nla_validate_parse: 2 callbacks suppressed [ 419.909982][T16974] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2919'. [ 419.950927][T16744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.976685][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.058674][T16744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.135215][T16744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.169277][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.315687][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2921'. [ 420.364209][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2921'. [ 420.406539][T16744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.419702][T16990] netlink: 'syz.6.2921': attribute type 12 has an invalid length. [ 420.451333][T16990] netlink: 'syz.6.2921': attribute type 13 has an invalid length. [ 420.538349][T16980] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.595452][T16985] netlink: 'syz.6.2921': attribute type 3 has an invalid length. [ 420.863747][T16744] hsr_slave_0: entered promiscuous mode [ 420.881100][T16744] hsr_slave_1: entered promiscuous mode [ 420.907669][T16744] debugfs: 'hsr0' already exists in 'hsr' [ 420.926194][T16744] Cannot create hsr debugfs directory [ 421.245497][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2929'. [ 421.306837][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2929'. [ 421.382390][T17017] ip6gre1: entered promiscuous mode [ 421.409654][T17017] ip6gre1: entered allmulticast mode [ 421.960847][T17040] tun0: tun_chr_ioctl cmd 2148553947 [ 422.029154][T17037] syzkaller1: entered promiscuous mode [ 422.048629][T17037] syzkaller1: entered allmulticast mode [ 422.075568][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2934'. [ 422.860724][T17058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2938'. [ 422.911405][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 423.241628][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 423.270089][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2943'. [ 423.691379][T17085] geneve1: entered promiscuous mode [ 424.801592][T16744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.818265][T17130] netlink: 'syz.6.2952': attribute type 1 has an invalid length. [ 424.880055][T16744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.995602][T16744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.066987][T16744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.103380][T16744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.152133][T16744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.200679][T16744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.257849][T16744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.469716][T17142] bridge0: port 1(wlan1) entered disabled state [ 425.515597][T17142] mac80211_hwsim hwsim10 wlan1 (unregistering): left allmulticast mode [ 425.542820][T17142] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 425.569028][T17142] bridge0: port 1(wlan1) entered disabled state [ 427.766458][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.793273][T17140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.880809][T17153] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 428.905856][T17153] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 428.929626][T17153] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 429.653741][T17140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.982012][T17140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.332667][T17140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.698093][T16744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.757959][T17214] netlink: 'syz.6.2974': attribute type 13 has an invalid length. [ 431.005441][T16744] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.024396][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.031588][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.039494][T17226] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 431.236899][ T9457] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.281306][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.288598][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.431766][T17230] bond12: (slave bridge4): making interface the new active one [ 431.470627][T17230] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 431.526326][ T1164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.958271][ T9458] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.015995][ T9458] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.037935][T17253] __nla_validate_parse: 6 callbacks suppressed [ 432.037955][T17253] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2981'. [ 432.534859][T17259] syzkaller0: entered promiscuous mode [ 432.565328][T17259] syzkaller0: entered allmulticast mode [ 436.637492][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2994'. [ 436.996611][T17319] ip_tables: iptables: counters copy to user failed while replacing table [ 438.744777][T17331] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2999'. [ 438.763251][T17330] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3001'. [ 438.773067][T17330] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3001'. [ 438.912316][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3003'. [ 439.688701][T16744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.013076][T16744] veth0_vlan: entered promiscuous mode [ 440.095593][T16744] veth1_vlan: entered promiscuous mode [ 440.237968][T16744] veth0_macvtap: entered promiscuous mode [ 440.318030][T16744] veth1_macvtap: entered promiscuous mode [ 440.415420][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'. [ 440.444532][T17371] netlink: 'syz.0.3011': attribute type 1 has an invalid length. [ 440.465653][T17371] netlink: 'syz.0.3011': attribute type 3 has an invalid length. [ 440.492701][T16744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.519186][T17371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3011'. [ 440.562128][T16744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.704618][T17372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.742611][ T9460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.808495][ T9457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.977263][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.028094][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.176281][T17388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 441.178287][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 441.211253][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.248762][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.434841][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.446227][T17390] syzkaller0: entered promiscuous mode [ 441.466053][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.473658][T17390] syzkaller0: entered allmulticast mode [ 442.262766][T17399] gre0: entered allmulticast mode [ 442.274685][T17400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3018'. [ 442.469859][T17399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2883'. [ 442.550196][T17400] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 443.185844][T17415] x_tables: duplicate underflow at hook 1 [ 443.379251][T17396] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.407001][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.921706][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.949809][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.962902][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.986432][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.003887][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.969612][T17396] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.174359][T17447] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 447.307822][ T4938] Bluetooth: hci2: command tx timeout [ 449.366721][ T4938] Bluetooth: hci2: command tx timeout [ 451.458154][ T4938] Bluetooth: hci2: command tx timeout [ 453.536100][ T4938] Bluetooth: hci2: command tx timeout [ 458.189186][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 458.204407][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 458.213237][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 458.222466][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 458.466573][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.259537][ T4938] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 460.277935][ T4938] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 460.296601][ T4938] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 460.308331][ T4938] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 460.343799][ T4938] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 460.566479][ T4938] Bluetooth: hci4: command tx timeout [ 462.569791][ T4938] Bluetooth: hci8: command tx timeout [ 462.649861][ T4938] Bluetooth: hci4: command tx timeout [ 463.108024][T17396] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.054188][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 464.068713][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 464.088648][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 464.122608][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 464.132185][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 464.285261][T17396] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.646740][ T5633] Bluetooth: hci8: command tx timeout [ 464.705569][ T4938] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 464.722762][ T4938] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 464.731699][ T4938] Bluetooth: hci4: command tx timeout [ 464.741359][ T4938] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 464.766510][ T4938] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 464.784438][ T4938] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 465.337798][T16564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.385657][T16564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.326618][ T4938] Bluetooth: hci9: command tx timeout [ 466.727727][ T4938] Bluetooth: hci8: command tx timeout [ 466.816328][ T4938] Bluetooth: hci4: command tx timeout [ 466.886477][ T4938] Bluetooth: hci10: command tx timeout [ 467.391634][T17435] xfrm0 speed is unknown, defaulting to 1000 [ 467.740108][T16564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.952924][T16564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.426236][ T4938] Bluetooth: hci9: command tx timeout [ 468.452085][T17435] lo speed is unknown, defaulting to 1000 [ 468.464145][T17469] xfrm0 speed is unknown, defaulting to 1000 [ 468.806386][ T4938] Bluetooth: hci8: command tx timeout [ 468.954037][T16564] bond0: (slave netdevsim1): Releasing backup interface [ 468.966134][ T4938] Bluetooth: hci10: command tx timeout [ 469.162318][T16564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.200603][T16564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.462826][T17435] ipvlan0 speed is unknown, defaulting to 1000 [ 469.471700][ T9459] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.641874][ T9460] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.938904][T16564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.001692][T16564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.216463][T17469] lo speed is unknown, defaulting to 1000 [ 470.222320][T17462] xfrm0 speed is unknown, defaulting to 1000 [ 470.315159][T17469] ipvlan0 speed is unknown, defaulting to 1000 [ 470.474868][ T9460] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.486384][ T4938] Bluetooth: hci9: command tx timeout [ 470.546970][ T9460] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.046236][ T4938] Bluetooth: hci10: command tx timeout [ 471.899659][T17482] xfrm0 speed is unknown, defaulting to 1000 [ 471.907182][T17462] lo speed is unknown, defaulting to 1000 [ 471.964445][T17462] ipvlan0 speed is unknown, defaulting to 1000 [ 472.586176][ T4938] Bluetooth: hci9: command tx timeout [ 473.126307][ T4938] Bluetooth: hci10: command tx timeout [ 474.032651][T16564] dvmrp8: left allmulticast mode [ 474.087820][T16564] batman_adv: batadv0: Interface deactivated: gretap1 [ 479.751364][T16564] bond1 (unregistering): (slave erspan1): Releasing active interface [ 480.078650][T16564] batman_adv: batadv0: Removing interface: gretap1 [ 480.471437][T16564] bond10 (unregistering): (slave gretap2): Releasing active interface [ 482.839233][T16564] bond12 (unregistering): (slave bridge4): Releasing active interface [ 483.039157][T16564] bond0 (unregistering): Released all slaves [ 483.153937][T16564] bond1 (unregistering): Released all slaves [ 483.279583][T16564] bond2 (unregistering): Released all slaves [ 483.425145][T16564] bond3 (unregistering): Released all slaves [ 483.572259][T16564] bond4 (unregistering): Released all slaves [ 483.704500][T16564] bond5 (unregistering): Released all slaves [ 483.823830][T16564] bond6 (unregistering): Released all slaves [ 483.943228][T16564] bond7 (unregistering): Released all slaves [ 484.083322][T16564] bond8 (unregistering): Released all slaves [ 484.215231][T16564] bond9 (unregistering): Released all slaves [ 484.317946][T16564] bond10 (unregistering): Released all slaves [ 484.561964][T16564] bond11 (unregistering): Released all slaves [ 484.711662][T16564] bond12 (unregistering): Released all slaves [ 484.922215][T17482] lo speed is unknown, defaulting to 1000 [ 484.928505][T17488] xfrm0 speed is unknown, defaulting to 1000 [ 484.982247][T17482] ipvlan0 speed is unknown, defaulting to 1000 [ 485.033588][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.734099][T16564] tipc: Left network mode [ 485.981513][T16564] IPVS: stopping backup sync thread 9230 ... [ 487.270066][T17488] lo speed is unknown, defaulting to 1000 [ 487.589192][T17488] ipvlan0 speed is unknown, defaulting to 1000 [ 488.806059][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 488.995192][T17435] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.107486][T17435] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.126340][T17435] bridge_slave_0: entered allmulticast mode [ 489.143049][T17435] bridge_slave_0: entered promiscuous mode [ 489.168376][T17435] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.195773][T17435] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.253934][T17435] bridge_slave_1: entered allmulticast mode [ 489.273820][T17435] bridge_slave_1: entered promiscuous mode [ 489.351492][T17469] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.376498][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.388863][T17469] bridge_slave_0: entered allmulticast mode [ 489.424177][T17469] bridge_slave_0: entered promiscuous mode [ 489.445896][T17469] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.477062][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.496677][T17469] bridge_slave_1: entered allmulticast mode [ 489.513857][T17469] bridge_slave_1: entered promiscuous mode [ 490.851621][T17469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.883896][T17469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.937411][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.956596][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.974132][T17462] bridge_slave_0: entered allmulticast mode [ 490.994647][T17462] bridge_slave_0: entered promiscuous mode [ 491.043003][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.066559][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.082170][T17462] bridge_slave_1: entered allmulticast mode [ 491.102551][T17462] bridge_slave_1: entered promiscuous mode [ 491.190305][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.393105][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.840342][T17435] team0: Port device team_slave_0 added [ 492.701976][T17435] team0: Port device team_slave_1 added [ 492.838091][T17469] team0: Port device team_slave_0 added [ 492.885668][T17469] team0: Port device team_slave_1 added [ 493.095493][T17462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.184484][T17462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.159553][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.361741][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.525422][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.703661][T17469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.756044][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.818106][T17469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.871730][T17469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.886025][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.996027][T17469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.142188][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 495.194141][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.214691][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.346035][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.519823][T16564] hsr_slave_0: left promiscuous mode [ 495.584413][T16564] veth1_macvtap: left promiscuous mode [ 495.660849][T16564] veth0_macvtap: left promiscuous mode [ 502.860815][ T9459] smbdirect: ib_dev[syz2] removed [ 503.072697][T17462] team0: Port device team_slave_0 added [ 503.149978][T17462] team0: Port device team_slave_1 added [ 503.355227][T17482] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.403885][T17482] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.434793][T17482] bridge_slave_0: entered allmulticast mode [ 503.462533][T17482] bridge_slave_0: entered promiscuous mode [ 503.521997][ T5721] lo speed is unknown, defaulting to 1000 [ 503.534294][T17482] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.545404][ T5721] infiniband syz2: ib_query_port failed (-19) [ 503.566549][T17482] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.574673][T17482] bridge_slave_1: entered allmulticast mode [ 503.602358][T17482] bridge_slave_1: entered promiscuous mode [ 504.575755][T17482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.651538][T17482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.791982][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.814009][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.830885][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.855709][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.910227][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.970005][T17469] hsr_slave_0: entered promiscuous mode [ 505.063974][T17469] hsr_slave_1: entered promiscuous mode [ 505.117562][T17469] debugfs: 'hsr0' already exists in 'hsr' [ 505.208439][T17469] Cannot create hsr debugfs directory [ 505.503818][T17462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.547675][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.720853][T17462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.969843][ T5633] Bluetooth: hci1: command tx timeout [ 507.277864][T17462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.396038][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.730228][T17462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.882165][T17482] team0: Port device team_slave_0 added [ 509.048775][ T5633] Bluetooth: hci1: command tx timeout [ 509.142577][T17482] team0: Port device team_slave_1 added [ 509.441033][T17462] hsr_slave_0: entered promiscuous mode [ 509.504043][T17462] hsr_slave_1: entered promiscuous mode [ 509.535055][T17462] debugfs: 'hsr0' already exists in 'hsr' [ 509.556041][T17462] Cannot create hsr debugfs directory [ 509.764847][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 509.907446][T17482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.959055][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.170593][T17482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.115294][T16564] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.129400][ T5633] Bluetooth: hci1: command tx timeout [ 511.266393][T17482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.292855][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.398648][T17482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.493045][T17488] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.519123][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.536415][T17488] bridge_slave_0: entered allmulticast mode [ 511.551069][T17488] bridge_slave_0: entered promiscuous mode [ 511.771546][T17488] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.800944][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.845696][T17488] bridge_slave_1: entered allmulticast mode [ 511.876091][T17488] bridge_slave_1: entered promiscuous mode [ 512.156375][T17595] xfrm0 speed is unknown, defaulting to 1000 [ 512.249716][T16564] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.845676][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.207162][ T5633] Bluetooth: hci1: command tx timeout [ 513.318310][T16564] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.445137][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.995671][T17482] hsr_slave_0: entered promiscuous mode [ 514.043142][T17482] hsr_slave_1: entered promiscuous mode [ 514.082402][T17482] debugfs: 'hsr0' already exists in 'hsr' [ 514.110976][T17482] Cannot create hsr debugfs directory [ 514.417238][T17595] ipvlan0 speed is unknown, defaulting to 1000 [ 514.645336][T16564] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.741586][T17488] team0: Port device team_slave_0 added [ 515.008279][T17488] team0: Port device team_slave_1 added [ 515.985826][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.019050][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.280238][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.823958][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.876022][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.010798][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.625200][T17469] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 518.759376][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.059707][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.073664][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.094569][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.113058][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.121648][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.592202][T17488] hsr_slave_0: entered promiscuous mode [ 519.637624][T17488] hsr_slave_1: entered promiscuous mode [ 519.670975][T17488] debugfs: 'hsr0' already exists in 'hsr' [ 519.696021][T17488] Cannot create hsr debugfs directory [ 519.734685][T17469] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 520.430502][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.206483][ T4938] Bluetooth: hci2: command tx timeout [ 521.327042][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.353595][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.375641][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.386980][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.395462][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.565022][T16564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.126922][ T31] INFO: task syz.4.2703:15898 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.212733][ T31] Not tainted syzkaller #0 [ 523.258493][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.286281][ T5633] Bluetooth: hci2: command tx timeout [ 523.446618][ T5633] Bluetooth: hci5: command tx timeout [ 523.515142][ T31] task:syz.4.2703 state:D stack:27320 pid:15898 tgid:15897 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 523.652280][ T31] Call Trace: [ 523.691358][ T31] [ 523.747404][ T31] __schedule+0x17d9/0x56c0 [ 523.816184][ T31] ? __lock_acquire+0x683/0x2cf0 [ 523.854442][ T31] ? __lock_acquire+0x683/0x2cf0 [ 523.896228][ T31] ? __pfx___schedule+0x10/0x10 [ 523.928343][ T31] ? schedule+0x90/0x2b0 [ 523.957378][ T31] schedule+0x164/0x2b0 [ 523.975717][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.006011][ T31] __mutex_lock+0x7bf/0x1550 [ 524.011924][ T31] ? __mutex_lock+0x5d4/0x1550 [ 524.029341][ T31] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 524.086191][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.108939][ T31] ? __asan_memset+0x22/0x50 [ 524.131005][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 524.151644][ T31] nfsd_nl_listener_set_doit+0x135/0x1750 [ 524.189269][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 524.207056][ T31] ? irqentry_exit+0x218/0x8f0 [ 524.227748][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 524.248206][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 524.277993][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 524.309524][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.335619][ T31] ? bpf_lsm_capable+0x9/0x20 [ 524.354166][ T31] ? security_capable+0x7e/0x2c0 [ 524.374577][ T31] genl_rcv_msg+0x614/0x7a0 [ 524.394687][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.451490][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 524.472340][ T31] netlink_rcv_skb+0x226/0x4a0 [ 524.497244][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.516007][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.548697][ T31] ? down_read+0x2be/0x330 [ 524.574405][ T31] genl_rcv+0x28/0x40 [ 524.587417][ T31] netlink_unicast+0x7bb/0x940 [ 524.613763][ T31] netlink_sendmsg+0x813/0xb40 [ 524.634383][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.664136][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.681809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.700207][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 524.736454][ T31] ____sys_sendmsg+0x54e/0x850 [ 524.754116][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.778354][ T31] ? import_iovec+0x73/0xa0 [ 524.793111][ T31] ___sys_sendmsg+0x2a5/0x360 [ 524.806020][ T31] ? __lock_acquire+0x683/0x2cf0 [ 524.818513][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.842609][ T31] ? futex_wake+0x51b/0x5f0 [ 524.856037][ T31] ? __fget_files+0x2a/0x420 [ 524.876007][ T31] ? __fget_files+0x3a2/0x420 [ 524.887092][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 524.898319][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.916059][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.926945][ T31] do_syscall_64+0x174/0x580 [ 524.956010][ T31] ? trace_irq_disable+0x3b/0x140 [ 524.961459][ T31] ? clear_bhb_loop+0x40/0x90 [ 524.976035][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.998723][ T31] RIP: 0033:0x7fc31c99e0d9 [ 525.009907][ T31] RSP: 002b:00007fc31d7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.034813][ T31] RAX: ffffffffffffffda RBX: 00007fc31cc25fa0 RCX: 00007fc31c99e0d9 [ 525.076011][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 525.086938][ T31] RBP: 00007fc31ca35024 R08: 0000000000000000 R09: 0000000000000000 [ 525.240620][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.266016][ T31] R13: 00007fc31cc26038 R14: 00007fc31cc25fa0 R15: 00007fff43c6b958 [ 525.287506][ T31] [ 525.310711][ T31] [ 525.310711][ T31] Showing all locks held in the system: [ 525.344988][ T31] 3 locks held by kworker/u8:1/13: [ 525.358106][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.396233][ T31] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.406053][ T5633] Bluetooth: hci2: command tx timeout [ 525.468403][ T31] #2: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 525.517981][ T31] 1 lock held by khungtaskd/31: [ 525.556820][ T5633] Bluetooth: hci5: command tx timeout [ 525.571914][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 525.633029][ T31] 3 locks held by kworker/u8:2/36: [ 525.672116][ T31] #0: ffff88803188d140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.752573][ T31] #1: ffffc90000ac7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.846369][ T31] #2: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 525.915791][ T31] 4 locks held by kworker/u8:9/1164: [ 525.961561][ T31] 1 lock held by dhcpcd/5283: [ 525.982234][ T31] #0: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x249/0x390 [ 526.035185][ T31] 2 locks held by getty/5379: [ 526.071034][ T31] #0: ffff8880360e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 526.165426][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 526.374695][ T31] 2 locks held by kworker/0:4/5714: [ 526.418379][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 526.463569][ T31] #1: ffffc90003cafc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 526.532939][ T31] 2 locks held by syz.1.2164/13780: [ 526.559363][ T31] #0: ffffffff9009ec28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.614509][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 526.656014][ T31] 2 locks held by syz.4.2703/15898: [ 526.666424][ T31] #0: ffffffff9009ec28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.693298][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 526.726029][ T31] 8 locks held by kworker/u8:16/16564: [ 526.736410][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 526.766000][ T31] #1: ffffc900053b7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 526.816020][ T31] #2: ffffffff9001f988 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 526.846008][ T31] #3: ffff88807998d128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 526.878329][ T31] #4: ffff88807998b258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 526.966015][ T31] #5: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 527.026011][ T31] #6: ffff8880407ace70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2150 [ 527.076017][ T31] #7: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 527.155929][ T31] 7 locks held by syz-executor/17462: [ 527.165537][ T31] #0: ffff888033c92450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 527.198676][ T31] #1: ffff8880504e1880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 527.226002][ T31] #2: ffff888029c83f08 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 527.254601][ T31] #3: ffffffff8f8aa4a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 527.296454][ T31] #4: ffff88804dee6128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 527.318117][ T31] #5: ffff888030168258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xfc/0xbf0 [ 527.346030][ T31] #6: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 527.374926][ T31] 1 lock held by syz-executor/17469: [ 527.402508][ T31] #0: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 527.426024][ T31] 4 locks held by syz-executor/17482: [ 527.436024][ T31] #0: ffff888033c92450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 527.466004][ T31] #1: ffff88807a4a1c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 527.494306][ T31] #2: ffff888029c83e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 527.527264][ T31] #3: ffffffff8f8aa4a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 527.556011][ T31] 2 locks held by syz-executor/17488: [ 527.566446][ T31] #0: ffffffff8f778868 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 527.600863][ T31] #1: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 527.646015][ T31] 2 locks held by syz-executor/17595: [ 527.658664][ T31] #0: ffffffff9057f438 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 527.686017][ T31] #1: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 527.706031][ T31] 1 lock held by syz-executor/17664: [ 527.728173][ T31] #0: ffff888053380ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 527.766011][ T31] 1 lock held by syz-executor/17673: [ 527.774031][ T31] #0: ffff888053368ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 527.800630][ T31] [ 528.041917][ T31] ============================================= [ 528.041917][ T31] [ 528.107706][ T31] NMI backtrace for cpu 0 [ 528.107727][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 528.107749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.107760][ T31] Call Trace: [ 528.107767][ T31] [ 528.107776][ T31] dump_stack_lvl+0xe8/0x150 [ 528.107813][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 528.107918][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 528.107962][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 528.107988][ T31] sys_info+0x135/0x170 [ 528.108007][ T31] watchdog+0xfd7/0x1030 [ 528.108045][ T31] ? watchdog+0x1c7/0x1030 [ 528.108076][ T31] kthread+0x388/0x470 [ 528.108104][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.108125][ T31] ? __pfx_kthread+0x10/0x10 [ 528.108153][ T31] ret_from_fork+0x514/0xb70 [ 528.108194][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.108221][ T31] ? __switch_to+0xc89/0x1420 [ 528.108248][ T31] ? __pfx_kthread+0x10/0x10 [ 528.108275][ T31] ret_from_fork_asm+0x1a/0x30 [ 528.108309][ T31] [ 528.108317][ T31] Sending NMI from CPU 0 to CPUs 1: [ 528.221444][ C1] NMI backtrace for cpu 1 [ 528.221466][ C1] CPU: 1 UID: 0 PID: 1164 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 528.221485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.221496][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 528.221525][ C1] RIP: 0010:preempt_count_sub+0x0/0x170 [ 528.221551][ C1] Code: 38 c1 0f 8c 73 ff ff ff 48 c7 c7 44 da 57 90 e8 16 2b a0 00 e9 62 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 80 65 78 [ 528.221565][ C1] RSP: 0018:ffffc90000a08f38 EFLAGS: 00000206 [ 528.221579][ C1] RAX: 0000000000000012 RBX: 0000000000000246 RCX: 0000000080000103 [ 528.221591][ C1] RDX: 0000000000000002 RSI: ffffffff8e2313f0 RDI: 0000000000000001 [ 528.221602][ C1] RBP: ffffffff8e80a100 R08: ffffffff9057a737 R09: 1ffffffff20af4e6 [ 528.221614][ C1] R10: dffffc0000000000 R11: fffffbfff20af4e7 R12: 0000000000000009 [ 528.221626][ C1] R13: 0000000000000008 R14: ffff8880b87281c0 R15: 0000000000000001 [ 528.221637][ C1] FS: 0000000000000000(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000 [ 528.221651][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.221662][ C1] CR2: 00007fd241ea1e9c CR3: 000000000e946000 CR4: 00000000003526f0 [ 528.221677][ C1] Call Trace: [ 528.221683][ C1] [ 528.221689][ C1] _raw_spin_unlock_irqrestore+0x4c/0x80 [ 528.221774][ C1] handle_softirqs+0x225/0x840 [ 528.221796][ C1] ? do_softirq+0x76/0xd0 [ 528.221818][ C1] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 528.221841][ C1] do_softirq+0x76/0xd0 [ 528.221860][ C1] [ 528.221866][ C1] [ 528.221871][ C1] __local_bh_enable_ip+0xf8/0x130 [ 528.221891][ C1] nsim_dev_trap_report_work+0x7a4/0xb40 [ 528.221928][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 528.221948][ C1] process_scheduled_works+0xa8e/0x14e0 [ 528.221982][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.222005][ C1] ? assign_work+0x3cf/0x5d0 [ 528.222027][ C1] worker_thread+0xa47/0xfb0 [ 528.222055][ C1] ? __kthread_parkme+0x71/0x1f0 [ 528.222082][ C1] kthread+0x388/0x470 [ 528.222106][ C1] ? __pfx_worker_thread+0x10/0x10 [ 528.222124][ C1] ? __pfx_kthread+0x10/0x10 [ 528.222148][ C1] ret_from_fork+0x514/0xb70 [ 528.222175][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 528.222199][ C1] ? __switch_to+0xc89/0x1420 [ 528.222221][ C1] ? __pfx_kthread+0x10/0x10 [ 528.222246][ C1] ret_from_fork_asm+0x1a/0x30 [ 528.222271][ C1] [ 528.924320][T16564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.676628][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 529.683644][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 529.692763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.703002][ T31] Call Trace: [ 529.706289][ T31] [ 529.709222][ T31] vpanic+0x56c/0xa60 [ 529.713227][ T31] ? __pfx___schedule+0x10/0x10 [ 529.718092][ T31] ? __pfx_vpanic+0x10/0x10 [ 529.722715][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 529.728909][ T31] panic+0xc5/0xd0 [ 529.732666][ T31] ? __pfx_panic+0x10/0x10 [ 529.737103][ T31] ? preempt_schedule_common+0x82/0xd0 [ 529.742585][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 529.748061][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 529.754229][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 529.760399][ T31] watchdog+0x1030/0x1030 [ 529.764755][ T31] ? watchdog+0x1c7/0x1030 [ 529.769198][ T31] kthread+0x388/0x470 [ 529.773284][ T31] ? __pfx_watchdog+0x10/0x10 [ 529.777969][ T31] ? __pfx_kthread+0x10/0x10 [ 529.782579][ T31] ret_from_fork+0x514/0xb70 [ 529.787191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 529.792319][ T31] ? __switch_to+0xc89/0x1420 [ 529.797020][ T31] ? __pfx_kthread+0x10/0x10 [ 529.801650][ T31] ret_from_fork_asm+0x1a/0x30 [ 529.806447][ T31] [ 529.809638][ T31] Kernel Offset: disabled [ 529.813967][ T31] Rebooting in 86400 seconds..