last executing test programs: 3m58.536782948s ago: executing program 3 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111df000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) syz_init_net_socket$llc(0x1a, 0x801, 0x0) close(0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0x16a}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000006880)) 3m57.949059449s ago: executing program 3 (id=779): getpid() (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f6ad9007e8000000000000018000000fdffffff0000000000002e0095000000000000009500000000000000b805af43d02095b8d1558fcb380eab2a25"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "e4a84c69cce612d5", "bc86c9bba20b527c2f56ae19fafc1633", "d07ae6af", "78a47c00a3d3f6d1"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(0xffffffffffffffff, 0x8) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x10000}, 0x8) (async) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30013, r2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "1da6082936cd4216", "7354676d0f25f9cc144f6cdb60fbd89c", "f2862ef7", "7dc60f4e675b6051"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) (async) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x7}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m56.700837608s ago: executing program 3 (id=791): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) unshare(0x8040480) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x7c, r4, 0x100, 0x70bd2a, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x6, 0x1}, {0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x6, 0x8000, 0x8d36, 0x5, 0x1, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x8, 0x800, 0x8, 0x9, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24050807}, 0x0) 3m55.706976007s ago: executing program 3 (id=800): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "8f2fa5f0cca3ebf868cda73d2e48ecf2"}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r5, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008891}, 0x20040000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x486000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x2e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0xffffffff, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1b}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m55.498968611s ago: executing program 3 (id=801): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="81b4fd3a3d54e2f7093591ac95", @ANYRES64=0x0], 0x20) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000200)={r2}, 0x3c) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r1, r3, 0x2f, 0x30, 0x4, @void, @void, @void, @value=r4}, 0x20) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) close(0x3) 3m55.279772429s ago: executing program 3 (id=805): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x10901, 0xffffffffffffffff, 0x40}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x5c, r1, 0x131, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb6}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x401}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24056801}, 0x20000811) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r6, r5, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000027c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000002800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x34, r11, 0x5, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x34}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000080)=0x20091, 0x4) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r13, &(0x7f00000003c0)={0x2c, 0x2, r15, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xe31f98f386fa329b}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x1d8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) 3m40.223735037s ago: executing program 32 (id=805): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x10901, 0xffffffffffffffff, 0x40}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x5c, r1, 0x131, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb6}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x401}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24056801}, 0x20000811) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r6, r5, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000027c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000002800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x34, r11, 0x5, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x34}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000080)=0x20091, 0x4) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r13, &(0x7f00000003c0)={0x2c, 0x2, r15, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xe31f98f386fa329b}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x1d8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) 2m5.871641248s ago: executing program 4 (id=1646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000180)={'wlan1\x00', @random="c5051f002200"}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf28}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 2m5.71253223s ago: executing program 4 (id=1649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x8000) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2m5.492586119s ago: executing program 4 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2fcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0x810, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x18, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x11, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94) 2m5.443665588s ago: executing program 4 (id=1653): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = socket(0x10, 0x803, 0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)={[{0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpu'}, {0x2d, 'io'}]}, 0x1b) getsockname$packet(r2, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf252100000004002a00d3002a0037cd07055f9ada786548b90fc2e8312c27920d4479dc5973e89ace318ac37799df33db6292f0afbd2d66cb11ee369b269c426b07cea0edc158b72eb78422f68d2045dcd406000000000000007f61fd66030e3934952ec75f477d4361ee28210501113f53551794e3bff92a61b63f48d3e05a7b0310243cba7b93b507a7becad32e182ea730021c42cce879d3b181da3a7c8ec37c8dcf640e4b770202188805e92a55de0126bd706cdb2818ca39a0592a459adceb6669c310d423dbaed46f651c81d205e938b848460807e5004c002c80080000000800000008000000070000000800000004000000080000009c170000080000000b00000008000000008000000800000051ea00000800000008000000080000000000000039012a007e150f9980ffffffffffff03000000040000000500000065125050505050500802110000000802110000003e010126d7020305f821b34db97d62de7e7f8a409cb83e68ffdf1b05ce285287a86aaec041505307932270c4abda67be56933d661340cc9c0002c9d94e3f28e2f64986a75e28f9b0c5d7ad68daa10509efb802e0f2dad634d06e8fe4ae77431240dff8186fd7b1c0b194efcbcec8bc35fe8cbc2296e79821d71414068cee3e99c4becb42250bbb19b94d732a8b3fbaabed0fe5676ac7dd0c7e64ad2dc1450ecc8611281f81a3a1ff87e173f9d3826f1ecf06391d2f05564b238951a6fef7047cabed8aa43656e09c641ffc5a13d2215b0b71f0db31ba4d725b87154b75060100040033000006010101010103010142710700ff00fb0202088c10890e0a55624a47c092a0fd95f8a2dca50000000400ff000600f700010500000a0006000802110000000000291eda4a82d1955115359099ca9f4e0d51b9f51a576d3c754373303ec39c9bbb4c185d3fab83755bf179c8dd4d2a7181027b191b180c8ea635f938a5620ae3a95fb9b9cb08bd8ab522e347330e7f8a97ed7ff63db92282a6d09f186ab75b2505d07e8c059a622adab0a492df7f57e79e1bb9704c2dfa81960275842545e487e231ae560c5a4a2a381ba6e6bf4d81198041a59423e2"], 0x28c}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xc, 0xc}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000b66c9518000000000000000018110000ee7a101f0391234be5fbad58d9930e365e9c2f6f408937354c9e8283a6cb7980af0b9d8e5eabcafab6484849715df88818f6716adcd8b76ac0903341513d9d03289815a494c5f1b96958cfe5935beb41aeb5e1ac75ce63952d56bb", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) 2m5.189213404s ago: executing program 4 (id=1656): poll(0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) syz_emit_ethernet(0x66, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6(0xa, 0x5, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="49000000000201020000000000000000020000052c00028406000340000200001400018008000100ac14142f08000200ac1414aa0c00028005000100880000000400018004000380"], 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m3.920848127s ago: executing program 4 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xc040480) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 1m48.773560078s ago: executing program 33 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xc040480) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 3.649095125s ago: executing program 6 (id=2527): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020a}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1f, 0x400, 0x70bd27, 0x25dfdbff, {0x1e}, [@nested={0x18, 0xa, 0x0, 0x1, [@typed={0xc, 0x15a, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x68}, @nested={0x4, 0x95}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r1}, "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"}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000005) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, 0x1412, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3c2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc811}, 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4080) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001780)={{r0, &(0x7f0000001640)='nl80211\x00', 0x1, &(0x7f0000001680)={@align=0x8, {0x5, 0x5, 0x5, 0xf}}, 0x1, &(0x7f00000016c0)={@_ha_fsid}, &(0x7f0000001700)=0xbb07e67}, 0x0, &(0x7f0000001740)}) syz_80211_inject_frame(&(0x7f0000001800), &(0x7f0000001840)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @initial, @broadcast, @device_b, {0xb, 0x3}, "", @value={0x4, 0x1, 0x0, 0x0, 0x6}}, @a_msdu=[{@broadcast, @broadcast, 0xf6, "d8d96365bbc9d35b2fe07e91601404aa6725f5e2ce2aafc7edd2b30a63fb9dbc264d4096c0d248d9759d971fa5a17942e570843aa35c5680556dca1adecb802879e3ee2c75fcb489fad0dd79df353e6caf20e113c7395335dccf03fe3a480d0a86ad76330fd744905002634d0d2eada560b31dbdc99aa9d976773deb4250064696169a9ed487ff3710544547b70a47ff3c6e24a8299f230eb384d154b20522314140e190b8de8f7b6ad87e060beadc997e4ac576e186670acda354354e4ab013b68eac27e3aa0afb962faa86ccec8cec7827be0990337328ec395029120a3d554a4f42bcfffe69c258ccd5163d863d778eff96633c70"}, {@device_a, @device_a, 0xe7, "5807f85ddab83ec5128f3f2b1ac4b2e7118443b761b18a8e4edd20e3d7909e8ef1f5765786927b4057dc8b153e6dbadfc5daf6ac518e77dfc5823390443dd64414019eb3392dc6577bedb03eeb7a7fa1d9c0a281359bd11809ef9a480268ed31e9a42dffd17dcfebd520b6ed8f5ed92bcf4fd0ad8fa44115b024c079ac318fc023f5a13efe9f9e4b54b5920aa453ebd739214b596a2b8cd9ef3c40cf95c24a9c0e4973a92b2893b081fd8a4f50696eac4013c8edb50e4502da36d22309c3abb2cbe65aca84c07db91cdf70db63e2c756230f495750e9ab01ff04c8515f4cb477ae0eaf9ae9fc5a"}, {@device_b, @broadcast, 0x65, "7b76ce4154e2e99911783b4d1fa6ab0ffbb0f5b8eabaac8538f88d0be84751574eecced9e3edcf6ced5b90e1bceeb4ae0f56940801b26424472ab490e14f44bb4c7aad79d3641e414b250aa8ea765a0ec747edb6c0c1e079fc31f909f7b8dd7d0c372cd83e"}, {@broadcast, @broadcast, 0x34, "92c1580d703d9c467dcf18e3cd770d75347dc5b86da432486cc249b932aa38a2c5cea34b65b47c308d36334b6d6ab6f282ac71f7"}, {@broadcast, @broadcast, 0xdf, "c9961b80e4102385f812e98bfac1b6f117edcb82e40e7a056439f45890932816ee7fb115da4974c34937de842c3972aa7b5cd5f83cbcbb35e90e16b459c60fffd914086fe5749b76e57a1ab5d95a044265604f9de6ff459fd38cc88970a1fabe6618f699266a7fdc6e8359732ffa9f9506e70bca52b91cded8853a8b658874bff6a5881fb6435382c9ceb9621b90220f31377f7fa4e93d08a099bea9a6863f8ecd9ef010bf52729a7282b7e338b4fea3e66f5b9695754d64ea75c4d02014c2ccfd481ef18b308f6d34282a56901e84e0374072ee5fab462200832734f08357"}, {@device_b, @broadcast, 0x7f, "029cc3119da890fe42c03a6238a13fc52579f9a159b98ad36f5bf5682cdf9cfce195b805df013c462865e4297e7dcf49473b8b103636fd640a9c9b769499226653fc1869a0ad3b5d46c17ccd44ee502ee5c61e957a36c63c5e5809c17a28eb7a39526ce0f562ba48431ae904a11813a70e31c85009f01f6da0b194268dbeca"}, {@device_b, @device_b, 0xef, "82dfa2218bd30db043320f441f2cd6ec7d67bdd3c2e2db3bb25ef49d1a0f549353b0fb8efe3718545a19c02a489c6f5f33f2a5319c2972b332598887692ba5e941d1f2f90b5e1e354d3e6787ed6bf49656d0d8fe2db17a08e08c7f80d4d2e394f410f97074c5d8fe7d788380167e9618d7bf8b7717256a0272afa32dce7e416835d7af937ec9f884096537176f33927d125659f40bacbc939f8079ec65d0cd6370fc6880d1c0251cb749a6dbcdf5eb8d70e35c0d737200a4c7c1b49db57ddafde41da77399aa876cb45962112fdc8879de220e526da5b383c586769889d1aa95c2e1e0eb436dec8e3c0ce892a16cbc"}, {@device_a, @device_a, 0xfe, "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"}]}, 0x65a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f00), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002080)={'ip_vti0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x20, 0x10, 0x2, 0x4, {{0x43, 0x4, 0x2, 0x22, 0x10c, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x23, 0x24, [@remote, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x28, 0x7, 0x0, 0x0, [0x1, 0x7, 0x69fc, 0xfffffff9, 0x1, 0x4, 0x101, 0x3, 0xfffffff2]}, @cipso={0x86, 0x2b, 0x2, [{0x0, 0x12, "ec88b7dfe7c4552cce2083ba30285f95"}, {0x5, 0x2}, {0x6, 0x7, "30745464d7"}, {0x0, 0xa, "e3b57a4a17f458be"}]}, @rr={0x7, 0x1b, 0xd8, [@broadcast, @loopback, @broadcast, @remote, @rand_addr=0x64010100, @loopback]}, @ssrr={0x89, 0x17, 0xd0, [@remote, @local, @loopback, @local, @multicast2]}, @noop, @timestamp_addr={0x44, 0x24, 0x82, 0x1, 0x8, [{@remote, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xffffff51}, {@multicast2, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xffff}]}, @cipso={0x86, 0x29, 0x3, [{0x5, 0xa, "b577314f1035d5bc"}, {0x1, 0xb, "dc8a8dcd2d333811da"}, {0x7, 0x5, "f9018f"}, {0x0, 0x9, "bfa307badd88d3"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r6, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002140)=[0x0, 0x0], 0x0, 0x29, &(0x7f0000002180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000023c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000002500)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0x9c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8188) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000029c0)={r6, 0xe0, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f00000027c0)=[{}, {}], 0x10, 0x10, &(0x7f0000002800), &(0x7f0000002840), 0x8, 0xa, 0x8, 0x8, &(0x7f0000002880)}}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r13, &(0x7f0000002b00)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a00)={0xbc, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0xbc}}, 0x4000c81) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000002b40)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x58, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x75, 0x18}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x181}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, 0x58}, 0x1, 0x0, 0x0, 0x40150}, 0x8000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002d00), 0xffffffffffffffff) 3.253267952s ago: executing program 0 (id=2532): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x10) (async) 2.964661918s ago: executing program 6 (id=2533): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) r1 = accept(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000085000000a00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000005c0)="f22188cd341abd70d7b9ca281f38", 0x0, 0x9ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000000000000008dce29b892f3de517af1e9bba00"/33, @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.79502475s ago: executing program 6 (id=2535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000840000000200000004004900c004000002000000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000005"], 0x50, 0x40001}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0x7ff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1, 0x0, 0x0, 0x2000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x29, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000540)={r2, &(0x7f00000003c0)='\xde\xab/{\x00', 0x100, &(0x7f0000000440)={@align=0x5, {0x9, 0x8, 0xff, 0x36}}, 0x5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x2}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000005c0)={0x0, 0x0, 0x7, 0x0, 0x8000}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendto$inet6(r5, &(0x7f0000000740)="c5cc44b5dc53ae349f857e60792c9a963d85bcfe410f9ea45b421c509d57ac286dac51a3d97d6dbeeb52181acf9ade01f5a88cfefe25d8116427bd5eb22f8b35bd1a14c9366b9a8ddbad0e6d9ebe2248c5a7b3cf6a1d6da92186efcb808dd84f582a74f82c5edf9fc5eb3b9b1bbee0d0334e4ad485f788e620ff572673c80e7c48c743983ea52b2f89d4f9dc26ef0995095b52619c97d7da39d5c461f68377e522eeecf5cb3269e0a06d278f66c850b06bf7634bd8b6868f036e881f96411eeac9ca38bd3b68245b8d1032f46639b1f245d79678c840c205180de5c0091b", 0xde, 0x40004, &(0x7f0000000840)={0xa, 0x4e24, 0x7, @private1, 0x1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000600135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r10, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00001d0040)={&(0x7f0000000040)=ANY=[@ANYBLOB="100f0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000000000000000000003"], 0xf10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@generic={0x91, 0x1, 0x1, 0x33}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) 1.868952593s ago: executing program 6 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000750000001400040073797a6b616c6c65723000000000000008000500070000000a00180003030303030300001c00e7"], 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) socket$nl_route(0x10, 0x3, 0x0) 1.760299823s ago: executing program 0 (id=2541): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x28c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xa41}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2c000}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x6bd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xf7e4}, {0x5}, {0x6, 0x11, 0x62d8}, {0x8, 0xb, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2b1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x87c}, {0x6, 0x16, 0xbfb}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe5}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xff00}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0xfffffffa}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$FIONCLEX(r0, 0x5450) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000004c0)={{r1}, "553032d81d0eb7a8be1fcd41cec82dab8ef1aae385d67c0b6530d869a8b8ec6d8e40e4956ac13b3063791f4452d6669ca5b3e9b8d4e6f0c17ba87901c3a98e4cb2d3471c0ebdaee48b32f17e0e871b9ec772cfd70db0bf8b87435a8db3df97f1846e2667e370c024888a2a649044ddabd364af53f609f8c888446e2185d4582594cf3c3f3ea0accd16bf49985722b451695d74dcd28289bc31158aa8ce90e6d7af1fdccee8b3ec82bf095378c50f8513557c67799ef069ace701e4a5c44d7b75b2a5692d144a9197ff87f403d8ac1ae9dd9abea30625c2d8ba1f75c6d86b6cf28344ef96fd54c070ac80bf106b069050830152e65a72dce1ec3c5bc63f8073f7c3dfe435a638e3b5006327e593e177dbf6c9b450affaeec74c1410e14abe3884a4322b52effc1e36412a5ee4abbbbeea2e4453695262a358a1aef10a6b4d47a8c1444c5dc40806f85fd68aebbf1823f32f20a4bf1d41268f10025008bd04f80a20a297663cdb4d644b0c97313d298aeb32d71be9bc1eec7862b6388e11c9e7706a639091326b4809260d64d73c5405c9963009d258e662b7ce62ad44a348540b68629674a2dc754829177cfa04f92c03c6d62fd87bac197253d22626e700b017705fcd3963e3cae844f73f7d864108d2f824848d01c16834c813d1eb99a10ea8dcab1dd27545f249afcff4537695d7e8fe03ed062b87c3fb560dfc41d2ce03048f3f3f3c7f0ae73bc8f3ae1d8d8fa0fcfa0943c76aab6e5be1718281785b97abc2c279d8ee454a1415dc4ae918f1a1e163b5632343ca609bd4b7a5a12fde88f7c4de122efb32391868075565afeb2b1dc193116133a43f80190849348eb352782362f9c1ced4e9e5afdd431fd1ebb087fcca851d3cb8e7b295237540ea2997182b166c85abf84e50f182fa8b6577658d24531b6577222dc3b19f0f2880cba0b79dde4d179007cbeee9c0e0bcccbfe71b7d3739a3256167fc8b83a52fd99beab071ec3d12483bd0a2fd7e36b76ac4ab837b20b2c4435bac522cb319c452df669ca23463c22eae8e7ef311ac290d4df277065088ef55ff02235f3a77c2e35c6c8608dbd2d5ba18098305aa86c25057e15981f6b8de2ce8b6ce3dad99736a090552a263375811fc436de3d5745a2e9344754581667ffdb01d05338aa3235485e32526534c6078033a0c1b93c811a8bf2e0cf816c56da1d7132554c4ce95e622e3effca5c9b799175a40e341eddc15068e4841d8b2a8bcbc9c35fac0bf8edd096f54b9271d75195bef28ddf40820fba914c55d7f80bee84f50efffe28c66d9ad2026d270b0df6d7d1b8d9a3c8acf40a3bfd0d8419d6a58b797dbf139c99ec1c4c907bd159d757f73c6b30923b5e35863871c878cd6fa3135b43358350d4880523516e70cb2e42f8b64d260918a561957a9fdcdab07bca991655de1a156507261585ada9dc52bcbca472b3bdb347cbc0f5f335d37b44e81d38a5d552cd06dc2006e52b84f301cc2f7d0fbc67c2b20b472dcfd7726f1381979300b81b4c00dfb3c3c20216354dbc4effacdd428de1ab82c6de229135978e83bfe911a18d59adfacc4be4b385244778812dc1903e15c25871fdef9406c336307723bb166c36638adb1500abab0a1ee07d1b11244a9d87f7febd30a1c4b603f79f6c3df839537ff84a0d8a46fae7bf12167b9f754483c5205cae1bae3d2e484adfd3495e3701982921ce233d1036c3e429d47b935599a89714bc6d24332d92e67255bd67e639f0cef7cb333f41182f27f86a5b553c172c0e6df596a027129075c4e167170b90b21ba0f46db1ac398c4747f4e1dc25e2210597cd6911441ea8c33c7d2aee10a0d18a6c0d1209b4afd8a527587dc8ce33b326e83ea726a1373776e4afdaedf417dff1a0f7e32dae91fe6a7f8241d2ddece5beeb44370a952a9dac61259074bebc17625b375bdfce91490f2be043ba1da25f2c10545b404177f2c2e574f89b2764c652adac14130987e2fa775551125c0f1fa7c23f7d2703aae520c0c043cb567fe5d63a51226567dc3637a861256a8943ef72e9099ee69dd4f520447bb7dc6e92f5f36f4c686839b6cfcdfede17583c0861f11db5dbbe67abf28da77970778c337a4f8c605edf0b84b351d8f034fdf9f5f4820b5d933b3b3fad1436f858842b99a1fe00cb1ca1be2dfa722e9e953fc3ffaafe08ae78879841c4f5b4f7088e7601fe7da6139eb2e8ac05e53e7d0f663c463719fc3485df7957b323e86cebde9d4648d68856af7244f43ffdc40aa8e39365ad5a918dd2a3a9792b04c05dac6747e502fb3498fe036d51e7321f14e353bc7a7d1d65810ac714a6be71a5014300c0f9d256113be94e420d977fd291dccb4d22abe412751e83268b1f860b3f70ad133bc2e379d445a264cfe9d4dd9e12d1acf202bca46ce2580ce66ff620ba12b2b4273ebbbecdcd141ad55d765e161bf5e220eb67e14ed06f3b7fe736e1a9f4839eaf834d162e6186c8768c7f98c8adcb05043b690ccd0223850f7c52ce16f86e5169fe3e9f95949e12fa41c38fc67dad17f0c9fe9c1c7949cff678ca5567fcdc416c28dcbc3beb98be5c35eeda209a6e181ea9032a0347c1e08b92783afbe4f5903d053ed53f73d6f7988fbb9e43c217f5b944b6cc1ef6d684e56a04ef3b21b48455714e5f0f4f7eed25b06309a229c24978ea9ab8adaa3222162523bf4a02f3f49df4e92a878abf76ed4bd5da22ca01447420ca94c8628a8589847c1fad8fd0d32d245cebf5a2cd1524f58f084d024e8a08eabe37b0eeeadcf27c5b0a6e12d18dc4645de4003cb0f945f58be67464205513534f001a1e0e8c1da832eb56b1335aa88389140561e9f72e6a6e9c42bc5092be57557c83457521ada74d4fec84044afada75ba2f2279ffcb4724b3f37171a240ecd7482e8c2263181a963f4792dc300de4294b0484a3008fc467a87cc038d4a36d368297fa4334b0e9ed684a981691826e357378d2435693ed6b786ff9deeb84cf108c786aaf0694acb6a3f6d7edb197b74571e8c0a5047f6798a3746af5a42f4389fcd786e7c0a22b656a12209fd437e680be576092de27fb53a0cea04f3a3bb7f11db056f4172a112442b60157479d4aa911443aa78eb5875886b89123368087b5eabea95c463029b5dcb4a45a238cf42f4725b44c3cb4249b7ffdc1df5bfae1d9eefed75157a7c7aa8d2975251a3779648af968601c138d7ad4c811fe66069ca60e2298886506a4759e0cffdf9c6591d129b225aa351b8274eb52be31064da78ed2ac872f606fb167dec6a635a8d0fc9ba50532a707c08e68ac4b3d850d2b75d5682b73c012f7c6a6119cf05ee867e07354e41eb2c9c13072a60615ad2adceb6af2759c6742d2e6ab7270de5b48d9c35eb621067d9948682c8d1193efee8b965351fb3280ab7d49bd00a040ac51dd0bffc5d860454406910595f47038be7d4b1083f629412e70a0264f85b4407c4f6a9d2091875e8c96d5bf7804ddf7108c4416c8182acf9cf8ca6683a87d1578b7ced6b52a3d8671f6a333680676edd31e27bcdce167d65251e7e3d572e1b67d50d40c5179be4e4e938d91cd472ac9a93af21e3ced83edf9a09f9d2864a8f52b9a63889bb0ffadbd6a95bcb2a05b79d87713d98208acf29cb1669ce30e343c056aab9b8f1f5d706555eb97dc42f70b58fc200cb5b313ceb4b00379cf5d8e982d90b489eaca056aee8d5662f8cdfd931d3fcd5cf69a594060611e706f3a1a50a80542a59a14ff9c2289f7aa9ef3f2709c25b10b8d32537985b3de97642ffdd3fdc2a4e167e69e33106fe4e239c0d9255fbf038e87b02ba5062de409403e1b11cb2cb2ce8956397fe50bdc28963954afd54b5ff7058b308df3395d89a64ff29f9ed7d1c5ff88cd2f4ef4816deafe9e1134bc31cbae4c01fe38ad6c0d4588a64b25b99ed6043d84460e4da588a285b21bf22541f1bcb86dd5786fc7c057de9e7256e3e40352679502a370f91655b987df75b3505e37450d35ede7207261570a8f06cca65b0f3644d9b6c14cd68aa4dd8036e7448a9a6660a5182d0068c151681132c260baf61e133fe2423ad841d15bf4aeca36b2bc73527a7192f2e46fe89d89f8af00f71f2c449e6bf2d609c31d7b109e4f84155211446ffbe3f1c6713539ab5198c15610bfd96b3a142c7ae2a1a50aff63a81d0cdba6b12ae715f67f3a2fb19d30226872a662e57636a09a1f65db45eeb687a54425cd7c42cba75ea964949d89989a06281c08d9c65b65daab3a3fd11b352b23b1221968ac88b1820e2baafffe30bc07941e814604c9a2f201b5c164c870da12cc2d7ea2b6be73f50e56c63e6b6cc272834416fa6c5e1f4fc525c5af0eaafaac2b7d3721fb6dd78ccec2df0097449a057864cb8f3c811a8888e844dd9d3e89734c671c972baea522597c6b5ad10af395f448a4bf4895cecdbffc2b115c34d09d987a0c1cd071ef534cead6878f1242d263bc111fd5075fb594cb6275f10c8882ffbc2ed15fd28fc9080759708b49eb1324af91b9c5d78bde096830929781a57719348e9e1b3d9debd87139d29ba3fd82e70246954e714a1ec46ccd3cf15a9d28f2dbf6d35684a70fd429b6834b315c21ca33b1f0063a7646529be530c33aa417487b859e9da4f2da0aa91e2da3c016930a5f5539d8916aeb42e750faaef1cf43b7cfb38773e8d2f3302cd79c817b3f5378f59d53be92e70a3e62f69b79bb63d80dc3c20a23c9d7c58fb7c56486d060fa24e8ac76167cdbb27b6ce403bcd90038518a62f42c989e50113f236a972c048da0c0bd2ae4d13747a81b985d80130cb05e621e1d2f1066169c4e6e8205304833052d8caf8dc998351cc4ca4c3adf608a1770e20ef6f579b10c9f4a7942a75787c94495e5929ca91a6de5879067cfd475799554b9d6c6404d3f71797355083cab953c6460d04605dfcd3465e89cc266b9f6497cb8284165ba0761f6b5ebf241bc55377a52c62c9e7a2d4f3a54d2df46ae431ea3bdd407f0e77b9c3736c98490c4d711d6bfa2ca1fd57bafa41d914bdd136eb1107010fe87ea1572a8ee3ad16a41fa2aa539be1482e2591b62c643192073893671d02f55f1907ec300803413c18be406ad886589a4830fbf88d099a204221c3e5148fec7fee9ee265ce24478d0a456d2d077cddf9aa015e2a3fbeb613ed0bb2f7373e958d645ae7e49f3ca42958ff4656c8a6b3e602b4c61fd6d2cffdc63b03c5f781d65566707ebd55180c4e4e8fed2f01e80018e02a9417ce7a7cc1a93fee5ebc18447cf0286c940589b5b65d8ce2e54ad5fa593f0396a82d5a83595c525914944d2bfa952ca93bbf4faefa4da66175941bf77f70a7569d7e7b2748541787418ca3545e5a67186cfb59ebde27b5dd4c869955fe60a4fbc2edec87efbb9f955bfe1ed40a5f846b5724fc18ecec415b5465ef16b1d5c56d2bf9a48d7fa5d2de0fdfbce6524570c0f9eadf7af4afab74b26881a959c542c53f3c3bad83b09f769a53b3d5853af3c1ded2c90a0451e71716829da69b341c13f210bd413bc88641a6a545090d2caccfd7f35672ac4b7c658832206d05304a8a509c3bf2e2a9353c66f80544303efd301c6843d9dfa014c5ca275f4e927c1c3fbff922a810d366351d72cb72e619f31dcbc0413bc59cb64bc10c092bb9f771e2f26c07b981bb43aec3b73cdb5bc304e97ec8805e0789af2a240c71e7af4c62784eff6d45b69bc4b581640473938f399cfe32a8f1a0c5e860e59bb66ee60539bf917278563336c10b28e9f2fd59d157bc93"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x68, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f4ee02b7e787db3a3c"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8c46a2d6bdd3e65a6a31944287"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "25e97ae4de"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x20000044) epoll_wait(r0, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x2) unshare(0x28000280) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001700), r3) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x7c, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8884}, 0x84080) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r4) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001bc0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f00000018c0)={0x288, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8842}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffb736}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7e7}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd38, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5db, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @remote, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb82}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000001c00)={0x1f, 0x3}, 0x6) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xe0, 0x464, 0x100, 0x70bd28, 0x25dfdbfe, "d33e7d325cefa163d94fe8c4757c20868fcbf0c29221c28db63a68c7e2c7826c9c38ebddf895a2287ebe070bcf43c2a5880376c55cbcb5d6b499ac3970e4ad401d47c135edff85647bbb9bcf207b6e4530938a68da85bce59845161f61823ef6c6c4bfe2d7ddafe2791e90b8100f498545f2e4471e94eaa45862e803e2199bd83f970e8cc7cc12ce514869d48fdd63df3cda40ae576931cdc383de2c8d934d9a524165a83ba4624eb7ad71c42b43834a9609d80e48c791be5ad94b162ad21bcdd6a2aafc6734e3894cbca2e8ed9d", [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4044051}, 0x48000) unshare(0x4028080) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e40), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) recvfrom$l2tp(r0, &(0x7f0000001f40)=""/87, 0x57, 0x2002, &(0x7f0000001fc0)={0x2, 0x0, @empty}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x28900, 0x0) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000002080)={0x5, &(0x7f0000002040)=[{0x2, 0x9, 0x8, 0x3}, {0x6, 0x90, 0x0, 0x53de}, {0xd9b6, 0x9, 0x3, 0xfffffbff}, {0x4b, 0xfe, 0x9, 0x564}, {0x4, 0xf, 0x9, 0x9}]}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000021c0)=@assoc_value={0x0, 0x80000000}, 0x8) 1.673629293s ago: executing program 0 (id=2543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x8903, 0x1000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-ce\x00'}, 0x58) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000240), &(0x7f0000000340)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, r5, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[], 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x20, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x4, 0x700000000000000}, 0x0) 1.583018443s ago: executing program 6 (id=2544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", '\x00', '\x00', "bfc624b4eab974a2"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.578814883s ago: executing program 1 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) 1.449622738s ago: executing program 5 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180200006c167d4900000000000000008500000028000000850000002a00000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001180)="5becbc0e0d7cca6073a4f11d1b00f70669fa69fea6d71d7d3538963cf37f3d150f54d46c8cbb602d91aab77d10b080316548217072f118579166d38ef7eab4cbba83f3f50880be1dfde1d039c91263a90cc1ce0703753f8334a44c08db75cb118f18d5b9753065a8fef2579821f3960a96cf345b857e16b57ff78171cfdef66e6ee70b8a757a561b6d936441dadb58042b1daceb9f887cf257032df5aa84626d8c3d7a46ad84f680f82c04e4f21b8df5c6ad49b4e2789422034b9cedd2d3ae25b0e92833dcb43ea16c1bf8a6bb8a605126bd94bd46c605decaeaaebb4afff5114949347102f0a2c76956724a748c", 0x0, 0x8000, 0x0, 0x0, 0x49, 0x0, 0x0, 0x5}, 0x24) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1000, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="4c00000011001500000000000000000000000000200000", 0x17) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x40, 0x0, 0x100, 0xfffd, 0x40920094, r3}) write(r1, &(0x7f0000000340)="29000000010003", 0x7) 1.376120715s ago: executing program 1 (id=2548): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) 1.334914897s ago: executing program 0 (id=2549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@generic={0x91, 0x1, 0x1, 0x33}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) 1.125758623s ago: executing program 1 (id=2550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 1.12446884s ago: executing program 5 (id=2551): r0 = socket$inet6(0xa, 0x80000, 0x8000) r1 = epoll_create(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, @loopback, @private2, 0x40, 0x8096, 0x6, 0x3}}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x1, 0xffffffffffffffc6, 0x4}, @ringbuf_query]}, &(0x7f0000000140)='GPL\x00', 0x400, 0x21, &(0x7f0000000180)=""/33, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x8, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x2, 0x2, 0x5, 0xb}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x4, 0x6, 0x5}, {0x5, 0x4, 0x10, 0x1}, {0x0, 0x4, 0x8, 0xa}, {0x5, 0x3, 0x9, 0xc}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r4, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{r1, &(0x7f0000000500)='syztnl0\x00', 0x20402, &(0x7f0000000540)={@_ha_fsid={[0xfffffff9, 0x8]}, {0x6, 0x2, 0x1ff, 0x3}}, 0x2, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x80000}, 0x2, &(0x7f00000007c0)=[{0x3, 0x8, &(0x7f0000000600)='E/\x00', &(0x7f0000000640)="af6f14525e5d3234859bef3396271c1c2629090a78a28ace2a442eda2d7b565e8548f94c25cae3fb29e08623d0ec7836c68ef745d2e893cf5ea4e2d5428364b431", 0x41, 0x2a}, {0x2, 0x8, &(0x7f00000006c0)='.(\x00', &(0x7f0000000700)="d2d06d28bd2a814dd6b72fc84fc830c8d31f2856a91ae6203c2c03c4d003b86890f4d06030d62d236bc680fcb0a0ab10b1b0ac4aa938488b3d78054f420163f016461668cea9398cf7fcce35c9da931cdc218d9dbd594709cdbd21c057a20566e3822af20d1e7718ef9c93c58583effd0ae7f2258298f9e237c69cbeae22847af791b9f899632c8a292e3d1c9353bb68d525048c5c97962da93e2efbd8c663d31d0b11448cf5d7b2668ffc998f154353c938b5194b", 0xb5, 0x30}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x1b, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8fa}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffff800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0x8410, 0x0, 0x0, 0x40f00, 0x41, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x10, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000a40)=[0x1, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x3, 0x10, 0xa}, {0x3, 0x2, 0x10, 0xa}, {0x3, 0x3, 0x7, 0xc}, {0x2, 0x2, 0x8, 0xb}, {0x5, 0x3, 0x3}, {0x3, 0x3, 0x5, 0x8}, {0x5, 0x4, 0x8}], 0x10, 0x800}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r8, r5, 0x5, 0x0, 0x0, @void, @value=r9, @void, @void, r7}, 0x20) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000bc0)={0xc025}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', r3, 0x4, 0x40, 0x6, 0x7, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7800, 0x20, 0x2, 0x1ff}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x620, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, &(0x7f0000000cc0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'tunl0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x2b, 0x3, 0x1, 0x4c}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6, 0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0x0, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0x0, 0xffffffff], 'veth1\x00', 'pimreg1\x00', {0xff}, {}, 0x5c, 0xf3, 0x6, 0x6d}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x2}, {0x4, 0x2, 0xb39d2d306254a428}}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xffffff00], 'team_slave_0\x00', 'veth1_to_hsr\x00', {0xff}, {0x3263156f52399e02}, 0x87, 0x2, 0x2, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh1={{0x90}, {0x8, 0x3, 0x81, 0xa, 0x64cb, @mcast1, @local, @private0, [0x6abc2e6c0f722c0, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xff], 0x801, 0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xdc}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x6}, {0x1, 0x5, 0xc}, {0xffffffffffffffff, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$OCFS2_IOC_RESVSP64(r9, 0x4030582a, &(0x7f00000013c0)={0x1, 0x1, 0x4fe, 0x9c1, 0x3, 0x10000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000001400)={0x40000008}) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000014c0)) socket$key(0xf, 0x3, 0x2) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000001700)={{r0, &(0x7f0000001500)='\\\x00', 0x101400, &(0x7f0000001540)={@align=0x3, {0x7, 0x3, 0x3, 0x67c6}}, 0x3, &(0x7f0000001580)={@_ha_fsid}, &(0x7f00000015c0)=0x3ff}, {[0x47, 0x10, 0xfe57, 0x2]}, 0x8, 0xe3, &(0x7f0000001600)=""/227}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r8) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000001ac0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001800)={0x278, r13, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "26549109838ccb43339b8ea8e5c34c96bd9c131c02904cdb272baad2f9118ff0a073cf2d6f6a3d3d2984"}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "1f096dc8e50b7f1213ffd87f7d845e9f4bee24502bcb8d3a6e595b48d001be76bbf36cb96562ee18aca0a180f5c52020be32ddab4982d378408f621afb9aad156f1550b1dede6ddbb7c7679854a5f9399753b4fd31d83e6e5f7e6e193467ef5b6bf66f71feabe7bcd5df939550a737d480e1b1cd427b85ee0093f5a829b5df67817f149eace62457c3fca10bde63f13fe3e35b67d948832f621fa04f9446f5283e7527ae1b727d7b2ead26a4e3afc9c94d2e8c9d46b1493ef9257ad055dc38d31f82a574b7f8afdde85abf2cfd9bd263f3656f17d2807a080d80c30639bd1b8e9d2c95"}, @NL80211_ATTR_FRAME_MATCH={0xbc, 0x5b, "49b0a4150f68987e9de097e9c8bc4ef59266d1c166b45c82489ef4a0f9d216a702fb53bedb6cbb6bcd6f14e655c007a7824b9b68471993dfc22a09ebef31d72b604e00ade4b383c8c5cf65f9a54a36ac01320d692ce707ad15a628e8b09e9f83f8f737213709250ade72bcc0c3a203ae6b26314e9336167abb98d61e879d9b0738af7ebe7f89072c45d511dcb1c44a203cde1d737bb5be7d98df4e7b45296e818c6ada915be23d1cc3fe3d232059d28c2f24030d906b319a"}, @NL80211_ATTR_FRAME_MATCH={0x53, 0x5b, "793e1202d057577b54edeeb99573dbaeca60827c3431a42e20dba9c54d37383f21138c6af217427bff024d1d8403f1601aac0857f24bd0e9d902bbd024b4b57669578cc3f7122c1d3f30602c14abbb"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "0df74f19429b528a9334ff0e1fe49755c94088e06daaaae81c97c4c97b68ae7cdeda0a2b77"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x278}, 0x1, 0x0, 0x0, 0x4}, 0x20000003) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001b00)) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)=@newnexthop={0x54, 0x68, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x8}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x8c}, {0x2}, {0x0, 0x4}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x9, '\x00', 0x0, r6, 0x3, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x16, 0x12, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0xd, 0x9, 0x3, 0x18, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001e00)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x0, '\x00', r10, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002e40)={0x4, 0x1, 0x287, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000031c0)=[{0x2, 0x5, 0x4, 0x16}, {0x1, 0x1, 0x0, 0xc}], 0x10, 0xe1}, 0x94) 1.061166902s ago: executing program 0 (id=2552): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="0589", 0x2}], 0x1) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@broadcast, @local, @void, {@llc={0x8864, {@llc={0x42, 0x0, '['}}}}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) r4 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xfffc, 0x30, 0x1, 0x10}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x101, 0x80, 0x0, 0xa325, 0x7, 0x4, 0x5, 0x4, r5}, &(0x7f0000000280)=0x20) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="6ff567452d54cc0c26783778eec9dc8ded24919bcd401b7cb7d66dc849685a31eccd51a5676180af5bb6ac61d689d1b0fb4da01beca89044cb52ac9cd4f5bba708238b199d08f9a306bd223383b8c13e6ee7a9bc027fc18dfb3d0dd481e590c3abe71645691a84ff01000000000000000000000000afe377c4213127d3cac6f15c745bebe8eb78503f6b63116fe4d9437baa2ef970117e1d74e70508ec92b84c5d52b74f44b4748daa", 0xa9}, {&(0x7f00000021c0)="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"/3608, 0xe18}], 0x2}}], 0x1, 0x4854) r6 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="003807002d12f4153c037800100004002006010101010101010705c8e048000118"], 0x2d) 1.036694553s ago: executing program 5 (id=2553): sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc10001a0025f01d85bc04fef7681d020b49ff70880000800328d56a021000ac0a1410bc71176a36ede498534108e58342fa84a235a2a40080", 0x3a) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000500)={r2, &(0x7f0000000140)='\x00', 0x0, &(0x7f0000000400)={@align=0x7f, {0x7, 0x40, 0x80000001, 0x5}}, 0x28000000, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x5}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000005c0)={r4, 0xd}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) sendto$packet(r3, &(0x7f00000009c0)="9ff9a00f267f05fc079ac4cb4f6942e30dcc6d3c408ff8563148e28c62029c2bbb0855c7f1a9a6355d26accd9d15547574ed307a82f40fbe8fe2533ddc8524784a8ab7d72815cab98441c0e92e3b19a5bce1af0ae303f323c81ad3159c4de5e82e77fabdfa308d019af0f46119d0d17320e498758b8158f7d72888b604ad3367a635c9087988eb6610056a5049a5d3bf2772369253f0703b86fe612991e0cb9c7445319ecfe794dcecab", 0xaa, 0x10, &(0x7f0000000880)={0x11, 0x1, r8, 0x1, 0x9, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800)={0x1d, r9}, 0x10) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r3}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x20000845}, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000100)={0x7fffffff, 0x3, 0x8, 0x7, 0xe}) sendto(r7, &(0x7f0000000700)="22eabe92f9e480425da52b308eef7481c39437352fde6cce232291b2f58d22e08f84dc420a0af61eace3f79fda886c2ead5d3da0d079f8af91f0001552adf7dd85c30309f3a6bc4270a1ef0655a3028ed86e70227da5b236d18ee0d1d3c2931a1920055a5449f7cc7aa2e35b1e7372e5e87a202598039953f3fecf3fdb80bcf307968d3a06598cf3f2f6f4845d15cd69d653f8431d5cfd8ff4d293deeb9178518b2ed106b8", 0xa5, 0x0, 0x0, 0x0) 983.909745ms ago: executing program 2 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) 980.898789ms ago: executing program 1 (id=2555): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000006c0)="38000000010006", 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffff3c00000002000000e00000020000000000000000000000000000000001000000000000000000000008000000fc020000000000000000000000000000000000003300000002000000fe8000000000000000000000000000ff0200000001008500000000000000000000000000ac1414bb00000000000000000000005b00000000320000000200"], 0x1fc}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400d3e8a6eccf969af328d90000", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035005059559aadcb673400000000080026876c09"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) 941.666561ms ago: executing program 2 (id=2556): r0 = socket(0x10, 0x2, 0x0) unshare(0x24020400) r1 = socket(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000005c0)={0x2000a210}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0xfffffffd, 0x30, @mcast1, @local, 0x0, 0x0, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0xfffffffd, 0x30, @mcast1, @local, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) 837.26192ms ago: executing program 5 (id=2557): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x0, 0xff03000000000000}}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 721.445228ms ago: executing program 1 (id=2558): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="050000000000000051000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 701.505213ms ago: executing program 2 (id=2559): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x5, 0x4, 0xc0000000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x2, @can={{0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "68a11ae0b47b865f"}}, 0x48}, 0x300}, 0x8040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 636.138911ms ago: executing program 6 (id=2560): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/243, 0xf3}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40018122, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f000000a2c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x9, 0x8, 0x6, 0xffffffff, 0x2}, &(0x7f000000a380)=0x98) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/243, 0xf3}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40018122, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$netlink(0x10, 0x3, 0x12) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f000000a2c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x9, 0x8, 0x6, 0xffffffff, 0x2}, &(0x7f000000a380)=0x98) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) 589.057369ms ago: executing program 5 (id=2561): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800950000000200000000000000000000a8ccca5756bda7ccb43c4e4b519cce09c6fb1e66863af4d0cb", @ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 445.100142ms ago: executing program 2 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5c}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x24008080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000200000000000000000000091113300"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) 317.668438ms ago: executing program 5 (id=2563): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$inet6(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040000000b5d53e40cb341113d61fd7c9e1cb5d39b06a906984a82bd454edcac4278e808d1ea226a3a547daeee2de8084358155e9034f0f89bcf06734e495faddd6f03bbcee634bf7f06fd029c0af0dfe7312a4e1690320aebd42d80193e1fe069b2f28706ec0be70300f19dcb640619cff022b438d6c80cd4207d79838647b92e3b74eb4aa1bce4ade97"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2f2, &(0x7f0000000580)={@empty, @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x3}, {0xf}, {0x4, 0x0, 0x1}, {0x356, 0x0, 0x1}, {0x9b, 0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x0, 0x1}], @ipv6=@tcp={0x2, 0x6, "54ef14", 0x298, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x6, 0xe, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @mcast2, @remote]}, @hopopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @hopopts={0x2e, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}, @pad1]}, @dstopts={0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}, @srh={0x67, 0x8, 0x4, 0x4, 0x3, 0x20, 0x7ff, [@local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, @dstopts={0x2b, 0x10, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x4, 0x9, [0xfff, 0x7, 0x5]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0xfffe, [0xffffffffffffffff, 0x6, 0x8000000000000001]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}]}, @routing={0x11, 0x4, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x2f, 0x8, '\x00', [@pad1, @generic={0x0, 0x30, "60c6381b447309ce918ae2b61e158c1e3d1f4fe31474e59e247355ec5025b774383af394905095d395261a8870c01abe"}, @jumbo, @enc_lim, @ra={0x5, 0x2, 0x5}]}, @fragment={0x6, 0x0, 0x5, 0x0, 0x0, 0x17, 0x65}], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x20, 0x1, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0xae, 0xd8}, @md5sig={0x13, 0x12, "c127235b2a4924619d58a30fb591709e"}, @md5sig={0x13, 0x12, "faa094462e3c215c2cedb69f31a3e08b"}]}}, {"bc86bf630d606f0ff06d7e4cf5765af76fce8d113cf8e690fa6136257a55af130adb55e4e5f269a19e092d14538e9adfda6adfd3"}}}}}}}}, &(0x7f0000000880)={0x0, 0x3, [0x88d, 0xe05, 0xb35, 0xa9f]}) (async) sendto$packet(r3, &(0x7f0000000440)="800000800000", 0x6, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 180.27381ms ago: executing program 1 (id=2564): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r4, &(0x7f00000001c0)='SMC_PNETID\x00', 0x20000, &(0x7f0000000200)={@align=0x6, {0x7, 0x4, 0x6, 0x5}}, 0xfffffa2b, &(0x7f0000000280), &(0x7f0000000340)=0x1}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf240300000008000100000000000c0006"], 0x28}}, 0x40004) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4018800) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r7, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 179.205412ms ago: executing program 2 (id=2565): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='.&\x00', 0x400000, &(0x7f0000000100)={@align=0x366, {0x9, 0xc2b, 0x9, 0x7}}, 0x400, &(0x7f0000000140), &(0x7f0000000180)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0xc8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000740)="cd86bf86154cd0eb996e193cd54d27c34b91cd06a374b9dde6d17b2b10f5a6dc4ff22221314fa4da5bbbd00ea9518e1200d1020be4f894cc60b42325962877ee347a40c8820ca63d0f9ecd5cc78f9c80d5e0c16f2b3905b87dbd94312d8073aedf02d11816a4e5ceea3bfd5474777bb10f6609a2e5a3f9b448a127be1f142357257b46ef80d86b9252139b03f4c86c09137492dcf254f5ccdb78acc34e2680abdf1f1cd3c3116f21354731babac23203194aa87825e35f60e4d489794e198737dfef18e155251acb0eab2f66a399616f6572acb64409a669c87c537866218f725619fa1ecfc2788edc22529f4dd412b5d975c46da849f0336a606decb3283926abaaad2a01804ecf07ba4a6313aacbb6d2eba725bddbab60f0cbb1e31d31d54f1e0dbda53a792b89bf5ec6bdd3d1faa72ac6b2cc50e914adddc01d9b37b6fc87d329a2e1f97f8243073500b4b9ecef50fe272290b4c5a7e676919b17b8e50fbb2199157b6a8e83ceac83043c78a4abd1be6a46d0373aab3c699ab7ba32f76a1a1c49f118be9d297584dbd1943cb7916bba0ead49df59a365b2223ffdd88aad3de79611b6ab45af842f0200db7c779b803333bb06b39dd50486f03542871420575caf87f280c6781e005ecb8ae113083efcfeaf67ad2d7217d7c141b33fd39faf7e7e601e4fc49783ff3ea5750c115521bb3d98c29686d2f85e313273d3438e6677d778221760f6b2342e44d5fa6bec5f2e6dc01e3982f8fd89d2ca11d7bb8537b9a1926f5fb782b54dff2ffd4f27eacf5fdf2dc84fc67c29f325168a295afa6c9d047b8e6aa9667b909d63bb16c1ffd0da11b0a338e654a9d1d0c698b7ad98bcd6bdad37dd85b0405590ce7064e0a95a4def9fb8f0246c699f28ae14311f81fbc3e08b7720db1506f73aa9610bc10a6aeb1f55d611526a8a2aa70068bdb4a6c5e5fbd62f558597b3047f7e078c750a821ea8063cf0b1fd2c42c4342d5cef257b82054bd1ab996bc03f8345aaba03c62fbd65516c96797ac1bf281cea9f056b2eb943ed2f4018bfc42a73c4357cabddb223115b5272449073fbab02f39c8dbd3540d7115bd405a7083f8feced350546a8b01f4f9d0577c1db87bea892ee82a2cc4e464e1644534d06a9b8386daa392beba96558d77805214a32a078961fde9a40e959fefc8bc855584c46c5635f3b10d3e2627124d85addd1dbfe8917e34fe7ab7b873bb22486b65c641b34da4283636ba77ee36a1389e5a10c0673eca23a30c7680a94d9321bad2bc866e682e62bc7abc175acdb613589f3c714d5e0180748dd948e014e55939672bf2b5cba54ac04a5ec078c8bf5fd6b0e459f9737ed9c302c1c332471cb737faab04700add207c1e4e5c8d5830c56d5d45af73e78a1241de379af7e100ac0efff9c90bc59a23070263c678ccd89e37e72e76a709dbf29e8c44934c7069822c9c075fc877e6a370df068fcdec5f8aa0a2df975d27401555ca3573712cf647d95c239524989a6f7c09fcafeadfc43b66a25c7ea6c77414ae8aa690984a79b10892089d71685a77500557e811c95835ec1b48a7eb998a6eda287ab5a848984cf0d11ff1fd38482d0af15183ba674351c843f2e2e2d0b96c8ba1c0d3aed4322953e32a13c03c2138c0a8fa796d3e4a0ae45a151def00fdde09865b03d041784c8b01a902bd0eba118d822ee45313a35aa3d674285c31367ed69db629a3f6a11a63ec19e1310fb1896f77e1cbbeb149537dd1fd25f5b31cc540284c57040f65f215ccc0f04584a39ac8f0802ce858f63744a19a79cf8790d48f656221397e253209782f26672fd12caac066d4f71b8b8954e0c84a92ae46e90b28ff6b4cd895f646a4ab13e1f8c77c8851a09a9a3a849df3f54eb553ce88e112579e3b82dee15037b95998c20e9221efd0cbbc55bf6ec2b8384cc8bcbb31264aa412c90ddf19b2a660043776bef9eed9552a6faf88a0146aa94d0a8b2c206259cfe5c6751eac882222df8669cd845c1b463826511664943e071d319d223a1aecdf3e9a6935eadf60791e816414f4bedb47ac72161dd7262998c181a42b43b89c353aa2af755c1ec06a283765f0697cb59105a460552f3f7484ac712ffb236485e6088b1951e304363a585b8e1415d9400c4fa724ba22ce91524e1e4e4705281892396031ddb23f9e70a4403574d2612ede35daf9f8cdfbf2edc21899d5f9a43f6c83a91c03c2c3740fe538557fcec2f759858cb37d9df3439c542efb7c1b194abffca87b9ad6938dedbe4a7aedf18ff3862e07086b7d1937663ff0a29df130be3464083ccf418b5ecf981540a36ea2055123d0b56d59ba558607616eb6d45fb90ed89b9ca5d089609e3e61a3158bac6c567fc0a6495a133a8e91865dedd222e6b1e6d060cac76d2646948ea9e7998a2034c74053b16bc6eab9210a2afe73ded745fd54babe6ac807499abec9ec584eb9fdc8f509f2c72452c35d0b082f5cf51e8664b488927e8312ae987cbd5133e40d705f65c9536cc75e4b48476c8bf22f5f9b002ff8ad06adc03a54fb2d086882aa47869c83d53866060298f0816be3a8fee507d9d19b0331d80cdef3185b5f591c1128325a656730a57135dafb72451efb43a0899c296fb3c0148c99a39f06d419cadce50161d22b4528678dd21bc270f555a757752d9d7691569c972073baabf125096b13b848967c271a3ab3979c79daf4bc60a94b53a06f0099e95a36235cb1599962d61143c47eaf4392302c06ae03fa81f29f879991cc84275384e01fb1f3a26e3c9fdf8d8fa5631f5149db1de42e32fdd52f7d641236eee097c914dd4d23f1b5acdd6ac2d561544415eafa4ea20e9fc43e03b67af9473249b6d88c8b783b56acb5caed26bc9a3fe0259ee77c10b33c0ac89ba422dd407cdcac5c614acd770c0d163dcfd3204681bbf91660c104c7d4fa2601eff3f8c03e3a0ef0ead8a949f489682f00ca87b6847dfefe4bbfe53f249c31944d699d7b0ddcc3ff114b851b3aead543cee7f1060e32dae0b8b72f76533b1eb2b391609be9789cf2a47ce15f2b30915043299064537f267d1a27ea0874ce256ee68bbca6615f6faa825a93c350817fee474ea73cb32f9565754f6e1cadf2050dbcb4c1b22cf9ce7021bbfa2432018a6e0ca0c0f7fc84c9e18610dde667aaaafbd16aec5f3d886004a88d13455203b3327927c9983e505f4e9d74865c0c9d4242ade43373afb5e73b7696ab087e506a876dc9b587e8c8a7a4aabf623a12271d70925a4cf33ebe8a1d38719c457a8c6e8a077b1d866176f7aac03012136450c7d4a887da69e14075d56ebf7b0280da0418d90446bc1d39423e5ddff72faeb911faad93ed265ef12b50323fcd659e8a6594f104c7e8b345394fe140ab101b6ae3724a7cb82b6af95fe3594b6176fcefcef3eb19a77334d9fa08e65d6bc66705122c6375019d43569781dc7343fb30b7288ad627213ddc3c5ad1ef9145d763ea2da95e0b0ebbc95cd3346c495938e9830376dfe7f9fa19aacbea32a2a14fdb9986b80b8332178493a53dac2211f2ffc2ce533477d70369683bf79112581801c2bcfe962996ca2227aa8561fa25efe57f6363867252e2b731f6133224aaa58a70ffe210ff9639af4c4d87b46ca304a84eb6ed0e21ffb0128008552b2cafcf434fabebfe19a1fc7709301c781d6413d9013e22a77df92ebdf73b602410ce1ac6ceddba93d25b8905d401cec9c61b5dcc5473ff215a2e1d06848012cc42e2f970672609c7de5534b56f919a8abeb7b72d3198a3457ab339e7641fc0a46e03466112f1aee7e3e9d5bd43dae4d18f97605fcf2412f6eb3b861b4244d341b1b26897625b65f463923f0a903b6c2d64ac80c2392dec814f110cee944d9beb9bbfac640845b7184073d362a6ad70572401dc807ce9c9d19bf79596bb00cf65863a96c11531b4eef11e3862c902ce5224e5b89981a0f43d4d5649f9c78d1fc4d006c3e1fa7d102858247fdc85a227df3c58eca714ef0c92e1e782ce693dd3a882530abf433a8847fa713d388284a0d23e61f1c306822513b7a1e04cc647dd80fe6960a12b53ec06eae198e4a522a206cf194c6b21464b84495a3451ad78bc7e2bf02d84e9d516596e5d5cdb9091c88458986d85dee12d84d554c6abad0a61daacd21c17f516413b2fe4948a5d498e702f608410653bcab33ea0071eff8228b4d8bf361961c9d1a6d4018a87369287030f1750f2fd075c7abc4c457433e02cbcc884c7eba5bb7859497a7c064e77a6d75d02ac9c330c30d0bfb3b8bd6caf93ddc2fa68d192a94d4ed3293aec2e4cdd32a9816b4df9a007dc102eea74cdaaf26f980c59a2b72aff0f4bf92fa6ccfbf9692e08f056e5715cf812523e2aa86fe4ca707c24762ddcea9fc5097c1673a6da05ba8542dd8da67f002f0dda95747a25c33a4673c47ff5284eaa81d407f74bb9c7a6ee5ed0149eea6e69cda8cadab864c6b164a3bd6b13673b1a82f9809f353d192130986c3bc6d338491e7fecd3e5cce52417ebbd21caef4736d1cbcfebb9727f4eb0ab2d5627bdcf244ea29bb5bd6d9f3e3a2742fe2fcf9d1ec7a5eb20ce5bfec0267b9a9d60eb2bd4f1180f07495ed9f60887b81906df2adfe0f1b515de6adb648fa1f98448f0f31c7351e0160f1c04ea9373cf8de1f414ba85610c8841812375334a3805a590388a69347d30f18e9ee50228dd996fa46b7e4f298aa039c8571c18ce92c093bc4e1058e7b3f458e78518da7d089c9c89ad7be5b4e4d828c718dc4cfca15ff7ae76876a902727330c60305156680f3285601e676093a832dc4aa8f2eff565743265a4f48b9b95171089ce7ac0495d34b73282d9aa2e7cf287911f9e1bc8ac67a64922ad4162be72edbf7c3bffdba6c41edda98646f26184c80b5725eae24f56dea6e9172e8217b94a70d8af61d681323e98b0cd3347ce67c43cb87aa5589939b418f753195353dd4c77eefdbb656fb3ba598921cca8a0cfdda762638e66a9468ba47f969caebf77b907ad8097a70fc58410d7a10dbf29947f4b657ea3e8fb58a522b4c1a4609eb0f669d2ab5cbc01d75c743a04e07b0fb7f49db635f515e4e5ea60b7c3c36d6acce690ebd3f4744e48fcf5c89c5f362b9b303497c576a004cd7d395134a311946bf68a03352e9f4aad46819fb246be640465a5e1ab9f4018071e958f08dc3e4eaa926456f295a72064738e6ec49b58978e703e92cec1a5caba3cc994c104529e61cd081d4404399586f77b529ec3c5099878a844cf097d7215c44ddb741bcb7c87480251caea6ae767a57938cd2f25cdc170e15f278f86656b90986659881e00233e75915c38006bf064deabe0d3b89880f66db88769f72c42ec0367f90e909e6db501bf5e10b021888db2864b56886831f6f7c858bdedcecd84a86f7a4cc37c8733bd759cc19218cae5b3fa6aacc52eeaafc6905e45ea1cfd0331655213f7c45e81fa964dfe1e2cb410ba51b978d94bd5a84b108dcd78cd4f3c09792a7c653547902ad80b84f481f8e237cec2413b53158f6bbd5d6d2434dad5c0fad43f87bff2934ab80a7938bfbc728ce4b8837c6806f1ae7d2585663adcb293d756889fb17f0399190fc75e424457b8bf49a5dc7b557a995519e5643143fd7ed5e2c5eaf815f8b8f99b2718b00785e2a54c17c3fe48d1f10531c05fdf29dd5a7db468b43cee5b4f5c2f70ecbb1cae23720088051097c45e03bd24d4681249977bfd53922b864062a9a86300bb4b108589beeb701556790c27aa406017003f76c9a4cd6e31b2b2dfa73a2f3f2", 0x1000}, {&(0x7f0000001740)="575a2b20b3b30b3ec281af55adbccd3dd0703ce00926b629eb44bb3a5adc7468c53220ab4c79205f45e24a49764a8588040ee683850f4dd45cbb824dd3e416003aa86d99609b48305997be4704d372b96f96332dfec598f52171a097efb915f1fc5db4", 0x63}, {&(0x7f00000017c0)="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", 0xfb}, {&(0x7f00000018c0)="1ca9c201fa05d04266c0ec2b471e9c3039dc1af36977ecb4d123f546ed3b98161b3e199b86b4ffa5712eb214b95ac9bc1fbcb0c8ba6e38441c50df74c7b3e9dce6fc7dd9cdb4ba7ee0ae738c06160a4512c82a873f4ddc19b0ba25b81cd7efdd26d603f2a5e891123cd66e67f9297a8be7f464635edd58c077feea0958c9a52de6be176f4e", 0x85}, {&(0x7f0000001980)="80e48ee639eec3aaa73136d182068cbe5ecac722e28216978a0e96e6e0c8751d451a506e71cacad07798b01f03178136b9158e407dd1702c15a02b7aa026d348373a4c8176d117cf7ecd20b72c3892efe2b191f546d60e1e7ff9b78bb6f92df0be65f6934839915a8732d1793dfcdb8b5f100f86f7240027576e1198a1397b5e9ca1f0ff239dfa6cacd2d3ad46b5402a1eda28b25e67c9e8aa593b5fd5b4c162ff57acf955d3bf1d26691376560902d389872fedbc27f4295768ed0a6079b63c178f", 0xc2}, {&(0x7f0000001a80)="fae1e8a17ef29f4b6d4baa", 0xb}, {&(0x7f0000001ac0)="70e9ba0afd405ccdc2911253bf03528ccac39f36d4721054db1abe85cc05b9fe206a62f4bc3a022e1a4b59da1a7c70d979df7e7e49b404b6f557894a77dafd3e61f8030262a082f0db1b10ba7ebb489b15dafa287d8094e126218e578162709e125f0299cefb49679102df6b3aa53779bd88e302d79aee9d449b209278ff30140fe572f7ea7ac0b673d25f97e458db3f528f9e7c8f95558563fcd64daa6b86", 0x9f}, {&(0x7f0000001b80)="d4e34456b173f1eca9052638686dd876d230240df1d3651ea3ef9012a659eddecf6363863964850f29e340b2bc8510097a905c1073969186c4022360250499b4cc40c5c2a5346e5ef0693c7fb82427cd31cb57fc2e887830125989ef45416a686e80fd916380eda51bafb16a2421e78e86eb43da5b4f363a7dc725e3f8997a065bb552128cacdb901964f7fab7ceb87b331e1479ebcbe889849df66b5be4a12cc85b644632de83a911072b264d8944780349152aca0a2f29f82a6a38e001b8edc9d84f538387870eb2a09358d0d8983cda8e", 0xd2}, {&(0x7f0000001c80)="adc56e5aa0e3399041d2872d10e995b25eecfc12e2125d8d174dfea81c9e1cb09239795e1df6af1ffd22d4a535069d2b3c652c72f492c4bcf46d449ca55bdd07d176096ddfbf3bc7a8eaaae6ff45c4396c748bf1ec27cb5f27d0bef69ee131a6", 0x60}], 0x9, &(0x7f0000001dc0)=[{0xa8, 0x1, 0x7, "0f55c7ff4c8bb4b4c08857b84dd34527c8f8941e726a397cc84d8f3e1b4ccd5922c50dc62ab1ab71f62be045640863db2dcf6411c6a3e645ce8c93d77f4e586e959d16bb25ebfbdfc67c90f2ef4ec579dcbc260203e592ecee7e2aa58bdf6f5d767c66f52c623fc0b58575aaf09c0eb1fce239d129f0f4bb3f21c6be72ff82008a71f88d9b427db72dbdc5aac457239d4a5fa85fa146947e"}, {0x98, 0x108, 0x8, "f17bf91f48741c53120921510577c4ed4ba7b5754789bc0f9bef1051000abc210c8cad4934ddd83e4b35d81cfc23b69b7f515ef483f4570363ce5470de6ba1a54598d35674a785f7b48531ceadbe9a34627e07941e69eb57df6f0d42b6e018a2e81ac3f0558671a13096406b63a62d65db2bfc23d85e204684d18b22b78a7e7a6b850b1b"}, {0xb0, 0x103, 0xfb3, "73e5cda13c849c85cd23336bc6616734ea21ef8626f88a12a3e0fadeb47f0934a742e9ed1e40ec802aa6bc8f8a3b81f09460f34ecf6ca7a35173bdaac659a404df253ebbc8b0fbc6e0135e1d0b426062267744a0a6266443ad4cf8eac6dbe5c02fc71909a29b255640b0200d75b0d70c83efbbaa8b795d1c0f6d76184510b44fda047dbd3fe07837b436eaac6abef6cccf51c67d73b00a98df"}, {0x108, 0x1b, 0x1, "4b763a2206601094174c28dbfb0b2efe5f2e01520b072df757e01638870c5fde96534d924e7b1a7730c7796f2d6db55f54fcc9352193220e4b36909f536be6a16a4459a241576e186b23dc3bf21528c71368854be28f78fb2f9b7bd9a5129beec2b6a0810dffd6bac807e3c4558c19d24df80858c5a8c3084d173c3bde8bf892ed0a46088032f69eada798a5cdfdece35882d0a063ff9a6f161cfce6bf9e4016cd8c676b2f90d1afb2f490402ae8763a4adba77228c95d896f32b93bc2fba4678064f1a0e61ac2f9cf1e2b17458f7699e931d7d90f6881a79809a303a8eeddd38fc176aa7b3c433d72c555222850449ba94cf7c8"}, {0x28, 0x84, 0x101, "25862e14c77e335da15cdb64055b463f3fab1f99"}, {0x108, 0x103, 0x3, "3cc5c8e31f7c4c2a50a214aaf31f59d812d6a3849ff548c4c2a4343f62697f7e6dc01b760955e26bc7ffe78a81c5777067095705c3ab0035db636f6e87ab8f62f39368b8ad1e1f39031f812650010b73c05989f7181e89a21d40a620e753d19843faebefe0221bb6fd4979ee48d27c4aef9ec053e57104a40a54bef32b6930efb57662d2ee56ac7e6ff92447d7649bae1b327de225da50fd320d334e795e645e533d9bb10f919318508381f9445d1bbdd959e6899898e2d007e13abb9f56be011f00d56b226b3a03b6511440adf5766599a32c33c655d0baf80cee6d8b3535876d50dd09af1e3f3a60eca821d8231503cab1ef0a475d"}, {0x100, 0x110, 0xfffffffb, "16b8a2887ff77f089782b387940f81d57c33fa81c9e88f828ce2a75644847c9599506f460e4136543ed742d2921983f5a2a1450b88df6615a0ca85e81965b3809128ca0b10c9f3b0984a82b6be6153c16a0bb8264c305a00975fd70d6a5256add78a6699a3194d081f9014c086f797f6b42502b63ec5497f0a8d9b3e63eb59e21af526c973bc75789b2e1d7f58b7c8dfe81ed1e5247a9e94a0217c77369ddee91e6333da27b7fb151712cfeb7e30a035a409d53956209d9abe3523e8134fc7632d9119cad86eb488d2616d54aae57783a50c856bd472cd6d10266c93b77c672f949ef6e6a269aa007faeb61dacc1b82b"}, {0xd0, 0x10f, 0x8, "6a4a16e0ab2d789eda57f424def8ac8abe53edc7f0c70b0a269089ac9a2aa264689e434c27ae36c4075b54d8af0af89bdf2dc98d62462f8d91fecbca07e222bda63e0923b668c43ee680c3f104cfe12e58a45f9f2aec17009f035854b26878f2842936e1e757e376ef4404f4b7b9af2041f5da4dccd22a5c474e8d6b890f932e47120d000a086d7e3dacd301cf040ca66d435fa6c5f55ba4d62ce4ff46be8072eb1f818c063d0ae844fbc5e5a12cf0379026d5013dedd5f7675d"}], 0x5f8}}], 0x1, 0x4000040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x4e20, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x40000000, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 37.459371ms ago: executing program 0 (id=2566): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_ACT={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 0s ago: executing program 2 (id=2567): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) kernel console output (not intermixed with test programs): d to get link speed/duplex [ 285.355276][T12292] netlink: 'syz.4.1521': attribute type 3 has an invalid length. [ 285.366136][ T36] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 285.470752][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 285.599095][T12296] __nla_validate_parse: 30 callbacks suppressed [ 285.599129][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 285.600080][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 285.601280][ T36] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 285.634471][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 285.635905][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 285.658473][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 285.659397][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 286.454983][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 286.728391][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.343324][T12384] ip6_vti0: left promiscuous mode [ 287.601098][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1529'. [ 287.601127][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1529'. [ 287.601219][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1529'. [ 287.679648][T12393] lo: left promiscuous mode [ 287.715990][T12393] tunl0: left promiscuous mode [ 287.747357][T12393] gre0: left promiscuous mode [ 287.890102][T12393] gretap0: left promiscuous mode [ 288.412536][T12393] erspan0: left promiscuous mode [ 288.464548][T12393] ip_vti0: left promiscuous mode [ 288.508479][T12393] sit0: left promiscuous mode [ 288.744134][T12393] ip6tnl0: left promiscuous mode [ 288.767029][T12416] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 289.225003][T12393] ip6gre0: left promiscuous mode [ 289.279651][T12393] syz_tun: left promiscuous mode [ 289.288911][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.328072][T12393] ip6gretap0: left promiscuous mode [ 289.353711][T12393] bridge0: left promiscuous mode [ 290.152341][T12393] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 290.252736][T12393] bond2: left promiscuous mode [ 290.252767][T12393] bridge2: left promiscuous mode [ 290.289517][T12393] gtp0: left promiscuous mode [ 290.289548][T12393] gtp0: left allmulticast mode [ 290.327502][T12393] bond7: left promiscuous mode [ 290.341344][T12393] bond8: left promiscuous mode [ 290.341376][T12393] bond8: left allmulticast mode [ 290.349328][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.349363][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.350968][ T6600] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.350993][ T6600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.351039][ T6600] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.351060][ T6600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.351093][ T6600] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.351114][ T6600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.380297][T12416] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 290.790727][T12430] __nla_validate_parse: 2 callbacks suppressed [ 290.790753][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1538'. [ 290.826742][T12434] bond9: option updelay: invalid value (18446744073709518847) [ 290.826768][T12434] bond9: option updelay: allowed values 0 - 2147483647 [ 290.833310][T12434] bond9 (unregistering): Released all slaves [ 290.933857][T12449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 291.208842][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.513142][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 291.536894][T12470] net_ratelimit: 19 callbacks suppressed [ 291.536916][T12470] netlink: Unknown conntrack attr (type=4854, max=9) [ 291.671127][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 293.011455][ T31] audit: type=1800 audit(1789910839.222:6): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1555" name=CB dev="tmpfs" ino=1735 res=0 errno=0 [ 295.135287][T12503] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 295.135336][T12503] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 295.135355][T12503] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 295.730215][T12547] netlink: 'syz.4.1559': attribute type 2 has an invalid length. [ 295.792911][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 295.893234][T12556] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 295.893820][T12556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1566'. [ 296.079850][T12562] xt_hashlimit: size too large, truncated to 1048576 [ 296.144564][T12564] x_tables: duplicate underflow at hook 1 [ 296.179474][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.186987][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.187637][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.192989][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.193558][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.194315][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.197803][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 296.290670][T12572] syzkaller1: entered promiscuous mode [ 296.290695][T12572] syzkaller1: entered allmulticast mode [ 296.756832][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 296.799853][T12584] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 296.800148][T12584] dummy0: left promiscuous mode [ 296.832170][T12584] dummy0: entered promiscuous mode [ 296.837306][T12584] team0: Port device dummy0 added [ 296.886634][T12584] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 297.335846][T12602] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 297.374033][T12604] No such timeout policy "syz1" [ 297.431634][T12602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.504651][T12609] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.505086][T12609] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 297.513318][T12609] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 297.585765][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 297.665869][T12611] nbd: must specify at least one socket [ 297.851888][T12613] block nbd3: server does not support multiple connections per device. [ 297.879207][T12613] block nbd3: shutting down sockets [ 297.930811][T12613] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 298.036040][T12627] netlink: 'syz.1.1587': attribute type 11 has an invalid length. [ 298.664823][T12662] nbd: must specify at least one socket [ 299.384596][T12694] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 299.440777][T12697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.477305][T12697] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 299.864728][T12707] nbd: must specify at least one socket [ 300.252706][T12733] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 300.426227][T12737] tipc: Failed to remove unknown binding: 66,0,0/0:1399110423/1399110425 [ 300.426266][T12737] tipc: Failed to remove unknown binding: 66,0,0/0:1399110423/1399110424 [ 300.511507][T12738] tipc: Failed to remove unknown binding: 66,0,0/0:1399110423/1399110425 [ 300.513144][T12738] tipc: Failed to remove unknown binding: 66,0,0/0:1399110423/1399110424 [ 300.628199][T12741] xt_CT: No such helper "syz0" [ 300.829751][T12752] bridge3: entered promiscuous mode [ 300.835750][T12752] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 300.849013][T12750] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 300.947392][T12752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.004227][T12752] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 301.004257][T12752] __nla_validate_parse: 12 callbacks suppressed [ 301.004283][T12752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1620'. [ 301.004391][T12758] bond12 (unregistering): Released all slaves [ 301.117893][T12769] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 301.117918][T12769] netlink: 'syz.4.1622': attribute type 2 has an invalid length. [ 301.117932][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'. [ 301.147972][T12752] bridge0: port 3(dummy0) entered disabled state [ 301.442584][T12784] xt_socket: unknown flags 0x8 [ 301.670044][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 301.810585][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 302.367547][T12827] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 302.367572][T12827] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1638'. [ 302.370628][T12826] netlink: 'syz.5.1639': attribute type 30 has an invalid length. [ 302.530997][T12826] netlink: 'syz.5.1639': attribute type 30 has an invalid length. [ 302.861713][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 302.904418][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 303.177156][T12863] batman_adv: batadv0: Adding interface: macvtap1 [ 303.177177][T12863] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.177204][T12863] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 303.373560][T12866] batman_adv: batadv0: Removing interface: macvtap1 [ 303.694155][T12880] syzkaller0: entered promiscuous mode [ 303.694180][T12880] syzkaller0: entered allmulticast mode [ 303.717242][T12880] 0: reclassify loop, rule prio 0, protocol 700 [ 303.905671][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 303.932313][T12904] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1662'. [ 303.934362][T12904] nbd: must specify at least one socket [ 303.973585][T12906] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 303.987048][T12907] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 304.294877][T12926] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 304.302693][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 304.651374][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.965198][T12931] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 305.057181][T12945] nbd: must specify at least one socket [ 305.230405][T12956] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 305.532151][T12972] bridge0: port 3(syz_tun) entered disabled state [ 305.532371][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.533101][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.554951][T12972] bridge0: port 3(syz_tun) entered blocking state [ 305.555106][T12972] bridge0: port 3(syz_tun) entered forwarding state [ 305.555407][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.555536][T12972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.555833][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.555970][T12972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.583630][T12972] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.804415][T12982] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.080175][T12993] __nla_validate_parse: 9 callbacks suppressed [ 306.080190][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1688'. [ 306.113521][T12993] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1688'. [ 306.119362][T12993] nbd: must specify at least one socket [ 306.192733][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 306.220970][T12998] ip6tnl3: entered allmulticast mode [ 306.302219][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1692'. [ 306.302248][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 306.545934][T13015] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 306.547296][T13008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.211151][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.424179][T13051] openvswitch: netlink: Key type 29 is not supported [ 307.642348][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 307.974911][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1707'. [ 308.489196][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.237882][T13129] syzkaller0: entered promiscuous mode [ 309.237912][T13129] syzkaller0: entered allmulticast mode [ 309.331879][T13129] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 309.420057][T13137] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 309.447013][T13137] bond8 (unregistering): Released all slaves [ 309.823711][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1719'. [ 310.474226][T13178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1726'. [ 310.477660][T13178] validate_nla: 2 callbacks suppressed [ 310.477681][T13178] netlink: 'syz.0.1726': attribute type 7 has an invalid length. [ 310.705108][T13187] netlink: 'syz.5.1729': attribute type 2 has an invalid length. [ 310.705134][T13187] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1729'. [ 310.727351][T13187] á: entered promiscuous mode [ 310.905680][T13195] bond13: option arp_validate: invalid value (8192) [ 310.915322][T13195] bond13 (unregistering): Released all slaves [ 311.088434][T13202] Bluetooth: hci0: unsupported parameter 5134 [ 311.088461][T13202] Bluetooth: hci0: unsupported parameter 8192 [ 311.088475][T13202] Bluetooth: hci0: unsupported parameter 5134 [ 311.088487][T13202] Bluetooth: hci0: unsupported parameter 8192 [ 311.387695][T13215] __nla_validate_parse: 1 callbacks suppressed [ 311.387720][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 311.391938][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'. [ 311.391963][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 312.301370][T13239] ip_tables: iptables: counters copy to user failed while replacing table [ 312.783315][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'. [ 313.039355][T13266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 313.161925][T13269] tipc: Started in network mode [ 313.161962][T13269] tipc: Node identity 080211000001, cluster identity 4711 [ 313.162193][T13269] tipc: Enabled bearer , priority 0 [ 313.164924][T13269] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 313.164954][T13269] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 313.165241][T13269] tipc: Resetting bearer [ 313.442052][T13283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1757'. [ 313.444026][T13281] syzkaller1: entered allmulticast mode [ 313.466347][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 313.657579][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 313.867609][T13303] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 313.892972][T13303] bond13: entered promiscuous mode [ 313.893301][T13303] 8021q: adding VLAN 0 to HW filter on device bond13 [ 313.914991][T13303] 8021q: adding VLAN 0 to HW filter on device bond13 [ 313.915250][T13303] bond13: (slave ipip0): The slave device specified does not support setting the MAC address [ 313.915265][T13303] bond13: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 313.918545][T13308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.927716][T13303] bond13: (slave ipip0): making interface the new active one [ 313.927747][T13303] ipip0: entered promiscuous mode [ 313.938611][T13303] bond13: (slave ipip0): Enslaving as an active interface with an up link [ 313.999231][T13310] openvswitch: netlink: Flow key attr not present in new flow. [ 314.111916][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1768'. [ 314.111937][T13323] openvswitch: netlink: Flow key attr not present in new flow. [ 314.159667][ T3217] tipc: Node number set to 134418688 [ 314.321269][T13329] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 314.346332][T13329] 8021q: adding VLAN 0 to HW filter on device bond14 [ 314.366192][T13329] bond14: (slave geneve4): making interface the new active one [ 314.375945][T13329] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 314.510455][T13294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.664446][T13333] ip_tables: iptables: counters copy to user failed while replacing table [ 314.737074][T13334] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1771'. [ 315.272824][T13348] tipc: Enabled bearer , priority 30 [ 315.961692][T13367] syzkaller1: entered promiscuous mode [ 315.961723][T13367] syzkaller1: entered allmulticast mode [ 316.323654][T13381] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 316.456248][T13381] 8021q: adding VLAN 0 to HW filter on device bond15 [ 316.465791][ T3217] tipc: Node number set to 2408302715 [ 316.506212][T13381] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 316.506241][T13381] __nla_validate_parse: 2 callbacks suppressed [ 316.506253][T13381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1786'. [ 316.556964][T13383] bond15: (slave veth7): Enslaving as an active interface with a down link [ 316.584511][T13385] dummy0: left promiscuous mode [ 316.691539][T13385] bond15: (slave dummy0): making interface the new active one [ 316.696981][T13385] dummy0: entered promiscuous mode [ 316.758443][T13385] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 316.759268][ T30] tipc: Resetting bearer [ 316.796557][T13381] bond15: (slave dummy0): Releasing active interface [ 316.812924][T13381] tipc: Resetting bearer [ 316.841266][ T30] tipc: Resetting bearer [ 317.122651][T13406] ip_tables: iptables: counters copy to user failed while replacing table [ 317.284823][T13408] No such timeout policy "s " [ 317.284845][T13408] netlink: Failed to associated timeout policy 's ' [ 317.344392][T13416] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 317.344435][T13416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.381445][T13408] tipc: Resetting bearer [ 317.420308][T13418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1793'. [ 317.420886][T13418] unsupported nlmsg_type 40 [ 317.454948][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455013][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.497804][T13419] sctp: [Deprecated]: syz.5.1793 (pid 13419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.497804][T13419] Use struct sctp_sack_info instead [ 317.670861][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 318.237422][T13445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.578535][T13453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1802'. [ 318.582654][T13449] netlink: Failed to add GPL helper -22 [ 318.582720][T13449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.584220][T13456] xt_IDLETIMER: timeout value is zero [ 318.748581][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 319.086078][T13471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1809'. [ 319.129181][T13471] xt_cgroup: invalid path, errno=-2 [ 319.230693][T13479] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 319.255364][T13479] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 319.255396][T13479] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 319.284387][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.285585][T13479] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 319.285951][T13479] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 319.311731][T13479] team0: Port device netdevsim1 added [ 319.399942][T13477] pim6reg: entered allmulticast mode [ 319.415085][T13477] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 319.536089][T13497] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1815'. [ 320.141599][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.145800][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.146638][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.156163][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.163227][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.259077][T13514] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1821'. [ 320.259104][T13514] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1821'. [ 320.784050][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1825'. [ 321.351494][T13549] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 321.367844][T13547] bridge0: port 4(batadv2) entered blocking state [ 321.371179][T13547] bridge0: port 4(batadv2) entered disabled state [ 321.371455][T13547] batadv2: entered allmulticast mode [ 321.376483][T13547] batadv2: entered promiscuous mode [ 321.640358][T13562] syzkaller0: entered promiscuous mode [ 321.640385][T13562] syzkaller0: entered allmulticast mode [ 321.731273][T13577] ovs-s: entered promiscuous mode [ 321.858393][ T1069] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 321.858419][ T1069] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 321.915873][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.916100][T13509] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.916600][T13509] bridge_slave_0: entered allmulticast mode [ 321.918959][T13509] bridge_slave_0: entered promiscuous mode [ 321.922394][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.922565][T13509] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.922697][T13509] bridge_slave_1: entered allmulticast mode [ 321.924501][T13509] bridge_slave_1: entered promiscuous mode [ 321.963141][T13509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.966703][T13509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.049914][T13509] team0: Port device team_slave_0 added [ 322.053598][T13509] team0: Port device team_slave_1 added [ 322.094663][T13509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.094686][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.094704][T13509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.096821][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.096837][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.096859][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.231220][T13509] hsr_slave_0: entered promiscuous mode [ 322.232514][T13509] hsr_slave_1: entered promiscuous mode [ 322.233429][T13509] debugfs: 'hsr0' already exists in 'hsr' [ 322.233451][T13509] Cannot create hsr debugfs directory [ 322.248345][ T5615] Bluetooth: hci6: command tx timeout [ 324.328567][ T5615] Bluetooth: hci6: command tx timeout [ 324.458313][T13552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.602292][T13509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.630210][T13509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.631351][T13509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.670396][T13509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.671562][T13509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.696811][T13509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.702945][T13509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.736333][T13509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.859893][T13626] __nla_validate_parse: 1 callbacks suppressed [ 324.859921][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 324.893932][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 324.894372][T13601] xt_cgroup: path and classid specified [ 324.894839][T13608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1833'. [ 325.163647][T13509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.235356][T13509] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.277344][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.277536][ T7512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.306381][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.306510][ T7512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.548048][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1838'. [ 325.559756][T13642] netlink: 'syz.2.1839': attribute type 9 has an invalid length. [ 325.781580][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1840'. [ 325.807082][T13650] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 325.986422][T13659] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 326.151028][T13665] veth1_macvtap: entered allmulticast mode [ 326.399587][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 326.409656][ T5615] Bluetooth: hci6: command tx timeout [ 326.457828][T13673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1846'. [ 326.508841][T13509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.575038][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 326.577163][T13664] veth0_to_bond: left promiscuous mode [ 326.577187][T13664] veth0_to_bond: left allmulticast mode [ 326.631487][T13664] bond8: (slave veth0_to_bond): making interface the new active one [ 326.632733][T13664] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 326.789522][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'. [ 326.958654][T13678] bond0: (slave bond_slave_1): Releasing backup interface [ 327.190388][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 327.232836][T13696] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.240076][T13697] netlink: 'syz.1.1848': attribute type 21 has an invalid length. [ 327.265891][T13696] bridge9: entered promiscuous mode [ 327.276853][T13696] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 327.304253][T13696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.587298][T13708] netlink: 'syz.0.1851': attribute type 18 has an invalid length. [ 327.616166][T13509] veth0_vlan: entered promiscuous mode [ 327.621186][T13707] pim6reg1: entered promiscuous mode [ 327.621212][T13707] pim6reg1: entered allmulticast mode [ 327.793977][T13509] veth1_vlan: entered promiscuous mode [ 327.859554][T13509] veth0_macvtap: entered promiscuous mode [ 327.886654][T13509] veth1_macvtap: entered promiscuous mode [ 327.992472][T13509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.041617][T13509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.219815][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.258751][T10271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.258808][T10271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.258852][T10271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.489892][ T5615] Bluetooth: hci6: command tx timeout [ 328.644177][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.644202][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.900769][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.900794][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.114033][T13737] syzkaller0: entered promiscuous mode [ 329.114058][T13737] syzkaller0: entered allmulticast mode [ 329.514302][T13756] tipc: Enabled bearer , priority 30 [ 329.528919][T13759] tipc: Enabling of bearer rejected, already enabled [ 329.661638][T13763] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 329.722560][T13772] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 330.093026][T13772] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.158522][T13788] xt_hashlimit: size too large, truncated to 1048576 [ 331.094876][T13800] netlink: 'syz.6.1869': attribute type 4 has an invalid length. [ 331.214215][T13804] netlink: 'syz.6.1869': attribute type 4 has an invalid length. [ 332.969381][T13810] __nla_validate_parse: 5 callbacks suppressed [ 332.969425][T13810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 332.988422][T13815] sctp: [Deprecated]: syz.2.1870 (pid 13815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.988422][T13815] Use struct sctp_sack_info instead [ 333.437303][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 333.448925][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.983225][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.002711][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.519838][T13851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.575024][T13851] veth1_vlan: left promiscuous mode [ 334.583287][T13851] veth0_vlan: left promiscuous mode [ 334.590036][T13851] veth0_vlan: entered promiscuous mode [ 334.607861][T13851] tipc: Resetting bearer [ 334.620967][T13851] veth1_vlan: entered promiscuous mode [ 334.655768][T13851] veth1_macvtap: left promiscuous mode [ 334.665548][T13851] veth0_macvtap: left promiscuous mode [ 334.674167][T13851] veth0_macvtap: entered promiscuous mode [ 334.676963][T13851] veth1_macvtap: entered promiscuous mode [ 334.692770][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.693401][T13851] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 334.694079][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.695235][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.696372][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.740751][T13851] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 334.786380][ T25] bridge0: port 1(vlan3) entered blocking state [ 334.786565][ T25] bridge0: port 1(vlan3) entered forwarding state [ 334.859942][ T163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.859978][ T163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.860243][ T163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.860271][ T163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.860308][ T163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.860332][ T163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.860366][ T163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.860391][ T163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.138537][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1884'. [ 336.991205][T13865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.115026][T13936] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1889'. [ 337.280121][T13941] IPVS: length: 4096 != 24 [ 337.394626][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1892'. [ 337.485696][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 337.485946][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 337.486159][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 337.486416][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 337.499085][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 337.690179][T13959] lo speed is unknown, defaulting to 1000 [ 337.741028][T13959] lo speed is unknown, defaulting to 1000 [ 337.786580][T13959] lo speed is unknown, defaulting to 1000 [ 337.989732][T13973] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 338.563017][T13959] infiniband syz0: set active [ 338.563099][T13959] infiniband syz0: added lo [ 338.573933][T13959] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 338.576412][T13959] infiniband syz0: Couldn't open port 1 [ 338.576700][T13959] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 338.576731][T13959] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 338.576768][T13959] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 338.693142][ T3217] lo speed is unknown, defaulting to 1000 [ 338.746663][T13959] RDS/IB: syz0: added [ 338.746726][T13959] smc: adding ib device syz0 with port count 1 [ 338.746747][T13959] smc: ib device syz0 port 1 has no pnetid [ 338.746838][T11545] lo speed is unknown, defaulting to 1000 [ 338.754464][T13959] lo speed is unknown, defaulting to 1000 [ 338.832078][T13998] __nla_validate_parse: 60 callbacks suppressed [ 338.832101][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1903'. [ 338.861729][T14000] netdevsim0: mtu less than device minimum [ 338.896406][T14000] syzkaller0: entered promiscuous mode [ 338.896433][T14000] syzkaller0: entered allmulticast mode [ 338.999345][T13998] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.051598][T14001] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1903'. [ 339.340722][T14015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'. [ 339.363759][T14012] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 339.370899][T14012] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.461787][T13959] lo speed is unknown, defaulting to 1000 [ 339.547986][T14021] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 339.558514][T14021] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1909'. [ 339.776157][T14026] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 340.044913][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1914'. [ 340.097624][T13959] lo speed is unknown, defaulting to 1000 [ 340.281569][T14035] ipvlan2: entered allmulticast mode [ 340.307114][T14035] batman_adv: batadv0: Adding interface: ipvlan2 [ 340.307134][T14035] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.307166][T14035] batman_adv: batadv0: Interface activated: ipvlan2 [ 340.814143][T13959] lo speed is unknown, defaulting to 1000 [ 341.055938][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 341.145805][T14068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1925'. [ 341.147194][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1923'. [ 341.224927][T14071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1923'. [ 341.357715][T14076] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1926'. [ 341.357751][T14076] openvswitch: netlink: Flow key attr not present in new flow. [ 341.401436][T14072] openvswitch: netlink: Flow key attr not present in new flow. [ 341.591760][T14073] x_tables: ip_tables: osf match: only valid for protocol 6 [ 341.847097][T13959] lo speed is unknown, defaulting to 1000 [ 341.904538][T14094] tipc: Enabled bearer , priority 0 [ 342.002080][T14109] netlink: zone id is out of range [ 342.002101][T14109] netlink: zone id is out of range [ 342.002109][T14109] netlink: zone id is out of range [ 342.002116][T14109] netlink: zone id is out of range [ 342.002124][T14109] netlink: zone id is out of range [ 342.002131][T14109] netlink: zone id is out of range [ 342.002138][T14109] netlink: zone id is out of range [ 342.002145][T14109] netlink: zone id is out of range [ 342.212659][T14084] syzkaller0: entered promiscuous mode [ 342.212693][T14084] syzkaller0: entered allmulticast mode [ 342.241094][T14084] tipc: Resetting bearer [ 342.306109][T14075] tipc: Resetting bearer [ 342.418850][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.836375][T14135] nbd: must specify at least one socket [ 345.455243][T14075] tipc: Disabling bearer [ 345.466662][T14128] __nla_validate_parse: 16 callbacks suppressed [ 345.466687][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 345.467822][T13959] lo speed is unknown, defaulting to 1000 [ 345.651799][T14140] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 345.708576][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.708595][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.708613][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.804236][T14141] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.804805][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.804824][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.805694][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.814569][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.814590][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.814611][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.831400][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.831423][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 345.831443][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.833827][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.835875][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.838474][T10271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 60387 - 0 [ 345.838614][T10271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 60387 - 0 [ 345.838678][T10271] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 60387 - 0 [ 345.838739][T10271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 60387 - 0 [ 345.839930][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.841845][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.845295][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 345.851304][T14139] netlink: 'syz.1.1934': attribute type 15 has an invalid length. [ 346.112139][T14154] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 346.204684][T13959] lo speed is unknown, defaulting to 1000 [ 346.345849][T14156] bond10: option mode: invalid value (7) [ 346.378922][T14156] bond10 (unregistering): Released all slaves [ 346.613471][T14161] dummy0: left promiscuous mode [ 346.617418][T14161] team0: Port device dummy0 removed [ 347.140286][T14192] ipvlan2: entered promiscuous mode [ 347.140483][T14192] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.140503][T14192] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 347.140662][T14192] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 347.194601][ T31] audit: type=1804 audit(1789910893.412:7): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1949" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=960 res=1 errno=0 [ 347.194847][ T31] audit: type=1800 audit(1789910893.412:8): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1949" name="cgroup.controllers" dev="tmpfs" ino=960 res=0 errno=0 [ 347.300057][T14198] ipvlan2: entered promiscuous mode [ 347.300249][T14198] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.300722][T14198] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 347.300876][T14198] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 347.927729][T14233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.942614][T14226] syzkaller0: entered promiscuous mode [ 347.942641][T14226] syzkaller0: entered allmulticast mode [ 347.970260][T14243] macvlan2: entered promiscuous mode [ 347.970285][T14243] macvlan2: entered allmulticast mode [ 348.286491][T14262] ip6gretap2: entered allmulticast mode [ 349.174642][T14299] net_ratelimit: 4 callbacks suppressed [ 349.174659][T14299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.175187][T14300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 350.774681][T14235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.100471][T14307] syzkaller0: entered promiscuous mode [ 351.100498][T14307] syzkaller0: entered allmulticast mode [ 351.336445][T14323] __nla_validate_parse: 137 callbacks suppressed [ 351.336471][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 351.357438][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 351.417400][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 351.432148][T14326] IPv6: sit1: Disabled Multicast RS [ 351.563682][T14333] ip_tables: iptables: counters copy to user failed while replacing table [ 351.601173][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 351.851455][T14340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1980'. [ 352.185850][T14360] pim6reg1: entered allmulticast mode [ 352.519538][T14374] ipvlan3: entered allmulticast mode [ 352.527264][T14379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1990'. [ 352.527611][T14374] batman_adv: batadv0: Adding interface: ipvlan3 [ 352.527626][T14374] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.527654][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 352.527669][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.527683][T14374] batman_adv: batadv0: Interface activated: ipvlan3 [ 353.176815][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1997'. [ 353.186313][T14405] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1997'. [ 353.188049][T14405] nbd: must specify at least one socket [ 353.312025][T14410] xt_cgroup: invalid path, errno=-2 [ 353.357551][T14407] lo speed is unknown, defaulting to 1000 [ 353.419288][T14415] validate_nla: 60 callbacks suppressed [ 353.419315][T14415] netlink: 'syz.1.1999': attribute type 9 has an invalid length. [ 353.753012][T14422] syzkaller1: entered promiscuous mode [ 353.753043][T14422] syzkaller1: entered allmulticast mode [ 353.987185][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2005'. [ 354.001407][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2005'. [ 354.035193][T14435] netlink: 'syz.1.2004': attribute type 11 has an invalid length. [ 354.734471][T14454] nbd: must specify at least one socket [ 354.937371][T14459] syzkaller1: entered promiscuous mode [ 354.937397][T14459] syzkaller1: entered allmulticast mode [ 355.271693][T14495] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 355.694668][T14510] nbd: must specify at least one socket [ 355.992520][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.993222][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.067838][T14535] netlink: 'syz.2.2028': attribute type 4 has an invalid length. [ 356.434031][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.462047][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.779614][T14547] netlink: 'syz.0.2032': attribute type 8 has an invalid length. [ 357.030874][T14531] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 357.038510][T14171] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.039482][T14171] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.039528][T14171] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.039562][T14171] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.125518][T14558] __nla_validate_parse: 10 callbacks suppressed [ 357.125541][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 357.163162][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 357.288006][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 357.288050][T14559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.290064][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 357.290098][T14558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.313800][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 357.503338][T14575] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2037'. [ 357.530747][T14578] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2038'. [ 357.565738][T14562] xt_TCPMSS: Only works on TCP SYN packets [ 357.566432][T14562] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2038'. [ 357.571491][T14579] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2037'. [ 357.582883][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.582904][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.666111][T14577] syzkaller0: entered promiscuous mode [ 357.666140][T14577] syzkaller0: entered allmulticast mode [ 357.731814][T14587] netlink: 'syz.6.2042': attribute type 4 has an invalid length. [ 358.053120][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 358.053147][T14600] netlink: 'syz.2.2046': attribute type 18 has an invalid length. [ 358.132850][T14603] tipc: New replicast peer: 255.255.255.255 [ 358.137226][T14603] tipc: Enabled bearer , priority 10 [ 358.183647][T14605] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 358.496598][T14617] Bluetooth: hci0: unsupported parameter 5161 [ 358.496634][T14617] Bluetooth: hci0: unsupported parameter 8192 [ 358.496647][T14617] Bluetooth: hci0: unsupported parameter 5161 [ 358.496659][T14617] Bluetooth: hci0: unsupported parameter 8192 [ 358.887797][T14633] 0·: renamed from hsr0 [ 358.919926][T14633] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.919958][T14633] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.922343][T14633] 0·: entered allmulticast mode [ 358.922368][T14633] hsr_slave_0: entered allmulticast mode [ 358.922386][T14633] hsr_slave_1: entered allmulticast mode [ 358.927553][T14633] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 359.519955][T14665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.520073][T14664] netlink: 'syz.5.2064': attribute type 12 has an invalid length. [ 359.520092][T14664] netlink: 'syz.5.2064': attribute type 29 has an invalid length. [ 359.520109][T14664] netlink: 'syz.5.2064': attribute type 3 has an invalid length. [ 360.134522][T14694] lo speed is unknown, defaulting to 1000 [ 360.296876][T14710] netlink: 'syz.6.2076': attribute type 1 has an invalid length. [ 360.417613][T14710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.455894][T14710] x_tables: duplicate entry at hook 1 [ 360.785108][T14724] bond1: (slave geneve2): making interface the new active one [ 360.797637][T14724] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 360.808364][T14179] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.810536][T14179] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.810591][T14179] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.810628][T14179] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.821105][T14741] openvswitch: netlink: Message has -2 unknown bytes. [ 360.821147][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.942175][T14742] lo: left promiscuous mode [ 360.982234][T14742] tunl0: left promiscuous mode [ 360.986097][T14742] gre0: left promiscuous mode [ 361.005622][T14742] 0ªî{X¹¦: left promiscuous mode [ 361.028342][T14742] ip_vti0: left promiscuous mode [ 361.031388][T14742] ip6_vti0: left promiscuous mode [ 361.035053][T14742] sit0: left promiscuous mode [ 361.035076][T14742] sit0: left allmulticast mode [ 361.091948][T14742] ip6tnl0: left promiscuous mode [ 361.091978][T14742] ip6tnl0: left allmulticast mode [ 361.103197][T14742] ip6gre0: left promiscuous mode [ 361.103221][T14742] ip6gre0: left allmulticast mode [ 361.118686][T14742] syz_tun: left promiscuous mode [ 361.118710][T14742] syz_tun: left allmulticast mode [ 361.143431][T14742] ip6gretap0: left promiscuous mode [ 361.143457][T14742] ip6gretap0: left allmulticast mode [ 361.160409][T14742] bridge0: left promiscuous mode [ 361.160710][T14742] vcan0: left promiscuous mode [ 361.160728][T14742] vcan0: left allmulticast mode [ 361.167749][T14742] .`: left promiscuous mode [ 361.167774][T14742] .`: left allmulticast mode [ 361.192260][T14742] team0: left promiscuous mode [ 361.192289][T14742] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 361.192541][T14742] team0: left allmulticast mode [ 361.192558][T14742] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 361.209786][T14742] nlmon0: left promiscuous mode [ 361.209811][T14742] nlmon0: left allmulticast mode [ 361.221630][T14742] batadv0: left promiscuous mode [ 361.221653][T14742] batadv0: left allmulticast mode [ 361.229280][T14742] veth0: left promiscuous mode [ 361.229302][T14742] veth0: left allmulticast mode [ 361.236988][T14742] veth1: left promiscuous mode [ 361.240902][T14742] veth1: left allmulticast mode [ 361.259737][T14742] wg0: left promiscuous mode [ 361.259760][T14742] wg0: left allmulticast mode [ 361.273346][T14742] wg1: left promiscuous mode [ 361.273373][T14742] wg1: left allmulticast mode [ 361.302115][T14742] wg2: left promiscuous mode [ 361.302142][T14742] wg2: left allmulticast mode [ 361.311282][T14742] veth0_to_bridge: left promiscuous mode [ 361.311306][T14742] veth0_to_bridge: left allmulticast mode [ 361.324370][T14742] bridge_slave_0: left promiscuous mode [ 361.324394][T14742] bridge_slave_0: left allmulticast mode [ 361.357959][T14742] veth1_to_bridge: left promiscuous mode [ 361.357981][T14742] veth1_to_bridge: left allmulticast mode [ 361.379780][T14742] bridge_slave_1: left promiscuous mode [ 361.379807][T14742] bridge_slave_1: left allmulticast mode [ 361.385788][T14742] bond_slave_0: left promiscuous mode [ 361.385814][T14742] bond_slave_0: left allmulticast mode [ 361.413268][T14742] veth1_to_bond: left promiscuous mode [ 361.413294][T14742] veth1_to_bond: left allmulticast mode [ 361.430776][T14742] bond_slave_1: left promiscuous mode [ 361.430802][T14742] bond_slave_1: left allmulticast mode [ 361.435550][T14742] veth0_to_team: left promiscuous mode [ 361.435577][T14742] veth0_to_team: left allmulticast mode [ 361.460628][T14742] team_slave_0: left promiscuous mode [ 361.460653][T14742] team_slave_0: left allmulticast mode [ 361.540112][T14742] veth1_to_team: left promiscuous mode [ 361.540141][T14742] veth1_to_team: left allmulticast mode [ 361.550110][T14742] team_slave_1: left promiscuous mode [ 361.550133][T14742] team_slave_1: left allmulticast mode [ 361.555053][T14742] veth0_to_batadv: left promiscuous mode [ 361.555078][T14742] veth0_to_batadv: left allmulticast mode [ 361.585425][T14742] batadv_slave_0: left promiscuous mode [ 361.585451][T14742] batadv_slave_0: left allmulticast mode [ 361.597194][T14742] veth1_to_batadv: left promiscuous mode [ 361.597219][T14742] veth1_to_batadv: left allmulticast mode [ 361.613941][T14742] batadv_slave_1: left promiscuous mode [ 361.613968][T14742] batadv_slave_1: left allmulticast mode [ 361.643078][T14742] xfrm0: left promiscuous mode [ 361.643105][T14742] xfrm0: left allmulticast mode [ 361.653413][T14742] veth0_to_hsr: left promiscuous mode [ 361.653439][T14742] veth0_to_hsr: left allmulticast mode [ 361.666206][T14742] veth1_to_hsr: left promiscuous mode [ 361.666228][T14742] veth1_to_hsr: left allmulticast mode [ 361.674409][T14742] 0·: left allmulticast mode [ 361.674433][T14742] hsr_slave_0: left allmulticast mode [ 361.674446][T14742] hsr_slave_1: left allmulticast mode [ 361.677047][T14742] veth1_virt_wifi: left promiscuous mode [ 361.677065][T14742] veth1_virt_wifi: left allmulticast mode [ 361.680283][T14742] veth0_virt_wifi: left promiscuous mode [ 361.680300][T14742] veth0_virt_wifi: left allmulticast mode [ 361.682587][T14742] virt_wifi0: left promiscuous mode [ 361.682603][T14742] virt_wifi0: left allmulticast mode [ 361.692453][T14742] vlan0: left promiscuous mode [ 361.692755][T14742] vlan0: left allmulticast mode [ 361.745258][T14742] vlan1: left promiscuous mode [ 361.759149][T14742] vlan1: left allmulticast mode [ 361.789922][T14742] macvlan1: left promiscuous mode [ 361.809613][T14742] ipvlan0: left promiscuous mode [ 361.809641][T14742] ipvlan0: left allmulticast mode [ 361.832389][T14776] netlink: 'syz.0.2083': attribute type 16 has an invalid length. [ 361.832412][T14776] netlink: 'syz.0.2083': attribute type 17 has an invalid length. [ 361.901780][T14742] ipvlan1: left promiscuous mode [ 361.901801][T14742] ipvlan1: left allmulticast mode [ 361.901809][T14742] veth0_vlan: left allmulticast mode [ 361.925696][T14742] veth0_macvtap: left promiscuous mode [ 361.925714][T14742] veth0_macvtap: left allmulticast mode [ 361.943984][T14742] veth1_macvtap: left allmulticast mode [ 361.944208][T14742] macsec0: left promiscuous mode [ 361.944222][T14742] macsec0: left allmulticast mode [ 361.959441][T14742] geneve1: left promiscuous mode [ 361.959465][T14742] geneve1: left allmulticast mode [ 361.964887][T14742] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 361.964913][T14742] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 361.982838][T14742] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 361.982868][T14742] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 362.035539][T14742] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 362.035568][T14742] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 362.055175][T14742] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 362.055195][T14742] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 362.056273][T14742] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 362.056287][T14742] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 362.056660][T14742] bridge1: left promiscuous mode [ 362.056673][T14742] bridge1: left allmulticast mode [ 362.068167][T14742] ip6gre1: left promiscuous mode [ 362.068189][T14742] ip6gre1: left allmulticast mode [ 362.081958][T14742] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 362.081984][T14742] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 362.082284][T14742] n: left promiscuous mode [ 362.082298][T14742] n: left allmulticast mode [ 362.106994][T14742] veth2: left promiscuous mode [ 362.107018][T14742] veth2: left allmulticast mode [ 362.136800][T14742] veth3: left promiscuous mode [ 362.136822][T14742] veth3: left allmulticast mode [ 362.155193][T14742] ip6gre2: left promiscuous mode [ 362.155211][T14742] ip6gre2: left allmulticast mode [ 362.164847][T14742] vlan2: left promiscuous mode [ 362.164870][T14742] geneve0: left promiscuous mode [ 362.165067][T14742] vlan2: left allmulticast mode [ 362.165078][T14742] geneve0: left allmulticast mode [ 362.182676][T14742] veth1_vlan: left allmulticast mode [ 362.185902][T14742] macvlan2: left promiscuous mode [ 362.185923][T14742] macvlan2: left allmulticast mode [ 362.202942][T14742] vxcan2: left promiscuous mode [ 362.202964][T14742] vxcan2: left allmulticast mode [ 362.215753][T14742] vxcan3: left promiscuous mode [ 362.215775][T14742] vxcan3: left allmulticast mode [ 362.225100][T14742] mac80211_hwsim hwsim17 wlan3: left promiscuous mode [ 362.225126][T14742] mac80211_hwsim hwsim17 wlan3: left allmulticast mode [ 362.225519][T14742] bareudp0: left promiscuous mode [ 362.225534][T14742] bareudp0: left allmulticast mode [ 362.411389][T14742] macsec1: left promiscuous mode [ 362.426416][T14742] bond2: left promiscuous mode [ 362.426440][T14742] bond2: left allmulticast mode [ 362.439026][T14742] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 362.446921][T14742] ip6gretap1: left allmulticast mode [ 362.485491][T14742] bond4: left allmulticast mode [ 362.543528][T14742] ip6tnl3: left allmulticast mode [ 362.623076][T14742] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 362.623181][T14742] ipvlan2: left allmulticast mode [ 362.642245][T14742] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 362.643679][T14742] ipvlan3: left allmulticast mode [ 362.643693][T14742] macvlan1: left allmulticast mode [ 363.041075][T14791] netlink: 'syz.5.2087': attribute type 5 has an invalid length. [ 363.078010][T14776] bridge0: port 1(vlan3) entered disabled state [ 363.400955][T14776] tipc: Resetting bearer [ 363.547925][T14776] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 363.547944][T14776] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 363.571740][T14776] bridge9: left promiscuous mode [ 363.607489][ T997] lo speed is unknown, defaulting to 1000 [ 363.607528][ T997] syz0: Port: 1 Link DOWN [ 363.619339][T14781] syzkaller1: entered promiscuous mode [ 363.619366][T14781] syzkaller1: entered allmulticast mode [ 363.638864][T14179] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 60387 - 0 [ 363.638901][T14179] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.638941][T14179] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 60387 - 0 [ 363.638965][T14179] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639018][T14179] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 60387 - 0 [ 363.639043][T14179] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639078][T14179] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 60387 - 0 [ 363.639100][T14179] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639131][T14179] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.639153][T14179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639188][T14179] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.639211][T14179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639246][T14179] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.639268][T14179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.639301][T14179] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.639320][T14179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.764546][T14798] syzkaller0: entered promiscuous mode [ 363.764569][T14798] syzkaller0: entered allmulticast mode [ 363.773162][T14805] netlink: 'syz.6.2088': attribute type 1 has an invalid length. [ 363.906036][T14805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.026011][ T997] lo speed is unknown, defaulting to 1000 [ 364.040355][T14809] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 364.077191][T14814] bond2: entered promiscuous mode [ 364.077221][T14814] bond2: entered allmulticast mode [ 364.212742][T14826] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 364.216201][T14826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.227199][T14826] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 364.293734][T14829] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 364.304065][T14834] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 364.506228][T14848] __nla_validate_parse: 9 callbacks suppressed [ 364.506252][T14848] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2095'. [ 364.882427][T14854] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.882529][T14854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.882788][T14854] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.882896][T14854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.885495][T14854] 8021q: adding VLAN 0 to HW filter on device .` [ 364.934123][T14854] veth0_macvtap: entered promiscuous mode [ 364.956372][T14854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 364.974666][T14854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.982529][T14854] 8021q: adding VLAN 0 to HW filter on device bond8 [ 364.991200][T11545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.000156][T11545] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.010531][T11545] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.013020][T14854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.024780][T14854] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.029378][T14854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.096750][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.097753][ T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 365.110142][ T8968] bond11: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 365.113912][ T8968] bond11: (slave veth5): making interface the new active one [ 365.127029][ T8968] bond11: active interface up! [ 365.148623][T11545] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.181518][ T8968] bond15: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 365.181766][ T8968] bond15: (slave veth7): making interface the new active one [ 365.185987][ T8968] bond15: active interface up! [ 365.930782][T11545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.011063][T11545] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.119577][T14821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.439731][T14869] ip6gre3: entered promiscuous mode [ 367.439758][T14869] ip6gre3: entered allmulticast mode [ 367.452245][T14179] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.452517][T14179] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.607641][T14872] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 367.953418][T14874] 8021q: adding VLAN 0 to HW filter on device bond17 [ 367.955771][T14874] bond16: (slave bond17): making interface the new active one [ 367.956282][T14874] bond16: (slave bond17): Enslaving as an active interface with an up link [ 367.973799][T14876] bond16: (slave gretap0): Enslaving as a backup interface with an up link [ 368.107915][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2101'. [ 368.127740][T14872] 8021q: adding VLAN 0 to HW filter on device bond16 [ 368.392286][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2106'. [ 368.514814][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2106'. [ 368.692397][T14915] tipc: Enabled bearer , priority 0 [ 368.693366][T14915] syzkaller0: entered promiscuous mode [ 368.693399][T14915] syzkaller0: entered allmulticast mode [ 368.697655][T14915] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 368.819365][T14915] tipc: Resetting bearer [ 368.852715][T14913] tipc: Resetting bearer [ 368.910942][T14913] tipc: Disabling bearer [ 369.003349][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2111'. [ 369.025266][T14932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2113'. [ 369.069626][T14933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2114'. [ 369.466325][T14920] bridge0: port 3(syz_tun) entered disabled state [ 369.490324][T14920] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.490450][T14920] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.749323][T14920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.268670][ T8968] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.268710][ T8968] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.268811][ T8968] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.268836][ T8968] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.268872][ T8968] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.268906][ T8968] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.268942][ T8968] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.268966][ T8968] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.421094][T14951] netlink: 'syz.6.2117': attribute type 10 has an invalid length. [ 370.469587][T14952] netlink: 'syz.0.2116': attribute type 11 has an invalid length. [ 370.480358][T14953] netlink: 'syz.6.2117': attribute type 10 has an invalid length. [ 370.524666][T14951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.526477][T14951] team0: Port device netdevsim1 added [ 370.575646][T14953] team0: Port device netdevsim1 removed [ 370.577721][T14953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.593232][T14953] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 370.709492][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.713215][T14956] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.791141][T14956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.799606][T14956] veth1_vlan: left promiscuous mode [ 370.802794][T14956] veth0_vlan: left promiscuous mode [ 370.806294][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 370.806510][T14956] veth0_vlan: entered promiscuous mode [ 370.810910][T14956] tipc: Resetting bearer [ 370.813009][T14956] veth1_vlan: entered promiscuous mode [ 370.827565][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.831090][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.832381][T14956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.841230][T14956] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 370.841461][ T2358] lo speed is unknown, defaulting to 1000 [ 370.844772][ T2358] syz0: Port: 1 Link ACTIVE [ 370.879352][T14171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.879388][T14171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.879422][T14171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.879443][T14171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.879474][T14171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.879495][T14171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.879552][T14171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.879573][T14171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.983143][T14973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2120'. [ 371.123782][ T2358] lo speed is unknown, defaulting to 1000 [ 371.128435][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 371.128460][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 371.139477][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.139784][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.186059][T14972] syzkaller1: entered promiscuous mode [ 371.186088][T14972] syzkaller1: entered allmulticast mode [ 371.308642][T14177] bridge0: port 1(vlan3) entered blocking state [ 371.308763][T14177] bridge0: port 1(vlan3) entered forwarding state [ 373.643298][T14964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.909840][T15004] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2127'. [ 373.916741][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 373.953121][T14999] syzkaller0: entered promiscuous mode [ 373.953147][T14999] syzkaller0: entered allmulticast mode [ 374.030373][T15002] syz_tun: left allmulticast mode [ 374.030402][T15002] syz_tun: left promiscuous mode [ 374.030671][T15002] bridge0: port 3(syz_tun) entered disabled state [ 374.092398][T15002] bond0: (slave bridge0): Releasing backup interface [ 374.128014][T15002] bridge_slave_0: left allmulticast mode [ 374.128043][T15002] bridge_slave_0: left promiscuous mode [ 374.131433][T15002] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.145217][T15002] bridge_slave_1: left allmulticast mode [ 374.145244][T15002] bridge_slave_1: left promiscuous mode [ 374.145447][T15002] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.190229][T15002] bond0: (slave bond_slave_0): Releasing backup interface [ 374.195760][T15002] team0: Port device team_slave_0 removed [ 374.222961][T15002] team0: Port device team_slave_1 removed [ 374.236191][T15002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.246170][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 374.262533][T15021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 374.263050][T15002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.283310][T15021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2130'. [ 374.287366][T15023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2130'. [ 374.622469][T15036] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2132'. [ 374.696708][T15038] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 374.909117][T15043] netlink: 'syz.5.2136': attribute type 3 has an invalid length. [ 374.909142][T15043] netlink: 'syz.5.2136': attribute type 1 has an invalid length. [ 374.909154][T15043] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2136'. [ 375.529868][T15072] ip_tables: iptables: counters copy to user failed while replacing table [ 376.166560][T15096] __nla_validate_parse: 6 callbacks suppressed [ 376.166585][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 376.215597][T15096] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2150'. [ 376.235376][T15096] nbd: must specify at least one socket [ 376.353133][T15098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.635260][T15110] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 376.715072][T15110] bond10 (unregistering): Released all slaves [ 376.805307][T15147] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 376.805353][T15147] netlink: 'syz.1.2159': attribute type 9 has an invalid length. [ 376.805367][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 376.968344][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.268686][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 377.551110][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2163'. [ 377.642701][T15177] tipc: Can't bind to reserved service type 1 [ 377.876062][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2165'. [ 377.921514][T15180] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2165'. [ 377.932106][T15180] nbd: must specify at least one socket [ 378.082805][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2164'. [ 378.132683][T15184] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 378.156828][T15177] bond0: (slave bond_slave_1): Releasing backup interface [ 378.242189][T15196] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2168'. [ 378.247531][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 378.248566][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 378.282783][T14179] nci: nci_ntf_packet: unsupported ntf opcode 0xf0b [ 378.700756][T15218] ip_tables: iptables: counters copy to user failed while replacing table [ 378.780281][T15183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.798600][T15224] netlink: 'syz.0.2174': attribute type 58 has an invalid length. [ 378.898685][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 378.905472][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905540][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.169305][T15238] nbd: must specify at least one socket [ 379.236599][T15226] syzkaller1: entered promiscuous mode [ 379.236626][T15226] syzkaller1: entered allmulticast mode [ 379.366417][T15237] nbd: must specify at least one socket [ 380.004644][T15238] team0: Port device netdevsim1 removed [ 380.016336][T15281] netlink: 'syz.2.2187': attribute type 23 has an invalid length. [ 380.076401][T15287] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 380.076431][T15287] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 380.126340][T15276] macsec1: entered promiscuous mode [ 382.159136][T15324] __nla_validate_parse: 8 callbacks suppressed [ 382.159159][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 382.333887][T15324] ovs-system: entered promiscuous mode [ 382.514949][T15331] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2195'. [ 382.573307][T15339] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.573428][T15339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.573761][T15339] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.573877][T15339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.721523][T15339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.748741][ T5862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.748989][ T5862] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.751158][ T5862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 383.142324][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 383.157886][ T5862] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.286210][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.400377][T15366] batadv0: entered promiscuous mode [ 383.400408][T15366] batadv0: entered allmulticast mode [ 383.690300][ T5716] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 383.690545][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.742588][T15379] sctp: [Deprecated]: syz.6.2203 (pid 15379) Use of int in max_burst socket option deprecated. [ 383.742588][T15379] Use struct sctp_assoc_value instead [ 383.918802][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 384.833743][T15423] syzkaller0: entered promiscuous mode [ 384.833774][T15423] syzkaller0: entered allmulticast mode [ 384.885966][T15427] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 384.912704][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2213'. [ 385.019385][T15427] 8021q: adding VLAN 0 to HW filter on device bond18 [ 385.651863][T15431] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 386.280765][T15460] tc_dump_action: action bad kind [ 386.425334][T15460] IPVS: length: 15 != 8 [ 386.830122][T15477] lo speed is unknown, defaulting to 1000 [ 387.083884][T15490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2224'. [ 387.589699][T15499] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 388.142269][T15519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2234'. [ 388.176689][T15509] netlink: 'syz.6.2231': attribute type 11 has an invalid length. [ 388.212722][T15500] syzkaller1: entered allmulticast mode [ 388.307436][T15500] batman_adv: batadv0: Removing interface: ipvlan2 [ 388.392446][T15527] netlink: 'syz.6.2235': attribute type 1 has an invalid length. [ 388.419150][T15500] batman_adv: batadv0: Removing interface: ipvlan3 [ 388.742775][T15527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.815709][T15531] bond3: (slave veth7): Enslaving as an active interface with a down link [ 388.851280][T15534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 388.851451][T15534] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 389.191196][T15546] x_tables: duplicate underflow at hook 2 [ 389.271668][T15547] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2237'. [ 389.271698][T15547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 389.463881][T15557] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 389.463908][T15557] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2242'. [ 389.790830][T15565] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2244'. [ 389.992168][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 390.018729][T15571] syzkaller0: entered promiscuous mode [ 390.018755][T15571] syzkaller0: entered allmulticast mode [ 391.083142][T15587] syzkaller0: entered promiscuous mode [ 391.083169][T15587] syzkaller0: entered allmulticast mode [ 391.109588][T15594] syzkaller1: entered promiscuous mode [ 391.109615][T15594] syzkaller1: entered allmulticast mode [ 391.122909][T15599] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 391.122937][T15599] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 391.129532][T15599] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2253'. [ 391.399584][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 391.400290][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 393.608670][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.248755][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 394.340350][T15626] sctp: [Deprecated]: syz.6.2260 (pid 15626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.340350][T15626] Use struct sctp_sack_info instead [ 394.429497][T15641] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2262'. [ 394.431194][T15641] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2262'. [ 394.540448][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 394.540479][T15636] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2258'. [ 394.608770][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2265'. [ 394.746659][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 394.863513][T15656] team0: Device xfrm0 is of different type [ 394.904593][T15656] tipc: Started in network mode [ 394.904625][T15656] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 394.904788][T15656] tipc: Enabled bearer , priority 0 [ 394.933348][T15659] tipc: Enabling of bearer rejected, already enabled [ 395.078616][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 395.099371][T15671] netlink: 'syz.6.2272': attribute type 4 has an invalid length. [ 395.242208][T15680] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2273'. [ 395.524409][T15695] netlink: 'syz.6.2276': attribute type 4 has an invalid length. [ 395.524984][T15695] netlink: 'syz.6.2276': attribute type 4 has an invalid length. [ 395.619148][T15699] tipc: Started in network mode [ 395.619200][T15699] tipc: Node identity 4230e0efa4f6, cluster identity 4711 [ 395.619725][T15699] tipc: Enabled bearer , priority 0 [ 395.833315][T15711] netlink: 'syz.2.2281': attribute type 5 has an invalid length. [ 395.871732][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2282'. [ 396.028217][ T997] tipc: Node number set to 11578026 [ 396.071098][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 396.149062][T15720] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 396.168303][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 396.744230][T11545] tipc: Node number set to 3871793391 [ 396.815283][T15750] syzkaller1: entered promiscuous mode [ 396.815309][T15750] syzkaller1: entered allmulticast mode [ 396.875052][T15757] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.875506][T15757] team0: Device ipvlan2 is already an upper device of the team interface [ 397.273668][T15763] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 397.278642][T15763] team0: Device ipvlan2 is already an upper device of the team interface [ 397.609223][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 397.631960][T15798] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 398.044883][T15811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.338034][T14171] IPVS: starting estimator thread 0... [ 398.429128][T15829] IPVS: using max 27 ests per chain, 64800 per kthread [ 398.525379][T15835] netlink: 'syz.1.2308': attribute type 30 has an invalid length. [ 398.643109][T15847] IPVS: length: 200 != 24 [ 398.674314][T15839] macsec0: entered promiscuous mode [ 398.692999][T15844] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 398.709682][T15835] netlink: 'syz.1.2308': attribute type 30 has an invalid length. [ 398.819726][T15849] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 398.947336][T15863] xt_NETMAP: bad MAP_IPS. [ 398.991098][T15849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.023883][T15864] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 399.293232][T15879] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 399.377255][T15878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.616679][T15891] tipc: Enabled bearer , priority 1 [ 399.620864][T15891] __nla_validate_parse: 9 callbacks suppressed [ 399.620883][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 399.923479][T15905] syzkaller0: entered promiscuous mode [ 399.923496][T15905] syzkaller0: entered allmulticast mode [ 400.053841][T15871] tipc: Resetting bearer [ 400.097325][T15871] tipc: Disabling bearer [ 400.531293][T15927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 400.544614][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 400.857337][T15945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2337'. [ 400.946740][T15940] syzkaller0: entered promiscuous mode [ 400.946766][T15940] syzkaller0: entered allmulticast mode [ 400.988357][T15940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'. [ 401.029796][T15945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2337'. [ 401.113202][T15955] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2338'. [ 401.120026][T15958] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2338'. [ 401.139922][T15945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2337'. [ 401.185592][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2336'. [ 401.768653][T15987] ip_tables: iptables: counters copy to user failed while replacing table [ 403.206556][T16035] netlink: 'syz.5.2354': attribute type 1 has an invalid length. [ 403.910156][T16059] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 403.910202][T16059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.293827][T16067] netlink: 'syz.1.2358': attribute type 23 has an invalid length. [ 404.293858][T16067] netlink: 'syz.1.2358': attribute type 11 has an invalid length. [ 404.489062][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.712766][T16081] syzkaller0: entered promiscuous mode [ 404.712789][T16081] syzkaller0: entered allmulticast mode [ 404.861542][T16090] __nla_validate_parse: 11 callbacks suppressed [ 404.861567][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 404.861589][T16090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2364'. [ 405.074585][T16097] syzkaller0: entered promiscuous mode [ 405.074611][T16097] syzkaller0: entered allmulticast mode [ 405.174005][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.336423][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.560057][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 405.666617][T16132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'. [ 405.666723][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 406.045363][T16149] erspan1: entered allmulticast mode [ 406.083009][T16155] netlink: 'syz.0.2374': attribute type 1 has an invalid length. [ 406.094435][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 406.187809][T16155] netlink: 'syz.0.2374': attribute type 10 has an invalid length. [ 406.324726][T16162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.360475][T16166] pim6reg1: entered promiscuous mode [ 406.360514][T16166] pim6reg1: entered allmulticast mode [ 406.869643][T16194] ip_tables: iptables: counters copy to user failed while replacing table [ 407.074821][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 407.074871][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 407.126667][T16204] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.217690][T16208] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2387'. [ 407.220590][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2387'. [ 407.320630][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.320656][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.357750][T16212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.377718][T16208] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 410.605477][T16297] __nla_validate_parse: 2 callbacks suppressed [ 410.605498][T16297] netlink: 480 bytes leftover after parsing attributes in process `syz.0.2402'. [ 410.605576][T16297] netlink: 480 bytes leftover after parsing attributes in process `syz.0.2402'. [ 412.574863][T16273] kthread_run failed with err -4 [ 412.776917][T16309] sctp: [Deprecated]: syz.6.2407 (pid 16309) Use of int in max_burst socket option. [ 412.776917][T16309] Use struct sctp_assoc_value instead [ 412.840144][T16304] lo speed is unknown, defaulting to 1000 [ 413.964319][T16343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2412'. [ 414.294385][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 414.414433][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'. [ 414.728752][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 414.873575][T16380] FAULT_INJECTION: forcing a failure. [ 414.873575][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.873619][T16380] CPU: 1 UID: 0 PID: 16380 Comm: syz.6.2418 Not tainted syzkaller #0 PREEMPT(full) [ 414.873642][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.873654][T16380] Call Trace: [ 414.873662][T16380] [ 414.873671][T16380] dump_stack_lvl+0xe8/0x150 [ 414.873808][T16380] should_fail_ex+0x410/0x560 [ 414.873934][T16380] _copy_from_user+0x2d/0xb0 [ 414.874007][T16380] __sys_bpf+0x2e7/0xd90 [ 414.874067][T16380] ? __pfx___sys_bpf+0x10/0x10 [ 414.874101][T16380] ? __fget_files+0x2a/0x420 [ 414.874175][T16380] ? ksys_write+0x242/0x270 [ 414.874217][T16380] ? __pfx_ksys_write+0x10/0x10 [ 414.874250][T16380] __x64_sys_bpf+0xba/0xd0 [ 414.874274][T16380] do_syscall_64+0x166/0x520 [ 414.874372][T16380] ? trace_irq_disable+0x3b/0x140 [ 414.874412][T16380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.874451][T16380] ? clear_bhb_loop+0x70/0xc0 [ 414.874476][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.874496][T16380] RIP: 0033:0x7fd3b159e159 [ 414.874516][T16380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.874533][T16380] RSP: 002b:00007fd3b2543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.874555][T16380] RAX: ffffffffffffffda RBX: 00007fd3b1825fa0 RCX: 00007fd3b159e159 [ 414.874570][T16380] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 414.874583][T16380] RBP: 00007fd3b2543090 R08: 0000000000000000 R09: 0000000000000000 [ 414.874595][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.874607][T16380] R13: 00007fd3b1826038 R14: 00007fd3b1825fa0 R15: 00007ffe60a2dbb8 [ 414.874650][T16380] [ 415.154738][T16394] Bluetooth: MGMT ver 1.23 [ 415.155512][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2424'. [ 415.344160][T16404] netlink: 'syz.6.2425': attribute type 3 has an invalid length. [ 415.841722][T16423] FAULT_INJECTION: forcing a failure. [ 415.841722][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 415.841757][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.2.2432 Not tainted syzkaller #0 PREEMPT(full) [ 415.841779][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.841791][T16423] Call Trace: [ 415.841798][T16423] [ 415.841808][T16423] dump_stack_lvl+0xe8/0x150 [ 415.841847][T16423] should_fail_ex+0x410/0x560 [ 415.841876][T16423] should_failslab+0xa8/0x100 [ 415.841941][T16423] __kmalloc_cache_node_noprof+0xaa/0x620 [ 415.841972][T16423] ? __get_vm_area_node+0x155/0x2f0 [ 415.842002][T16423] ? __get_vm_area_node+0x155/0x2f0 [ 415.842033][T16423] __get_vm_area_node+0x155/0x2f0 [ 415.842066][T16423] __vmalloc_node_range_noprof+0x343/0x1540 [ 415.842096][T16423] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 415.842121][T16423] ? __lock_acquire+0x747/0x2de0 [ 415.842188][T16423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.842222][T16423] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 415.842241][T16423] __vmalloc_noprof+0xd2/0x120 [ 415.842268][T16423] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 415.842292][T16423] bpf_prog_alloc_no_stats+0x47/0x560 [ 415.842312][T16423] ? bpf_prog_alloc+0x2a/0x1a0 [ 415.842337][T16423] bpf_prog_alloc+0x3c/0x1a0 [ 415.842364][T16423] bpf_prog_load+0x7f8/0x1c20 [ 415.842400][T16423] ? __pfx_bpf_prog_load+0x10/0x10 [ 415.842451][T16423] __sys_bpf+0xd0d/0xd90 [ 415.842491][T16423] ? __pfx___sys_bpf+0x10/0x10 [ 415.842526][T16423] ? __fget_files+0x2a/0x420 [ 415.842573][T16423] ? ksys_write+0x242/0x270 [ 415.842604][T16423] ? __pfx_ksys_write+0x10/0x10 [ 415.842638][T16423] __x64_sys_bpf+0xba/0xd0 [ 415.842662][T16423] do_syscall_64+0x166/0x520 [ 415.842686][T16423] ? trace_irq_disable+0x3b/0x140 [ 415.842705][T16423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.842724][T16423] ? clear_bhb_loop+0x70/0xc0 [ 415.842750][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.842768][T16423] RIP: 0033:0x7fa04639e159 [ 415.842788][T16423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.842804][T16423] RSP: 002b:00007fa047304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.842827][T16423] RAX: ffffffffffffffda RBX: 00007fa046625fa0 RCX: 00007fa04639e159 [ 415.842842][T16423] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 415.842855][T16423] RBP: 00007fa047304090 R08: 0000000000000000 R09: 0000000000000000 [ 415.842869][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.842880][T16423] R13: 00007fa046626038 R14: 00007fa046625fa0 R15: 00007ffc3670c668 [ 415.842912][T16423] [ 415.993118][T16423] syz.2.2432: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 415.993195][T16423] CPU: 1 UID: 0 PID: 16423 Comm: syz.2.2432 Not tainted syzkaller #0 PREEMPT(full) [ 415.993215][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.993225][T16423] Call Trace: [ 415.993233][T16423] [ 415.993242][T16423] dump_stack_lvl+0xe8/0x150 [ 415.993273][T16423] warn_alloc+0x24d/0x270 [ 415.993293][T16423] ? __kasan_kmalloc+0x22/0xb0 [ 415.993318][T16423] ? __pfx_warn_alloc+0x10/0x10 [ 415.993334][T16423] ? __get_vm_area_node+0x155/0x2f0 [ 415.993366][T16423] ? __get_vm_area_node+0x2a9/0x2f0 [ 415.993397][T16423] __vmalloc_node_range_noprof+0x36b/0x1540 [ 415.993422][T16423] ? __lock_acquire+0x747/0x2de0 [ 415.993465][T16423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.993500][T16423] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 415.993527][T16423] __vmalloc_noprof+0xd2/0x120 [ 415.993555][T16423] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 415.993578][T16423] bpf_prog_alloc_no_stats+0x47/0x560 [ 415.993597][T16423] ? bpf_prog_alloc+0x2a/0x1a0 [ 415.993619][T16423] bpf_prog_alloc+0x3c/0x1a0 [ 415.993642][T16423] bpf_prog_load+0x7f8/0x1c20 [ 415.993675][T16423] ? __pfx_bpf_prog_load+0x10/0x10 [ 415.993721][T16423] __sys_bpf+0xd0d/0xd90 [ 415.993750][T16423] ? __pfx___sys_bpf+0x10/0x10 [ 415.993780][T16423] ? __fget_files+0x2a/0x420 [ 415.993821][T16423] ? ksys_write+0x242/0x270 [ 415.993849][T16423] ? __pfx_ksys_write+0x10/0x10 [ 415.993878][T16423] __x64_sys_bpf+0xba/0xd0 [ 415.993900][T16423] do_syscall_64+0x166/0x520 [ 415.993920][T16423] ? trace_irq_disable+0x3b/0x140 [ 415.993937][T16423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.993955][T16423] ? clear_bhb_loop+0x70/0xc0 [ 415.993977][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.993994][T16423] RIP: 0033:0x7fa04639e159 [ 415.994012][T16423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.994026][T16423] RSP: 002b:00007fa047304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.994045][T16423] RAX: ffffffffffffffda RBX: 00007fa046625fa0 RCX: 00007fa04639e159 [ 415.994058][T16423] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 415.994069][T16423] RBP: 00007fa047304090 R08: 0000000000000000 R09: 0000000000000000 [ 415.994081][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.994092][T16423] R13: 00007fa046626038 R14: 00007fa046625fa0 R15: 00007ffc3670c668 [ 415.994122][T16423] [ 415.998224][T16423] Mem-Info: [ 415.998237][T16423] active_anon:9205 inactive_anon:0 isolated_anon:0 [ 415.998237][T16423] active_file:0 inactive_file:43364 isolated_file:0 [ 415.998237][T16423] unevictable:0 dirty:187 writeback:0 [ 415.998237][T16423] slab_reclaimable:12037 slab_unreclaimable:118941 [ 415.998237][T16423] mapped:42359 shmem:2129 pagetables:1414 [ 415.998237][T16423] sec_pagetables:0 bounce:0 [ 415.998237][T16423] kernel_misc_reclaimable:0 [ 415.998237][T16423] free:1221333 free_pcp:8294 free_cma:0 [ 415.998283][T16423] Node 0 active_anon:36820kB inactive_anon:0kB active_file:0kB inactive_file:173248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169436kB dirty:748kB writeback:0kB shmem:8516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15856kB pagetables:5508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 415.998330][T16423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 415.998373][T16423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.998423][T16423] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 415.998458][T16423] Node 0 DMA32 free:924120kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36820kB inactive_anon:0kB active_file:0kB inactive_file:173248kB unevictable:0kB writepending:748kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:33176kB local_pcp:18244kB free_cma:0kB [ 415.998517][T16423] lowmem_reserve[]: 0 0 0 0 0 [ 416.000513][T16423] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.000566][T16423] lowmem_reserve[]: 0 0 0 0 0 [ 416.000599][T16423] Node 1 Normal free:3945852kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.000963][T16423] lowmem_reserve[]: 0 0 0 0 0 [ 416.001005][T16423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.001129][T16423] Node 0 DMA32: 728*4kB (UME) 621*8kB (UM) 255*16kB (UM) 379*32kB (UME) 31*64kB (UME) 16*128kB (UME) 6*256kB (UM) 3*512kB (UME) 2*1024kB (U) 5*2048kB (UME) 215*4096kB (UM) = 924120kB [ 416.001299][T16423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.001403][T16423] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 9*32kB (UM) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945852kB [ 416.001593][T16423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.001610][T16423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.001627][T16423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.001643][T16423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.001660][T16423] 45489 total pagecache pages [ 416.001669][T16423] 0 pages in swap cache [ 416.001676][T16423] Free swap = 124996kB [ 416.001685][T16423] Total swap = 124996kB [ 416.001694][T16423] 2097051 pages RAM [ 416.001701][T16423] 0 pages HighMem/MovableOnly [ 416.001717][T16423] 428700 pages reserved [ 416.001726][T16423] 0 pages cma reserved [ 416.421578][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 416.631571][T16434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.631885][T16434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.632238][T16434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.633853][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.634023][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.659571][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.659813][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.660113][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.660261][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.663609][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.607421][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2441'. [ 417.646485][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 417.863985][T16488] FAULT_INJECTION: forcing a failure. [ 417.863985][T16488] name failslab, interval 1, probability 0, space 0, times 0 [ 417.864026][T16488] CPU: 0 UID: 0 PID: 16488 Comm: syz.2.2445 Not tainted syzkaller #0 PREEMPT(full) [ 417.864050][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.864063][T16488] Call Trace: [ 417.864071][T16488] [ 417.864081][T16488] dump_stack_lvl+0xe8/0x150 [ 417.864119][T16488] should_fail_ex+0x410/0x560 [ 417.864147][T16488] ? alloc_vmap_area+0x21c/0x1420 [ 417.864175][T16488] should_failslab+0xa8/0x100 [ 417.864202][T16488] ? alloc_vmap_area+0x21c/0x1420 [ 417.864225][T16488] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 417.864260][T16488] ? alloc_vmap_area+0x21c/0x1420 [ 417.864292][T16488] alloc_vmap_area+0x21c/0x1420 [ 417.864336][T16488] ? __pfx_alloc_vmap_area+0x10/0x10 [ 417.864361][T16488] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 417.864383][T16488] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 417.864402][T16488] ? __get_vm_area_node+0x155/0x2f0 [ 417.864435][T16488] __get_vm_area_node+0x200/0x2f0 [ 417.864471][T16488] __vmalloc_node_range_noprof+0x343/0x1540 [ 417.864501][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 417.864525][T16488] ? __pfx___schedule+0x10/0x10 [ 417.864621][T16488] ? lockdep_hardirqs_on+0x7b/0x110 [ 417.864644][T16488] ? trace_irq_disable+0x3b/0x140 [ 417.864669][T16488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.864716][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 417.864738][T16488] __vmalloc_noprof+0xd2/0x120 [ 417.864767][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 417.864791][T16488] bpf_prog_alloc_no_stats+0x47/0x560 [ 417.864812][T16488] ? bpf_prog_alloc+0x2a/0x1a0 [ 417.864836][T16488] bpf_prog_alloc+0x3c/0x1a0 [ 417.864861][T16488] bpf_prog_load+0x7f8/0x1c20 [ 417.864898][T16488] ? __pfx_bpf_prog_load+0x10/0x10 [ 417.864945][T16488] __sys_bpf+0xd0d/0xd90 [ 417.864975][T16488] ? __pfx___sys_bpf+0x10/0x10 [ 417.865006][T16488] ? __fget_files+0x2a/0x420 [ 417.865053][T16488] ? ksys_write+0x242/0x270 [ 417.865082][T16488] ? __pfx_ksys_write+0x10/0x10 [ 417.865111][T16488] __x64_sys_bpf+0xba/0xd0 [ 417.865135][T16488] do_syscall_64+0x166/0x520 [ 417.865159][T16488] ? trace_irq_disable+0x3b/0x140 [ 417.865179][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.865202][T16488] ? clear_bhb_loop+0x70/0xc0 [ 417.865227][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.865248][T16488] RIP: 0033:0x7fa04639e159 [ 417.865269][T16488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.865288][T16488] RSP: 002b:00007fa047304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.865321][T16488] RAX: ffffffffffffffda RBX: 00007fa046625fa0 RCX: 00007fa04639e159 [ 417.865336][T16488] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 417.865349][T16488] RBP: 00007fa047304090 R08: 0000000000000000 R09: 0000000000000000 [ 417.865363][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.865376][T16488] R13: 00007fa046626038 R14: 00007fa046625fa0 R15: 00007ffc3670c668 [ 417.865411][T16488] [ 418.149490][ T5278] veth0_macvtap: left promiscuous mode [ 418.283988][T16500] netlink: 'syz.5.2449': attribute type 1 has an invalid length. [ 418.284018][T16500] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2449'. [ 418.284033][T16500] NCSI netlink: No device for ifindex 0 [ 418.699838][T16513] netlink: 'syz.1.2454': attribute type 3 has an invalid length. [ 418.699867][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 419.024493][T16528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2458'. [ 419.024535][T16528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2458'. [ 419.530492][T16550] netlink: 'syz.2.2465': attribute type 2 has an invalid length. [ 420.084677][T16549] netlink: 'syz.6.2463': attribute type 1 has an invalid length. [ 420.084702][T16549] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2463'. [ 420.085937][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 420.086108][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 420.357989][T16584] netlink: 'syz.6.2474': attribute type 2 has an invalid length. [ 420.369789][T16584] netlink: 'syz.6.2474': attribute type 1 has an invalid length. [ 420.495162][T16584] bond5: option mode: invalid value (7) [ 420.781170][T16584] bond5 (unregistering): Released all slaves [ 421.044343][T16604] x_tables: duplicate entry at hook 1 [ 421.846603][ T31] audit: type=1804 audit(1789910968.062:9): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2485" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1545 res=1 errno=0 [ 421.847958][ T31] audit: type=1800 audit(1789910968.062:10): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2485" name="cgroup.controllers" dev="tmpfs" ino=1545 res=0 errno=0 [ 421.871993][ T31] audit: type=1804 audit(1789910968.072:11): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2485" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1545 res=1 errno=0 [ 422.259213][T16664] __nla_validate_parse: 25 callbacks suppressed [ 422.259236][T16664] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2492'. [ 422.266336][T16664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2492'. [ 422.267232][T16664] net_ratelimit: 738 callbacks suppressed [ 422.267249][T16664] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 422.267459][T16665] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 422.372319][T16665] sit0: entered promiscuous mode [ 422.372494][T16665] netlink: 'syz.5.2492': attribute type 1 has an invalid length. [ 422.372512][T16665] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2492'. [ 422.405399][T16664] netlink: 'syz.5.2492': attribute type 1 has an invalid length. [ 422.405417][T16664] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2492'. [ 422.890423][T16686] netlink: 868 bytes leftover after parsing attributes in process `syz.2.2495'. [ 423.137307][T16693] ovs-s!: entered promiscuous mode [ 423.211160][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2500'. [ 423.214654][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2500'. [ 423.242538][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'. [ 423.296816][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2501'. [ 423.366484][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'. [ 423.566059][T16707] macsec1: entered promiscuous mode [ 423.566083][T16707] bridge0: entered promiscuous mode [ 424.443704][T16752] 8021q: VLANs not supported on vxcan1 [ 424.693213][T16761] netlink: Unknown nat attribute (0) [ 424.693270][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.764346][T16772] netlink: Unknown nat attribute (0) [ 424.764384][T16772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.770986][T16763] openvswitch: netlink: IPv4 tunnel dst address is zero [ 424.771019][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.889404][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.889597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.985477][T16783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.248672][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.669088][T16814] hsr_slave_1 (unregistering): left promiscuous mode [ 426.929427][T16830] sctp: [Deprecated]: syz.5.2540 (pid 16830) Use of int in maxseg socket option. [ 426.929427][T16830] Use struct sctp_assoc_value instead [ 427.275398][T16859] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 427.288544][ C1] net_ratelimit: 4 callbacks suppressed [ 427.288568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.288841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.776182][T16880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.942616][T16883] vxcan0: entered allmulticast mode [ 428.000777][T16893] warn_alloc: 1 callbacks suppressed [ 428.000802][T16893] syz.5.2561: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 428.000925][T16893] CPU: 1 UID: 0 PID: 16893 Comm: syz.5.2561 Not tainted syzkaller #0 PREEMPT(full) [ 428.000948][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.000961][T16893] Call Trace: [ 428.000969][T16893] [ 428.000979][T16893] dump_stack_lvl+0xe8/0x150 [ 428.001017][T16893] warn_alloc+0x24d/0x270 [ 428.001044][T16893] ? kasan_save_track+0x4f/0x80 [ 428.001066][T16893] ? kasan_save_track+0x3e/0x80 [ 428.001092][T16893] ? __pfx_warn_alloc+0x10/0x10 [ 428.001110][T16893] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 428.001254][T16893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.001299][T16893] __vmalloc_node_range_noprof+0x127/0x1540 [ 428.001364][T16893] ? rcu_is_watching+0x16/0xb0 [ 428.001405][T16893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 428.001435][T16893] ? __kmalloc_cache_noprof+0x321/0x600 [ 428.001457][T16893] ? __kmalloc_cache_noprof+0x14d/0x600 [ 428.001477][T16893] ? xskq_create+0x56/0x220 [ 428.001538][T16893] xskq_create+0x148/0x220 [ 428.001562][T16893] ? xsk_init_queue+0x8a/0xe0 [ 428.001587][T16893] xsk_init_queue+0x8a/0xe0 [ 428.001613][T16893] xsk_setsockopt+0x52a/0x960 [ 428.001638][T16893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 428.001660][T16893] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.001757][T16893] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 428.001798][T16893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 428.001820][T16893] do_sock_setsockopt+0x17c/0x1b0 [ 428.001853][T16893] __x64_sys_setsockopt+0x13d/0x1b0 [ 428.001884][T16893] do_syscall_64+0x166/0x520 [ 428.001908][T16893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.001928][T16893] ? clear_bhb_loop+0x70/0xc0 [ 428.001954][T16893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.001975][T16893] RIP: 0033:0x7fed0359e159 [ 428.001995][T16893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.002013][T16893] RSP: 002b:00007fed044c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.002036][T16893] RAX: ffffffffffffffda RBX: 00007fed03825fa0 RCX: 00007fed0359e159 [ 428.002051][T16893] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 428.002063][T16893] RBP: 00007fed0363506b R08: 0000000000000004 R09: 0000000000000000 [ 428.002075][T16893] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.002088][T16893] R13: 00007fed03826038 R14: 00007fed03825fa0 R15: 00007ffe8858ac78 [ 428.002124][T16893] [ 428.002146][T16893] Mem-Info: [ 428.002156][T16893] active_anon:7737 inactive_anon:0 isolated_anon:0 [ 428.002156][T16893] active_file:0 inactive_file:43370 isolated_file:0 [ 428.002156][T16893] unevictable:0 dirty:116 writeback:0 [ 428.002156][T16893] slab_reclaimable:12152 slab_unreclaimable:120238 [ 428.002156][T16893] mapped:40734 shmem:529 pagetables:1402 [ 428.002156][T16893] sec_pagetables:0 bounce:0 [ 428.002156][T16893] kernel_misc_reclaimable:0 [ 428.002156][T16893] free:1215523 free_pcp:14379 free_cma:0 [ 428.002208][T16893] Node 0 active_anon:30948kB inactive_anon:0kB active_file:0kB inactive_file:173272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162936kB dirty:464kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16060kB pagetables:5460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 428.002263][T16893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 428.007259][T16893] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.007304][T16893] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 428.007329][T16893] Node 0 DMA32 free:900944kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30948kB inactive_anon:0kB active_file:0kB inactive_file:173272kB unevictable:0kB writepending:464kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:57168kB local_pcp:19784kB free_cma:0kB [ 428.007372][T16893] lowmem_reserve[]: 0 0 0 0 0 [ 428.007393][T16893] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.007424][T16893] lowmem_reserve[]: 0 0 0 0 0 [ 428.007445][T16893] Node 1 Normal free:3945788kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.007500][T16893] lowmem_reserve[]: 0 0 0 0 0 [ 428.007538][T16893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 428.007612][T16893] Node 0 DMA32: 654*4kB (UM) 1361*8kB (UME) 345*16kB (UME) 692*32kB (UME) 90*64kB (UME) 31*128kB (UME) 15*256kB (UME) 7*512kB (UME) 3*1024kB (U) 8*2048kB (UME) 201*4096kB (UM) = 901072kB [ 428.007710][T16893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.007770][T16893] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 7*32kB (UM) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945788kB [ 428.007868][T16893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.007877][T16893] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.007886][T16893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.007895][T16893] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.007904][T16893] 43895 total pagecache pages [ 428.007909][T16893] 0 pages in swap cache [ 428.007913][T16893] Free swap = 124996kB [ 428.007918][T16893] Total swap = 124996kB [ 428.007937][T16893] 2097051 pages RAM [ 428.007941][T16893] 0 pages HighMem/MovableOnly [ 428.007946][T16893] 428700 pages reserved [ 428.007950][T16893] 0 pages cma reserved [ 428.662555][T16908] __nla_validate_parse: 11 callbacks suppressed [ 428.662576][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 428.673001][T16909] bridge6: entered promiscuous mode [ 428.673025][T16909] bridge6: entered allmulticast mode [ 428.903897][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 428.903927][T16921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2569'. [ 428.984958][T16921] pimreg: entered allmulticast mode [ 429.610907][T16936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2573'. [ 429.610935][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2573'. [ 429.610954][T16936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2573'. [ 430.095368][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.095580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.368834][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 431.370449][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.370634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.010193][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.010395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.170671][ T5615] Bluetooth: hci5: command 0x0405 tx timeout [ 435.129369][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.129534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.050492][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.050787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.129675][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.129874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.329521][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.329713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.331969][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.332018][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.249261][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.249488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.249519][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.249764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.448489][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 446.089080][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.089323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.369381][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.369691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.370399][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.370576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.849337][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.849554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.129148][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.129473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.129777][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.129959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.888838][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.888996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.168966][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.169293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.248866][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.249050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.728765][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.728953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.289556][ T8968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.289863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.368781][ T32] INFO: task syz.4.1673:12942 blocked for more than 143 seconds. [ 463.368834][ T32] Not tainted syzkaller #0 [ 463.368845][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.368854][ T32] task:syz.4.1673 state:D stack:26864 pid:12942 tgid:12940 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 463.368915][ T32] Call Trace: [ 463.368923][ T32] [ 463.368937][ T32] __schedule+0x17db/0x58f0 [ 463.369001][ T32] ? __pfx___schedule+0x10/0x10 [ 463.369035][ T32] ? schedule+0x90/0x2b0 [ 463.369060][ T32] schedule+0x164/0x2b0 [ 463.369084][ T32] schedule_preempt_disabled+0x13/0x30 [ 463.369106][ T32] __mutex_lock+0x7c1/0x1550 [ 463.369195][ T32] ? __mutex_lock+0x5d4/0x1550 [ 463.369223][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 463.369319][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 463.369338][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 463.369366][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 463.369397][ T32] ? do_syscall_64+0x166/0x520 [ 463.369418][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.369457][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 463.369488][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.369532][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 463.369557][ T32] ? trace_kmalloc+0x2a/0xf0 [ 463.369579][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 463.369602][ T32] ? __nla_parse+0x40/0x60 [ 463.369629][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 463.369721][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 463.369755][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 463.369788][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.369839][ T32] ? bpf_lsm_capable+0x9/0x20 [ 463.369859][ T32] ? security_capable+0x7e/0x2c0 [ 463.369984][ T32] genl_rcv_msg+0x614/0x7a0 [ 463.370015][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.370033][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 463.370056][ T32] netlink_rcv_skb+0x226/0x4a0 [ 463.370074][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.370089][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.370115][ T32] ? down_read+0x2be/0x330 [ 463.370133][ T32] genl_rcv+0x28/0x40 [ 463.370146][ T32] netlink_unicast+0x7bd/0x940 [ 463.370177][ T32] netlink_sendmsg+0x813/0xb40 [ 463.370200][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.370222][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 463.370254][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.370274][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 463.370299][ T32] ____sys_sendmsg+0x54e/0x850 [ 463.370328][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.370348][ T32] ? import_iovec+0x73/0xa0 [ 463.370382][ T32] ___sys_sendmsg+0x2a5/0x360 [ 463.370401][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.370418][ T32] ? futex_wait+0x2a2/0x390 [ 463.370465][ T32] ? __pfx_do_futex+0x10/0x10 [ 463.370484][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 463.370501][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.370529][ T32] do_syscall_64+0x166/0x520 [ 463.370542][ T32] ? trace_irq_disable+0x3b/0x140 [ 463.370555][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.370568][ T32] ? clear_bhb_loop+0x70/0xc0 [ 463.370583][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.370596][ T32] RIP: 0033:0x7fabd039e159 [ 463.370609][ T32] RSP: 002b:00007fabd11bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.370624][ T32] RAX: ffffffffffffffda RBX: 00007fabd0625fa0 RCX: 00007fabd039e159 [ 463.370634][ T32] RDX: 0000000004008084 RSI: 0000200000000140 RDI: 0000000000000003 [ 463.370642][ T32] RBP: 00007fabd043506b R08: 0000000000000000 R09: 0000000000000000 [ 463.370649][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.370657][ T32] R13: 00007fabd0626038 R14: 00007fabd0625fa0 R15: 00007ffc512cbe48 [ 463.370677][ T32] [ 463.370704][ T32] [ 463.370704][ T32] Showing all locks held in the system: [ 463.370712][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 463.370722][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 463.370794][ T32] locks held by getty/5372: 2, on CPU#1: [ 463.370809][ T32] #0: ffff888035e630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 463.370898][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 463.370944][ T32] locks held by syz.3.805/9210: 2, on CPU#1: [ 463.370953][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.370983][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 463.371019][ T32] locks held by syz.4.1673/12942: 2, on CPU#1: [ 463.371028][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 463.371057][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 463.371089][ T32] [ 463.371093][ T32] ============================================= [ 463.371093][ T32] [ 463.371099][ T32] NMI backtrace for cpu 0 [ 463.371109][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 463.371122][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.371129][ T32] Call Trace: [ 463.371134][ T32] [ 463.371140][ T32] dump_stack_lvl+0xe8/0x150 [ 463.371158][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 463.371200][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.371228][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 463.371248][ T32] sys_info+0x135/0x170 [ 463.371278][ T32] watchdog+0xfd7/0x1030 [ 463.371295][ T32] ? watchdog+0x1c7/0x1030 [ 463.371313][ T32] kthread+0x38b/0x480 [ 463.371332][ T32] ? __pfx_watchdog+0x10/0x10 [ 463.371342][ T32] ? __pfx_kthread+0x10/0x10 [ 463.371354][ T32] ret_from_fork+0x514/0xb70 [ 463.371371][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 463.371383][ T32] ? __switch_to+0xc89/0x1420 [ 463.371418][ T32] ? __pfx_kthread+0x10/0x10 [ 463.371430][ T32] ret_from_fork_asm+0x1a/0x30 [ 463.371455][ T32] [ 463.371475][ T32] Sending NMI from CPU 0 to CPUs 1: [ 463.371509][ C1] NMI backtrace for cpu 1 [ 463.371525][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 463.371545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.371555][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 463.371580][ C1] Code: 5c 88 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 71 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 463.371597][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 463.371613][ C1] RAX: 00000000001154c7 RBX: ffffffff819bb370 RCX: 8000000000000001 [ 463.371627][ C1] RDX: 0000000000000001 RSI: ffffffff8e4152cd RDI: ffffffff8c6da080 [ 463.371639][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 463.371653][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 463.371665][ C1] R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 463.371679][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 463.371695][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.371707][ C1] CR2: 00007f66c2a70a7c CR3: 000000000eb48000 CR4: 00000000003526f0 [ 463.371725][ C1] Call Trace: [ 463.371732][ C1] [ 463.371739][ C1] default_idle+0x9/0x20 [ 463.371761][ C1] default_idle_call+0x72/0xb0 [ 463.371784][ C1] do_idle+0x2e0/0x540 [ 463.371816][ C1] ? __pfx_do_idle+0x10/0x10 [ 463.371837][ C1] cpu_startup_entry+0x43/0x60 [ 463.371854][ C1] start_secondary+0x101/0x110 [ 463.371880][ C1] common_startup_64+0x13e/0x157 [ 463.371910][ C1] [ 463.372500][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 464.123953][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.133063][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.143157][ T32] Call Trace: [ 464.146493][ T32] [ 464.149535][ T32] vpanic+0x56d/0xa60 [ 464.153562][ T32] ? __pfx___schedule+0x10/0x10 [ 464.158515][ T32] ? __pfx_vpanic+0x10/0x10 [ 464.163037][ T32] panic+0xc5/0xd0 [ 464.166758][ T32] ? __pfx_panic+0x10/0x10 [ 464.171177][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 464.176718][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 464.182094][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 464.188262][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 464.194433][ T32] watchdog+0x1030/0x1030 [ 464.198760][ T32] ? watchdog+0x1c7/0x1030 [ 464.203172][ T32] kthread+0x38b/0x480 [ 464.207253][ T32] ? __pfx_watchdog+0x10/0x10 [ 464.211924][ T32] ? __pfx_kthread+0x10/0x10 [ 464.216597][ T32] ret_from_fork+0x514/0xb70 [ 464.221417][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 464.226558][ T32] ? __switch_to+0xc89/0x1420 [ 464.231263][ T32] ? __pfx_kthread+0x10/0x10 [ 464.235867][ T32] ret_from_fork_asm+0x1a/0x30 [ 464.240660][ T32] [ 464.243828][ T32] Kernel Offset: disabled [ 464.248149][ T32] Rebooting in 86400 seconds..