last executing test programs: 8m36.835001935s ago: executing program 3 (id=6571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00fcff00000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f2ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 8m36.681375863s ago: executing program 3 (id=6572): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 8m35.282168856s ago: executing program 3 (id=6575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)={0x114, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddca0800000000000000b9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f30a000000000000000000000700000004000014a600fefff0ffffff95"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x8}}, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r3}, 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r4, &(0x7f0000000400)="81652faa5cf4981aefe00c79d48fe20d7c23b39f56dccf7bde8f1440cae996ec00bd9664853857854d568f1c956cd46ee1ccd3443198bf45742bed7d12eb1932981f9260f706836df9cbacc42578b7efbdeb739fad7a0fd22531a7034bdeb8d75ef749fc4e95c36394b59d3095309ebae7d82166f9561e43beea5b9c927ead459de7c0ac0413887d0b5a52690f3379c1c71824c7b1539273e16f3da6f4fd82e3ff3124d9a32c428337a1100c21f4e6be74d62fa49f98bc8f3dab2829f11c1a", &(0x7f0000000600)=""/104, 0x4}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002801400028008000180fffffffc08e802"], 0xe8}}, 0x0) 8m34.004760864s ago: executing program 3 (id=6579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x5032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00000104d204d2000000010000000050100000", 0x3c}, {&(0x7f0000000800)='\x00\x00', 0x2}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0xea0b, @mcast2, 0x6}}, 0xa00, 0xd81, 0x9, 0xc, 0xffff}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x5}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000ffff14000780080013400000000108000640000049030500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000080) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x0, "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"}, &(0x7f0000000340)=0xfebd) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000001580)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)='2', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 8m31.79566894s ago: executing program 3 (id=6583): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000140)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007140)=[{{&(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000fc0)=""/172, 0xac}], 0x3, &(0x7f00000010c0)=""/25, 0x19}, 0x6}, {{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001180)=""/159, 0x9f}, {&(0x7f0000001240)=""/69, 0x45}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001600)=""/40, 0x28}, {0x0}], 0x6, &(0x7f0000001780)=""/187, 0xbb}, 0x8}, {{&(0x7f0000000280)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000018c0)=""/4086, 0xff6}], 0x1, &(0x7f00000072c0)=""/4106, 0x100a}, 0x7}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000039c0)=""/93, 0x5d}], 0x2, &(0x7f0000000300)=""/22, 0x16}, 0x9}, {{&(0x7f0000003ac0)=@qipcrtr, 0x80, &(0x7f0000007040)=[{&(0x7f0000004b40)=""/192, 0xc0}, {&(0x7f0000004c00)=""/218, 0xda}, {&(0x7f0000005d00)=""/198, 0xc6}, {&(0x7f0000005ec0)=""/4082, 0xff2}, {&(0x7f0000006ec0)=""/214, 0xd6}, {&(0x7f0000006fc0)=""/2, 0x2}, {&(0x7f0000007000)}], 0x7, &(0x7f0000007100)=""/58, 0x3a}, 0x2}], 0x5, 0x140, &(0x7f0000007280)={0x77359400}) recvfrom(r2, 0x0, 0x0, 0x40013121, 0x0, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000780)=""/177, &(0x7f00000001c0)=0xb1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x1}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0xb46, 0x1}}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b0000000a000000fff5250f6c551dda10ffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000fe800000000000000000000000000030004000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000a40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4c880) sendmsg$NFT_BATCH(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) r8 = socket$inet6(0xa, 0x80000, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet6(r8, 0x0, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 8m30.124651896s ago: executing program 3 (id=6588): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r3}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="61202a3a2a0372776d00"], 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000006c0)={r4, 0xe834, 0x847b, 0x7ff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000007c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x3c42, 0x3, &(0x7f0000000680)=""/3, 0x41100, 0x2c1f38639edb1754, '\x00', 0x0, @fallback=0x22, r8, 0x8, &(0x7f0000000700)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x4, 0x200, 0xf73}, 0x10, 0xffffffffffffffff, r9, 0x1, &(0x7f0000000840)=[r10], &(0x7f0000000880)=[{0x2, 0x3, 0x9, 0x2}], 0x10, 0x9, @value=r1}, 0x94) socket(0x8, 0x4, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) 8m14.896970237s ago: executing program 32 (id=6588): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r3}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="61202a3a2a0372776d00"], 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000006c0)={r4, 0xe834, 0x847b, 0x7ff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000007c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x3c42, 0x3, &(0x7f0000000680)=""/3, 0x41100, 0x2c1f38639edb1754, '\x00', 0x0, @fallback=0x22, r8, 0x8, &(0x7f0000000700)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x4, 0x200, 0xf73}, 0x10, 0xffffffffffffffff, r9, 0x1, &(0x7f0000000840)=[r10], &(0x7f0000000880)=[{0x2, 0x3, 0x9, 0x2}], 0x10, 0x9, @value=r1}, 0x94) socket(0x8, 0x4, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) 7m17.951219053s ago: executing program 4 (id=6822): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, &(0x7f0000000200)) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="9c", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="99", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000005c0)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x94, 0x9, 0x6, 0x3, 0xfffffff5, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffd}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 7m17.368761117s ago: executing program 4 (id=6825): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000100)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/58, 0x3a}, 0x7}], 0x1, 0x100c0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x38, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000008c0)={0x0, 0x1}, 0x8}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000400)={0x2, 0xfffd, @private=0xa010100}, 0x10) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x9}, 0x8) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x700, 0x0, 0xc1, 0x3, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4}, @end, @ssrr={0x89, 0xb, 0x8d, [@multicast1, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xf, 0x14, [@local, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x2c, 0x66, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0xfff2}, {0x7, 0x7}, {0x2, 0x8}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) (async) readv(r5, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000040)=""/23, 0x17}], 0x2) 7m17.039821883s ago: executing program 4 (id=6828): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) 7m16.811332962s ago: executing program 4 (id=6830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40243, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000380)=r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff000085000000060000009568c428015e60b1e1c816a8a6d2a3b890205f848b4589e6c033e9e2d6a8c40d9bf3fccc89c37a558cb7020956cc6f7281643e9421d5c341c6eea16967013e05aea41515bc74e9bf64681ef90cc8cdcb8efc846644085fce9cf1e5fa10a757b56b07f4b369760196d4a201e59805b191775c48c9c4f8ea4f58c798556f7a23bf97ae1486d79f5571e029495637d5d61b57312a2b6f53cd5807efbc98b050fff0b4c2ed164fc820c5bb4e90a6f799fb8dad848bc58580df34a57af2a2d7ad9fb70236dd9c99db10c9cbef0afb89c656"], &(0x7f0000000000)='GPL\x00', 0xafaf}, 0x94) 7m15.932781433s ago: executing program 4 (id=6835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x41, 0x301, 0x70bd2c, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44950}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x4c}}, 0x20080800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000380)={0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4080) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000004c0)={0x0, 0x142, 0x0, 0x108, 0x0, 0x3, &(0x7f0000000580)=[{0x0, {@in={{0x2, 0x0, @loopback}}, @in6={{0xa, 0x0, 0x0, @private1}}}}, {0x0, {@in, @in6={{0xa, 0x0, 0x0, @private0}}}}, {0x0, {@in6={{0xa, 0x0, 0x0, @private2}}, @in={{0x2, 0x0, @private}}}}], &(0x7f00000008c0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00000010c0)=0x88) getsockopt$inet_mptcp_MPTCP_INFO(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001180)=0x60) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000011c0)={0x0, 0xdd1, 0x0, 0x108, 0x0, 0x2, &(0x7f0000001280)=[{0x0, {@in6={{0xa, 0x0, 0x0, @dev}}, @in6={{0xa, 0x0, 0x0, @dev}}}}, {0x0, {@in={{0x2, 0x0, @dev}}, @in={{0x2, 0x0, @loopback}}}}], &(0x7f00000014c0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001cc0)=0x88) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001d00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x60, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r11}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e40)='cgroup.controllers\x00', 0x275a, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000001e80)={0x3}) r14 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000003a80)={0xdcb2, 0x7, 0x5, 0x2, 0x1, 0x169a, 0x7fff, 0xfffffffffffffffa}, &(0x7f0000003ac0)={0x8, 0x2, 0x1000, 0x8, 0x0, 0x6, 0x8, 0x1}, &(0x7f0000003b00)={0xffffffffffffe134, 0x5, 0xfa, 0xb7, 0x9, 0x6, 0x4f, 0x9}, &(0x7f0000003b40)={0x0, 0x989680}, &(0x7f0000003bc0)={&(0x7f0000003b80)={[0x6]}, 0x8}) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r14, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x34, r15, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4080) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001fc0)={0x0, 0x142, 0x0, 0x108, 0x0, 0x3, &(0x7f0000002080)=[{0x0, {@in={{0x2, 0x0, @loopback}}, @in6={{0xa, 0x0, 0x0, @private1}}}}, {0x0, {@in, @in6={{0xa, 0x0, 0x0, @private0}}}}, {0x0, {@in6={{0xa, 0x0, 0x0, @private2}}, @in={{0x2, 0x0, @private}}}}], &(0x7f00000023c0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002bc0)=0x88) getsockopt$inet_mptcp_MPTCP_INFO(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002c80)=0x60) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000002cc0)={0x0, 0xdd1, 0x0, 0x108, 0x0, 0x2, &(0x7f0000002d80)=[{0x0, {@in6={{0xa, 0x0, 0x0, @dev}}, @in6={{0xa, 0x0, 0x0, @dev}}}}, {0x0, {@in={{0x2, 0x0, @dev}}, @in={{0x2, 0x0, @loopback}}}}], &(0x7f0000002fc0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00000037c0)=0x88) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000003800)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003880)={&(0x7f00000038c0)={0x60, r15, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r16}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r17}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r18}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000003a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003940)={0x88, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcd}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r16}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008041}, 0x4008041) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000002c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) 7m15.570703101s ago: executing program 4 (id=6838): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)=')-#\'-.[:\x00', 0x8000, &(0x7f0000000040)={@align=0x7, {0xeea, 0x5, 0x7, 0x7fff}}, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x80000000}, {[0x6, 0x7d, 0x5, 0x6]}, 0xffff94a5, 0x67, &(0x7f0000000100)=""/103}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6dce}, [@generic={0xe0, 0x0, 0x5, 0x1000, 0x8d}, @generic={0x5, 0xe, 0x2, 0x397f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x18, 0x50, &(0x7f0000000380)=""/80, 0x41100, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, r4, r5], &(0x7f0000000640)=[{0x1, 0x4, 0x4}, {0x4, 0x5, 0x1, 0x9}], 0x10, 0x921}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000740)=0x28000, 0x4) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000780)={0x40, 0x9, 0x5c, 0x0, 0x1000}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000007c0)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3c4, r6, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x88, 0x45, "21a61d7cc9c94551edf75c69caac2d6728173dce7eaefa506abcd9bba660793523bde450b9f15f292b2bbcebc5d38f9c7afe3b161f83c8b9ee448cdf67dfa38220bb36291fcf71bd12f9f04a7066446fd6c32ffd175e92c65e7cf92b78d11c7e30bc023c17d6d946e50951ea3c7336ae6cabcdd6e855c67e0e2ab477b923b4966ecd8405"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "0e4caf351a4d05c24567de4bb048db174f6f38a8549c1ba0e6947b9ae426129298aa899fa4be4166ce8d68f1789e63de01f8bcb00cbf5dd1cac8a86ba9f82609c96420e83f7fc51ce09dca91de90b4e83318586ecb826fb6702a712023f30253cb77"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "4f5dc58f71d32b1e0f7eec8afd2ac647b7ee1455ddab6438bfdf1837328af6f77c3f1ac9b471c8447cf60d1e4e8ec47ecfab4feaea49d8ddbaf0e092e36cb03de3f0f87fb01dcc033145238e72a0df65ac94f9d29e636c365f50d06ead"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "d6a2ad2ebec74e5e465acc090f47c254a1a4a6e75ffee7238f13d465"}, @NL80211_ATTR_TESTDATA={0xa0, 0x45, "3ab6ebf5b4bffd9b17baa01fcb250dff02c0ea374b87bfe4351934c5a0cdd8f5695a5e3f0ff6af002834c3024e640042a65f203adc80eaf760d76e2ca2e3a3eb59793de9c8d414a0ffb17163ac6fa8a6835f39000b605bd15be9ce9477dbe7a154bc6c9f8390051c311e19328c9f82ce17fa456c065b720d9546fdc8c8f4f27a4954ed73975efaa0b39379d6de46bc18dafe711e89524550c635fae9"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "862a795f0f6af263d0afda32c3c7f58dd3bfe6aadde79a65dcfb7912785a0de880ba18066a2c42f3079ac1db9a880c3ffa934e0431accd4139db3fcff0231da55ad998951af3cf79d305ba3d61278fa48b2891fa8bad82e347ddc6714ef20f62c11ba4479dc43692497362897d84c76672d7bb874e9a1616f5b63e4eedc6ee474cc99f2a2a4104f04f5de5703e9607624ba9b0763a1fd7ec63c01aadf6c7a022594cb2ad9d69"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "bdead063cb27253c0bc30cab7f484c013526b5ad14b0b92e14f23f286dd31475882a5fb7cab94fb9aa5221f4638011d750cba92f4ab5a5afaf0e28362d914463d8188ddcec97fd3603b8e21961073fcfbf5a7cb90069da395f04ad97ffc39122fec8c48f6fea4b619f8f300f436e796b11537bdec0ec185475"}, @NL80211_ATTR_TESTDATA={0x70, 0x45, "99356c5d60b3f886e1e1c5dca043645f504c6eb32a4f7880d9015c7315f928f095ac9b8856653af2cfc7a4e9c7f6132083f1d3efd4218236b0491a7201b2f22cb05b97caec1cb1fb372a0a7473753a6be23a9a51cb97b8fb49f9ef797bc289b011ed513224a69d990ed8fef7"}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x8410) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x454303, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0x1, 0x4, '\x00', r2, r0, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000000dc0)={0xf60, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "5e9c433e4eb8fb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001dc0)={r8, 0x0, "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", "c5967c773dcff555d2e63caf78faa52035f0f75dc1d4e96e56aed15aee652c81eac685dacb87bb0712ec0ed25b57544d5290693adc9617d66d5bbd91dd3ef03f8e9d6edbd0b9de4a36d69a5b2088cc1ad48d73a2144ab9881e9d0900473c8616d2db186008d4d350229b7272cd85669e833244d5cfbd74e41b2e80b3b21c89ffc36386164e455ad1cac4017fbd00d3125168eae77311bea6e3d2ac0b8f0c6dde932d2939c680cc3171e58b475484c1265152f707d6f8b937aaa1917380389fac666d7ecf0083d3e3cb314453a78341dec0639d3cda33e8baddc28f2892125999ce348fbe178b83c651d3090406e9c883c594dc950868f2c266e26738f96d6e8a00435ae16b2e236b52adf895c409db3818cb17b0b2201d335490cafe7bb1c21f5417bcd111c4f26235103c0a8bd8651c004d16c2da30b98acec68a3b5dbfba7d9b51d985c53a335b15bc14b97665d9dfecc93e1ab870f6c8bc99969b86f0dd203a151ec87a1606a81f6e769b081b93a6672e412bea9b0f097691d7950daf9c57c5fa933f990a9905e3f157783642d8d0047a902f96d58792bfbb1a32d3f9fdd600c040035ec05ca43e3cc811879eb2ea8ea5479d0d379a53c7631e019c028d55e0ed49aa7559a0549e62ff298706c2d06518512621d57653d52d30094e631e2d153abd273052a409b3055d88ecf5f8078f4e5d19094ecce6fb1f2e4fa5e51040e2883ffbc6be50a04c74a4796870587f220eae496429d9a389c8dee6d7bc7a3e7a50e42d801d6f1055409ad7c1eed80afdfb51569d2c75f3b8aa90925bd3a7f16f5b18dac16443eb1874b825029af0f821eb80a8cb7db947d97c92ebfbaa499f7568417beaaec6c8aef9480e962b1113113272e09d63855c56f0c86501349d7e6ded080cb2a6a221f5856332ec61fcefe72f356fd6b0e10661a18234b72782676d725561e87420be685a163abb9f14d1647462554e18497a42473d104d0db585c6a6054f72e087bcee39d6eb8603a0118724c31867ea3ebb821e15b24611058633ec2fa06b7ba64018d6aded0a2175709500223139eef988db5f11ec9459d48c34b9872399d6803dcc876683d4670c6293da9015f37ff6fa42dde824b2071dbeeca0ddafcc370da4d5ce1c8669189b3ba2188dbf6068d74dd3e5692ce91a87a73e8cba69e121f2c6c6c1ae967c23566c854cf12142b327aace7fadb2937125f03b7bccecd6eee90cf5d11256f4d7e3626a8d19f39c08e11a5879f7c4bf584b662ace0384a58fc6bb6d93fb533e66509dcb83b0e33d6b3170e87fc0c1f2a6df9740c1b5faa9090cf6c2765af99a91066f30ac8d0dd1de3ddc58fef59d2b99bf4fe7833ddc6c54c168e9b9e3452ce1b41db307d2f0ea81e9fe4dc6cfe39a235a660c1a645c2300ef22add9974cf41ee20a00c41bc575f30d65fb330980e707f87630d60480f1959337c4a470988b464362327c57945a332947a0ea88038562bcec4fdc84056f94d4945d4207702b75d883d73ec6ff84428be2d205d86ae98846b075603fbd1205728a52306d5522e22217f59ba6c4b8ad08eee5f411537c8d6439f5c447b7df9253741f72f91623ebf047ffe9c53115b09273d4d3b8e9136f155db24fba9a110c19375bf350b8b2986248617c24a1b11a827e65fe265627e558c0f8e45d7148815749e5a1a5c25be29e0083c16a80786251e573556156a4e4307cd7722877bb98a6ebd5a10d8cc93dacd1815a64da40f1b01859b21fe47ac95f210abc1484968ca3df83b1f8bb4497134296418a3a0d040751c4300e4e7377854f7c5525033a96b176c0126ec41ffcd95deb932b52993b10d67f01b5bea640cc090938cbca75e1f0188176d60f072673441112f4ebefad5056b273f44d8130fb0c6f06df317b2a83a4b980f3e28c5ff8dbb0979178ac0b8d4ee9641d01aff66f57d07dbf3f9a38ebd4764c77e5ba88eff71385da3b36d58d96520897ab1d40aadde7dc99916922556741f05a2102aeaab775400e1b03e859ec1cc5203ad33a3fa1d51be505c2a4e149401395a27a7d52dd0cea05a0256f2c25c99353383480d2da7c50ad416f616f46b785ab562d87469b09f166c47f9db2ff64cd65cce514a3d69f85de096906ac1eab54065e4bca662aa4bb9f51f0c8fd8b5f4372ea62232f53044b3c344419facac71e29a8df7ae6b6fc0a63f6e277720a75b6b0995edf4bc0e0286f97a65aa4f98f6246e19f5a5d7f11db28b64c5fe03edf50597133628c805f756e18ecdfd0fd3049c0e96c633afbd08bcb552489907fd7c300dbea85d529b2b518830e3f4351f25afca848f259a1d328121973c47f8bbfff50fd4777753ed3988b4acf0a69ebd85978c220f5c3811baedc1dd4f505286d1a5b43aa485f1f17b5fd20207572ac1d8a1b421cf551353d7be09db3ca92c73e5167112fdeb647a254a1e43379e44c98c2a9762324c7d1c34181c3f202d4431a6f6fbfc643e5f9ebc48c77d199d40ef2b5851864485d0552c3278f24ec84111dd1ab2d44a38b5f0e022de7d34811e32c0406cecc0124b2156fccb49795fe6d1f2975ce8d10f6be2924821f8e886248ac824279d70ab0cc1a4402b0895772fdacaf47c0abfe7b683c2560bf43ef3e63efd80c9e0846a523c2e9b07b1cf331942d3f983460f1b3b751f58f06ebd6ff5091458820d7c3e2c0bcde07b1be1e16c253a818a2e914fc63da9ff287fb64dd0102960f5823bbbb8651c8847af81f611c5ecca7faf31c013388fbe057475899bfa860fce8a2a32410b7a92da92caec35c103a8bca398c4c21b2fcbb7ad69e9f0913b636229a1fd6cacd7d8fd8b9c00f3654306ec6b7ce01afae5dd3ebe6486a16347491726e70fa5b39fadf8f602a85f1d312ef5952a4e9322138c9e9330636c525b27325aa9681974913a35357ff6eda76803c3a4f9fdba002c3b13c1606dcb6f3ca80a256d3ac00b08fe902bc4187c715124f278e7ae04f52f94e6cb635751e52b20d928b12291f24db775187417b9ea762c36ec2379aaa6ffe1df49417bdf8b357e878ae47a8afc1b5ec717d5ee1750642dee6ff2284c3e92c75ad0c6218a5259a89b7fc47940e3f02563ee7dca2bc515c0742bbb03b1afcc0e0705ac81d92661eb6135d2d18d1be545005e0d7d77082a93ce76e78ccd6c5cf2c3ce96f00b6b60ce3d3bd932d204ac5162e3e552a5f0864b37e99105ea96358c75fe323abe78fcdf28fbc7a501d5d8a7aa8e0eb70d7308fb83cbacd901210361b0005d3d6a27bee550c4fa4da26ad01d57cb4c6cd74168cc4a30461dd24ebebf8d6cc3b4b069d1ff6605f17709fe18486a33eea49f626638a46e63bcc97c43c07ba9b91507a7c9b2ab46feb803312798973593b4792effddf51361772382252c34a999924a8a2ae31906fe6eaaf193bb3b48a9385dc2228257588a505d1d443d47bf9e0a68df848bcb6f0afef9f08ecdcff047f60c4556c5b35b677b0d0339fc2992e264092945dfb0f8960d3fd03ac3bfd648b5d4bd1fe52170511e56ac64d5a3cdbe02869b50bc913ab513989b4cc81eb5aff32535ecfafcde7b9f607bf3c4c12921b572df517bcd6395497af72e7d3bf7f453f0ab437c7e5abbdadd8183de2c10079ab19382d785be0dfde47bc3ee047aec92fe7dd06b98f989bc58c23687bab1b54cfe02a4daf5fc2da2baaa17bc3b197dc71a0360ce6ae2e60c61ffcb56f6deba8017e6ab8d5f8b6e0960591a4cc67e52082248d6cf47d58591da16bdb63bc798f006c4563238ae8b8aebc4cc5a51b4907749a28dee9812f4b86ec72cb77c9ba664a78a7a2cb7b4835a5b561be4591bc81a7bc9f48704a31d1ff429857599234799db37662ffe748df97d4acaaf14adaa9c4e7f557ccbd47230b43fc20a1d014218410a2b976015eaec0a71fb3bfd89abd562eab94f2c8362f1423b52a7a8d4d73a557eee886ab147bc7350a157b34ef35d8a98afd5a7787756e936f53582d889cd7a5286b4a2513c48f6c2d6942c299d8e92ec27414e6d3adb6a316e87acab7af80e6f4c1da7622c6bb0f523a97ba0146b3d845ddcb486f20848e0369dba6d442c4016d299ba2287e7d24a9765d4f585c7f320e23f58fc547f3a73caca4d23abcc3fe13e2794321327fcba241581783460316f9090627ebc5dc9aa7449c7156950e11ba1f3e4898a0ea6871f96eb5b4045c70db31e9b1b714cc69f16979e1230dfc2457cafcdf35b10512bb21cab2ce7c0c8db056b436feba18ba276ff48be3ff51669626e73ca331d3257eafd52b6499fea639c82fffa6638095ebf42eb9b8414a4f77674ae37826ce1d0f91297e0dae38fbc4491e3d23c44cfbd5cdafa95a2fc76d06850de4d85b72723fab50bcb9e5e7a9a47b825036f92e56ba87a61ea3c1419f398c88bf370d366b7097d4d5c9e902deb5a38ec23019ce7b4c9f4d2ad65974a9f001b4059d06d0f676d6285aeb144d7838350e4760d65796628c385dc90475b860867ed56fa48eb0e51cf4539b6aa3a105cc7111dfe7bfa3331ded746c53272e64a868c90116707e166af6334dc836451da0cd6da95fbfe71de0665a5eb582c729b0299f924e1a5e0dbed15e01a63189914c475538535271ed1ede4342cee951f0d4e09ceead766480cc8b3e9358997a4580a71787291e45f0f6788f92ae12a649054377344b19e1533186eb3a60feea97e7b27bb47768677468235ef8aa61ae5dc331661cba99f8a5c61889521e16bcc5d3425407e39e6e93e17c65de3df68a631b7ce0fef7a04e09795f41dcfaf0ed332b54beef4c30eb95ea2522496f41f1c73c4fa23df84ed991c7d33c5faf02fea64b793c7a0b993f4ace03b1f7c3ba76e3835a220bf0438400a54ed235b332382d746c52822548a49960e6ab021c509862df4294d89bf712decbd8efbb202b6c0b2ff0d8ea85a573e7f111cb7611caa36eb943f6ec2784695e7a30bfb6dee891eb1e40efe786f5560bb2900b1bc5a4456b0a906988b81ef4b34636628946e5e25af7fbcb62cb481ea91c3de1d4a169549984c940b77292903f5eac2c94ee1feed732b6fb8c01b40b4bcd12a9f8368456b494c6e82cba8923893e1bf2db0438120512f92f203575c0689a51fb89a484ade2ad0fe586da081d1e680ce0ffdce42f52921b23447e8c8b4238321883264967557e0ecde5be69407cbf6932d0816a053ae57972678af323a740702d6b261c0983b32f5197ed7ed9eb9b8bbd96df6c5ef166d4901b3a46fe0ca6c4f29477526bc4b534a45fb990b83c6d36b09505fa053bf0a172ada71743b12bf5ae482fc91c6dc0358ddeba7c1c49104cfddfc38a03d97d01a3cd43bde6f596d8fac32b96481769f4b0937536db7300052c76bf66a911dd1c7050485c5212a0bba2b5b0744a8ac3c0fde2d24a5e"}) close(r3) pipe(&(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000003040)={r0, &(0x7f0000002f40)='vxcan1\x00', 0x80, &(0x7f0000002f80)={@align=0xffff, {0x5, 0xf, 0x2, 0x7fffffff}}, 0x7, &(0x7f0000002fc0)={@_ha_fsid}, &(0x7f0000003000)=0x84e6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x18, 0x14, &(0x7f0000002e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xd, 0x1, 0x0, r9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002ec0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000002f00)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003080)=[r11, r5, r5, r1, r5], &(0x7f00000030c0)=[{0x0, 0x1, 0xa, 0x9}, {0x2, 0x3, 0x4, 0x2}, {0x3, 0x4, 0x8, 0x7}], 0x10, 0x401}, 0x94) sendfile(r11, r0, &(0x7f00000031c0)=0x100000000, 0x10) setsockopt$MRT_ASSERT(r11, 0x0, 0xcf, &(0x7f0000003200), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003240)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x1, '\x00', r2, r10, 0x0, 0x5}, 0x50) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f0000003500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x200, 0x2}, {0xa, 0xbb89, 0x7fffffff}, {0xc, 0x10, 0x3}, {0xc, 0x4a2, 0x7}, {0x3, 0x0, 0x259ec0e6}, {0x8, 0x3ff, 0x8}]}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0xf, 0x4}]}, @fwd={0xc}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0x5, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x30, 0x30, 0x30]}}, &(0x7f0000003600), 0xc5, 0x0, 0x0, 0x492586b0}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000036c0)={0x2, 0x0}, 0x8) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003700)={0x0, 0x0, 0x18}, 0xc) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000003740)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003800)={0x7, 0x2a, &(0x7f00000032c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @alu={0x7, 0x1, 0x1, 0x7, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @jmp={0x5, 0x0, 0x2, 0xb, 0x4, 0x8, 0x10}, @alu={0x7, 0x1, 0x2, 0x3, 0x9, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003440)='syzkaller\x00', 0x9, 0x73, &(0x7f0000003480)=""/115, 0x0, 0x0, '\x00', r2, @fallback=0x2c, r13, 0x8, &(0x7f0000003680)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, r0, 0x3, &(0x7f0000003780)=[r0, r15, r5, r1, r9, r16], &(0x7f00000037c0)=[{0x0, 0x2, 0x8, 0xa}, {0x4, 0x3, 0x0, 0x7}, {0x0, 0x3}], 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x54, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40020) 7m0.470607768s ago: executing program 33 (id=6838): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)=')-#\'-.[:\x00', 0x8000, &(0x7f0000000040)={@align=0x7, {0xeea, 0x5, 0x7, 0x7fff}}, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x80000000}, {[0x6, 0x7d, 0x5, 0x6]}, 0xffff94a5, 0x67, &(0x7f0000000100)=""/103}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6dce}, [@generic={0xe0, 0x0, 0x5, 0x1000, 0x8d}, @generic={0x5, 0xe, 0x2, 0x397f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x18, 0x50, &(0x7f0000000380)=""/80, 0x41100, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, r4, r5], &(0x7f0000000640)=[{0x1, 0x4, 0x4}, {0x4, 0x5, 0x1, 0x9}], 0x10, 0x921}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000740)=0x28000, 0x4) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000780)={0x40, 0x9, 0x5c, 0x0, 0x1000}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000007c0)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3c4, r6, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x88, 0x45, "21a61d7cc9c94551edf75c69caac2d6728173dce7eaefa506abcd9bba660793523bde450b9f15f292b2bbcebc5d38f9c7afe3b161f83c8b9ee448cdf67dfa38220bb36291fcf71bd12f9f04a7066446fd6c32ffd175e92c65e7cf92b78d11c7e30bc023c17d6d946e50951ea3c7336ae6cabcdd6e855c67e0e2ab477b923b4966ecd8405"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "0e4caf351a4d05c24567de4bb048db174f6f38a8549c1ba0e6947b9ae426129298aa899fa4be4166ce8d68f1789e63de01f8bcb00cbf5dd1cac8a86ba9f82609c96420e83f7fc51ce09dca91de90b4e83318586ecb826fb6702a712023f30253cb77"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "4f5dc58f71d32b1e0f7eec8afd2ac647b7ee1455ddab6438bfdf1837328af6f77c3f1ac9b471c8447cf60d1e4e8ec47ecfab4feaea49d8ddbaf0e092e36cb03de3f0f87fb01dcc033145238e72a0df65ac94f9d29e636c365f50d06ead"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "d6a2ad2ebec74e5e465acc090f47c254a1a4a6e75ffee7238f13d465"}, @NL80211_ATTR_TESTDATA={0xa0, 0x45, "3ab6ebf5b4bffd9b17baa01fcb250dff02c0ea374b87bfe4351934c5a0cdd8f5695a5e3f0ff6af002834c3024e640042a65f203adc80eaf760d76e2ca2e3a3eb59793de9c8d414a0ffb17163ac6fa8a6835f39000b605bd15be9ce9477dbe7a154bc6c9f8390051c311e19328c9f82ce17fa456c065b720d9546fdc8c8f4f27a4954ed73975efaa0b39379d6de46bc18dafe711e89524550c635fae9"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "862a795f0f6af263d0afda32c3c7f58dd3bfe6aadde79a65dcfb7912785a0de880ba18066a2c42f3079ac1db9a880c3ffa934e0431accd4139db3fcff0231da55ad998951af3cf79d305ba3d61278fa48b2891fa8bad82e347ddc6714ef20f62c11ba4479dc43692497362897d84c76672d7bb874e9a1616f5b63e4eedc6ee474cc99f2a2a4104f04f5de5703e9607624ba9b0763a1fd7ec63c01aadf6c7a022594cb2ad9d69"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "bdead063cb27253c0bc30cab7f484c013526b5ad14b0b92e14f23f286dd31475882a5fb7cab94fb9aa5221f4638011d750cba92f4ab5a5afaf0e28362d914463d8188ddcec97fd3603b8e21961073fcfbf5a7cb90069da395f04ad97ffc39122fec8c48f6fea4b619f8f300f436e796b11537bdec0ec185475"}, @NL80211_ATTR_TESTDATA={0x70, 0x45, "99356c5d60b3f886e1e1c5dca043645f504c6eb32a4f7880d9015c7315f928f095ac9b8856653af2cfc7a4e9c7f6132083f1d3efd4218236b0491a7201b2f22cb05b97caec1cb1fb372a0a7473753a6be23a9a51cb97b8fb49f9ef797bc289b011ed513224a69d990ed8fef7"}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4}, 0x8410) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x454303, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0x1, 0x4, '\x00', r2, r0, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000000dc0)={0xf60, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "5e9c433e4eb8fb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001dc0)={r8, 0x0, "2ad055541f419154d701bcee964fd99207d4571f515b65128a933a36266f3c239ae117f0277760fbc33bdc90fed528f8838fbb4705b62da87f864237eef05631533bfd03ee6ed819764d4ae69758f6657b0fa67cb0111a74d470198796f2387555ad0993b99bf7b26d82a89b66b85d9813858931b9b2e4a752d4f380f162fec5fabb9beb37795a89f3787021f8289bf8c363e5aef67f298a4b37406335cd5a46a1df27785fc3ab1e30b5e7ad890dc2112f77ea10970e6bef82bdab801e7530ed41f8716241381915cf6b4ff322ec090cc3722748dea63a99cc1bb00055747f565147ce8b535bcbc3fe8a13328da6f19bc73d303da3502fce46b87e147e67d6d7", "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"}) close(r3) pipe(&(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000003040)={r0, &(0x7f0000002f40)='vxcan1\x00', 0x80, &(0x7f0000002f80)={@align=0xffff, {0x5, 0xf, 0x2, 0x7fffffff}}, 0x7, &(0x7f0000002fc0)={@_ha_fsid}, &(0x7f0000003000)=0x84e6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x18, 0x14, &(0x7f0000002e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xd, 0x1, 0x0, r9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002ec0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000002f00)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003080)=[r11, r5, r5, r1, r5], &(0x7f00000030c0)=[{0x0, 0x1, 0xa, 0x9}, {0x2, 0x3, 0x4, 0x2}, {0x3, 0x4, 0x8, 0x7}], 0x10, 0x401}, 0x94) sendfile(r11, r0, &(0x7f00000031c0)=0x100000000, 0x10) setsockopt$MRT_ASSERT(r11, 0x0, 0xcf, &(0x7f0000003200), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003240)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x1, '\x00', r2, r10, 0x0, 0x5}, 0x50) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f0000003500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x200, 0x2}, {0xa, 0xbb89, 0x7fffffff}, {0xc, 0x10, 0x3}, {0xc, 0x4a2, 0x7}, {0x3, 0x0, 0x259ec0e6}, {0x8, 0x3ff, 0x8}]}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0xf, 0x4}]}, @fwd={0xc}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0x5, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x30, 0x30, 0x30]}}, &(0x7f0000003600), 0xc5, 0x0, 0x0, 0x492586b0}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000036c0)={0x2, 0x0}, 0x8) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003700)={0x0, 0x0, 0x18}, 0xc) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000003740)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003800)={0x7, 0x2a, &(0x7f00000032c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @alu={0x7, 0x1, 0x1, 0x7, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @jmp={0x5, 0x0, 0x2, 0xb, 0x4, 0x8, 0x10}, @alu={0x7, 0x1, 0x2, 0x3, 0x9, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003440)='syzkaller\x00', 0x9, 0x73, &(0x7f0000003480)=""/115, 0x0, 0x0, '\x00', r2, @fallback=0x2c, r13, 0x8, &(0x7f0000003680)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, r0, 0x3, &(0x7f0000003780)=[r0, r15, r5, r1, r9, r16], &(0x7f00000037c0)=[{0x0, 0x2, 0x8, 0xa}, {0x4, 0x3, 0x0, 0x7}, {0x0, 0x3}], 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x54, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40020) 8.403143271s ago: executing program 1 (id=9003): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r7 = socket$unix(0x1, 0x1, 0x0) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000001bc0)=0xffffff80, 0x4) sendmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40800}}], 0x1, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000001b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000800)={0x12b8, 0x9, 0x4, 0x201, 0x70bd25, 0x25dfdbff, {0x3, 0x0, 0xa}, [@typed={0x8, 0x22, 0x0, 0x0, @uid=r5}, @nested={0x1a0, 0xf6, 0x0, 0x1, [@generic="68a77ee3e576aae8c7caecd0d9074f610b60f8d142c5858567623a50766e620a62397bcc18a5c1d1506cef261dd14a21f47e5aa9735adbd1e47d0eee1d3ca56e0f8cfb27481f9981ac9868fb128ea179029b2c90a59f878c2387c96f0a9ba7ba8a854c4241a398a4b38e72696db112c4025deabc0c19db4b229fea03147dcbb33c3cb8576dba6a90c858e13ebb581a0d5e62435a9a6cfc95fb1bcdc1c2655808c4b0b1d78a68581bd473ab111c316a5eb36d337cabcd67253af8b2bf30b01132867f7b660403ffb4a58f020166efee608bbc512bd5057762f4a7e3b04b8cca112d37c39e0d5def216f8ef8c1391419519c00bf8e8c2e", @generic="71f6354c5387ef881d31cc2cb2ac088d3a598d7db02d882a1d5b65b38865bd30a73b6587b196460eb2dc07126710068c0acedff8a01edf13f3a7cf0070f3f9b4edbdd7775a01a2b55d511725185edb003a30629502ce5a8d64b050212d12ce7872637258b2133b2227586ec820403958a6928eb9cc5ed54fde155cccded07e778df5cb8741d7bf0800a05f89c62960c3f5173b9393527d5b78fc8f951cb71711ec8f1cdf29df"]}, @typed={0xc, 0x135, 0x0, 0x0, @u64=0x4}, @generic="c995a129065370acd729", @generic="b92a0a6c4e804382928f764cfbd161d1681db6cfd2c711af4531f3528002d43e64a8700313631f1417bb156b8dcd5ac758e8c38c3a9cb0539391c28a21e0b671a8c954b94b23b3921a339c4ed14b93bf7afb8846454665f609df1ff14c05d8cf3fe9fcfa99d5a765d64b71e45fba09743cfcbe53d754c8cba678adf5102de8cb3b3dd84e382a1e76d54f40cef6bca63d036820a75537b3c4841d7ff836010c4895c6cc16d99865423d7aa8141f9c1af89b344ea6a89b92f609fd1bd6c10ecaab2d028db020ea67b3129dd162cc3e63aa13ba64980eddd2e434773801610a56a045af2e9e63af7ae8a2aa81a2e17a6fb89c86fc371671b63cdbac10c4c3cdf383eba868af7c23139273048370da861f405bd206558eed6a46970f5b2989388ab93f238747972aa9506b9e4b00b1e2452fd9d1a405ff2e30e1d77d131e303e7e3251c040df61ad47c26fc5fb213e8e13321c763179f443d673c2ca45cfd550c7f9c47efa3cecd548675cf9cd807d095604a445615fef40b958b062158211967ea8819aecdfc2654c8904bb92ff9110ec76576af23ff5aa2053c328d62f5713ee736ab61428358f914141344b0722545c71fb1e2c894681d4cacaee10ef23d179220b02445432b36971eeaa1bfae9b4b69aab9ef587650da83e2b6d9e7317298f7acf2c184099480d34793745928ec6baa6c273c2fc17d513ed4155bebdc508d3dd81bcc7358fbd0345f5a70be614a2e34f50c978e6260a19de1ab5db4279db277eca22fc66198405a5d92a62d8840235194f5cda9f5984bac530947d2a43d9d92ca483c58ef3ccff4149e1b65cc571e783025b8ad6808bb49a331c9d2555c2decd5c27e280fa37c66903381741a037222f167b4dcc04fe858e984f4b4d825248bbac144974c20e55d113c6cea34f6c5ed7904526267b73b8e01bc646b4df47829540ac243e63a93c3a876077a87bead3696ef2fc5a6f9a869a206126970cfb239c5bf818c55feee6aa153bd270aa2c45b51fc9561ca8fb7e10ea9c9f2b27d180f2d784ed2eb183847d8e6b3c9530be6793e2f0d46d784c0d9252f92f7c949a0e506d8e899c957c185068e969dd5adf016e11cf626fd122b30c42107eccf5de4e1151dd7998d18dbe2c7bec17a880dc853b392fbb0b44eb683a1d122bc4e2dba27ac97efb3e4ed36d5c70b1375fa5b29275b2a0bbdcffaa08dbed5aa67a2ab8f5d32c6b0b07fa941e289eb68c77ab750339a0637c716e657e5d795e61a0792bf162529ec2e5f7ad4ff02ce450fd30c881218c511a49a3f3ef2c4e27e5fee1ce9eaf97d12488d4c33628a516e78443f3799f0b71251981391cfe04cc2f4df943e498e7692fe92fb802e294eee1a4a163ffc8e1bc5707061846970d2bbee40729d4c74f0ba91982f58582cb7d9c303c1448d85dcac3e2d8d1d747a6659b93a81f31d149f71809fd098d4fc79e0052d0f10c0a6e9917d01d6a46e33e79d88caed3020d71562395223b93a2b75e0b6781ab78f9af4765dea679cce9991a602fd210565567516f54545120e27163a5b98b9d8165ed8b7b121462c1aeb22e6ffc687890133279d64a9903f0fe82f940ba1c0d08459ca4513111137338dd7af90553d2f4cd5c9cc996f5730b5887db37e6a3af4440be2d3d1b6ab2737f84aa0f94d60af525a551e00d15a234390d0583aa70c952a00b22a7a514895e6a44423b3d4621c0d6c6eef2205048a320361c0ed0841c72fb13353533e8b5469a32df3b63f6e91eacdd2b311a155be9595ddbce0e506500650d7632258d3ad5a04911317b78beaa89848108278b140b5ea71d0d177e7c88a0c4465187a483a4aeb0ed360c4df38d6702875f76be04145c1e11e982b9f48921d6c873cc90a04b7e3f56893239019e507e9c7516622bf75a55d5af91ed39a339463cbfe8a161e473dba1df39549aeeeff37727118e2cb229981b0bc9db6ae7a2e394e9a76c4d10320e01c635996a1e5923163d23bfd03fef25f52279e1d90e2dfc17a80e815ead286ab2a01ac146290dbeb96b8cefd80fe331bc0ab447697fa8c6612ddfb81e7d2293b47fad62659c7e0b1629a23932b1fc20d1bae7b24a5b6039435f6085cfa51c7e98bd88fb757ec599d51b2de137a5737f83dd6c2c770baafdf874d40e0587388142d9b0dcef15983631ff07e8c4637ab73195746ff25eb5fbaa9a8a61a813102bd76b075a62147009f32f8140a666389c9191d76f4dbc6f245a8e658f049b2188ddf6f0ab8ebcd92c7fe1f5c2152217fbdc87c64782d9fb1b427f4de73a739dbff16958b01e0bed305e45bcf12eb0ab11dcf3af2a61a45d880a47447bd50ff1a270a8ba9dde7759f906290be300f0c790196847e11164cea188f5e39d8cbad9098525f489382e767e6c6cfc60a1411f8b0f6c2bb743ab179839cb7feeb087c111a0b8722dd77db2229cabc7e3a81c001cd46e9bbb6aab39235d483ab5ac6b8f7719d60dbaa717b7fd03d954d390272df8b67e603740b53cf3d7f085df54b62a1e8e17b376219db0fcdd058977433e953d04ed4a792f8f21baded61390462ea8bdf36edc952fc924a3edcaebd204c8492c3aa8f023cd5d27a53e27173686419918d8f587c08ef9999b5575a4c0795ef9fd56eb4656acf3c9505fa46f2f97b56b282d580085f10b5e7d23690b62f3991bbbcd08e7d438bed03381e6e94095dd619847e940a3b8c9a6e4e78105488f322e038cf362af26ff4d216cd3baac2e7f301e1a4ca2498062e26b179e570f94e70faeb916122e2d7274b23e540d5e44141cc06b49c1c5a6329e8ec04a5aaca0da1fdd1d6994dc147a60460b431814f3db2b01e20a0706d9c4ce506081080bf59b90849993b8e6c8d414cfa5115ab281b892e098d03fa6604e74f65e64e05eee38e7e628425e1df6ca63122abdbea8f566d249bcb24fb015ad9b38e380104541434e7977da2126f18f0267024d4fbb782147e1e9c2a365a193f7fdc06c094edbfac01cf54422ffcc39f7910f2a83a947b1df3bd606c8356b442afb4f678d3393126c9dbea1c7f2e3a7060817aecab37503c5f226d4634ae9a8c8c46203268fa7cd7af22a1e598e6028ed01724d110ae4b1ba0cf97c9ff06bff2ccd036195cfce457a0ca5e19424227b7d24ea6485928231a7011712c6313a1aa2d3f7fb453c0fef25f9b31b73236903bba9d504c530bc927c9085d80672546d73677017271905ba6c456a2aec196aa7665645441e94c5cea515a98e1df1153e53803ba172fbf3a144a24dc487835277e7adc2de5290e5af4a879e9a6f369aa8ecffbdf2a166c4f682a6b8586dba5b4fd1f9801e36bdb0d0ba68508494c83ea88c06405721e0e3a61afd604af9e31bde86cfee464b5d0506184e34a9bb439c7d35d59799a1c6e8dcefe428217ff7c58dfe09d262f7d4613bcf5f0b9b37f6bb074bf3d30381cf7cbf30ff9a16f731a7114e06eb7a39add041e652e8b2dfe787fac34376170d8a68ddae11f73fd34be4354f8b7272912d853a6ea864a566852f80f8a18ef6c7782b9ded740affe7fff00a4d24bae13bdb1970886ce2f4bf2ced10e7a32ada4d5562eb950884e8872d71a28fdf3b2bc3559835d986920c736c7c4d137df59d53b37bd57d5f2bbcbd4a638af091d44800b6101061b0eb0f892db5f005a7f71c8bf36b058c67f1337784b1fbeff743d6069441eff865b1bf5e477e299f327a89292b59405554fc086b5d9d527832189b0aa3987586b3cda0f15a328fd4e533cea43996edec409093c6b10e008f60925641972cba26ac9778d195a561c5e289e2a83917b0b4463a2dc12886be6f4e4123befaf1c3a11ac23e7c99c59f0e0e73f4c915a8915edb970ab1ab207e8cd36df9c1553c48188517bf753f8f0f309ff2ffa5243ff2d72c492c98492d3689104f59aa3d7cf08f13496e49d0a8b8ceb027e071e3a99363b28b3b821f54da115af03ce431071df78e8523d9f32c9d6f9241d0fb929b13417e68263096e8f972fee27a2fd5e422d69571f2edf764055ee88c1a850fa5350915cb5f32f3317199dbabbd4d4885e895123ff7a5cbf224625f0e6af00b4fad34628f9dd9c9eee480e577991deffaff56ffe319f9819bf0d2b3d48a97fe44dd17d477552343d2193d96c4855f8ae9e0748bdb00ca6159fa004d5234bc068daf61de0404322ce4765b4500c0a0590ad21904cbcef600d113c4b0a56203a1a00bc10164bb2298774b6ffc55be52ce1bc0df9284524e4e295653246c0fc0a9322b2d41a797b63bcc8e180202ead4075f0f51e3c781235351782a5c13d02926fcacef2a2a419ff1e1f6bfba2b618e41258fe64b646a220a19171e8772fdc64d0eb62eefce596fbd287c29e205d2fe80cd0abba624ceac6017e09b00f4a9f35a73d297e09458f2dd02b22a18c9c8f59f7f2ea2ec0a8a8b1f031914c4b5f912b0331bf119fbc724176e81049d8bd2c088412834c66f0309551602627582cb4c99c4775e82bba0635c0c8c82a7fcd440a70fa68d03e30083d933d8c034b35079ca8f764765bf53847b5d49f2432359c8fef58514129e634bb15684a9d5ce2aebf99a5f27150d372c93524945dd4bb0059b1727be8ea1561654284b31a2cafaf8e8bb080170264b045c4fb8b7e67aaea6ec6458d8c5ba782d5b9c9170a2e5ab23ebb714568c1189aaa912c1c66c7fd2cb1aea9ec7b168a6da6490ef0532aef47636d2836a7e5616164288a5ea8b8133520296273b46af4398fecd591c1ce2aaf63e72a43705d2bc18d997a0f1eb5a9ee6704b02e5e04edd299a96d06351f93aac9f32e2e02e278da9dffa157404009a2a19cd2ba9763dd4ba51b4dd14456e86645c9b83a79ceda099f14f890044f0b2a131bc9a0cd074a998c8626a740ec281e3e6dd19bc586216f4b44acdb36cf10098ffb22589875d641f77a0bfa901ae136518ac2ae8a4af772d3a96d669206fec19e6f8f05f0a2e06b8c78425fd1a67e3ae4a792efb35e4c599e96d65e1f6282a84e2c93094dd70f0ac5e564f05091a37b4339cc536ddcaeca512d2f7d7716285042dbed119225a078a7cbdd7716cce83736b25ac9f2b6d8b3f51b000ec5bf001c392f7b216efd0a5653f99dcc9579b41dc842ec469e3de667f648de55b1e06b6b2564dc488fe87f5106a52c2fd04bb83c5e31d3a2d0f21eece0a91558a8eb2877cd12e192e45984997c3f7189de602c7e839cffc1a78d0ac92e3cedec019176d0631665729cb6b9900b0d2eb8af4ede40d1403537ba02866869a7b8c823ed6b82063148005c6e3ed35f8ce5e92696504b1cc1aa33f844f827b8df8a45d34d36e9ca640e0f157a7b9cd443df84cebebbb86dd5d57721aab9263c45406cdfaeea88abdf00632df36679ecdc12d9a9546a2f4145811965330f56b0aa748922963e335aab9b0d8d540169efb967bcda59c4e7f9e8de5e62659879bdcc603b4bd1cd41f8a93e43a418184df679de2a2b655e9ea7f9af8223c3ad501b4f850c24405412e40dd0689235b0bc21bf5fe8840c92aa16a6aa4509a88319f232b192e7dd6879db081e4ec95b6fc525ffa9687398229bd4f549997855baf8c2069e2a41e1955c97f600b42cabb68ab5f3cebfaa2c40eab79d69d5cfc8883739851c3d6e493d4545817e934ca7d51011c6bdede7b7982575345f5ae2c548dcd300d42639304901e7ff7c41a7c5909d4306b0de9ccba37cb3829e87ddff741aa1dcd3d3c3c9e8ced42786927e7c3435bc62fc9148f7cd28f68d6ac5f94f52b1ce89b759a8b95dea1a739e298f4b8506c0bc95049", @typed={0x8, 0x117, 0x0, 0x0, @uid}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@mcast1}, @generic="1e98b98f1a1f061b6d4ccc7fd8cbe0dacbb3b02fd5932ce7335803fd5add7bba74ca0614e45310011d9413cc6feac6ce58603b84c6aba112ae5cfa9c85fd004af2c35c210f5920f54d035fe6f1783b46bbb5016a88682ac0ef25fd333a3f5ff6daf843caee20303acc3944970a01587664f93e5f9ce4f199eec55a4ec8926759b7719344f956b84c5c9272f66c9103f554866d743a4775ec50c549ab29655aeccaed7b123cea29ebeda20f2b260139c169318f53b3e878f8f27c0857322920aba0f096f40a504e4aded7"]}, 0x12b8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="a4c7db8fcdca7f860a2a6dfb9182d25062912e2c25a623490a5641c8dcd64932c1bce01082d9473e75a7bd222bc9ed20c68d7be4b24fed3af599ed525912d36ce1c5", 0x42}, {&(0x7f0000000380)}, {&(0x7f0000000480)="2a3134701d0ca41a833691f4ffbf8e45b169803920ef73b468e2b908d5b3b1b4cf1becc1610d775308ed5a7b31656b235e8a31c6a5a3b21bdf8a56f542d98c3fa84488", 0x43}, {0x0}, {0x0}], 0x5) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000200)=[{&(0x7f0000000380)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r9, r8, 0x0, 0xf03a0005) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write(r10, &(0x7f0000000540)="348b4eb92329b407db9a1d2a4509624e6d760bd42146961a4927a5d39aedbe62a23756cf5acc99922ac2fbd29ffb23231ba133b014a6f6957833de2d69b69e54846c0084c93542531a564cffb83d869a70c2e16d9bc2fd61fe671ab8c64ae79aec6755c77f1bbb50aa3a3fcb24b12bca35c7ced20200da8dc7004e22a63472155ab575c61f572a6529f00a7e68", 0x8d) write$cgroup_int(r10, &(0x7f0000000600)=0x40000000000d, 0xfffffffffffffd9b) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240), 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 7.098799311s ago: executing program 1 (id=9011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="00001900000000400000000000000000"], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x9154, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028007000100240001006d6f6465000000000000006d99000000000020000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000900)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x1, 0xfffffddc, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x65, 0x0, 0xf7, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0xf, "9de064527878b43f0bf9b0b681"}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r0, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000f80)=[{}, {}], 0x10, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r0, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000f80)=[{}, {}], 0x10, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl0\x00', r7, 0x700, 0x700, 0x7fffffff, 0x400, {{0xb, 0x4, 0x0, 0x2f, 0x2c, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @private=0xa010102, {[@end, @ssrr={0x89, 0xb, 0x70, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @ra={0x94, 0x4}, @end, @generic={0x83, 0x6, "ab422e8f"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001400)=0x14) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x8100, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0xa0, 0xa0, 0xf0, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x8000, 0x0, 0x88ca, 0x4, 0x2}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x18, 'syz0\x00', {0x6}}}}}]}]}, 0x1f8) (async) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x8100, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0xa0, 0xa0, 0xf0, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x8000, 0x0, 0x88ca, 0x4, 0x2}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x18, 'syz0\x00', {0x6}}}}}]}]}, 0x1f8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'ip6gre0\x00', r6, 0x29, 0x4, 0x0, 0x1471, 0x30, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'ip6gre0\x00', r6, 0x29, 0x4, 0x0, 0x1471, 0x30, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001500)={@mcast2}, &(0x7f0000001540)=0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xe, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xe, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x6, 0xc, &(0x7f0000001e40)=ANY=[], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.669520736s ago: executing program 6 (id=9014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x40800) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/116, 0x74}], 0x2}, 0x4}], 0x1, 0x2003, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24088810}, 0x80) 6.479880816s ago: executing program 5 (id=9016): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x1795}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x7b0, 0x3, 0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xe, 0xcc4, 0xe8, 0x7ff}}}, ["", "", "", "", ""]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x4, @private1, 0xa}, @in={0x2, 0x4e20, @multicast2}], 0x2c) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x9, @mcast1}, @in6={0xa, 0x4e23, 0x5, @local, 0x4}, @in6={0xa, 0x4e23, 0xa6f, @loopback, 0x50f2}]}, &(0x7f0000000340)=0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x188, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x188}, 0x1, 0x0, 0x0, 0x34000041}, 0x24004010) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000640)=[{{0x4, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{}, {0x4, 0x1, 0x0, 0x1}}], 0x10) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4008040}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x3f9, 0x220, 0x70bd27, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xa915c2a5cb2bd54f}, 0x4000000) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000780)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x2c) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20422000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000900)={'virt_wifi0\x00', 0x20}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x36}, {0x3}, {0x36, 0x1}, {0x24}, {0x12, 0x1}, {0x12}, {0x24}, {0x4e}, {0x4}, {0x48}, {0x48}, {0x9}, {0x36}, {0x27}, {0x2, 0x1}, {0x36, 0x1}, {0x6}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000b80)=0x43e) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000bc0)={r7, @in6={{0xa, 0x4e23, 0x4214f1de, @local}}, 0x0, 0x1, 0x400, 0x7, 0x64}, 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000d80)={0xffffffffffffffff, &(0x7f0000000c80)='pci\x00', 0x400, &(0x7f0000000cc0)={@align=0x2, {0x9, 0x4, 0x8f1, 0x4}}, 0x6, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0xc2af}) (async) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000000dc0)={""/44, 0x0}, 0x80, 0x1, 0x0, 0x0) (async) r11 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r9, 0x0, 0x25, 0x1a, @val=@iter={&(0x7f0000000e40)=@task={r10, r11, r1}, 0x10}}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000ec0)={r6, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0x2}}}, &(0x7f0000000f80)=0x84) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "42f49f03d4033d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 6.441490708s ago: executing program 6 (id=9018): socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000010000000000008500000087000000180100002020692500000000002020247b1af8ff00000000bfa100000020000007010000fcffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x6, &(0x7f0000000c40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @kfunc]}, &(0x7f0000000c80)='GPL\x00', 0x6, 0x9c, &(0x7f0000000cc0)=""/156, 0x40f00, 0x40}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0000600502800100a30004000010000000000000000000000f0000000000000000004303020c00670000000690787f00000a010100890fa2ac14140dac1414aaac14142b8313aa640101"], 0x22e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000d80)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) r4 = socket(0x11, 0x3, 0x0) setsockopt(r4, 0x107, 0xf, &(0x7f0000000700)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) sendmsg(r4, &(0x7f0000000780)={&(0x7f00000007c0)=@ll={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000008c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0x44}], 0x2}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x15, &(0x7f0000000500)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x77}], &(0x7f00000005c0)='GPL\x00', 0xffffffff, 0xf5, &(0x7f0000000600)=""/245, 0x0, 0x2a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)=[{0x1, 0x5, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x3}], 0x10, 0x80000001}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c0000001900010000000000000000001d01000008000e00", @ANYRES32, @ANYBLOB="0800050004061602150002000000000000000000254e2a6bd4e5c27706"], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r12, 0x107, 0x15, 0x0, &(0x7f0000000b40)) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000a40)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r8, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 6.244853098s ago: executing program 5 (id=9020): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a40)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x13, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000060000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000dc0)=""/222}, 0x78) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000a80)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000b00)={&(0x7f0000000b40)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x800) 4.728065383s ago: executing program 1 (id=9023): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'c', ' *:* ', 'm\x00'}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000380), 0x318, 0x0) unshare(0xa020480) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) epoll_wait(r3, 0x0, 0x0, 0x404) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.69626676s ago: executing program 6 (id=9024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x6005}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x64010102, @local, @multicast2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x6, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xaf}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x61}, @generic={0x15, 0x0, 0x0, 0xfffb}, @generic={0x95, 0x0, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$nci(r2, &(0x7f0000000540)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x8, @a={0x10, 0x6, 0x0, 0x9, {0xb, 0x1e, "e071db7390315fb2e91125a660467b50d4777c31a2057f800e8905227a3d", 0xe}}}, 0x2a) 4.675794082s ago: executing program 5 (id=9025): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x40, 0x7}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0xffff, 0x5, 0x4, 0x9, 0x1, 0x7f, 0x400, 0x22e7, r1}, 0x20) 4.462116652s ago: executing program 5 (id=9027): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0xfffffeff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast1}, &(0x7f00000004c0)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x88c0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="51734da7b92d946410c83bb7ddd4bdf0181b5996b36c62ab255e09888142f7038f4c8cc1e80b52cce9d5c9ce1795f949388881556345dce60aefc7775f3eed2a4521f4668ee4e99cc177880c504e0f68ffd364c67cf0c77d9f10503d50e2e798188b42cea4cf63a71dabdbc1fa1f9387b3f4371f116fb68e779c3fd2767ae7bd0c99f47c0a42700db0da76ade8876bd52312a25ce6648d50e5743a942d23989dab", 0xa1}, {&(0x7f00000002c0)="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", 0xfd}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="6c000000000000000000000007000000441479500000000900000008000000020000046f832b45ac1414aa64010100ac1e0101ac14143b7f000001e0000001ac1414aaac1414aaac141425e00000010705951995070b6f0a010102000000000707a60000000094040000000000000000140000000000000000000000010000000104000000000000110000000000000000000000010000000e000000000000001400000000000000000000000200000002000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac1414330000000000000000800000000000000000000000070000009404010001860e0000000007088d3cc5794d1f440cd921ffffffff000000074434e6b3ac1414bb000000807f00000100000710ac1414aa00010001e000000200000009ffffffff0000076d7f000001000000e282077ee3c30a42860c00000001070695adb5f994097a7f45ac55eaeb001c000000000000000000000008000000", @ANYRES32=r2, @ANYRESDEC=r2], 0x190}, 0x40054) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="40cbd0d3f2aecafd000000100039040000000000", @ANYRES32=0x0, @ANYRES16=0x0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r3) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x21a08}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r8, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2d7f1016}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000810) 4.393756467s ago: executing program 6 (id=9028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) close(0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000700)={0x40000000, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x60008015}, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x14c, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc00000, @private1, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x12, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) bpf$MAP_CREATE(0x2000000000000013, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.010058168s ago: executing program 6 (id=9030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x48844) write$nci(r1, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6d, @a={0x1, 0x2, 0x1, 0x0, 0x4, 0x4, 0x2, {0x28, 0x38, "cdbc2c6a98afdc147168b29b83aed82ab2ebf6296be4746ee8462c55c532e147c4267d18b1b76a9843e9c503621d5c22fa558f4fcad0573c", 0x2, 0x4}, 0x2, 0xc, 0x4, 0x6, 0x25, "6d9b3f76bcace17d9a4aca56834166cc0ab6a82aa3a2ee0080c2547d4b5097a221777fcfc5"}}, 0x70) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.404087093s ago: executing program 1 (id=9032): r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000006c0)='devices.allow\x00', 0x2, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000ffd750b916d9802c00000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006cbc73740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0xe, 0x4, 0x0, &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$inet(r2, &(0x7f0000001080)={0x0, 0x6000, &(0x7f00000010c0)=[{&(0x7f0000001100)='U', 0xa00120}], 0x20}, 0x3) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000980)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0x7, 0x81}, @value=@ver_80211n={0x0, 0x80, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x204, 0xa, {0x0, 0x1b, @random="5ae69f0f11c6fc220e7881807408b9ba89982339063edc62132900"}, @val={0x1, 0x3, [{0x4, 0x1}, {0x12, 0x1}, {0x9}]}, @void, [{0xdd, 0x10, "fa0c3a0684e5de7c4aa7d9af0e82bb42"}, {0xdd, 0x97, "3510e1562d30d352af75787578e6021af956098a499180b79d793c16068ae353c2cc870c446df8ece7b1a9cbf5b0538694db8ed1ed49cf76e9e7b267317c742b54bfe37118c26561e509b04faa3a53988a7321e0c2204ba2750596dd6ad89dcf6e8a1c479c3e249068c2e784475cf4aac2bbbbfbbc581f590e9e9cf8cb76950af6eadc7aa96e83f2dfa6dfe8ecb20f0022dae1666864a1"}, {0xdd, 0x77, "f5bd4649f44ad9e53d15adae081bc03ffe239b3813d879f505169cea2888f970625f95f7d565507ebce17b8efffba6e41a595a931d9e9234f60d8299158ae652ac3fd44e3f9fb5f869c061b84ead6a52058f85d76f2d8c50691867c7093a9fc812d71d36ff61fed5e02490c053e574b36f36f11ec5efd1"}, {0xdd, 0x68, "0f912e7f0ab5b714f5c87969adf1d5718ea9f271a81d3b028f29a6c28d1d810ccf05a05261e4dd81169489d9237166d279d997ebbe8b431c4a0029922731a28c400d7b70e78893678c223dd2ddecad53705999dc9b1cce86ae0b2c492fcdba611dc7140a7d24f560"}, {0xdd, 0x4b, "4477eaad298042cf9d12f1fc75b295a7b9b47c9ee824f157710cfb1e70ba304b40bbd11843fc8f088a6717a5b57be0a02f234b9623b5064dcfdf34892dc1499d4338f989e7a92337f5207b"}, {0xdd, 0x35, "33b479230919376e29c81217b541043153453eb4e8629ee182085499d5359c95afad0226383500cf52940333a951e653c204990e90"}]}, 0x254) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) 2.948296171s ago: executing program 2 (id=9034): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001001000000085100000010000009500000000000000852000003c50030095"], &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) close(0x3) accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) 2.791874845s ago: executing program 2 (id=9036): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000111867090707a640400f0021ff3f30000000170a0017000000000400370009000300016325b758b9a64411f6bb744dc48f5700", 0x39}], 0x1) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xbe, 0x0, &(0x7f00000000c0)="88e047e89d064dc0af8808d03d8e8352e4e46737fd0fb7a14470158db6e6fa494da64b8f07df87b58f141ef54b8d7e66e472cc1107c1f82ede2aefb6085b44468466aaec3e20e4967745b40ad52de08807baf6723aad8f68f85f5c7f4fbbf30917148e6b1087c512dc5f5c01d6d20b729a72f85787ac6d747116b430f705c1ceaa5d361803c6b60693e32cfea5349308fbbba1fda8e5b3013d93dcf93dff323cb11c30d0f94cdd7c1a743d76f275a9f7bdf5930658b3bae1c5d6f479ce48", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) write$cgroup_devices(r5, 0x0, 0x6) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'veth0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.790307126s ago: executing program 0 (id=9037): unshare(0x2a020480) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r2, &(0x7f0000006b80)=""/207, 0xcf) 2.726440974s ago: executing program 0 (id=9038): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00040000000000000000000c00050019000000ff"], 0x58}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000b0ff0011000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035080100000040009500000000000000b7020000000000007b9af8ff0000000075090000030000007baaf0fd00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e980000000000005608f0ffffff00008500000005000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.479667943s ago: executing program 2 (id=9039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x804, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a3100"], 0x68}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)=""/3, 0x2}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xfe, 0x4, 0x2, @rand_addr=' \x01\x00', @remote, 0x7800, 0x7, 0xb, 0x80000001}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000e20000700000003c3af94db790037647bbe664a127a8173da2d7687a3e136d88203e3a90bae6722aa05e8f137a8e45ce2d1f031475a29c0e32efbd8fac28d6e0e3d24e05db6baf9ef9a0027cb03dc8e149f1ac91d17b976f57a4310c29c5f292dbde51d5f5000001006d8cb051bec81565d56c607179e69dda5f93a893fefe7b067513ae700b210093a9f90b6fe36a617210e2be9627b69c786589033a4f", @ANYRES32=r2, @ANYBLOB="000000000000000085100000030000801800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 2.419166398s ago: executing program 2 (id=9040): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x34, r2, 0x2799f5eec7981083, 0x170bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000015c0)={r3, &(0x7f0000001600)='TIPC\x00', 0x0, &(0x7f0000001640)={@align=0x9, {0x1ff, 0x7, 0x4, 0x7}}, 0x1bb, &(0x7f0000001680)={@_ha_fsid}, &(0x7f00000016c0)=0x8}) syz_genetlink_get_family_id$devlink(&(0x7f0000001700), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000001740)={&(0x7f0000001780)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="180000000000000029000000040000008200000000000000180000000000000069000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x40080) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x10, 0x16, &(0x7f0000002440)=ANY=[@ANYBLOB], &(0x7f0000002480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000000a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c7465720000b4000000060a1f0400000000000000000a0000000900010073797a30000000000900020073797a300000000088000480380001800e000100696d6d6564696174650000002400028008000140000000011800028014000100000000000000000000000000000000012c0001800e"], 0x148}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000002680)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000026c0)=0x2, 0x4) connect$inet(r8, &(0x7f0000002700)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000002840)}, {0x0}, {&(0x7f0000002880)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000002900)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000003440)="7a988c4622aef4290206cad470a5d0ec", 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003500)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x18, 0x7, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x3, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000014c0)="63eced8e46dc7f8a72337708b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000036c0)={&(0x7f0000003540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x8, [@datasec={0xe, 0x3, 0x0, 0xf, 0x1, [{0x5, 0xcf, 0xaa58}, {0x2, 0x2, 0x6}, {0x5, 0xf, 0x2}], '-'}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x1}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0xe, 0x3}]}, @const={0x9}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xf}, {0x9}, {0x5}, {0xf, 0x1}, {0x9}]}, @int={0x10, 0x0, 0x0, 0x1, 0xe, 0x52, 0x0, 0x4}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000003640)=""/110, 0xf4, 0x6e, 0x1, 0x7ff}, 0x28) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4096, 0xfffffe4a}], 0x1}}], 0x48, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000002240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002280), 0x0, 0x10, &(0x7f00000022c0), 0xfffffffffffffd00}, 0x48) 877.492034ms ago: executing program 0 (id=9041): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000070000b70500000800000085000000c500000095"], &(0x7f0000000740)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000001900)=""/141}, 0x94) 873.113972ms ago: executing program 1 (id=9042): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a40)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x13, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000070000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000dc0)=""/222}, 0x78) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000a80)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000b00)={&(0x7f0000000b40)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x800) 772.784065ms ago: executing program 2 (id=9043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080034803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)={0x4000200d}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000007c0)={0x0, @remote, @loopback}, &(0x7f0000000880)=0xc) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e, 0x30, 0x61, 0x61, 0x5f, 0x30]}}, &(0x7f0000000900)=""/4, 0x2f, 0x4, 0x0, 0x2, 0x10000, @value=r2}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX=r9, @ANYRESDEC=r5, @ANYBLOB="06b63d348d855cab129ab9d868514d870ccb03da45bc5628b98d68718665f70d06e6edacafb895519bfc30b3bcae4f62ddf0f5f7abfdd06ce41cb11d1ef945178628e692c792d9e9c643aad385be7b06544ef723e633f3a493f4f65131b05580ccb9a64a91195defb4540307cb081f22354d16a29d1c8db91f1f3f03a601f18094d00c6dbc6bd9542f54e631a5fe406b44521fe5a50814cd8f4d36bc8f10d529a1e526343f5cd0777c9285addccf8e14a4e722e3802a", @ANYRES8=r6, @ANYRES32=r10], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', r11, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r13}, 0xc) pselect6(0x40, &(0x7f0000000340)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 724.771331ms ago: executing program 6 (id=9044): unshare(0x400) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x9) socket$inet_udp(0x2, 0x2, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xde9, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x2, @multicast1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(0x0, r4) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x4008054) sendmmsg(r2, 0x0, 0x0, 0x300) 644.000092ms ago: executing program 1 (id=9045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="0e00000002002004", 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @random="0e10840dc342", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081e20", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x7e, 0xf0, 0x6, 0x5, 0x3}}}}}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x4080) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x800, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) listen(r3, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) 571.377537ms ago: executing program 5 (id=9046): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r1, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x1, {{0xa, 0x4e21, 0x5, @mcast2, 0x3}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xe}}, {{0xa, 0x4e21, 0x1, @empty, 0x5}}]}, 0x210) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x2b, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000040)=0xfffffff9) 476.198724ms ago: executing program 0 (id=9047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10, 0x11}}], 0x30}, 0x200000e0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x59, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1543}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000240)='\x00', 0x0, &(0x7f0000000280)={@align=0x95, {0xa988, 0x10, 0xd59, 0xe0}}, 0x41d4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xa}, {[0x1, 0x7, 0x8000, 0x6]}, 0x2c0, 0xf2, &(0x7f0000000340)=""/242}) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000004c0)={0x0, 0x7fff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0x252, 0x0, 0x3, 0x41, 0x43e, 0x7f}, 0x9c) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010325bd20adba0e4a8804"], 0x14}}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x10000, @empty, 0x8}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10, 0x11}}], 0x30}, 0x200000e0) (async) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x59, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1543}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000240)='\x00', 0x0, &(0x7f0000000280)={@align=0x95, {0xa988, 0x10, 0xd59, 0xe0}}, 0x41d4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xa}, {[0x1, 0x7, 0x8000, 0x6]}, 0x2c0, 0xf2, &(0x7f0000000340)=""/242}) (async) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000004c0)={0x0, 0x7fff}, &(0x7f0000000500)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0x252, 0x0, 0x3, 0x41, 0x43e, 0x7f}, 0x9c) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010325bd20adba0e4a8804"], 0x14}}, 0x0) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x10000, @empty, 0x8}, 0x1c) (async) 390.96009ms ago: executing program 2 (id=9048): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3600edff", @ANYRES16=0x0, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0020000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 284.535382ms ago: executing program 5 (id=9049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000002c00)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000003000)=[{{&(0x7f0000003080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000003100)='G', 0x1}], 0x1}}, {{&(0x7f0000003140)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000003180)=[{&(0x7f00000031c0)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000003200)={0x0, 0xfff}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000011", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002d00), r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002a40)={0x1, 0x6}, &(0x7f0000002a80)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002d40)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000002d80)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r7, 0x12504000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002b80)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x9, @private1, 0x38}, 0x1c, &(0x7f0000002740)=[{&(0x7f00000011c0)="c9d24bae75bb0ae2074d016a142c880bbf1e06b216c5b556561628dae81f6b89d473b182d3b1c4471ddd8e970a97c0baf509db06600d5a7c34309f06177a6dbba6773ffa4c650486827a04c30ad4c4aa5eb5b75f5324bb7c0666b369fe4d6ec5f63f54ff30e5dfa95c99a77f47690179a78edd7e9778d17329251bbfa94cd04046d1dbacc56153533586cbfa2364871ec072a115b1ab1bb13dfd75fa216896eff215cb3316ea2aaae4", 0xa9}, {&(0x7f0000002280)="037b0c7a4d7797718bf0e224cea1ae7cd1a4ed347221aab32623b817a5c15a8f34f8b44c69eb196586699bc49dcce7011aba2d5a6cbe90a06fa85bb7a79a2adf955d147f5849dce6bbdad1f4c8dcdef96c62b50972caa2cbed1ada8be4f6c3", 0x5f}, {&(0x7f0000002340)="92551f033ceeb2b6fcb1c9093292df53a75f8703ebffde0e81d0f8b74b7b962ff658b806cae881952747d56f7292e50f258e518082f9ad44e2dda1fa3711215354732ac3b52292a31a13a0320651ed249a9c35", 0x53}, {&(0x7f00000023c0)="74164141a4267595a40b595f249ce3f2824ab4f9573ffd953ec5c83872f60adb618a8fa98b072d4462c5730ef039f94fab9e6109291483a95b5271143accaaa8893ef68e7d92b242c5bec869819472a7fc127f9a6cce0c276c8f0c5e46a95c24dd264e7090f28109cfef0657247cd6665eea0d4cf0aa40f69455ea4a3c7697c85d1654ed1009bfa145d17cca8ebea543b45e3d67f254dcafb2679df45ad18c2f4e19e3a447595e6b77a97838092e5834e90071ce287d27bfb8958c3adc6cc9c7ddfc0a4366fe285bb0dc116d11cc5dcc8fae905ecb4f5af48973413893defd61820ec35026d2ed0ea4b5a878baf2325705d7b61385", 0xf5}, {&(0x7f00000024c0)="d5c1f1b9", 0x4}, {&(0x7f0000002500)="ce1bedd53b5e3492b7b4a9f70a255599ba5513d23f2dc7fee1065a0b05433dbe8524053534f1e124a4af07340c24", 0x2e}, {&(0x7f0000002540)="6c9057f33d1f63c07f3cab58728cccdf5e9b80e040ebc953675ece7e8e8743411a142fd9b24b3460be9762b59ef3b51d5b233538b2128f66b7a187c1abb094758a6390ea352dbf680ae9aa33b2913b6706ce93680497456ad5", 0x59}, {&(0x7f00000025c0)="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", 0xfe}, {&(0x7f00000026c0)="abe0e70567d7bd7c8741a1bd473eedca743d48b3a6a76eb8941bab5c621cb5c646a8865a8e3ce5e5fffeb82f9c7234146cecb9f41fb936aa245ceefbd347e1ff4969547abdf8b87ced4f3c776343cc0fcadb", 0x52}], 0x9, &(0x7f0000002800)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x20, 0x4048001}, {&(0x7f0000002840)=@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x600}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002880)="265935af1a516dcc09523546a2096fa74ede9c72dd927319bf5c4d5078befe0e2d5361f491e4790646058dd47b4af6ca4d58b40d55a5fdf1606f0c2059f88fd2cc2a9a839bff0ae732771d3ac410060a3d9d440f6e9c5357d5608cfd0a5f0ff886580d493b5523f15ed9d66a27398b3e82854717a946daa8008bc5cd740eb5575de28059baecf4da43bf18bba97c6403aa8fc7eff87465b559b65d1ee5a9e1761d8409ee636a8d67d7a607fa723ab070220e26fc50c15724662a610d61ce3e8ac78ea67182919e17d234c738e5c32d51d96bee357c86560d957fba04025798787536d72d", 0xe4}, {&(0x7f0000002980)="a2a3a60d5f7169b81df4f4f63140f7457bedba7ed505cf0d541375319ce1779c0511a4970a1aceff75bfd83f0f7de97a1fcce8fc74be8081ac8ddea07edd19d385cd23a01c89d8eab1c4ec25", 0x4c}], 0x2, &(0x7f0000002ac0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xd2a, 0x8005, 0x9, 0x1, 0x64f, 0xe0, 0x4, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x1708, 0x4000, 0x1, 0xff01}}], 0xa0, 0x4080}], 0x2, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000001280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="400000004c7040b86a92b559b216e98aa012552c71cc81377c68e2cad919b369ae8477e1c68da2f57ed8855f871a395c27accbbd991a904dd932374b896e5846f68207778337806f0f914ecae2952c31e7b270cadc3cf419e5c9daa78411edb90c9ff3d6fd693784f499a11e29fd6582076652ce7eb0c0e283f9a7040e8d5773743ab7fb3ad9180e000cc6f78bb2cbc0cc609061510c998e7c523d22af519672b9b79af20b7d99601a7519d8b08b5ef827140b2cce4a7c2d8d4da0a8a183087fd45a636d453f2ee7c7b91094d6a4cc455fb2303031fc8482253012f744edfdb115d4860596646425fcfa24157669aa4d8b00a8", @ANYRES16=r2, @ANYBLOB="000325bd7000fddbdf25620000000c00990001000000790000000600b400710d00000600b4006d0c00000600b300030000000600b40041020000"], 0x40}, 0x1, 0x0, 0x0, 0x821}, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000002dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000002c80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00343c00fe8000000000000000000000000000aaff0200000000000000000000000000013c03000000000000c9100000000000000000bc"], 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000002f40)={&(0x7f0000002e00), 0xc, &(0x7f0000002f00)={&(0x7f00000012c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000804000000fbdbdf25370000000800270002070000000057000200000008005700080000000800a00009050000050019010c0000000c0057004cc30000050018011c000000080022018a0100000800695e88029827f7aac37cd8fe0b8f26006c0900000800570001010000"], 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0xfffffffffffffe8a, 0x10, &(0x7f0000001180), 0xfffffffffffffd27}, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000001f2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000013c0)={0x0, 0x8, "15af75", 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x8010) 196.570501ms ago: executing program 0 (id=9050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd0a, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x21e, &(0x7f0000000200)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x1e8, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x4, 0xc, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x8, [0x9, 0x2, 0x100000001, 0x8, 0x40]}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0xe, 0x81, [0x2a]}}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x29, 0x8, 0x4, 0x3, 0x3, 0x48, 0x200, {@private1={0xfc, 0x1, '\x00', 0x1}, [@mcast2, @local, @mcast1]}}, @fragment={0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x64}, @hopopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0xfff}]}, @fragment={0x87, 0x0, 0xf, 0x0, 0x0, 0x5, 0x64}, @srh={0x84, 0x4, 0x4, 0x3, 0x1, 0x10, 0x3, {@private1={0xfc, 0x1, '\x00', 0x1}, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}, @dstopts={0x6c, 0xb, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7fff}, @calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x10, [0xa776, 0x7, 0x2, 0x6, 0x3, 0x0, 0x7, 0x9]}}, @jumbo={0xc2, 0x4, 0x67ac}, @jumbo={0xc2, 0x4, 0x8}]}, @fragment={0x2f, 0x0, 0x1, 0x0, 0x0, 0xb, 0x68}, @hopopts={0xff, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x48}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x14, "b396efae6466aa988cf212f25bfd4d6bc796666e"}, @calipso={0x7, 0x28, {0x1, 0x8, 0xcf, 0x6, [0xa576, 0x401, 0x4, 0x1388c049]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @ndisc_ra}}}}}, 0x0) 0s ago: executing program 0 (id=9052): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, 0x0, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) kernel console output (not intermixed with test programs): 214494][T10282] syz_tun: entered promiscuous mode [ 1412.217365][T10282] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1412.217650][ T7865] s`z1: Port: 1 Link ACTIVE [ 1412.548132][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8008'. [ 1412.741064][T10292] tc_dump_action: action bad kind [ 1413.121062][T10310] netlink: 'syz.2.8005': attribute type 21 has an invalid length. [ 1413.121093][T10310] netlink: 'syz.2.8005': attribute type 20 has an invalid length. [ 1414.181352][T10318] x_tables: duplicate underflow at hook 1 [ 1414.283858][T10320] sit1: entered allmulticast mode [ 1414.706074][T10348] netlink: 'syz.2.8015': attribute type 1 has an invalid length. [ 1414.706099][T10348] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8015'. [ 1415.043605][T27230] net_ratelimit: 39 callbacks suppressed [ 1415.043630][T27230] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1415.043659][T27230] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1415.145707][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.252702][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.358216][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.528785][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.551703][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1415.551926][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1415.609750][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8019'. [ 1415.651408][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.760457][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8018'. [ 1415.764501][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1415.857039][T10370] netlink: 'syz.5.8019': attribute type 21 has an invalid length. [ 1415.857205][T10370] netlink: 'syz.5.8019': attribute type 1 has an invalid length. [ 1415.857223][T10370] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8019'. [ 1417.104680][T10427] FAULT_INJECTION: forcing a failure. [ 1417.104680][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.105203][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.1.8030 Not tainted syzkaller #0 PREEMPT(full) [ 1417.105232][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1417.105247][T10427] Call Trace: [ 1417.105258][T10427] [ 1417.105269][T10427] dump_stack_lvl+0xe8/0x150 [ 1417.105314][T10427] should_fail_ex+0x3eb/0x540 [ 1417.105351][T10427] should_failslab+0xa8/0x100 [ 1417.105377][T10427] __kvmalloc_node_noprof+0x171/0x820 [ 1417.105413][T10427] ? netdev_alloc_config+0x4f/0xc0 [ 1417.105446][T10427] ? netdev_alloc_config+0x4f/0xc0 [ 1417.105477][T10427] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1417.105504][T10427] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1417.105545][T10427] alloc_netdev_mqs+0xd5b/0x1240 [ 1417.105581][T10427] rtnl_create_link+0x321/0xd70 [ 1417.105619][T10427] rtnl_newlink_create+0x258/0x7b0 [ 1417.105656][T10427] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1417.105688][T10427] ? __pfx___mutex_lock+0x10/0x10 [ 1417.105731][T10427] ? ns_capable+0x84/0xe0 [ 1417.105766][T10427] rtnl_newlink+0x167a/0x1c30 [ 1417.105808][T10427] ? __pfx_rtnl_newlink+0x10/0x10 [ 1417.105832][T10427] ? ktime_get+0x1f5/0x220 [ 1417.105872][T10427] ? __lock_acquire+0x747/0x2de0 [ 1417.105908][T10427] ? __lock_acquire+0x747/0x2de0 [ 1417.105953][T10427] ? lock_acquire+0x115/0x350 [ 1417.105992][T10427] ? lock_acquire+0x115/0x350 [ 1417.106035][T10427] ? __lock_acquire+0x747/0x2de0 [ 1417.106067][T10427] ? is_bpf_text_address+0x292/0x2b0 [ 1417.106094][T10427] ? __pfx_hook_capable+0x10/0x10 [ 1417.106120][T10427] ? kernel_text_address+0xa5/0xe0 [ 1417.106152][T10427] ? __pfx_hook_capable+0x10/0x10 [ 1417.106174][T10427] ? unwind_get_return_address+0x4d/0x90 [ 1417.106254][T10427] ? __pfx_rtnl_newlink+0x10/0x10 [ 1417.106278][T10427] rtnetlink_rcv_msg+0x802/0xc00 [ 1417.106308][T10427] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1417.106333][T10427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.106360][T10427] ? __lock_acquire+0x747/0x2de0 [ 1417.106403][T10427] netlink_rcv_skb+0x226/0x4a0 [ 1417.106441][T10427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.106468][T10427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1417.106519][T10427] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.106554][T10427] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.106597][T10427] netlink_unicast+0x8ef/0xa80 [ 1417.106659][T10427] netlink_sendmsg+0x7f0/0xb20 [ 1417.106691][T10427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.106720][T10427] ? aa_sock_msg_perm+0x144/0x210 [ 1417.106750][T10427] ? apparmor_socket_sendmsg+0x98/0x360 [ 1417.106788][T10427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.106810][T10427] sock_sendmsg_nosec+0x14e/0x190 [ 1417.106849][T10427] ____sys_sendmsg+0x54e/0x850 [ 1417.106889][T10427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1417.106928][T10427] ? import_iovec+0x73/0xa0 [ 1417.106961][T10427] ___sys_sendmsg+0x2a5/0x360 [ 1417.106984][T10427] ? __lock_acquire+0x747/0x2de0 [ 1417.107018][T10427] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.107085][T10427] ? __fget_files+0x3a2/0x420 [ 1417.107114][T10427] ? __fget_files+0x2a/0x420 [ 1417.107156][T10427] __x64_sys_sendmsg+0x1b1/0x290 [ 1417.107197][T10427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1417.107253][T10427] do_syscall_64+0x166/0x520 [ 1417.107289][T10427] ? trace_irq_disable+0x3b/0x140 [ 1417.107320][T10427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.107344][T10427] ? clear_bhb_loop+0x70/0xc0 [ 1417.107371][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.107395][T10427] RIP: 0033:0x7faff0da8f19 [ 1417.107416][T10427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.107436][T10427] RSP: 002b:00007faff1c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1417.107462][T10427] RAX: ffffffffffffffda RBX: 00007faff1026090 RCX: 00007faff0da8f19 [ 1417.107479][T10427] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000013 [ 1417.107494][T10427] RBP: 00007faff1c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.107509][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.107523][T10427] R13: 00007faff1026128 R14: 00007faff1026090 R15: 00007ffce94c20e8 [ 1417.107562][T10427] [ 1417.931675][T10439] bond5: entered allmulticast mode [ 1417.962821][T10408] netlink: 'syz.2.8025': attribute type 21 has an invalid length. [ 1417.962848][T10408] netlink: 'syz.2.8025': attribute type 20 has an invalid length. [ 1417.984965][T10443] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1417.985766][T10443] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 1418.990487][T10479] syzkaller1: entered promiscuous mode [ 1418.990515][T10479] syzkaller1: entered allmulticast mode [ 1419.143590][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8042'. [ 1420.229457][T29721] net_ratelimit: 42 callbacks suppressed [ 1420.229483][T29721] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1420.229513][T29721] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1420.548151][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1420.658699][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1420.768325][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1420.878824][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1420.988198][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1421.016791][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8051'. [ 1421.099763][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1421.172108][ T6049] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1421.172354][ T6049] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1421.337482][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8050'. [ 1421.564374][T10514] netlink: 'syz.5.8049': attribute type 21 has an invalid length. [ 1421.564404][T10514] netlink: 'syz.5.8049': attribute type 20 has an invalid length. [ 1422.485028][T10549] netlink: 149 bytes leftover after parsing attributes in process `syz.2.8057'. [ 1422.532282][T10550] syzkaller0: entered promiscuous mode [ 1422.532310][T10550] syzkaller0: entered allmulticast mode [ 1422.583358][T10548] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8055'. [ 1424.521251][T10596] netlink: 'syz.1.8065': attribute type 8 has an invalid length. [ 1425.039914][T10534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1425.284949][T10602] net_ratelimit: 53 callbacks suppressed [ 1425.284975][T10602] netlink: zone id is out of range [ 1425.310454][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1425.311681][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1425.311712][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1425.420650][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1425.504172][T10609] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8068'. [ 1425.530613][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1425.571380][T10609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1425.571423][T10609] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.571448][T10609] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.639081][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1425.702108][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8069'. [ 1425.820636][T29721] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1425.820673][T29721] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1426.311432][T10612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1426.331524][T10612] bridge0: port 1(bond7) entered blocking state [ 1426.332033][T10612] bridge0: port 1(bond7) entered disabled state [ 1426.332617][T10612] bond7: entered allmulticast mode [ 1426.335411][T29715] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1426.380987][T10612] bond7: entered promiscuous mode [ 1426.404333][T10612] bridge0: port 1(bond7) entered blocking state [ 1426.404461][T10612] bridge0: port 1(bond7) entered forwarding state [ 1426.532215][T10611] bond11: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1426.567119][T10611] bond11 (unregistering): Released all slaves [ 1426.653005][T29721] bridge0: port 1(bond7) entered disabled state [ 1427.249002][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1427.422170][T10648] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1427.964108][T10663] netlink: 'syz.5.8079': attribute type 10 has an invalid length. [ 1427.964152][T10663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8079'. [ 1428.018633][T10663] netlink: 'syz.5.8079': attribute type 10 has an invalid length. [ 1428.018677][T10663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8079'. [ 1428.243678][T10647] ip6gretap0: entered promiscuous mode [ 1428.256454][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 1428.415107][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8081'. [ 1429.068759][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8084'. [ 1429.559558][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8086'. [ 1430.369824][T29719] net_ratelimit: 29 callbacks suppressed [ 1430.369850][T29719] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1430.369879][T29719] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1430.479345][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1430.588557][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1430.699716][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1430.808460][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1430.879790][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1430.880012][ T8336] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1430.924758][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1431.047236][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1431.486301][T10764] macsec0: entered allmulticast mode [ 1431.486327][T10764] veth1_macvtap: entered allmulticast mode [ 1431.710494][T10766] bridge6: entered promiscuous mode [ 1431.710522][T10766] bridge6: entered allmulticast mode [ 1431.714332][T10766] team0: Port device bridge6 added [ 1431.744361][T10774] bridge0: port 3(team0) entered blocking state [ 1431.744986][T10774] bridge0: port 3(team0) entered disabled state [ 1431.745128][T10774] team0: entered allmulticast mode [ 1431.745148][T10774] team_slave_0: entered allmulticast mode [ 1431.745166][T10774] team_slave_1: entered allmulticast mode [ 1431.747808][T10774] team0: entered promiscuous mode [ 1431.747829][T10774] team_slave_0: entered promiscuous mode [ 1431.948662][T10774] team_slave_1: entered promiscuous mode [ 1432.236121][T10780] __nla_validate_parse: 2 callbacks suppressed [ 1432.236146][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8102'. [ 1432.406872][T10782] netlink: 'syz.0.8093': attribute type 21 has an invalid length. [ 1432.406900][T10782] netlink: 'syz.0.8093': attribute type 20 has an invalid length. [ 1433.997909][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8109'. [ 1434.219251][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1434.284988][T10822] bridge_slave_0: entered promiscuous mode [ 1434.349665][ T5642] block nbd9: Receive control failed (result -32) [ 1435.463536][T10868] netlink: 'syz.2.8119': attribute type 1 has an invalid length. [ 1435.489330][T29719] net_ratelimit: 40 callbacks suppressed [ 1435.489354][T29719] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1435.489381][T29719] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1435.727892][T10868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1435.767410][T10871] batman_adv: batadv0: Interface deactivated: dummy0 [ 1435.784421][T10871] batman_adv: batadv0: Removing interface: dummy0 [ 1435.805606][ T7284] bridge0: port 3(vlan2) entered disabled state [ 1435.821172][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1435.881294][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8119'. [ 1435.881575][T10868] bond7: entered promiscuous mode [ 1435.881776][T10868] bond7: entered allmulticast mode [ 1435.928427][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.046204][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.089202][T10849] netlink: 'syz.6.8117': attribute type 21 has an invalid length. [ 1436.089231][T10849] netlink: 'syz.6.8117': attribute type 20 has an invalid length. [ 1436.167278][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.268371][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.381780][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.508361][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1436.509567][T10895] syzkaller1: entered promiscuous mode [ 1436.509591][T10895] syzkaller1: entered allmulticast mode [ 1436.622276][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1437.614829][T10922] netlink: 'syz.0.8128': attribute type 29 has an invalid length. [ 1437.678948][T10922] veth1_macvtap: entered promiscuous mode [ 1437.680184][T10922] macsec0: left promiscuous mode [ 1437.680205][T10922] veth1_macvtap: left promiscuous mode [ 1437.681337][T10922] macsec0: entered allmulticast mode [ 1437.681355][T10922] veth1_macvtap: entered allmulticast mode [ 1438.620728][T10954] smc: smcd device lo applied user defined pnetid SYZ0 [ 1439.640841][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8139'. [ 1439.641633][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8140'. [ 1439.691194][T10981] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8139'. [ 1440.176206][T10953] netlink: 'syz.2.8136': attribute type 21 has an invalid length. [ 1440.176234][T10953] netlink: 'syz.2.8136': attribute type 20 has an invalid length. [ 1440.440192][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8142'. [ 1440.519111][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8143'. [ 1440.532819][T29721] net_ratelimit: 31 callbacks suppressed [ 1440.532872][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1440.638834][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1440.748338][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1440.861584][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1440.968556][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1440.992418][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8146'. [ 1441.277528][T11017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.290233][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1441.325698][T11031] FAULT_INJECTION: forcing a failure. [ 1441.325698][T11031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.325734][T11031] CPU: 0 UID: 0 PID: 11031 Comm: syz.0.8147 Not tainted syzkaller #0 PREEMPT(full) [ 1441.325761][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1441.325775][T11031] Call Trace: [ 1441.325785][T11031] [ 1441.325795][T11031] dump_stack_lvl+0xe8/0x150 [ 1441.325839][T11031] should_fail_ex+0x3eb/0x540 [ 1441.325890][T11031] _copy_from_user+0x2d/0xb0 [ 1441.325921][T11031] copy_from_sockptr_offset+0x66/0xa0 [ 1441.326040][T11031] do_ip6t_set_ctl+0x99a/0xe30 [ 1441.326085][T11031] ? rcu_is_watching+0x16/0xb0 [ 1441.326121][T11031] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1441.326172][T11031] ? __mutex_unlock_slowpath+0x731/0x900 [ 1441.326211][T11031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1441.326259][T11031] nf_setsockopt+0x26f/0x290 [ 1441.326344][T11031] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1441.326383][T11031] do_sock_setsockopt+0x17c/0x1b0 [ 1441.326413][T11031] __x64_sys_setsockopt+0x13d/0x1b0 [ 1441.326444][T11031] do_syscall_64+0x166/0x520 [ 1441.326473][T11031] ? trace_irq_disable+0x3b/0x140 [ 1441.326504][T11031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.326527][T11031] ? clear_bhb_loop+0x70/0xc0 [ 1441.326556][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.326579][T11031] RIP: 0033:0x7fca4b5a8f19 [ 1441.326600][T11031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.326619][T11031] RSP: 002b:00007fca4c4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1441.326643][T11031] RAX: ffffffffffffffda RBX: 00007fca4b825fa0 RCX: 00007fca4b5a8f19 [ 1441.326669][T11031] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1441.326683][T11031] RBP: 00007fca4c4c0090 R08: 0000000000000560 R09: 0000000000000000 [ 1441.326697][T11031] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1441.326712][T11031] R13: 00007fca4b826038 R14: 00007fca4b825fa0 R15: 00007ffe902e3478 [ 1441.326752][T11031] [ 1441.408989][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1441.525436][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1441.663047][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1442.235921][T11053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8152'. [ 1442.290646][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'. [ 1443.115699][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8157'. [ 1443.245873][T11082] block nbd5: NBD_DISCONNECT [ 1443.245918][T11082] block nbd5: Send disconnect failed -32 [ 1443.245936][T11082] block nbd5: Send disconnect failed -32 [ 1443.245951][T11082] block nbd5: shutting down sockets [ 1443.348377][T11081] nbd: nbd5 already in use [ 1443.595743][T11093] FAULT_INJECTION: forcing a failure. [ 1443.595743][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.595776][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.0.8160 Not tainted syzkaller #0 PREEMPT(full) [ 1443.595801][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1443.595814][T11093] Call Trace: [ 1443.595822][T11093] [ 1443.595832][T11093] dump_stack_lvl+0xe8/0x150 [ 1443.595873][T11093] should_fail_ex+0x3eb/0x540 [ 1443.595906][T11093] should_failslab+0xa8/0x100 [ 1443.595931][T11093] __kvmalloc_node_noprof+0x171/0x820 [ 1443.595967][T11093] ? kasan_save_track+0x3e/0x80 [ 1443.595998][T11093] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1443.596029][T11093] ? xt_alloc_table_info+0x40/0xb0 [ 1443.596196][T11093] ? do_ip6t_set_ctl+0x96b/0xe30 [ 1443.596228][T11093] ? translate_table+0x1a8/0x2110 [ 1443.596257][T11093] ? translate_table+0x1a8/0x2110 [ 1443.596297][T11093] translate_table+0x1a8/0x2110 [ 1443.596328][T11093] ? __lock_acquire+0x747/0x2de0 [ 1443.596385][T11093] ? __pfx_translate_table+0x10/0x10 [ 1443.596417][T11093] ? lock_acquire+0x115/0x350 [ 1443.596463][T11093] ? __might_fault+0xaf/0x130 [ 1443.596502][T11093] ? _copy_from_user+0x94/0xb0 [ 1443.596539][T11093] do_ip6t_set_ctl+0xa5c/0xe30 [ 1443.596582][T11093] ? rcu_is_watching+0x16/0xb0 [ 1443.596619][T11093] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1443.596670][T11093] ? __mutex_unlock_slowpath+0x731/0x900 [ 1443.596731][T11093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1443.596779][T11093] nf_setsockopt+0x26f/0x290 [ 1443.596811][T11093] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1443.596849][T11093] do_sock_setsockopt+0x17c/0x1b0 [ 1443.596880][T11093] __x64_sys_setsockopt+0x13d/0x1b0 [ 1443.596912][T11093] do_syscall_64+0x166/0x520 [ 1443.596942][T11093] ? trace_irq_disable+0x3b/0x140 [ 1443.596974][T11093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.596997][T11093] ? clear_bhb_loop+0x70/0xc0 [ 1443.597026][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.597050][T11093] RIP: 0033:0x7fca4b5a8f19 [ 1443.597072][T11093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.597092][T11093] RSP: 002b:00007fca4c4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1443.597117][T11093] RAX: ffffffffffffffda RBX: 00007fca4b825fa0 RCX: 00007fca4b5a8f19 [ 1443.597150][T11093] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1443.597165][T11093] RBP: 00007fca4c4c0090 R08: 0000000000000560 R09: 0000000000000000 [ 1443.597180][T11093] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1443.597195][T11093] R13: 00007fca4b826038 R14: 00007fca4b825fa0 R15: 00007ffe902e3478 [ 1443.597234][T11093] [ 1444.413964][ T6049] bridge_slave_0: left allmulticast mode [ 1444.413998][ T6049] bridge_slave_0: left promiscuous mode [ 1444.415961][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.445696][T11105] netlink: 'syz.2.8162': attribute type 8 has an invalid length. [ 1444.663332][ T6049] dvmrp8: left allmulticast mode [ 1445.351318][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8166'. [ 1445.417322][T11125] netlink: 'syz.2.8166': attribute type 10 has an invalid length. [ 1445.436665][T11092] netlink: 'syz.6.8159': attribute type 21 has an invalid length. [ 1445.436690][T11092] netlink: 'syz.6.8159': attribute type 20 has an invalid length. [ 1445.717529][T11132] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1446.397828][ T6049] bond9 (unregistering): (slave ip6gre1): Releasing backup interface [ 1446.397859][ T6049] ip6gre1 (unregistering): left promiscuous mode [ 1446.944816][T11157] net_ratelimit: 15 callbacks suppressed [ 1446.944841][T11157] ip_tables: iptables: counters copy to user failed while replacing table [ 1446.991937][T11157] ip_tables: iptables: counters copy to user failed while replacing table [ 1447.055150][ T6049] bond15 (unregistering): (slave geneve5): Releasing active interface [ 1447.055182][ T6049] geneve5 (unregistering): left promiscuous mode [ 1447.287011][ T6049] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 1447.397315][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.411721][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.413672][ T6049] bond0 (unregistering): Released all slaves [ 1447.440761][ T6049] bond1 (unregistering): Released all slaves [ 1447.464879][ T6049] bond2 (unregistering): Released all slaves [ 1447.491272][ T6049] bond3 (unregistering): Released all slaves [ 1447.521431][ T6049] bond4 (unregistering): Released all slaves [ 1447.551747][ T6049] bond5 (unregistering): Released all slaves [ 1447.574455][ T6049] bond6 (unregistering): Released all slaves [ 1447.612130][ T6049] bond7 (unregistering): Released all slaves [ 1447.645012][ T6049] bond8 (unregistering): Released all slaves [ 1447.679156][ T6049] bond9 (unregistering): Released all slaves [ 1447.704377][ T6049] bond10 (unregistering): Released all slaves [ 1447.736050][ T6049] bond11 (unregistering): Released all slaves [ 1447.758678][ T6049] bond12 (unregistering): Released all slaves [ 1447.781299][ T6049] bond13 (unregistering): Released all slaves [ 1447.805261][ T6049] bond14 (unregistering): Released all slaves [ 1447.829217][ T6049] bond15 (unregistering): Released all slaves [ 1447.868942][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1447.980104][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1448.073531][T11136] syzkaller0: entered promiscuous mode [ 1448.073743][T11136] syzkaller0: entered allmulticast mode [ 1448.141958][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1450.391393][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1450.432684][ T6049] tipc: Disabling bearer [ 1450.436341][ T6049] tipc: Left network mode [ 1450.582998][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1451.460896][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8173'. [ 1451.506145][T11186] bond0: entered promiscuous mode [ 1451.506173][T11186] bond_slave_0: entered promiscuous mode [ 1451.506416][T11186] bond_slave_1: entered promiscuous mode [ 1451.506623][T11186] veth0_to_bond: entered promiscuous mode [ 1451.535610][T11186] batadv0: entered promiscuous mode [ 1451.537820][T11186] tipc: Resetting bearer [ 1451.553079][T11186] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1451.660331][T11186] bond0: left promiscuous mode [ 1451.660359][T11186] bond_slave_0: left promiscuous mode [ 1451.662277][T11186] bond_slave_1: left promiscuous mode [ 1451.663262][T11186] veth0_to_bond: left promiscuous mode [ 1451.716466][T11186] batadv0: left promiscuous mode [ 1451.845691][T11192] FAULT_INJECTION: forcing a failure. [ 1451.845691][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.845728][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.1.8174 Not tainted syzkaller #0 PREEMPT(full) [ 1451.845755][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1451.845769][T11192] Call Trace: [ 1451.845779][T11192] [ 1451.845790][T11192] dump_stack_lvl+0xe8/0x150 [ 1451.845834][T11192] should_fail_ex+0x3eb/0x540 [ 1451.845869][T11192] should_failslab+0xa8/0x100 [ 1451.845895][T11192] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1451.845929][T11192] ? xt_find_target+0x20f/0x260 [ 1451.845960][T11192] ? __get_vm_area_node+0x155/0x2f0 [ 1451.845984][T11192] ? __get_vm_area_node+0x155/0x2f0 [ 1451.846016][T11192] __get_vm_area_node+0x155/0x2f0 [ 1451.846051][T11192] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1451.846080][T11192] ? __do_replace+0xb2/0x9a0 [ 1451.846122][T11192] ? xt_find_target+0x20f/0x260 [ 1451.846181][T11192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1451.846218][T11192] ? __do_replace+0xb2/0x9a0 [ 1451.846250][T11192] vzalloc_noprof+0xb2/0xe0 [ 1451.846278][T11192] ? __do_replace+0xb2/0x9a0 [ 1451.846312][T11192] __do_replace+0xb2/0x9a0 [ 1451.846370][T11192] ? __pfx___do_replace+0x10/0x10 [ 1451.846406][T11192] ? _copy_from_user+0x94/0xb0 [ 1451.846442][T11192] do_ip6t_set_ctl+0xb45/0xe30 [ 1451.846485][T11192] ? rcu_is_watching+0x16/0xb0 [ 1451.846521][T11192] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1451.846574][T11192] ? __mutex_unlock_slowpath+0x731/0x900 [ 1451.846614][T11192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1451.846664][T11192] nf_setsockopt+0x26f/0x290 [ 1451.846697][T11192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1451.846736][T11192] do_sock_setsockopt+0x17c/0x1b0 [ 1451.846768][T11192] __x64_sys_setsockopt+0x13d/0x1b0 [ 1451.846801][T11192] do_syscall_64+0x166/0x520 [ 1451.846831][T11192] ? trace_irq_disable+0x3b/0x140 [ 1451.846864][T11192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.846888][T11192] ? clear_bhb_loop+0x70/0xc0 [ 1451.846918][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.846941][T11192] RIP: 0033:0x7faff0da8f19 [ 1451.846964][T11192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.846984][T11192] RSP: 002b:00007faff1c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1451.847009][T11192] RAX: ffffffffffffffda RBX: 00007faff1025fa0 RCX: 00007faff0da8f19 [ 1451.847027][T11192] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1451.847041][T11192] RBP: 00007faff1c4d090 R08: 0000000000000560 R09: 0000000000000000 [ 1451.847057][T11192] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1451.847071][T11192] R13: 00007faff1026038 R14: 00007faff1025fa0 R15: 00007ffce94c20e8 [ 1451.847110][T11192] [ 1451.921408][T11186] tipc: Resetting bearer [ 1452.329485][T11192] syz.1.8174: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1452.329590][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.1.8174 Not tainted syzkaller #0 PREEMPT(full) [ 1452.329616][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1452.329630][T11192] Call Trace: [ 1452.329640][T11192] [ 1452.329652][T11192] dump_stack_lvl+0xe8/0x150 [ 1452.329694][T11192] warn_alloc+0x24d/0x270 [ 1452.329726][T11192] ? __kasan_kmalloc+0x22/0xb0 [ 1452.329764][T11192] ? __pfx_warn_alloc+0x10/0x10 [ 1452.329792][T11192] ? __get_vm_area_node+0x155/0x2f0 [ 1452.329825][T11192] ? __get_vm_area_node+0x2a9/0x2f0 [ 1452.329859][T11192] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1452.329896][T11192] ? xt_find_target+0x20f/0x260 [ 1452.329956][T11192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1452.329991][T11192] ? __do_replace+0xb2/0x9a0 [ 1452.330024][T11192] vzalloc_noprof+0xb2/0xe0 [ 1452.330051][T11192] ? __do_replace+0xb2/0x9a0 [ 1452.330084][T11192] __do_replace+0xb2/0x9a0 [ 1452.330130][T11192] ? __pfx___do_replace+0x10/0x10 [ 1452.330164][T11192] ? _copy_from_user+0x94/0xb0 [ 1452.330200][T11192] do_ip6t_set_ctl+0xb45/0xe30 [ 1452.330241][T11192] ? rcu_is_watching+0x16/0xb0 [ 1452.330277][T11192] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1452.330331][T11192] ? __mutex_unlock_slowpath+0x731/0x900 [ 1452.330371][T11192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1452.330444][T11192] nf_setsockopt+0x26f/0x290 [ 1452.330478][T11192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1452.330517][T11192] do_sock_setsockopt+0x17c/0x1b0 [ 1452.330549][T11192] __x64_sys_setsockopt+0x13d/0x1b0 [ 1452.330582][T11192] do_syscall_64+0x166/0x520 [ 1452.330612][T11192] ? trace_irq_disable+0x3b/0x140 [ 1452.330644][T11192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.330668][T11192] ? clear_bhb_loop+0x70/0xc0 [ 1452.330698][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.330722][T11192] RIP: 0033:0x7faff0da8f19 [ 1452.330744][T11192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.330764][T11192] RSP: 002b:00007faff1c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1452.330788][T11192] RAX: ffffffffffffffda RBX: 00007faff1025fa0 RCX: 00007faff0da8f19 [ 1452.330805][T11192] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1452.330821][T11192] RBP: 00007faff1c4d090 R08: 0000000000000560 R09: 0000000000000000 [ 1452.330836][T11192] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1452.330851][T11192] R13: 00007faff1026038 R14: 00007faff1025fa0 R15: 00007ffce94c20e8 [ 1452.330889][T11192] [ 1452.330910][T11192] Mem-Info: [ 1452.330923][T11192] active_anon:11027 inactive_anon:0 isolated_anon:0 [ 1452.330923][T11192] active_file:774 inactive_file:43368 isolated_file:0 [ 1452.330923][T11192] unevictable:0 dirty:196 writeback:0 [ 1452.330923][T11192] slab_reclaimable:15767 slab_unreclaimable:152370 [ 1452.330923][T11192] mapped:31928 shmem:620 pagetables:3677 [ 1452.330923][T11192] sec_pagetables:0 bounce:0 [ 1452.330923][T11192] kernel_misc_reclaimable:0 [ 1452.330923][T11192] free:1239122 free_pcp:9843 free_cma:0 [ 1452.330983][T11192] Node 0 active_anon:44108kB inactive_anon:0kB active_file:3096kB inactive_file:173276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127712kB dirty:784kB writeback:0kB shmem:2480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19580kB pagetables:14532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1452.367086][T11192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1452.367152][T11192] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.367217][T11192] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1452.367257][T11192] Node 0 DMA32 free:1008212kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44208kB inactive_anon:0kB active_file:3096kB inactive_file:173276kB unevictable:0kB writepending:784kB zspages:0kB present:3129332kB managed:2522824kB mlocked:0kB bounce:0kB free_pcp:39272kB local_pcp:18808kB free_cma:0kB [ 1452.367321][T11192] lowmem_reserve[]: 0 0 1 1 1 [ 1452.367355][T11192] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.367423][T11192] lowmem_reserve[]: 0 0 0 0 0 [ 1452.367476][T11192] Node 1 Normal free:3932916kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.367543][T11192] lowmem_reserve[]: 0 0 0 0 0 [ 1452.367582][T11192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1452.367712][T11192] Node 0 DMA32: 2291*4kB (UME) 1265*8kB (UME) 926*16kB (UME) 1193*32kB (UME) 966*64kB (UM) 673*128kB (UM) 456*256kB (UM) 225*512kB (UME) 77*1024kB (UM) 11*2048kB (UM) 111*4096kB (UM) = 1008212kB [ 1452.367889][T11192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.368335][T11192] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 10*16kB (UM) 10*32kB (UM) 10*64kB (UM) 7*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3932916kB [ 1452.368512][T11192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.368533][T11192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.368551][T11192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.368570][T11192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.368619][T11192] 44758 total pagecache pages [ 1452.368630][T11192] 0 pages in swap cache [ 1452.368639][T11192] Free swap = 124996kB [ 1452.368648][T11192] Total swap = 124996kB [ 1452.368658][T11192] 2097051 pages RAM [ 1452.368666][T11192] 0 pages HighMem/MovableOnly [ 1452.368676][T11192] 434381 pages reserved [ 1452.368684][T11192] 0 pages cma reserved [ 1453.238735][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1453.427372][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1453.427398][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1453.580758][T11201] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1453.903982][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1454.039938][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1454.577176][T11224] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 1454.718330][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.100004][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.225916][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.334842][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.446127][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.552792][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.671068][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1455.945744][T11245] x_tables: duplicate underflow at hook 1 [ 1456.075238][T11249] FAULT_INJECTION: forcing a failure. [ 1456.075238][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.075272][T11249] CPU: 0 UID: 0 PID: 11249 Comm: syz.0.8187 Not tainted syzkaller #0 PREEMPT(full) [ 1456.075297][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1456.075312][T11249] Call Trace: [ 1456.075321][T11249] [ 1456.075331][T11249] dump_stack_lvl+0xe8/0x150 [ 1456.075375][T11249] should_fail_ex+0x3eb/0x540 [ 1456.075409][T11249] ? alloc_vmap_area+0x217/0x1410 [ 1456.075435][T11249] should_failslab+0xa8/0x100 [ 1456.075460][T11249] ? alloc_vmap_area+0x217/0x1410 [ 1456.075482][T11249] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1456.075515][T11249] ? alloc_vmap_area+0x217/0x1410 [ 1456.075547][T11249] alloc_vmap_area+0x217/0x1410 [ 1456.075588][T11249] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1456.075610][T11249] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1456.075650][T11249] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1456.075680][T11249] ? __get_vm_area_node+0x155/0x2f0 [ 1456.075732][T11249] __get_vm_area_node+0x200/0x2f0 [ 1456.075766][T11249] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1456.075794][T11249] ? __do_replace+0xb2/0x9a0 [ 1456.075835][T11249] ? xt_find_target+0x20f/0x260 [ 1456.075894][T11249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1456.075929][T11249] ? __do_replace+0xb2/0x9a0 [ 1456.075960][T11249] vzalloc_noprof+0xb2/0xe0 [ 1456.075987][T11249] ? __do_replace+0xb2/0x9a0 [ 1456.076020][T11249] __do_replace+0xb2/0x9a0 [ 1456.076064][T11249] ? __pfx___do_replace+0x10/0x10 [ 1456.076099][T11249] ? _copy_from_user+0x94/0xb0 [ 1456.076134][T11249] do_ip6t_set_ctl+0xb45/0xe30 [ 1456.076175][T11249] ? rcu_is_watching+0x16/0xb0 [ 1456.076211][T11249] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1456.076261][T11249] ? __mutex_unlock_slowpath+0x731/0x900 [ 1456.076304][T11249] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1456.076351][T11249] nf_setsockopt+0x26f/0x290 [ 1456.076383][T11249] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1456.076421][T11249] do_sock_setsockopt+0x17c/0x1b0 [ 1456.076451][T11249] __x64_sys_setsockopt+0x13d/0x1b0 [ 1456.076482][T11249] do_syscall_64+0x166/0x520 [ 1456.076510][T11249] ? trace_irq_disable+0x3b/0x140 [ 1456.076541][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.076565][T11249] ? clear_bhb_loop+0x70/0xc0 [ 1456.076592][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.076615][T11249] RIP: 0033:0x7fca4b5a8f19 [ 1456.076644][T11249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.076663][T11249] RSP: 002b:00007fca4c4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1456.076687][T11249] RAX: ffffffffffffffda RBX: 00007fca4b825fa0 RCX: 00007fca4b5a8f19 [ 1456.076704][T11249] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1456.076718][T11249] RBP: 00007fca4c4c0090 R08: 0000000000000560 R09: 0000000000000000 [ 1456.076733][T11249] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1456.076747][T11249] R13: 00007fca4b826038 R14: 00007fca4b825fa0 R15: 00007ffe902e3478 [ 1456.076783][T11249] [ 1456.931999][ T6049] veth1_macvtap: left promiscuous mode [ 1456.932043][ T6049] veth0_macvtap: left promiscuous mode [ 1456.932349][ T6049] veth1_vlan: left promiscuous mode [ 1456.932426][ T6049] veth0_vlan: left promiscuous mode [ 1457.803533][T11271] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1457.803565][T11271] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1457.877774][ T6049] team0 (unregistering): Port device batadv0 removed [ 1458.047651][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1458.610932][T11283] IPVS: set_ctl: invalid protocol: 3776 0.32.0.0:40977 [ 1458.865112][T11287] FAULT_INJECTION: forcing a failure. [ 1458.865112][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.865148][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.1.8193 Not tainted syzkaller #0 PREEMPT(full) [ 1458.865174][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1458.865188][T11287] Call Trace: [ 1458.865197][T11287] [ 1458.865207][T11287] dump_stack_lvl+0xe8/0x150 [ 1458.865249][T11287] should_fail_ex+0x3eb/0x540 [ 1458.865282][T11287] ? __alloc_skb+0x1db/0x7a0 [ 1458.865303][T11287] should_failslab+0xa8/0x100 [ 1458.865327][T11287] ? __alloc_skb+0x1db/0x7a0 [ 1458.865347][T11287] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1458.865375][T11287] ? __alloc_skb+0x18d/0x7a0 [ 1458.865394][T11287] ? __alloc_skb+0x1db/0x7a0 [ 1458.865423][T11287] __alloc_skb+0x1db/0x7a0 [ 1458.865450][T11287] netlink_sendmsg+0x5cd/0xb20 [ 1458.865481][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.865508][T11287] ? aa_sock_msg_perm+0x144/0x210 [ 1458.865536][T11287] ? apparmor_socket_sendmsg+0x98/0x360 [ 1458.865571][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.865593][T11287] sock_sendmsg_nosec+0x14e/0x190 [ 1458.865628][T11287] ____sys_sendmsg+0x54e/0x850 [ 1458.865661][T11287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1458.865698][T11287] ? import_iovec+0x73/0xa0 [ 1458.865731][T11287] ___sys_sendmsg+0x2a5/0x360 [ 1458.865756][T11287] ? __lock_acquire+0x747/0x2de0 [ 1458.865798][T11287] ? __pfx____sys_sendmsg+0x10/0x10 [ 1458.865866][T11287] ? __fget_files+0x3a2/0x420 [ 1458.865895][T11287] ? __fget_files+0x2a/0x420 [ 1458.865934][T11287] __x64_sys_sendmsg+0x1b1/0x290 [ 1458.865964][T11287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1458.866016][T11287] do_syscall_64+0x166/0x520 [ 1458.866045][T11287] ? trace_irq_disable+0x3b/0x140 [ 1458.866076][T11287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.866099][T11287] ? clear_bhb_loop+0x70/0xc0 [ 1458.866128][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.866151][T11287] RIP: 0033:0x7faff0da8f19 [ 1458.866172][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.866192][T11287] RSP: 002b:00007faff1c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1458.866216][T11287] RAX: ffffffffffffffda RBX: 00007faff1025fa0 RCX: 00007faff0da8f19 [ 1458.866233][T11287] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1458.866248][T11287] RBP: 00007faff1c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.866261][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.866276][T11287] R13: 00007faff1026038 R14: 00007faff1025fa0 R15: 00007ffce94c20e8 [ 1458.866314][T11287] [ 1459.515949][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 1459.545071][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 1460.369395][T11292] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1460.376858][T11292] batman_adv: batadv0: Adding interface: gretap2 [ 1460.376879][T11292] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.376916][T11292] batman_adv: batadv0: Interface activated: gretap2 [ 1460.392299][T27232] net_ratelimit: 8 callbacks suppressed [ 1460.392323][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1460.498774][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1460.610168][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1460.682509][T11310] netlink: zone id is out of range [ 1460.682534][T11310] netlink: zone id is out of range [ 1460.682545][T11310] netlink: zone id is out of range [ 1460.682554][T11310] netlink: zone id is out of range [ 1460.682564][T11310] netlink: zone id is out of range [ 1460.682573][T11310] netlink: zone id is out of range [ 1460.682583][T11310] netlink: zone id is out of range [ 1460.731950][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8199'. [ 1461.797833][ T6049] IPVS: stop unused estimator thread 0... [ 1462.108298][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8202'. [ 1462.765782][T11369] tipc: Enabled bearer , priority 10 [ 1463.245324][T11387] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 1463.502387][T11397] hsr0: entered allmulticast mode [ 1463.502412][T11397] hsr_slave_0: entered allmulticast mode [ 1463.502430][T11397] hsr_slave_1: entered allmulticast mode [ 1463.564378][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1463.570696][T11397] hsr_slave_0: left promiscuous mode [ 1463.589806][T11397] hsr_slave_1: left promiscuous mode [ 1463.596771][T11397] hsr0 (unregistering): left allmulticast mode [ 1463.878773][ T8324] tipc: Node number set to 2887980047 [ 1464.604597][ T5642] Bluetooth: hci4: unexpected event 0x0e length: 274 > 255 [ 1464.604641][ T5642] Bluetooth: hci4: unexpected cc 0x1004 length: 271 > 11 [ 1464.604681][ T5642] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1464.604915][ T5642] Bluetooth: hci4: unexpected event 0x0e length: 274 > 255 [ 1464.604938][ T5642] Bluetooth: hci4: unexpected cc 0x1004 length: 271 > 11 [ 1464.604960][ T5642] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1464.711344][T11443] batman_adv: batadv0: Adding interface: syzkaller0 [ 1464.711383][T11443] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.711441][T11443] batman_adv: batadv0: Interface activated: syzkaller0 [ 1464.830122][T11435] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1464.963475][T11435] batman_adv: batadv0: Removing interface: syzkaller0 [ 1465.137606][ T5642] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1465.458962][ T8332] net_ratelimit: 737 callbacks suppressed [ 1465.458986][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1465.568600][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1465.680176][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1465.757654][T11499] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1465.924082][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.030537][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.140389][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.212632][T11517] netlink: 300 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1466.250686][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.362922][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.475825][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1466.495974][T11524] syzkaller0: left promiscuous mode [ 1466.495999][T11524] syzkaller0: left allmulticast mode [ 1466.577547][T11531] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 1466.601509][T11528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1466.876352][T11541] syzkaller0: entered promiscuous mode [ 1466.876379][T11541] syzkaller0: entered allmulticast mode [ 1466.911892][T11541] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8251'. [ 1467.625098][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1468.137203][T11596] bridge0: Device is already in use. [ 1468.373538][T11605] tipc: Enabling of bearer rejected, failed to enable media [ 1468.387689][T11606] veth1_macvtap: left allmulticast mode [ 1468.581629][T11613] syzkaller0: entered promiscuous mode [ 1468.581655][T11613] syzkaller0: entered allmulticast mode [ 1469.752586][T11664] netlink: 'syz.6.8279': attribute type 12 has an invalid length. [ 1469.787155][T11666] Bluetooth: hci0: unsupported parameter 5135 [ 1469.787180][T11666] Bluetooth: hci0: unsupported parameter 8192 [ 1469.787207][T11666] Bluetooth: hci0: unsupported parameter 5135 [ 1469.787221][T11666] Bluetooth: hci0: unsupported parameter 8192 [ 1469.874515][T11667] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8278'. [ 1470.600520][T29722] net_ratelimit: 18 callbacks suppressed [ 1470.600544][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1470.740147][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1470.851013][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1470.901299][T11671] netlink: 'syz.2.8281': attribute type 1 has an invalid length. [ 1471.045911][T11671] bond8: entered promiscuous mode [ 1471.047927][T11671] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1471.125523][T11680] macvtap1: entered allmulticast mode [ 1471.356382][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8286'. [ 1471.594331][T11689] macvtap2: entered allmulticast mode [ 1471.724651][T11671] bond8: (slave bridge11): making interface the new active one [ 1471.724680][T11671] bridge11: entered promiscuous mode [ 1471.742715][T11671] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 1471.882729][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8288'. [ 1471.993620][T11726] ip6tnl0: entered promiscuous mode [ 1472.060862][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.169800][T11729] tipc: Enabled bearer , priority 0 [ 1472.179739][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.317083][T11730] syzkaller0: entered promiscuous mode [ 1472.317111][T11730] syzkaller0: entered allmulticast mode [ 1472.340938][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.345481][T11727] tipc: Resetting bearer [ 1472.445326][T11727] tipc: Disabling bearer [ 1472.470986][ T5296] veth0_macvtap: left promiscuous mode [ 1472.645104][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.748721][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.898844][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1472.981130][T11765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1473.083668][T11777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1473.106457][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8296'. [ 1473.187489][T11772] vlan0: entered promiscuous mode [ 1473.252704][T11764] syzkaller1: entered promiscuous mode [ 1473.252758][T11764] syzkaller1: entered allmulticast mode [ 1473.452108][T11784] bond4: entered allmulticast mode [ 1473.452553][T11784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1473.555635][T11784] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1473.615611][T11790] Cannot find add_set index 2 as target [ 1473.639582][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.650749][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.687203][T11784] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1473.698915][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1473.698934][ T30] audit: type=1107 audit(1794407944.500:76): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1473.702379][T11784] bond0 (unregistering): Released all slaves [ 1473.882590][T11796] tipc: Resetting bearer [ 1474.159590][T11796] veth1_macvtap: left allmulticast mode [ 1474.392405][T11796] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1474.420355][T11796] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 1474.440570][T11796] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 1474.584890][T11804] netlink: 'syz.6.8301': attribute type 4 has an invalid length. [ 1474.615907][ T8332] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 37373 - 0 [ 1474.615946][ T8332] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1474.624653][ T8336] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 37373 - 0 [ 1474.624763][ T8336] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1474.624834][ T8336] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 37373 - 0 [ 1474.624861][ T8336] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1474.624897][ T8336] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 37373 - 0 [ 1474.624924][ T8336] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1475.212589][T11872] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 1475.223636][T11872] macvlan0: entered promiscuous mode [ 1475.407894][T11876] netlink: 4337 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1475.424212][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1475.426381][T11864] tipc: Enabling of bearer rejected, no device for the media [ 1475.701474][T11891] net_ratelimit: 12 callbacks suppressed [ 1475.701496][T11891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1475.757138][T11891] sctp: [Deprecated]: syz.1.8315 (pid 11891) Use of int in max_burst socket option. [ 1475.757138][T11891] Use struct sctp_assoc_value instead [ 1475.802186][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1475.909867][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.018140][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.141313][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.248290][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.369745][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.508279][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.622529][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1476.742421][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1477.172643][T11959] hsr0: entered promiscuous mode [ 1477.180749][T11959] hsr0: entered allmulticast mode [ 1477.180811][T11959] hsr_slave_0: entered allmulticast mode [ 1477.180874][T11959] hsr_slave_1: entered allmulticast mode [ 1477.215661][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8330'. [ 1477.235222][T11959] hsr_slave_0: left promiscuous mode [ 1477.252437][T11959] hsr_slave_1: left promiscuous mode [ 1477.281022][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8330'. [ 1477.286504][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8328'. [ 1477.420121][T11959] hsr0 (unregistering): left promiscuous mode [ 1477.420174][T11959] hsr0 (unregistering): left allmulticast mode [ 1477.627482][ T8332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.627508][ T8332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.723892][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8330'. [ 1478.026853][T11990] nbd: must specify at least one socket [ 1478.027252][T11988] nbd: must specify at least one socket [ 1479.352458][T12041] netlink: 'syz.0.8342': attribute type 83 has an invalid length. [ 1479.396732][T12044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8343'. [ 1479.734996][T12060] netlink: 'syz.0.8347': attribute type 2 has an invalid length. [ 1479.776247][T12060] !: entered promiscuous mode [ 1479.930853][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8347'. [ 1480.033541][T12068] bond8: option tlb_dynamic_lb: invalid value (255) [ 1480.050774][T12068] bond8 (unregistering): Released all slaves [ 1480.092278][T12072] !: left promiscuous mode [ 1480.305984][T12088] netlink: 'syz.5.8352': attribute type 5 has an invalid length. [ 1480.675155][T12105] netlink: 'syz.6.8355': attribute type 1 has an invalid length. [ 1480.675182][T12105] netlink: 'syz.6.8355': attribute type 2 has an invalid length. [ 1480.710210][ T6049] net_ratelimit: 28 callbacks suppressed [ 1480.710237][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1480.819725][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1480.942624][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.024149][T12117] netlink: 4337 bytes leftover after parsing attributes in process `syz.6.8358'. [ 1481.024198][T12117] openvswitch: netlink: Actions may not be safe on all matching packets [ 1481.048236][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.055798][T12114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1481.268551][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.336818][T12131] netlink: 'syz.5.8361': attribute type 1 has an invalid length. [ 1481.336845][T12131] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8361'. [ 1481.379925][ T8336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.488758][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.610315][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.332844][T12181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8367'. [ 1482.364860][T12183] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8367'. [ 1482.637942][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1482.760340][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1482.824807][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1482.825594][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1482.826226][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1482.827443][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1483.365411][T12223] netlink: 'syz.6.8376': attribute type 1 has an invalid length. [ 1483.365450][T12223] netlink: 'syz.6.8376': attribute type 8 has an invalid length. [ 1483.645681][T12236] sctp: [Deprecated]: syz.6.8378 (pid 12236) Use of int in max_burst socket option. [ 1483.645681][T12236] Use struct sctp_assoc_value instead [ 1483.691149][T12242] sctp: [Deprecated]: syz.6.8378 (pid 12242) Use of int in max_burst socket option. [ 1483.691149][T12242] Use struct sctp_assoc_value instead [ 1483.851662][T12233] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1483.854390][T12233] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1484.324137][T12259] pim6reg1: entered promiscuous mode [ 1484.324162][T12259] pim6reg1: entered allmulticast mode [ 1484.588357][T12263] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1484.723294][T12273] netlink: 'syz.5.8385': attribute type 2 has an invalid length. [ 1484.723318][T12273] netlink: 'syz.5.8385': attribute type 1 has an invalid length. [ 1485.158778][T12290] tipc: Enabling of bearer rejected, failed to enable media [ 1485.490007][T12309] xt_hashlimit: size too large, truncated to 1048576 [ 1485.938879][T29721] net_ratelimit: 34 callbacks suppressed [ 1485.938903][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.063483][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.228533][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.338144][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.430730][T12355] __nla_validate_parse: 65 callbacks suppressed [ 1486.430754][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1486.458730][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.501257][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1486.630433][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.717848][T12361] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1486.764972][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.794199][T12253] udevd[12253]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 1486.930116][T29722] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1487.033907][T12380] block nbd11: server does not support multiple connections per device. [ 1487.035109][T12380] block nbd11: shutting down sockets [ 1487.048579][ T6049] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1487.116153][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8411'. [ 1487.245731][T12382] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1487.256939][T12382] batman_adv: batadv0: Removing interface: ip6gretap3 [ 1487.271292][T12382] batman_adv: batadv0: Removing interface: ip6gretap4 [ 1487.862968][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1487.884977][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8422'. [ 1488.381450][T12411] netlink: 'syz.2.8419': attribute type 21 has an invalid length. [ 1488.381477][T12411] netlink: 'syz.2.8419': attribute type 20 has an invalid length. [ 1488.742505][T12437] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1488.963047][T12452] tipc: Enabling of bearer rejected, failed to enable media [ 1489.575036][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8434'. [ 1489.673220][T12485] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1489.700143][T12482] bond8: entered promiscuous mode [ 1489.703985][T12482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1489.718396][T12485] netlink: 'syz.2.8435': attribute type 2 has an invalid length. [ 1489.876822][T12498] netlink: 'syz.2.8435': attribute type 83 has an invalid length. [ 1490.484951][T12514] netlink: 'syz.5.8442': attribute type 1 has an invalid length. [ 1490.564124][T12514] veth7: entered allmulticast mode [ 1490.577466][T12489] netlink: 'syz.1.8438': attribute type 21 has an invalid length. [ 1490.577492][T12489] netlink: 'syz.1.8438': attribute type 20 has an invalid length. [ 1490.612583][T12514] bond9: (slave veth7): Enslaving as an active interface with a down link [ 1490.667689][T12527] bond4: (slave veth0_to_bond): Releasing active interface [ 1490.749938][T12527] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1491.070730][T12514] syzkaller0: entered promiscuous mode [ 1491.070760][T12514] syzkaller0: entered allmulticast mode [ 1491.099107][ T3310] net_ratelimit: 30 callbacks suppressed [ 1491.099131][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1491.233453][T12519] sctp: [Deprecated]: syz.6.8441 (pid 12519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1491.233453][T12519] Use struct sctp_sack_info instead [ 1491.983160][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8449'. [ 1492.970784][T12589] netlink: 'syz.2.8455': attribute type 21 has an invalid length. [ 1492.970811][T12589] netlink: 'syz.2.8455': attribute type 20 has an invalid length. [ 1495.411776][T12551] tipc: Enabling of bearer rejected, failed to enable media [ 1495.430943][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1495.539923][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1495.570237][T12602] netlink: 'syz.6.8459': attribute type 1 has an invalid length. [ 1495.649091][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1495.763133][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1495.873754][T27232] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1495.982829][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.090421][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.198897][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.308921][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.421707][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.531026][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.639323][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.748884][T29719] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.861501][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.949381][ T30] audit: type=1107 audit(1794407967.750:77): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1496.979274][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1497.022589][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8463'. [ 1497.150542][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1497.255731][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1497.269428][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1497.616288][T12665] netlink: 'syz.5.8466': attribute type 21 has an invalid length. [ 1497.616316][T12665] netlink: 'syz.5.8466': attribute type 20 has an invalid length. [ 1497.925674][ T30] audit: type=1804 audit(1794407968.720:78): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8471" name="/newroot/313/cgroup.controllers" dev="tmpfs" ino=1620 res=1 errno=0 [ 1497.971461][ T30] audit: type=1800 audit(1794407968.770:79): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8471" name="cgroup.controllers" dev="tmpfs" ino=1620 res=0 errno=-22 [ 1498.006465][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8471'. [ 1498.124540][T12691] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1498.214137][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8472'. [ 1498.601243][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8481'. [ 1498.662971][T12713] netlink: 'syz.5.8478': attribute type 2 has an invalid length. [ 1498.804606][T12723] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.804646][T12723] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.895100][T12731] xt_CONNSECMARK: invalid mode: 0 [ 1498.978620][T12723] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.978671][T12723] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.135289][T12723] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.135329][T12723] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.336797][T12723] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.336837][T12723] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.621237][T12753] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1499.728527][ T3310] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.728566][ T3310] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.728649][ T3310] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.728677][ T3310] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.728713][ T3310] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.728741][ T3310] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.764868][T12755] netlink: 'syz.5.8488': attribute type 21 has an invalid length. [ 1499.764941][T12755] netlink: 'syz.5.8488': attribute type 20 has an invalid length. [ 1499.880857][T12729] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.880897][T12729] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.020223][T12729] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.020263][T12729] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.138257][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1500.152780][T12729] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.152902][T12729] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.186871][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8491'. [ 1500.248884][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8491'. [ 1500.393736][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8492'. [ 1500.469323][T12781] IPv6: NLM_F_CREATE should be specified when creating new route [ 1500.469425][T12781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1500.469437][T12781] IPv6: NLM_F_CREATE should be set when creating new route [ 1500.469481][T12781] IPv6: NLM_F_CREATE should be set when creating new route [ 1500.469508][T12781] IPv6: NLM_F_CREATE should be set when creating new route [ 1500.475255][T12781] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8492'. [ 1501.093824][T12811] netlink: 'syz.1.8495': attribute type 10 has an invalid length. [ 1501.108151][T12811] team0 (unregistering): left allmulticast mode [ 1501.108174][T12811] team_slave_0: left allmulticast mode [ 1501.108192][T12811] team_slave_1: left allmulticast mode [ 1501.108210][T12811] team0 (unregistering): left promiscuous mode [ 1501.108223][T12811] team_slave_0: left promiscuous mode [ 1501.108444][T12811] team_slave_1: left promiscuous mode [ 1501.110855][T12811] bridge0: port 3(team0) entered disabled state [ 1501.135375][T12811] team0 (unregistering): Port device team_slave_0 removed [ 1501.155295][T12811] team0 (unregistering): Port device team_slave_1 removed [ 1501.193284][T12811] team0 (unregistering): Port device bridge6 removed [ 1501.220862][T29721] net_ratelimit: 26 callbacks suppressed [ 1501.220893][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.328330][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.441290][T27230] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.548327][T27230] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.658685][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.769651][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.880694][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1501.999133][T27230] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1502.108350][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1502.219273][T27230] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1502.371924][T12761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1502.371970][T12761] nci: nci_start_poll: failed to set local general bytes [ 1502.403475][T12749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1502.688279][ T3310] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.688319][ T3310] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.798437][T27231] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.798475][T27231] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.813552][T29721] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.813658][T29721] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.817083][T27231] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.817117][T27231] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.076012][T12865] netlink: 'syz.5.8501': attribute type 1 has an invalid length. [ 1503.076035][T12865] netlink: 'syz.5.8501': attribute type 2 has an invalid length. [ 1503.076217][T12865] netlink: 'syz.5.8501': attribute type 1 has an invalid length. [ 1503.076234][T12865] netlink: 'syz.5.8501': attribute type 2 has an invalid length. [ 1503.433549][T12876] netlink: 'syz.6.8503': attribute type 4 has an invalid length. [ 1503.433579][T12876] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8503'. [ 1503.463397][T12876] .`: renamed from bond0 (while UP) [ 1503.770580][T12888] batman_adv: batadv0: Adding interface: syzkaller0 [ 1503.770606][T12888] batman_adv: batadv0: Interface activated: syzkaller0 [ 1503.840817][T12850] netlink: 'syz.1.8499': attribute type 21 has an invalid length. [ 1503.840843][T12850] netlink: 'syz.1.8499': attribute type 20 has an invalid length. [ 1504.641051][T12925] netlink: 'syz.0.8509': attribute type 49 has an invalid length. [ 1504.694505][T12925] bond_slave_0: entered promiscuous mode [ 1504.694534][T12925] bond_slave_0: entered allmulticast mode [ 1505.316467][T12955] syzkaller0: entered promiscuous mode [ 1505.316493][T12955] syzkaller0: entered allmulticast mode [ 1505.652481][T12851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1506.311382][T29715] net_ratelimit: 35 callbacks suppressed [ 1506.311406][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.425813][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.528654][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.639266][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.749009][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.783409][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.860931][T12427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.861872][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.971767][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1507.102789][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1507.245916][T12972] syzkaller0: entered promiscuous mode [ 1507.245942][T12972] syzkaller0: entered allmulticast mode [ 1507.301799][T12972] erspan0: left promiscuous mode [ 1507.408344][T12972] veth1_macvtap: left allmulticast mode [ 1507.408380][T12972] macsec0: left allmulticast mode [ 1507.415498][T12972] mac80211_hwsim hwsim48 wlan1: left promiscuous mode [ 1507.415694][T12972] ip6gre1: left promiscuous mode [ 1507.452276][T12972] ip6gretap1: left allmulticast mode [ 1507.545737][T12972] ip6tnl3: left allmulticast mode [ 1507.569980][T12972] bridge6: left promiscuous mode [ 1507.570009][T12972] bridge6: left allmulticast mode [ 1507.602858][T13025] xt_hashlimit: size too large, truncated to 1048576 [ 1507.606567][T12972] syzkaller0: left promiscuous mode [ 1507.606595][T12972] syzkaller0: left allmulticast mode [ 1507.825349][T27231] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.825713][T12428] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.825795][T12428] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.825875][T12428] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.580966][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'. [ 1509.012373][T13073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8535'. [ 1509.980861][T13128] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8547'. [ 1510.014538][T13129] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8548'. [ 1510.042147][T13129] syzkaller1: entered promiscuous mode [ 1510.042175][T13129] syzkaller1: entered allmulticast mode [ 1510.466414][T13139] can: request_module (can-proto-4) failed. [ 1510.591507][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8553'. [ 1510.644163][T13150] bond13: entered promiscuous mode [ 1510.645134][T13150] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1510.987159][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8554'. [ 1511.035860][T13168] syzkaller1: entered promiscuous mode [ 1511.035887][T13168] syzkaller1: entered allmulticast mode [ 1511.342690][T13013] net_ratelimit: 33 callbacks suppressed [ 1511.342717][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1511.808418][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1511.841026][T13200] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1511.919919][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1511.979859][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.984950][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1511.984996][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1512.028371][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1512.060728][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.109178][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8562'. [ 1512.140840][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1512.270037][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1512.381869][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1512.507621][T13230] netlink: 'syz.1.8567': attribute type 29 has an invalid length. [ 1512.548424][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1513.132216][T13257] syzkaller0: left promiscuous mode [ 1513.132244][T13257] syzkaller0: left allmulticast mode [ 1513.228344][T13262] xt_esp: unknown flags DD [ 1513.260210][T13270] xt_esp: unknown flags DD [ 1513.681422][T13290] __nla_validate_parse: 3 callbacks suppressed [ 1513.681448][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1513.774210][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8578'. [ 1513.996107][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8580'. [ 1514.694421][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8586'. [ 1515.028887][T13353] bond9: (slave veth0_to_bond): Releasing active interface [ 1515.207128][T13353] bond0: (slave bond_slave_0): Releasing backup interface [ 1515.447084][T13353] bond0: (slave bond_slave_1): Releasing backup interface [ 1515.464734][T13353] team0: Port device team_slave_1 removed [ 1515.465132][T13354] team0: No ports can be present during mode change [ 1515.571474][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8592'. [ 1515.913366][T13382] netlink: 'syz.5.8594': attribute type 10 has an invalid length. [ 1516.391983][T13405] bridge8: entered promiscuous mode [ 1516.419150][T27231] net_ratelimit: 39 callbacks suppressed [ 1516.419174][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.528805][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.670614][T13390] netlink: 'syz.1.8597': attribute type 33 has an invalid length. [ 1516.670642][T13390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8597'. [ 1516.678981][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.781336][T13425] netlink: 'syz.1.8597': attribute type 33 has an invalid length. [ 1516.781362][T13425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8597'. [ 1516.829282][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.941492][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.048345][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.163411][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8605'. [ 1517.163984][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8605'. [ 1517.165230][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.184647][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.222246][T13435] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1517.253169][T13438] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1517.274307][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.330729][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.594298][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8609'. [ 1517.809809][T13462] sctp: [Deprecated]: syz.1.8614 (pid 13462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1517.809809][T13462] Use struct sctp_sack_info instead [ 1517.909091][T13470] netlink: 'syz.0.8615': attribute type 1 has an invalid length. [ 1517.909116][T13470] netlink: 'syz.0.8615': attribute type 12 has an invalid length. [ 1518.160981][T13486] block nbd0: reconnected socket [ 1518.216731][T13486] netlink: 'syz.0.8618': attribute type 1 has an invalid length. [ 1518.307915][ T5642] block nbd0: Receive control failed (result -32) [ 1519.273768][T10507] bond13 (unregistering): (slave gretap0): Releasing active interface [ 1519.672500][ T8332] smbdirect: ib_dev[syz1] removed [ 1519.687426][T10507] bond0 (unregistering): Released all slaves [ 1519.715889][T10507] bond1 (unregistering): Released all slaves [ 1519.760769][T10507] bond2 (unregistering): Released all slaves [ 1519.782937][T10507] bond3 (unregistering): Released all slaves [ 1519.805779][T10507] bond4 (unregistering): Released all slaves [ 1519.834014][T10507] bond5 (unregistering): Released all slaves [ 1519.857014][T10507] bond6 (unregistering): Released all slaves [ 1519.877289][T10507] bond7 (unregistering): Released all slaves [ 1519.905625][T10507] bond8 (unregistering): Released all slaves [ 1519.923637][T10507] bond9 (unregistering): Released all slaves [ 1519.941856][T10507] bond10 (unregistering): Released all slaves [ 1519.973371][T10507] bond11 (unregistering): Released all slaves [ 1519.995594][T10507] bond12 (unregistering): Released all slaves [ 1520.013744][T10507] bond13 (unregistering): Released all slaves [ 1520.033412][T10507] bond14 (unregistering): Released all slaves [ 1520.059805][T10507] bond15 (unregistering): Released all slaves [ 1520.083719][T10507] bond16 (unregistering): Released all slaves [ 1520.327521][T13545] __nla_validate_parse: 12 callbacks suppressed [ 1520.327547][T13545] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8628'. [ 1520.401536][T13546] netlink: 'syz.1.8629': attribute type 1 has an invalid length. [ 1520.899570][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8633'. [ 1520.899594][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8633'. [ 1521.392181][T13536] bond9 (unregistering): Released all slaves [ 1521.676055][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8639'. [ 1521.746495][T13595] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8641'. [ 1521.760363][T13591] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1521.760397][T13591] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1521.760618][T13591] bond9: entered allmulticast mode [ 1521.814726][T13598] SET target dimension over the limit! [ 1521.888793][ T8332] net_ratelimit: 20 callbacks suppressed [ 1521.888818][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.000987][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.110151][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.221526][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.329325][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.442533][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.559128][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.670632][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.781484][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1522.890003][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1523.058421][T13642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1523.082140][T13642] netlink: 'syz.1.8649': attribute type 1 has an invalid length. [ 1523.255581][T10507] hsr_slave_1: left promiscuous mode [ 1523.293340][T10507] veth1_macvtap: left promiscuous mode [ 1523.293385][T10507] veth0_macvtap: left promiscuous mode [ 1523.457105][T13659] netlink: 'syz.5.8653': attribute type 1 has an invalid length. [ 1523.587803][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8655'. [ 1523.587827][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8655'. [ 1524.265812][T13656] tipc: Resetting bearer [ 1524.831048][T13702] netlink: 'syz.6.8664': attribute type 2 has an invalid length. [ 1524.831075][T13702] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8664'. [ 1524.902160][T10507] IPVS: stop unused estimator thread 0... [ 1525.800741][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.801032][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.801346][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.801585][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.801819][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.802061][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.828399][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.829192][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.836059][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1525.836701][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1526.503186][T13771] netlink: 'syz.6.8677': attribute type 1 has an invalid length. [ 1526.503211][T13771] netlink: 'syz.6.8677': attribute type 6 has an invalid length. [ 1526.503227][T13771] netlink: 'syz.6.8677': attribute type 3 has an invalid length. [ 1526.817678][T13770] ÿÿÿÿÿÿ: entered promiscuous mode [ 1526.817706][T13770] ÿÿÿÿÿÿ: entered allmulticast mode [ 1526.863047][T13770] tunl0: entered promiscuous mode [ 1526.863084][T13770] tunl0: entered allmulticast mode [ 1526.900325][T13770] gre0: entered promiscuous mode [ 1526.900350][T13770] gre0: entered allmulticast mode [ 1526.936096][T13770] gretap0: entered promiscuous mode [ 1526.936121][T13770] gretap0: entered allmulticast mode [ 1526.963430][T13770] erspan0: entered promiscuous mode [ 1526.963457][T13770] erspan0: entered allmulticast mode [ 1526.999794][T13770] ip_vti0: entered promiscuous mode [ 1526.999819][T13770] ip_vti0: entered allmulticast mode [ 1527.027887][T13770] ip6_vti0: entered allmulticast mode [ 1527.077881][T13770] sit0: entered promiscuous mode [ 1527.077910][T13770] sit0: entered allmulticast mode [ 1527.125311][T13770] ip6tnl0: entered allmulticast mode [ 1527.142054][T13770] ip6gre0: entered promiscuous mode [ 1527.142081][T13770] ip6gre0: entered allmulticast mode [ 1527.158795][T13770] syz_tun: entered promiscuous mode [ 1527.164242][T13770] syz_tun: entered allmulticast mode [ 1527.183144][T13770] ip6gretap0: entered promiscuous mode [ 1527.183169][T13770] ip6gretap0: entered allmulticast mode [ 1527.204350][T13770] vcan0: entered promiscuous mode [ 1527.204375][T13770] vcan0: entered allmulticast mode [ 1527.224113][T13770] bond0: entered promiscuous mode [ 1527.224182][T13770] bond0: entered allmulticast mode [ 1527.225164][T13770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.247458][T13770] team0: entered promiscuous mode [ 1527.247669][T13770] team0: entered allmulticast mode [ 1527.279550][T13770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.311061][T13770] nlmon0: entered promiscuous mode [ 1527.311087][T13770] nlmon0: entered allmulticast mode [ 1527.342636][T13770] veth0: entered promiscuous mode [ 1527.342663][T13770] veth0: entered allmulticast mode [ 1527.366767][T13770] veth1: entered promiscuous mode [ 1527.366794][T13770] veth1: entered allmulticast mode [ 1527.430892][T13770] wg0: entered promiscuous mode [ 1527.430927][T13770] wg0: entered allmulticast mode [ 1527.444276][T13770] wg1: entered promiscuous mode [ 1527.444299][T13770] wg1: entered allmulticast mode [ 1527.469086][T13770] wg2: entered promiscuous mode [ 1527.469113][T13770] wg2: entered allmulticast mode [ 1527.470647][T13770] veth0_to_bridge: entered promiscuous mode [ 1527.470670][T13770] veth0_to_bridge: entered allmulticast mode [ 1527.482966][T13770] bridge_slave_0: entered promiscuous mode [ 1527.483032][T13770] bridge_slave_0: entered allmulticast mode [ 1527.514777][T13770] veth1_to_bridge: entered promiscuous mode [ 1527.515841][T13770] veth1_to_bridge: entered allmulticast mode [ 1527.532377][T13770] bridge_slave_1: entered promiscuous mode [ 1527.532405][T13770] bridge_slave_1: entered allmulticast mode [ 1527.534876][T13770] veth0_to_bond: entered promiscuous mode [ 1527.534911][T13770] veth0_to_bond: entered allmulticast mode [ 1527.550904][T13770] bond_slave_0: entered promiscuous mode [ 1527.550985][T13770] bond_slave_0: entered allmulticast mode [ 1527.577153][T13770] veth1_to_bond: entered promiscuous mode [ 1527.577179][T13770] veth1_to_bond: entered allmulticast mode [ 1527.595410][T13770] bond_slave_1: entered promiscuous mode [ 1527.595435][T13770] bond_slave_1: entered allmulticast mode [ 1527.611143][T13770] veth1_to_team: entered promiscuous mode [ 1527.611170][T13770] veth1_to_team: entered allmulticast mode [ 1527.626553][T13770] team_slave_1: entered promiscuous mode [ 1527.626580][T13770] team_slave_1: entered allmulticast mode [ 1527.646234][T13770] veth0_to_batadv: entered promiscuous mode [ 1527.646262][T13770] veth0_to_batadv: entered allmulticast mode [ 1527.661574][T13770] batadv_slave_0: entered promiscuous mode [ 1527.661600][T13770] batadv_slave_0: entered allmulticast mode [ 1527.662870][T13770] xfrm0: entered promiscuous mode [ 1527.662889][T13770] xfrm0: entered allmulticast mode [ 1527.664695][T13770] veth0_to_hsr: entered promiscuous mode [ 1527.664715][T13770] veth0_to_hsr: entered allmulticast mode [ 1527.666024][T13770] hsr_slave_0: entered allmulticast mode [ 1527.666791][T13770] veth1_to_hsr: entered promiscuous mode [ 1527.666811][T13770] veth1_to_hsr: entered allmulticast mode [ 1527.674796][T13770] hsr_slave_1: entered allmulticast mode [ 1527.728797][T13770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1527.728824][T13770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.728893][T13770] hsr0: entered promiscuous mode [ 1527.728911][T13770] hsr0: entered allmulticast mode [ 1527.730601][T13770] veth1_virt_wifi: entered promiscuous mode [ 1527.730622][T13770] veth1_virt_wifi: entered allmulticast mode [ 1527.731922][T13770] veth0_virt_wifi: entered promiscuous mode [ 1527.731943][T13770] veth0_virt_wifi: entered allmulticast mode [ 1527.733157][T13770] virt_wifi0: entered promiscuous mode [ 1527.733176][T13770] virt_wifi0: entered allmulticast mode [ 1527.733193][T13770] net_ratelimit: 86 callbacks suppressed [ 1527.733207][T13770] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1527.779796][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1527.786249][T13795] bridge_slave_1: left allmulticast mode [ 1527.786278][T13795] bridge_slave_1: left promiscuous mode [ 1527.786565][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.896749][T13795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.920935][T13795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.962049][T13795] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1527.976995][T13795] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1527.993369][T13795] batman_adv: batadv0: Removing interface: ip6gretap3 [ 1528.108786][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.238924][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.349916][T13822] ip_tables: iptables: counters copy to user failed while replacing table [ 1528.350467][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.386698][T13823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1528.471962][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.522642][T13827] netlink: 'syz.1.8688': attribute type 1 has an invalid length. [ 1528.569803][T13827] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1528.619943][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.729716][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.909817][T13819] netlink: 'syz.5.8687': attribute type 21 has an invalid length. [ 1528.909844][T13819] netlink: 'syz.5.8687': attribute type 20 has an invalid length. [ 1529.834307][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 10 > 9 [ 1529.834345][ T5642] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1530.064208][T13894] netlink: 'syz.6.8703': attribute type 1 has an invalid length. [ 1530.151183][T13894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.196166][T13903] netlink: 'syz.1.8704': attribute type 1 has an invalid length. [ 1530.504001][T13917] netlink: 'syz.5.8706': attribute type 1 has an invalid length. [ 1530.647224][T13917] veth9: entered allmulticast mode [ 1530.676927][T13917] bond10: (slave veth9): Enslaving as an active interface with a down link [ 1530.677200][T13920] veth0_to_bond: left promiscuous mode [ 1530.677219][T13920] veth0_to_bond: left allmulticast mode [ 1530.751597][T13920] bond10: (slave veth0_to_bond): making interface the new active one [ 1530.753822][T13920] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1531.084082][T13916] netlink: 'syz.6.8707': attribute type 21 has an invalid length. [ 1531.084109][T13916] netlink: 'syz.6.8707': attribute type 20 has an invalid length. [ 1531.533400][T13954] __nla_validate_parse: 71 callbacks suppressed [ 1531.533687][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8716'. [ 1531.741729][T13954] xt_hashlimit: size too large, truncated to 1048576 [ 1532.839443][T10507] net_ratelimit: 31 callbacks suppressed [ 1532.839465][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1532.863736][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1532.887581][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1533.008800][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.102160][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.120584][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.228685][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.429562][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.548826][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.659915][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.768878][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1533.879591][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1534.034144][T13997] netlink: 'syz.5.8724': attribute type 21 has an invalid length. [ 1534.034170][T13997] netlink: 'syz.5.8724': attribute type 20 has an invalid length. [ 1534.352013][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8734'. [ 1534.352172][T14056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.412911][T14056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.849690][T14072] netlink: 'syz.6.8737': attribute type 8 has an invalid length. [ 1537.920609][T10507] net_ratelimit: 33 callbacks suppressed [ 1537.920636][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.032485][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.145448][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.249072][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.358841][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.468514][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.578542][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.688583][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.800690][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.910400][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.010307][T29715] net_ratelimit: 36 callbacks suppressed [ 1543.010333][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.119216][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.228901][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.339822][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.448875][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.559450][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.673280][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.779693][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.889336][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1543.998745][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.623599][T14474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1547.715978][T14478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1547.935685][T14480] bond0: entered promiscuous mode [ 1547.953410][T14480] batadv0: entered promiscuous mode [ 1547.968868][T14480] tipc: Resetting bearer [ 1547.976893][T14480] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1548.006628][T14480] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1548.070932][T14477] rxe_eth0 speed is unknown, defaulting to 1000 [ 1548.088700][T13013] net_ratelimit: 35 callbacks suppressed [ 1548.088728][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.202661][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.311554][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.422227][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.529727][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.635047][T14521] tipc: Started in network mode [ 1548.635085][T14521] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1548.635138][T14521] tipc: Enabling of bearer rejected, failed to enable media [ 1548.650332][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.751647][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.859453][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1549.060163][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1549.172476][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1549.451030][ T30] audit: type=1804 audit(1794408020.250:80): pid=14548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8755" name="/newroot/531/cgroup.controllers" dev="tmpfs" ino=2713 res=1 errno=0 [ 1549.451205][ T30] audit: type=1800 audit(1794408020.250:81): pid=14548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8755" name="cgroup.controllers" dev="tmpfs" ino=2713 res=0 errno=-22 [ 1549.787436][T14561] tipc: Enabling of bearer rejected, failed to enable media [ 1550.929144][T14598] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8764'. [ 1551.224491][T14612] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8767'. [ 1552.570975][T14659] syzkaller1: entered promiscuous mode [ 1552.571237][T14659] syzkaller1: entered allmulticast mode [ 1552.571689][T14661] netlink: 'syz.5.8780': attribute type 30 has an invalid length. [ 1552.880515][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1552.880541][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1553.035265][T14688] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8783'. [ 1553.035298][T14688] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8783'. [ 1553.138848][T13013] net_ratelimit: 33 callbacks suppressed [ 1553.138884][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.212080][T14696] ip_tables: iptables: counters copy to user failed while replacing table [ 1553.249405][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.408427][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.454349][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8792'. [ 1553.454377][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8792'. [ 1553.518690][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.631073][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.743180][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.809235][T14719] netlink: 'syz.2.8796': attribute type 10 has an invalid length. [ 1553.847066][T14719] team0: Port device dummy0 added [ 1553.849439][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1553.923065][ T7284] bridge0: port 3(vlan2) entered blocking state [ 1553.923212][ T7284] bridge0: port 3(vlan2) entered forwarding state [ 1553.962050][T29721] bridge0: port 3(vlan2) entered disabled state [ 1553.980925][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1554.090867][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1554.190984][T14725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1554.466054][T14731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1555.525322][T14745] netlink: 'syz.6.8804': attribute type 1 has an invalid length. [ 1555.909309][T14678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1556.214547][T14757] netlink: 'syz.0.8806': attribute type 1 has an invalid length. [ 1556.291139][T14766] netlink: 'syz.2.8809': attribute type 4 has an invalid length. [ 1556.337193][T14766] netlink: 'syz.2.8809': attribute type 4 has an invalid length. [ 1556.390501][T14766] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1556.565133][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1556.755459][T14787] netlink: 'syz.1.8812': attribute type 7 has an invalid length. [ 1556.882527][T14780] netlink: 'syz.1.8812': attribute type 1 has an invalid length. [ 1557.293141][T14803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1557.934988][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8823'. [ 1558.218406][T29721] net_ratelimit: 36 callbacks suppressed [ 1558.218440][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.256654][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1558.279142][T14860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1558.328697][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.439233][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.548945][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.637603][T14876] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1558.698890][T13013] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.832915][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.941759][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1559.068768][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1559.617102][T14906] bridge0: Device is already in use. [ 1560.603145][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8847'. [ 1561.063349][T14961] batman_adv: batadv0: Adding interface: syz_tun [ 1561.063369][T14961] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.063406][T14961] batman_adv: batadv0: Interface activated: syz_tun [ 1561.660885][T15003] syzkaller1: entered promiscuous mode [ 1561.660911][T15003] syzkaller1: entered allmulticast mode [ 1561.722414][T15003] syzkaller1: left promiscuous mode [ 1561.722441][T15003] syzkaller1: left allmulticast mode [ 1561.765853][T15003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8861'. [ 1562.021873][T15012] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1562.021917][T15012] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1562.021961][T15012] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1562.337116][T15032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1563.246814][T15070] netlink: 400 bytes leftover after parsing attributes in process `syz.6.8875'. [ 1563.270688][T29715] net_ratelimit: 36 callbacks suppressed [ 1563.270739][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1563.379354][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1563.644580][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1563.718748][T15083] Bluetooth: hci0: unsupported parameter 5161 [ 1563.718775][T15083] Bluetooth: hci0: unsupported parameter 8192 [ 1563.718789][T15083] Bluetooth: hci0: unsupported parameter 5161 [ 1563.718802][T15083] Bluetooth: hci0: unsupported parameter 8192 [ 1563.750649][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1563.860201][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8879'. [ 1563.942820][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1564.026641][T15097] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 1564.052916][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1564.138981][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.158431][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1564.251698][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8885'. [ 1564.305598][T15116] nbd: must specify a size in bytes for the device [ 1564.350625][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8885'. [ 1564.361780][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1564.752457][T15127] netlink: 'syz.2.8887': attribute type 8 has an invalid length. [ 1564.754528][T15131] netlink: 19 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1564.780694][T15131] netlink: 19 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1564.933687][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8886'. [ 1565.985438][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1566.171886][T15176] bond10: entered allmulticast mode [ 1566.204744][T15176] bond10 (unregistering): Released all slaves [ 1566.423102][T15182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8897'. [ 1566.441003][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8898'. [ 1566.493289][T15184] No such timeout policy "syz0" [ 1567.253602][T15211] netlink: 'syz.1.8903': attribute type 3 has an invalid length. [ 1567.275335][T15211] netlink: 'syz.1.8903': attribute type 1 has an invalid length. [ 1567.275358][T15211] netlink: 'syz.1.8903': attribute type 268 has an invalid length. [ 1568.241413][T15272] netlink: 'syz.5.8916': attribute type 1 has an invalid length. [ 1568.299995][T27231] net_ratelimit: 41 callbacks suppressed [ 1568.300018][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.414972][T15274] bond6: entered allmulticast mode [ 1568.500517][T15276] bond7 (unregistering): Released all slaves [ 1568.539753][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.575987][T15274] bond6 (unregistering): Released all slaves [ 1568.594656][T15283] __nla_validate_parse: 1 callbacks suppressed [ 1568.594678][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8920'. [ 1568.670841][T15290] netlink: 'syz.5.8918': attribute type 1 has an invalid length. [ 1568.670867][T15290] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8918'. [ 1568.739912][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1568.848659][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1568.856811][T15292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8922'. [ 1568.958788][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1569.079126][T29721] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1569.161952][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8925'. [ 1569.333969][T15316] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1569.358612][T13013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.377506][T15316] bond6 (unregistering): Released all slaves [ 1569.580908][T29715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.630707][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1569.742152][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1570.117255][T15344] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1570.365298][T15354] syzkaller1: entered promiscuous mode [ 1570.365327][T15354] syzkaller1: entered allmulticast mode [ 1570.465375][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1570.567459][T15369] netlink: 'syz.5.8932': attribute type 7 has an invalid length. [ 1570.724896][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8934'. [ 1571.015307][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8935'. [ 1572.690207][T15400] ebt_limit: overflow, try lower: 4294901760/65535 [ 1573.241150][T15419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8945'. [ 1573.376003][T15423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8946'. [ 1573.460023][T27231] net_ratelimit: 19 callbacks suppressed [ 1573.460048][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1573.499894][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.554837][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8947'. [ 1573.616423][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8947'. [ 1573.628955][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1573.675456][T15433] IPVS: Unknown mcast interface: lo [ 1573.739799][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1573.859903][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1573.887670][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1573.911268][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.935987][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.936239][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.990248][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1574.100501][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1574.125498][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8952'. [ 1574.209364][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1574.312616][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1574.371535][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8956'. [ 1574.404619][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1574.430506][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1574.656648][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8958'. [ 1575.264113][T15506] xt_hashlimit: max too large, truncated to 1048576 [ 1575.276667][T15506] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8966'. [ 1575.634954][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1575.725230][T15527] IPv6: NLM_F_CREATE should be specified when creating new route [ 1575.725337][T15527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8970'. [ 1576.401904][T15565] No such timeout policy "syz1" [ 1576.907705][T15576] syzkaller1: entered promiscuous mode [ 1576.907730][T15576] syzkaller1: entered allmulticast mode [ 1577.045356][T15554] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1577.333001][T15598] netlink: 'syz.5.8984': attribute type 4 has an invalid length. [ 1578.508957][T27231] net_ratelimit: 42 callbacks suppressed [ 1578.508983][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1578.622128][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1578.625403][T15635] __nla_validate_parse: 7 callbacks suppressed [ 1578.625426][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8989'. [ 1578.685694][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8993'. [ 1578.699496][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8993'. [ 1578.705069][T29715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.169677][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.262145][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.281417][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.388806][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.504898][ T8332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.609251][T29715] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.731478][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1579.733444][T15686] xt_CONNSECMARK: invalid mode: 254 [ 1579.921227][T15692] tipc: Resetting bearer [ 1579.946847][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1579.966136][T15692] tipc: Resetting bearer [ 1580.023248][T15692] geneve2: left promiscuous mode [ 1580.027264][T15692] bridge8: left promiscuous mode [ 1580.307644][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1580.392740][T15709] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1580.482395][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.542330][T15709] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1580.668180][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 1580.737707][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 1580.884865][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 1580.887132][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.887382][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.887605][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.887860][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.909789][T15711] netlink: 'syz.2.9007': attribute type 1 has an invalid length. [ 1580.993740][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 1581.082035][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 1581.130555][T15709] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 1581.237329][T15724] bond10: option lp_interval: invalid value (0) [ 1581.237355][T15724] bond10: option lp_interval: allowed values 1 - 2147483647 [ 1581.255457][T15724] bond10 (unregistering): Released all slaves [ 1581.530929][T15739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9013'. [ 1581.922896][T15763] bond0: (slave syz_tun): Releasing backup interface [ 1581.941944][T15763] syz_tun: left promiscuous mode [ 1581.945147][T15763] bridge_slave_0: left allmulticast mode [ 1581.945174][T15763] bridge_slave_0: left promiscuous mode [ 1581.948004][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.033505][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9017'. [ 1582.914515][T15763] bridge_slave_1: left allmulticast mode [ 1582.914543][T15763] bridge_slave_1: left promiscuous mode [ 1582.914763][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.944163][T15763] bond0: (slave bond_slave_0): Releasing backup interface [ 1582.944791][T15763] bond_slave_0: left promiscuous mode [ 1582.965230][T15763] bond0: (slave bond_slave_1): Releasing backup interface [ 1582.966519][T15763] bond_slave_1: left promiscuous mode [ 1582.983077][T15763] bond0: (slave netdevsim0): Releasing backup interface [ 1582.983997][T15763] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1583.002020][T15763] bond1: (slave wlan1): Releasing active interface [ 1583.007856][T15763] bond1: (slave veth3): Releasing active interface [ 1583.035848][T15763] bond3: (slave bridge3): Releasing backup interface [ 1583.055574][T15763] bond6: (slave veth5): Releasing active interface [ 1583.072662][T15763] bond7: (slave gretap2): Releasing active interface [ 1583.076565][T15763] bond8: (slave veth9): Releasing active interface [ 1583.096792][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.099732][ T7284] s`z1: Port: 1 Link DOWN [ 1583.124281][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.167691][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.176648][T15767] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1583.176688][T15767] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1583.176732][T15767] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1583.351697][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.401864][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.420659][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.443646][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.469129][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.474457][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.495276][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.523530][T15767] wlan1 speed is unknown, defaulting to 1000 [ 1583.619521][ T3310] net_ratelimit: 23 callbacks suppressed [ 1583.619546][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1583.642855][T15829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9026'. [ 1583.730732][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1583.788952][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1583.902606][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.923385][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1583.923416][T12428] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.925086][T12428] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1583.925168][T12428] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.925212][T12428] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.925254][T12428] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.034173][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1584.139080][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1584.253510][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1584.327912][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1584.438801][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1584.460679][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.552239][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1584.772837][T27231] tipc: Subscription rejected, illegal request [ 1585.306792][T15891] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9036'. [ 1585.626830][T15900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9039'. [ 1585.851445][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9040'. [ 1585.851518][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9040'. [ 1587.102052][T15851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1587.672374][T15927] geneve4: entered promiscuous mode [ 1587.688956][T10507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1587.689313][T10507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1587.689354][T10507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1587.689392][T10507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1587.812918][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1588.273642][T10833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1588.294718][T10833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1588.307359][T10833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1588.319950][T10833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1588.322234][T10833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1588.352974][ T5642] [ 1588.355383][ T5642] ====================================================== [ 1588.362471][ T5642] WARNING: possible circular locking dependency detected [ 1588.369618][ T5642] syzkaller #0 Not tainted [ 1588.374098][ T5642] ------------------------------------------------------ [ 1588.381147][ T5642] kworker/u9:5/5642 is trying to acquire lock: [ 1588.387328][ T5642] ffff88801d28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x539/0x6b0 [ 1588.397919][ T5642] [ 1588.397919][ T5642] but task is already holding lock: [ 1588.405316][ T5642] ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 1588.414773][ T5642] [ 1588.414773][ T5642] which lock already depends on the new lock. [ 1588.414773][ T5642] [ 1588.425306][ T5642] [ 1588.425306][ T5642] the existing dependency chain (in reverse order) is: [ 1588.434346][ T5642] [ 1588.434346][ T5642] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1588.442391][ T5642] down_write+0x91/0x200 [ 1588.447219][ T5642] kernfs_add_one+0x41/0x510 [ 1588.452358][ T5642] kernfs_create_dir_ns+0x18c/0x220 [ 1588.458116][ T5642] internal_create_group+0x440/0x1180 [ 1588.464036][ T5642] cpuhp_invoke_callback+0x434/0x810 [ 1588.469887][ T5642] cpuhp_issue_call+0x3f0/0x750 [ 1588.475301][ T5642] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1588.481927][ T5642] __cpuhp_setup_state+0x3f/0x60 [ 1588.487421][ T5642] do_one_initcall+0x250/0x870 [ 1588.492726][ T5642] do_initcall_level+0x10a/0x1a0 [ 1588.498213][ T5642] do_initcalls+0x59/0xa0 [ 1588.503129][ T5642] kernel_init_freeable+0x29d/0x3e0 [ 1588.508886][ T5642] kernel_init+0x22/0x1d0 [ 1588.513763][ T5642] ret_from_fork+0x514/0xb70 [ 1588.518904][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1588.524236][ T5642] [ 1588.524236][ T5642] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1588.532090][ T5642] [ 1588.532090][ T5642] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1588.539856][ T5642] cpus_read_lock+0x3d/0x160 [ 1588.544994][ T5642] static_key_slow_inc+0x12/0x30 [ 1588.550474][ T5642] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1588.556844][ T5642] nbd_genl_foreach_sock+0x265/0x450 [ 1588.562689][ T5642] nbd_genl_reconfigure+0xbbb/0x1040 [ 1588.568531][ T5642] genl_family_rcv_msg_doit+0x233/0x340 [ 1588.574652][ T5642] genl_rcv_msg+0x614/0x7a0 [ 1588.579707][ T5642] netlink_rcv_skb+0x226/0x4a0 [ 1588.585033][ T5642] genl_rcv+0x28/0x40 [ 1588.589576][ T5642] netlink_unicast+0x8ef/0xa80 [ 1588.594912][ T5642] netlink_sendmsg+0x7f0/0xb20 [ 1588.600217][ T5642] sock_sendmsg_nosec+0x14e/0x190 [ 1588.605820][ T5642] ____sys_sendmsg+0x54e/0x850 [ 1588.611144][ T5642] ___sys_sendmsg+0x2a5/0x360 [ 1588.616375][ T5642] __x64_sys_sendmsg+0x1b1/0x290 [ 1588.621861][ T5642] do_syscall_64+0x166/0x520 [ 1588.627006][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.633459][ T5642] [ 1588.633459][ T5642] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1588.641310][ T5642] __mutex_lock+0x197/0x15a0 [ 1588.646455][ T5642] nbd_queue_rq+0x373/0xff0 [ 1588.651502][ T5642] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1588.657611][ T5642] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1588.664526][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1588.671060][ T5642] blk_mq_run_work_fn+0x167/0x2f0 [ 1588.676724][ T5642] process_scheduled_works+0xc3d/0x1630 [ 1588.682825][ T5642] worker_thread+0xa47/0xfb0 [ 1588.688008][ T5642] kthread+0x38b/0x480 [ 1588.692716][ T5642] ret_from_fork+0x514/0xb70 [ 1588.697856][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1588.703166][ T5642] [ 1588.703166][ T5642] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1588.710434][ T5642] __mutex_lock+0x197/0x15a0 [ 1588.715578][ T5642] nbd_queue_rq+0xc1/0xff0 [ 1588.720549][ T5642] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1588.726738][ T5642] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1588.733606][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1588.740148][ T5642] blk_mq_run_work_fn+0x167/0x2f0 [ 1588.745744][ T5642] process_scheduled_works+0xc3d/0x1630 [ 1588.751859][ T5642] worker_thread+0xa47/0xfb0 [ 1588.757026][ T5642] kthread+0x38b/0x480 [ 1588.761651][ T5642] ret_from_fork+0x514/0xb70 [ 1588.766801][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1588.772117][ T5642] [ 1588.772117][ T5642] -> #4 (set->srcu){.+.+}-{0:0}: [ 1588.779273][ T5642] __synchronize_srcu+0xca/0x2f0 [ 1588.784761][ T5642] elevator_switch+0x1e8/0x7b0 [ 1588.790080][ T5642] elevator_change+0x2fa/0x480 [ 1588.795402][ T5642] elevator_set_default+0x375/0x440 [ 1588.801148][ T5642] blk_register_queue+0x404/0x4f0 [ 1588.806715][ T5642] __add_disk+0x6b8/0xdb0 [ 1588.811589][ T5642] add_disk_fwnode+0x100/0x3a0 [ 1588.816896][ T5642] nbd_dev_add+0x733/0xb60 [ 1588.821855][ T5642] nbd_init+0x168/0x1f0 [ 1588.826570][ T5642] do_one_initcall+0x250/0x870 [ 1588.831878][ T5642] do_initcall_level+0x10a/0x1a0 [ 1588.837363][ T5642] do_initcalls+0x59/0xa0 [ 1588.842237][ T5642] kernel_init_freeable+0x29d/0x3e0 [ 1588.847972][ T5642] kernel_init+0x22/0x1d0 [ 1588.852849][ T5642] ret_from_fork+0x514/0xb70 [ 1588.857983][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1588.863331][ T5642] [ 1588.863331][ T5642] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1588.871188][ T5642] __mutex_lock+0x197/0x15a0 [ 1588.876334][ T5642] elevator_change+0x1af/0x480 [ 1588.881645][ T5642] elevator_set_none+0xb5/0x140 [ 1588.887043][ T5642] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1588.893397][ T5642] nbd_start_device+0x189/0xb30 [ 1588.898793][ T5642] nbd_genl_connect+0x167d/0x1cd0 [ 1588.904357][ T5642] genl_family_rcv_msg_doit+0x233/0x340 [ 1588.910443][ T5642] genl_rcv_msg+0x614/0x7a0 [ 1588.915504][ T5642] netlink_rcv_skb+0x226/0x4a0 [ 1588.920837][ T5642] genl_rcv+0x28/0x40 [ 1588.925368][ T5642] netlink_unicast+0x8ef/0xa80 [ 1588.930686][ T5642] netlink_sendmsg+0x7f0/0xb20 [ 1588.935992][ T5642] sock_sendmsg_nosec+0x14e/0x190 [ 1588.941580][ T5642] ____sys_sendmsg+0x54e/0x850 [ 1588.946902][ T5642] ___sys_sendmsg+0x2a5/0x360 [ 1588.952128][ T5642] __x64_sys_sendmsg+0x1b1/0x290 [ 1588.957629][ T5642] do_syscall_64+0x166/0x520 [ 1588.962768][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.969211][ T5642] [ 1588.969211][ T5642] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1588.977847][ T5642] blk_alloc_queue+0x544/0x690 [ 1588.983167][ T5642] __blk_mq_alloc_disk+0x194/0x390 [ 1588.988843][ T5642] nbd_dev_add+0x494/0xb60 [ 1588.993814][ T5642] nbd_init+0x168/0x1f0 [ 1588.998527][ T5642] do_one_initcall+0x250/0x870 [ 1589.003832][ T5642] do_initcall_level+0x10a/0x1a0 [ 1589.009335][ T5642] do_initcalls+0x59/0xa0 [ 1589.014217][ T5642] kernel_init_freeable+0x29d/0x3e0 [ 1589.019966][ T5642] kernel_init+0x22/0x1d0 [ 1589.024843][ T5642] ret_from_fork+0x514/0xb70 [ 1589.029976][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1589.035295][ T5642] [ 1589.035295][ T5642] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1589.042539][ T5642] fs_reclaim_acquire+0x71/0x100 [ 1589.048028][ T5642] kmem_cache_alloc_noprof+0x5f/0x600 [ 1589.054047][ T5642] __kernfs_iattrs+0xdd/0x380 [ 1589.059299][ T5642] kernfs_iop_setattr+0xe6/0x3f0 [ 1589.064778][ T5642] notify_change+0xbba/0xea0 [ 1589.069934][ T5642] do_truncate+0x1c2/0x250 [ 1589.074935][ T5642] path_openat+0x18a6/0x20f0 [ 1589.080167][ T5642] do_file_open+0x23e/0x4a0 [ 1589.085238][ T5642] do_sys_openat2+0x115/0x200 [ 1589.090469][ T5642] __x64_sys_openat+0x138/0x170 [ 1589.095896][ T5642] do_syscall_64+0x166/0x520 [ 1589.101042][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.107488][ T5642] [ 1589.107488][ T5642] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1589.116051][ T5642] __lock_acquire+0x164c/0x2de0 [ 1589.121491][ T5642] lock_acquire+0x115/0x350 [ 1589.126552][ T5642] down_write+0x91/0x200 [ 1589.131350][ T5642] kernfs_link_sibling+0x539/0x6b0 [ 1589.137014][ T5642] kernfs_add_one+0x30a/0x510 [ 1589.142237][ T5642] kernfs_create_dir_ns+0x18c/0x220 [ 1589.147980][ T5642] sysfs_create_dir_ns+0x12f/0x2a0 [ 1589.153657][ T5642] kobject_add_internal+0x622/0xcd0 [ 1589.159400][ T5642] kobject_add+0x163/0x240 [ 1589.164381][ T5642] device_add+0x3fa/0xb80 [ 1589.169343][ T5642] hci_conn_add_sysfs+0xd5/0x210 [ 1589.174899][ T5642] hci_conn_complete_evt+0x8a8/0x1350 [ 1589.180896][ T5642] hci_event_packet+0x6cd/0xf10 [ 1589.186297][ T5642] hci_rx_work+0x2b4/0x1110 [ 1589.191411][ T5642] process_scheduled_works+0xc3d/0x1630 [ 1589.197551][ T5642] worker_thread+0xa47/0xfb0 [ 1589.202753][ T5642] kthread+0x38b/0x480 [ 1589.207390][ T5642] ret_from_fork+0x514/0xb70 [ 1589.212584][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1589.217900][ T5642] [ 1589.217900][ T5642] other info that might help us debug this: [ 1589.217900][ T5642] [ 1589.228155][ T5642] Chain exists of: [ 1589.228155][ T5642] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1589.228155][ T5642] [ 1589.242627][ T5642] Possible unsafe locking scenario: [ 1589.242627][ T5642] [ 1589.250366][ T5642] CPU0 CPU1 [ 1589.255761][ T5642] ---- ---- [ 1589.261146][ T5642] lock(&root->kernfs_rwsem); [ 1589.265932][ T5642] lock(cpuhp_state_mutex); [ 1589.273069][ T5642] lock(&root->kernfs_rwsem); [ 1589.280389][ T5642] lock(&root->kernfs_iattr_rwsem); [ 1589.285707][ T5642] [ 1589.285707][ T5642] *** DEADLOCK *** [ 1589.285707][ T5642] [ 1589.293879][ T5642] locks held by kworker/u9:5/5642: 4, last CPU#1: [ 1589.300320][ T5642] #0: ffff8880540cb948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1589.311346][ T5642] #1: ffffc90003e5fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1589.323390][ T5642] #2: ffff88805c27c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1589.333268][ T5642] #3: ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 1589.343320][ T5642] [ 1589.343320][ T5642] stack backtrace: [ 1589.349333][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 1589.358843][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1589.368926][ T5642] Workqueue: hci5 hci_rx_work [ 1589.373652][ T5642] Call Trace: [ 1589.376982][ T5642] [ 1589.379940][ T5642] dump_stack_lvl+0xe8/0x150 [ 1589.384575][ T5642] print_circular_bug+0x2e2/0x300 [ 1589.389649][ T5642] check_noncircular+0x12f/0x150 [ 1589.394631][ T5642] __lock_acquire+0x164c/0x2de0 [ 1589.399518][ T5642] ? __lock_acquire+0x747/0x2de0 [ 1589.404535][ T5642] lock_acquire+0x115/0x350 [ 1589.409098][ T5642] ? kernfs_link_sibling+0x539/0x6b0 [ 1589.414435][ T5642] down_write+0x91/0x200 [ 1589.418719][ T5642] ? kernfs_link_sibling+0x539/0x6b0 [ 1589.424034][ T5642] ? __pfx_down_write+0x10/0x10 [ 1589.428914][ T5642] ? kernfs_root+0x1c/0x230 [ 1589.433442][ T5642] ? kernfs_root+0x1c/0x230 [ 1589.437966][ T5642] ? kernfs_root+0x1c/0x230 [ 1589.442496][ T5642] ? kernfs_root+0x1ea/0x230 [ 1589.447106][ T5642] kernfs_link_sibling+0x539/0x6b0 [ 1589.452243][ T5642] kernfs_add_one+0x30a/0x510 [ 1589.456965][ T5642] kernfs_create_dir_ns+0x18c/0x220 [ 1589.462188][ T5642] sysfs_create_dir_ns+0x12f/0x2a0 [ 1589.467336][ T5642] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1589.473025][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 1589.478170][ T5642] kobject_add_internal+0x622/0xcd0 [ 1589.483425][ T5642] kobject_add+0x163/0x240 [ 1589.487867][ T5642] ? __pfx_kobject_add+0x10/0x10 [ 1589.492825][ T5642] ? get_device_parent+0x366/0x3a0 [ 1589.497985][ T5642] device_add+0x3fa/0xb80 [ 1589.502352][ T5642] hci_conn_add_sysfs+0xd5/0x210 [ 1589.507324][ T5642] hci_conn_complete_evt+0x8a8/0x1350 [ 1589.512727][ T5642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1589.518738][ T5642] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1589.524665][ T5642] ? skb_pull_data+0xf0/0x200 [ 1589.529379][ T5642] hci_event_packet+0x6cd/0xf10 [ 1589.534277][ T5642] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1589.540113][ T5642] ? __pfx_hci_event_packet+0x10/0x10 [ 1589.545613][ T5642] ? kcov_remote_start+0x523/0x7e0 [ 1589.550758][ T5642] ? hci_send_to_monitor+0xdf/0x600 [ 1589.555987][ T5642] hci_rx_work+0x2b4/0x1110 [ 1589.560530][ T5642] ? process_scheduled_works+0x97a/0x1630 [ 1589.566305][ T5642] process_scheduled_works+0xc3d/0x1630 [ 1589.571920][ T5642] ? __pfx_process_scheduled_works+0x10/0x10 [ 1589.577939][ T5642] ? assign_work+0x3cf/0x5d0 [ 1589.582597][ T5642] worker_thread+0xa47/0xfb0 [ 1589.587237][ T5642] kthread+0x38b/0x480 [ 1589.591330][ T5642] ? __pfx_worker_thread+0x10/0x10 [ 1589.596470][ T5642] ? __pfx_kthread+0x10/0x10 [ 1589.601081][ T5642] ret_from_fork+0x514/0xb70 [ 1589.605701][ T5642] ? __pfx_ret_from_fork+0x10/0x10 [ 1589.610868][ T5642] ? __switch_to+0xc78/0x1410 [ 1589.615592][ T5642] ? __pfx_kthread+0x10/0x10 [ 1589.620210][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1589.625030][ T5642] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1589.629465][T10507] net_ratelimit: 40 callbacks suppressed [ 1589.629485][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1589.661368][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.662981][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.740385][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1589.852341][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1589.959090][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1590.065456][T32148] batman_adv: batadv0: Interface deactivated: syz_tun [ 1590.135678][T32148] batman_adv: batadv0: Removing interface: syz_tun [ 1590.198515][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1590.311201][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1590.496135][ T342] syz_tun (unregistering): left allmulticast mode [ 1590.555694][ T3310] smbdirect: ib_dev[s`z1] removed [ 1590.705305][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.719678][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.668135][T10507] net_ratelimit: 41 callbacks suppressed [ 1594.668161][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1594.778715][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1594.863069][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.864270][T27231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.888845][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1595.000731][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1595.118825][T10507] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1595.229040][ T3310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1595.338801][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1595.448603][T27231] bond4: (slave ip6gretap1): failed to get link speed/duplex