last executing test programs: 3m38.954216889s ago: executing program 3 (id=2080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x29, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0xe, 0x0, 0xfffffffb, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r4, r0, 0x2a, 0x2, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) 3m37.961998513s ago: executing program 3 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000004e1d00000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4000040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x128, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000404) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x28}}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x44, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x228}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x2f8, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0xf, 0x1}, {0x4}, {0x1b, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x19, 0x1}, {0x60, 0x1}, {0x5}, {}, {0x1b}, {0x1b, 0x1}, {0x24}, {0x12, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x60}, {0x9, 0x1}, {0x1}, {0x0, 0x1}]}, @NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0xc, 0x4, 0x1, 0xb, 0x30, 0x3, 0x3, 0x48, 0x6c, 0x1, 0x0, 0x36, 0x0, 0x2, 0x24, 0x60, 0x5, 0x1b, 0x18, 0x36, 0x1b, 0xa0, 0x1, 0x42, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xccc, 0x8, 0x401, 0x5, 0xfff9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x8}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x3}, {0x4}, {0x1, 0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x0, 0x4}, {0x4}, {0x4, 0x1a}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x1, 0x4, 0x1, 0x3, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0x9, 0x3, 0x4, 0xc, 0x2, 0x9c5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {}, {0x7, 0x5}, {0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0xa}, {0x3, 0x6}, {0x2, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x1}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x963a, 0x8, 0x10, 0xd, 0x400, 0xff, 0xf9e4]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x6}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x6}, {0x7}, {0x0, 0x7}, {0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0xb, 0x48, 0x24, 0x16, 0x6c, 0xc, 0xb, 0x36, 0x5, 0x3, 0x9, 0x3, 0x1, 0x12, 0x36, 0x4, 0x1, 0x60, 0x4, 0x16, 0x60, 0x3, 0x9, 0x24, 0x9, 0x9, 0x6, 0x4, 0x2, 0x30, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x7, 0x5, 0x3, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0x6}, {0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x19}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x3}, {0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x2, 0x5}, {0x3, 0x3}, {0x2, 0x6}, {0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x6c, 0x30, 0x6f, 0xb, 0x9, 0x2, 0x6c, 0xc, 0x24, 0x1b, 0x5, 0x48, 0x6c, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x4}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x2f, 0x1, 0x6, 0x893, 0x0, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x48}, {0x30, 0x1}, {0x48}, {0xc, 0x1}, {0x5}, {0x1, 0x1}, {0x4}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @random="2dc73cc7317a", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000000000000100"], 0x40}, 0xc004) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xffffffffffffff3d}}}}}, 0x0) 3m37.311259593s ago: executing program 3 (id=2098): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x2cd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8881) 3m36.758359856s ago: executing program 3 (id=2104): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3m36.684565863s ago: executing program 3 (id=2106): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@rand_addr=' \x01\x00', r2}, 0x14) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@allocspi={0x144, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-512-generic\x00'}, 0x0, 0xc0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbf9, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4040140) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x9, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) 3m35.606020348s ago: executing program 3 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={@empty, @loopback, 0x0}, &(0x7f0000000980)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002400)={0x24, 0x12, 0x1, 0x0, 0x25dfdbff, "", [@generic="9bcd9f1930baec8bfba1cef234f4ff1c8c"]}, 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000053be083850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000080)=0x7) r6 = epoll_create(0x7) r7 = epoll_create(0x7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10) r9 = epoll_create1(0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x272ca3f11426ef36) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="2e3c6744c89595be0db891f0a2061b00d9b08dab4d072c6f1b", 0x19}], 0x1, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x11f8}, 0x4805) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000100)) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x60000000}) sendmsg$sock(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="c4cdc55754eca4c06c309adda5cc10f234d581b70f1018737c2a65191f191503a67f74e617ee55a4df4277", 0x2b}, {&(0x7f00000007c0)="451e866b5c4169d6c93760e0978cc4089646886a3fe28dceffb65d7552674ec3c67012d373d1a74d7bd9bf3d7d62152abaf1e4c35da0810aff2c3c674bfd8a60c44f307f641ed06135ea380f5421e04a6c408162f5eaca2de17033a72c3d565a4ff067752a602e003bdbb7d53f8371c5b023a543212e2ace2ed36f43d00a0189ea1d9a7ea096c2acec7bbc08ec829e8ee5d457927c9506ad1057627eaf0b92c6dee370eb50b81275eff5980b0a8227615f24b02f18a39f5a65f069cae2574f28d1c03badb89feb2a5ffc063bd429264251bf1df60216c4cc0d4415af00ce", 0xde}, {&(0x7f00000008c0)="e11ada69c8a89f325892f1280168e465907b26830424852eb8765fc9230b0f2baae72cc22373b27278bb0011f3c3add81375caf2ed9e957b07879dcad49a00d7d904cf4cc8841aafa3a564ee637f16c089c4d0539b68bddc38fb519901346a1ccbf5e405e8140068bc4220b7c84d5453468b94cf2eb74a18ee84c10a6e52ac879f48319fd07db76fd76b62e90b18305ba9113e844c7318801e8566ba4a", 0x9d}, {&(0x7f0000000980)="c48db8bf7ef7f8f30214603a57c10016b7c02c9ef27e53e0aba6c46bd0bbcb2abc650609e7acb4d1e8e4572027f707f69794d222a9c6517734213f1b7c02227685a116d14a8549c9261ddfd0f3b12fe333df96ec69f7f71c6bcc2f7cca22ced97aa34a578bb02fc4bdfe16af0664bc7a2020e2458779c9b1c40187cb77c1931e65164b696741e5f61741541f6a2d4be505c1441da8474642705d44337fd6f59669ee72c908cd75d096dbcd10e0805d2b9ca6c927a0b529da1bd34041942f8f08f55f458862ab81315963606bb81a", 0xce}], 0x4, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3cfb}}], 0x90}, 0x4004014) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@ipv6_deladdr={0xa4, 0x15, 0x10, 0x70bd26, 0x25dfdbff, {0xa, 0x38, 0xa, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7ff, 0xffff22e6, 0x4}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0xa4}}, 0x4000844) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) 3m20.567970984s ago: executing program 32 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={@empty, @loopback, 0x0}, &(0x7f0000000980)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002400)={0x24, 0x12, 0x1, 0x0, 0x25dfdbff, "", [@generic="9bcd9f1930baec8bfba1cef234f4ff1c8c"]}, 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000053be083850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000080)=0x7) r6 = epoll_create(0x7) r7 = epoll_create(0x7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10) r9 = epoll_create1(0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f0000000040a030000000000000000000700000a7a000c0083d155f1110300428b747e5dbd15e3507c4fcaf3823b634fca9879b6b87e88fa1a30cb3d3307af3ddb92fa8aa1a78d3d3d683c87ed41f6fb2e42dfdbda005a21d60e2113ea80e2aaaee40bc705091469137b5cc8cd25d341f1f686b7ff8ccda3922052e79133bf2a0862e3382c9cd790ae766b17ad24d88df4a278eb7530b8b1000060000480140003006c6f00000000000000000000000000001400030073797a6b616c6c65723094b9510e5b0282d3030070696d3672656700000000000000000008000240679c704d080001400000000008000240174daa07080002406d75be1d28f6b42a5761a6028d44cdc925ce489e5f802ebff994c25ca76c5b3444ab45353f7ced6e070b16b0628db6cb71d6ae7a6502e00edc705f5a7febe2652f1311823faa107bf3ab3788efb22e5aa8e294fe63cd1c9ab67cf054eb1d6506"], 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x272ca3f11426ef36) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="2e3c6744c89595be0db891f0a2061b00d9b08dab4d072c6f1b", 0x19}], 0x1, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x11f8}, 0x4805) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000100)) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x60000000}) sendmsg$sock(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="c4cdc55754eca4c06c309adda5cc10f234d581b70f1018737c2a65191f191503a67f74e617ee55a4df4277", 0x2b}, {&(0x7f00000007c0)="451e866b5c4169d6c93760e0978cc4089646886a3fe28dceffb65d7552674ec3c67012d373d1a74d7bd9bf3d7d62152abaf1e4c35da0810aff2c3c674bfd8a60c44f307f641ed06135ea380f5421e04a6c408162f5eaca2de17033a72c3d565a4ff067752a602e003bdbb7d53f8371c5b023a543212e2ace2ed36f43d00a0189ea1d9a7ea096c2acec7bbc08ec829e8ee5d457927c9506ad1057627eaf0b92c6dee370eb50b81275eff5980b0a8227615f24b02f18a39f5a65f069cae2574f28d1c03badb89feb2a5ffc063bd429264251bf1df60216c4cc0d4415af00ce", 0xde}, {&(0x7f00000008c0)="e11ada69c8a89f325892f1280168e465907b26830424852eb8765fc9230b0f2baae72cc22373b27278bb0011f3c3add81375caf2ed9e957b07879dcad49a00d7d904cf4cc8841aafa3a564ee637f16c089c4d0539b68bddc38fb519901346a1ccbf5e405e8140068bc4220b7c84d5453468b94cf2eb74a18ee84c10a6e52ac879f48319fd07db76fd76b62e90b18305ba9113e844c7318801e8566ba4a", 0x9d}, {&(0x7f0000000980)="c48db8bf7ef7f8f30214603a57c10016b7c02c9ef27e53e0aba6c46bd0bbcb2abc650609e7acb4d1e8e4572027f707f69794d222a9c6517734213f1b7c02227685a116d14a8549c9261ddfd0f3b12fe333df96ec69f7f71c6bcc2f7cca22ced97aa34a578bb02fc4bdfe16af0664bc7a2020e2458779c9b1c40187cb77c1931e65164b696741e5f61741541f6a2d4be505c1441da8474642705d44337fd6f59669ee72c908cd75d096dbcd10e0805d2b9ca6c927a0b529da1bd34041942f8f08f55f458862ab81315963606bb81a", 0xce}], 0x4, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3cfb}}], 0x90}, 0x4004014) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@ipv6_deladdr={0xa4, 0x15, 0x10, 0x70bd26, 0x25dfdbff, {0xa, 0x38, 0xa, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7ff, 0xffff22e6, 0x4}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0xa4}}, 0x4000844) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) 2m40.695254842s ago: executing program 2 (id=2533): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x68b, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0xa42bfd35a32d5860}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180)=[{r1, 0x2}, {r1}], 0x2, 0x7f) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) listen(r2, 0x312) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3, &(0x7f0000000200)=0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002400000009000100626f6e640000000014000280050015000000000005000100010000ce77e8b4d6e2eb72cd1de4efaa14e184d08ae635a9768fbe"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m40.370120274s ago: executing program 2 (id=2534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b6, 0x40c01}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) read(r1, &(0x7f0000000080)=""/26, 0x1a) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') pipe(&(0x7f0000000040)) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b6, 0x40c01}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) read(r1, &(0x7f0000000080)=""/26, 0x1a) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) pipe(&(0x7f0000000040)) (async) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) listen(r1, 0x0) (async) 2m40.181386428s ago: executing program 2 (id=2536): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES8=0x0, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000240)={r7, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x21, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000009000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) r8 = socket$inet6(0xa, 0x6, 0x119) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="008016bebaffe3292db7b72f01c3ed5b00fb8634b135265a38977be87acc6b72eba37a28eb2458762018576c1cfb4337b6c8404e2dfd791c71894564"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) socket$netlink(0x10, 0x3, 0x4) 2m39.086526692s ago: executing program 2 (id=2544): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020ab0700044105"], 0xfe33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0xac}, @exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11}, 0x94) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000000, 0x110, r0, 0xbee04000) 2m38.903851706s ago: executing program 2 (id=2545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xfe, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0xfffffffe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x34}}, 0x0) 2m38.569817411s ago: executing program 2 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x20}, [{0x1f, 0x1, "fc6823061bcc"}]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8, 0x40, 0x4, 0x3, {{0x19, 0x4, 0x3, 0x32, 0x64, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x17, 0x3, 0x7, [{@local}, {@multicast2, 0x80000000}, {@remote, 0x2}, {@remote, 0xc9eb}, {@private=0xa010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x118, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x894}, 0x4) pwrite64(r7, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 2m23.484521368s ago: executing program 33 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x20}, [{0x1f, 0x1, "fc6823061bcc"}]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x8, 0x40, 0x4, 0x3, {{0x19, 0x4, 0x3, 0x32, 0x64, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x17, 0x3, 0x7, [{@local}, {@multicast2, 0x80000000}, {@remote, 0x2}, {@remote, 0xc9eb}, {@private=0xa010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x118, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x894}, 0x4) pwrite64(r7, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 17.93809951s ago: executing program 6 (id=3436): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x20048000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x30) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, 0x0, 0xc100) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newlink={0x50, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x2}}], 0x30}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f0000000100)=""/258, 0x102}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x4}, 0xf7d}, {{0x0, 0x0, 0x0}, 0x6c74a33a}], 0x2, 0x10002, 0x0) 13.605350816s ago: executing program 6 (id=3444): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x32, 0xffffffffffffffff, 0x852a9000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2807000024000701feffffff00000000017c000004004280041d22082af201800c0002800800118004001c008efa403752d6f02ba67a8337ee11c9c4452775f42461d7a7021812a50e92a52178afb8d2129bc7b29e06d36bb9588b5646990a5c492759542e96c2bf6afa1720369c26b54c0e7b414b8fa4d6517076d37a945e3f0b2f813125b1d6ecb6f839baf468de1eb384f39c83bb221dd036182073b142e52288526deeeab1a55c5b8be51959da857ae4b0ca430bd281869bda25e1acb62379f9d9f6bcf95fc6209a9b406aace93e8000001000c350457ec4"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 13.34600563s ago: executing program 6 (id=3447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xef61caf084274b56}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x12a08101}, 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0xe4, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c39}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb3eb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3270}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99ba}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x4) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4104, 0x1008}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000004dc0)=""/4066, 0xfe2}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000700)=""/103, 0x67}], 0x6}, 0x32120) r5 = socket(0x2b, 0x1, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001b80)={&(0x7f00000000c0)="42117c36d1713475cf956f926c3a79c383a72618a0122d5a43b9f7", &(0x7f0000000980)=""/252, &(0x7f0000000a80)="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", &(0x7f0000001a80)="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", 0x8, r0, 0x4}, 0x38) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000002c0)="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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 12.355590467s ago: executing program 6 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x3}, @generic={0x2, 0xf, 0x2, 0x7e, 0x100}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xc8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x1, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xffffff01}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xa, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000400)='GPL\x00', 0x4c, 0x5b, &(0x7f0000000440)=""/91, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x5805, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f000000b680)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000038c0)=""/32, 0x20}, {0x0}], 0x2}, 0x200}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@setlink={0x94, 0x13, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x10000}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x56f4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040855}, 0x0) 12.050661686s ago: executing program 6 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="380000ee1800000000bf69d63b5d000000", @ANYRES32=r1, @ANYBLOB="e032439ef34f4bc093141a491f11b26e9997979558581a39b16d21b86122b5d4372345f756fde1e2cbccebdeb3bff07f340a0e48bf37d9a396ca4352f1203592259d76031a292b2bb011c8622522478e84af18e6b61040b37156cf063189863c48537c3721f3fe87afadb36974243c95bb490317604d3be183e3859e15334dcecee7b782ddc3a165519e6cc3fdf1e3b77d87d0297136bc8b7a018c6e5a7ffdb901483af7cf4afc7646c800838c5b9ccacec1f76a8bd43ebc807f47f458c183197465a77febfca2d14a98934efcab18d5ecbd4c", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 11.611488684s ago: executing program 6 (id=3460): r0 = socket(0x18, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000480)=""/207, 0xcf}], 0x2, 0x2}}], 0x48, 0x8001}, 0x24008004) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x16, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xb}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c160008001b00000000001c0016801800018014000a"], 0x44}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a0601010000000000000000070000090900020073797a31000000000500010007000000080009400000f8a204000880"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) sendmmsg(r4, &(0x7f00000002c0), 0x0, 0x2000b6c0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.050146946s ago: executing program 0 (id=3477): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x40}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x40}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000040, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000040, r3}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r8, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r3}) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f00000000c0)={r12, r12, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r13, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 4.049035553s ago: executing program 1 (id=3478): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x1008001, 0x80) close(r5) (async) close(r5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) sendfile(r5, r4, 0x0, 0xf03a0005) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) splice(r2, 0x0, r1, 0x0, 0x1100000000f336, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="614b97a623accb6e719c3e6ea931e4b669bc14fffd327c291d6c80649102a2b0441cd455eeaa911d1d814a462cafe0908f81d62e93a7a8d0315ef312f71760f7ff3a3e806c1cb373b08c463edc0aec07fc9d972d403dc87ca600117fd1536ac3d051f6d28599d560e72ce9429f935951ab5e632611124548656398e255957587d5e2553a9de2670ff0dd33f28cc0c65e490dda18fb6116e43918fa30364c3eee478df4c6ebcdcd2b1a8273bfeeb1f1ddec5307ce57b2e9d0a043a2ff284f91"], &(0x7f0000000200)='GPL\x00', 0x8, 0x1002, &(0x7f0000000fc0)=""/4098, 0x410ff, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="614b97a623accb6e719c3e6ea931e4b669bc14fffd327c291d6c80649102a2b0441cd455eeaa911d1d814a462cafe0908f81d62e93a7a8d0315ef312f71760f7ff3a3e806c1cb373b08c463edc0aec07fc9d972d403dc87ca600117fd1536ac3d051f6d28599d560e72ce9429f935951ab5e632611124548656398e255957587d5e2553a9de2670ff0dd33f28cc0c65e490dda18fb6116e43918fa30364c3eee478df4c6ebcdcd2b1a8273bfeeb1f1ddec5307ce57b2e9d0a043a2ff284f91"], &(0x7f0000000200)='GPL\x00', 0x8, 0x1002, &(0x7f0000000fc0)=""/4098, 0x410ff, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c917801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c917801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r9, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x53, &(0x7f0000000240)=ANY=[@ANYRES16=r10, @ANYRES32=r9, @ANYRES32=r3, @ANYRESDEC=r8], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x53, &(0x7f0000000240)=ANY=[@ANYRES16=r10, @ANYRES32=r9, @ANYRES32=r3, @ANYRESDEC=r8], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f0000000300)="e2920b46", 0x4) recvmmsg(r7, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r2}, 0x802, 0x6, 0xfffe}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0) 3.837610541s ago: executing program 0 (id=3480): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$packet(0x11, 0xa, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000850000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b400000000014000480100001800800010064757000040002800900010073797a300000000005000740ae000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 3.778844386s ago: executing program 1 (id=3481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2, 0x5, 0xa, 0x2, 0x2d, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x2c, 0x4e22}, @sadb_ident={0x2, 0xb, 0x60e, 0x0, 0x2}, @sadb_x_sec_ctx={0x15, 0x18, 0x9, 0x6, 0x9a, "f8c599f4ad5805d83abbcb534f2bd86126784b9142a550f94cb4c9cbb6fa8b9ee42f09c45dd957a7a99ec18fc9ce7e716f4d23f0f1074e76877283d933fe983f0a3b35bbfe57f1c2a934bdbcb80e3c5869760bd7ea4a55ad2d68c50c8712df382fd008091b9bb237338aa9d49daa9803ca7578e87d3fb0969f3fc532ab574a0cc7bb4f02706aaf4bdbb92ec71f53543bd5ec965443a2fd6ef33b"}, @sadb_address={0x3, 0x17, 0x6c, 0x80, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2c, 0x3507}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x81, 0x3, 0x1, 0x60000000}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xa, 0x14, 0x4}]}, 0x168}}, 0x40) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x1ff, {{0xa, 0x4e20, 0x3, @mcast1, 0x7f}}, {{0xa, 0x4e21, 0x8001, @local, 0x2}}}, 0x108) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.749943469s ago: executing program 1 (id=3486): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delchain={0x3c, 0x65, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x8, 0x8}, {0x5, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0x40, 0xff}}]}, 0x3c}}, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x30}, 0x8000) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x443, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000f501a00000240012800b000100627269646765000014000280060027"], 0x44}}, 0x0) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40809440, &(0x7f0000000200)={&(0x7f00000001c0)=[{&(0x7f0000000180)="836c9ae419f1845cc72e8263", 0xc}], 0x1, 0x5, 0x0, 0x49ce99bb, 0x0, 0x6, 0x8, 0xc5}) 2.748042959s ago: executing program 0 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r5 = socket(0x1e, 0x4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r5, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="710509"], 0x11) (async) r6 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0)={0x2}, 0x4) 2.554072973s ago: executing program 1 (id=3488): socket$inet6(0xa, 0xa, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000f8ffffff140003007866726d3000"/26], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x2}}]}, {0x0, [0x5f, 0x61, 0x0]}}, 0x0, 0x35, 0x0, 0x1, 0x8}, 0x28) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x18200, &(0x7f0000000080)={@align=0x8, {0x246d, 0x7, 0x2, 0x781}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x37f0, 0x8, 'pptp\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x140, 0x0, {}, [@common=@mh={{0x28}, {'\fH', 0x1}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e23, 0x4e22, 0x4e21, 0x4e24, 0x4e24, 0x4e20, 0x4e21, 0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e20, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) epoll_create1(0x0) 2.522804483s ago: executing program 4 (id=3490): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10008050}, 0x20048800) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10008050}, 0x20048800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="eaffffffffffffff3c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="8d0000000000000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="000000008100"/28, @ANYRES32=r0, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYBLOB="000000000c0000fd5c068bc75a9d00"/35]) 2.319421527s ago: executing program 0 (id=3492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffffffd], 0x0, 0x0, 0x1}}, 0x40) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000700)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x1, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1400000000000000290000003400000004fa"], 0x18}}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0xffe0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000340)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000001c0)) 2.243337631s ago: executing program 4 (id=3493): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) pselect6(0x40, &(0x7f0000000100)={0x101, 0x7, 0x8, 0x800, 0x3, 0x3, 0x9, 0x401}, &(0x7f0000000140)={0x5, 0x1, 0x9, 0x732, 0x84d, 0x1, 0x4, 0x8b3}, &(0x7f0000000200)={0x5, 0x3, 0x1000000000, 0x7, 0xfffffffffffffff8, 0x2, 0x7, 0x7}, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2.098060485s ago: executing program 1 (id=3495): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0x4}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000640)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff55a, 0x4, 0x2, 0x3, 0x9}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r5) socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r9, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r8}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000008c0)=""/240, 0xe6}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x35}}], 0x6, 0x400123a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000000)=@can={0x1d, r2}, 0x80, 0x0}}], 0x1, 0x881) 2.012501648s ago: executing program 0 (id=3496): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b002c, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b002c, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 1.824603012s ago: executing program 0 (id=3497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket(0xf, 0x2, 0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000004c0)="b770e72ed26dd0d25717660f58ac2671463a428c0eb2c77098b4e233d5971b8c2d62f46dbcfbb22d5c5b7432e8ffc806df", 0x31, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x38}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0x6, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="0100020cff00bfbe4fe0d464494adbee7e3c323933000400038000000200000000", @ANYRESOCT=r4, @ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x2404c801}, 0x844) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fcdbdf2502000000540001800800030001000000140002006261746164765f736c6176655f300000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="f4ff010070696d726567310000e7f3ffff00000008106600120f4e8fdd9616f50e81", @ANYRES32=r6, @ANYBLOB="0800030000000000"], 0x68}, 0x1, 0x0, 0x0, 0x480c0}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10004f000000ffdb00000008000100000000000000000000000000000000007ed1d035d4ff6e310000008503a3fec4b27100a1d399286a8c32a756681d83cbcaa2e0bff878344b6bc88e33cc7e1def36ad", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000e0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4815}, 0x20000010) 1.751697176s ago: executing program 4 (id=3499): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000001140)) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002900)=@delchain={0x294, 0x65, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0x24c, 0x2, [@TCA_TCINDEX_ACT={0x244, 0x7, [@m_xt={0x168, 0x6, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0xff, 'security\x00', 0x13, 0x7, "971002a264c93b614eb4ce39676648cc2bb93913c2e60bc3c5c90b6dc27ae8995a6cf358c90bd7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xa1, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695e786de13c0b9d554d408d6fd1d87fa216b9e5784ead4b26aa60ccf82ff6f15cc565dedf2654a84f759e8877f12dad44d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xd8, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x91, 0x6, "b7e559d3e48dc42f10cdad83b45c33853eb2771f09a671692228a7a1c4fd4f631701aaaf6c93b0766a03a6b0f8e1e369916e923f87b42b3fe4132bec74550e055787bcb10ea8b9021b145d418ec88b225a9fb10cdc0e711513670fdac340ad753f20e53e25c1bbc2cb06727064a1093bea6874a4e6315b2dddb3bd5a6c36a0d1dc8daaad4e15fd5819c878b0c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x294}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1}, 0xfffe}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x3}], 0x2, 0x3, 0x0) (async) r4 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f0000000100)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f80)={'tunl0\x00', r5, 0x700, 0x40, 0xf, 0xf93, {{0xd, 0x4, 0x1, 0x28, 0x34, 0x64, 0x0, 0x4a, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0xa7, [@remote, @local, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x20000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001100)=[@in6={0xa, 0x4e23, 0x2, @empty, 0xa}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x15, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.673401398s ago: executing program 1 (id=3500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000041}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x1, 0x70bd25, 0xffff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x840) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x0, 0x0, 0x3, 0x8, 0x100, 0xfffffffffffffff0}, @map_fd={0x18, 0x6}, @exit, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xfffffe17, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x23, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x1, 0x4, 0xba55}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xf, 0x9}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000600)=r3}, 0x20) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000680)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r6) ioctl(r3, 0x7fffffff, &(0x7f0000000700)="ce634d626d6ec1f45c5fc55289d9227acd63f60847c5830e5eb6a2595733f65529851141f6e9b4d4d4bc174085dd08292cf97cf826084f61defb351a040e4f71e52b451fa9be2dffefe309d50c309572b31c47d535b6b1d2c88825e3be7e6434986ababd7f7a1ec2170bf8fb9df35298b558b60a3b0087ee873109b1b9c61fec1fbcf90cb4dafb789685223a01b16ca535a0b9d6e245c82ef6495ef09270af7b9a6cbd60b41db1b3a563d2a6778cff0241dec877a6d3bf10b343f6e667d39170ab03ad601fab81a67a31236afc41d3b9d7224290145eec8e6f353efe86412fc117480bb97a38efb750f3c6048b65290cdd6cb6020badf84e5263b75e62d2cb") r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x55, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x10, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe5e, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x2, 0x6, 0x8, 0x2, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0x63}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x835c, 0x6, &(0x7f0000000a40)=""/6, 0x41100, 0x26, '\x00', r8, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0x8, 0x2, 0x6}, 0x10, 0x0, r3, 0x7, &(0x7f0000000ec0)=[r9, r4, r4, r2, r2, r2], &(0x7f0000000f00)=[{0x0, 0x2, 0x7, 0xb}, {0x3, 0x3, 0x9, 0xc}, {0x2, 0x4, 0xc, 0x2}, {0x0, 0x4, 0x6, 0x3}, {0x0, 0x1, 0xc, 0x3}, {0x1, 0x1, 0x0, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0xfffffffa}, 0x94) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r6) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r10, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x48851) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000001180)={0xf83, 0x10000, 0xabea, 0xfffffff7}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r11) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)=@o_path={&(0x7f0000001200)='./file0\x00', 0x0, 0x4008, r9}, 0x18) r12 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000012c0)={0x1, &(0x7f0000001280)=[{0x6, 0x81, 0x3a, 0x7}]}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) ioctl$PPPIOCDISCONN(r13, 0x7439) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, r1, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, &(0x7f0000001700)={{r4, &(0x7f0000001480)='syzkaller\x00', 0x40, &(0x7f00000014c0)={@align=0x7, {0x800, 0xd, 0xd, 0xffffffffffffffc0}}, 0x7f, &(0x7f0000001500)={@_ha_fsid}, &(0x7f0000001540)=0x2a00}, 0x1, &(0x7f00000016c0)=[{0x2, 0x400, &(0x7f0000001580)=':\x00', &(0x7f00000015c0)="dd7816827f95e61077b6c6b62db5a4817780dc648e320a6971a985b5e70e73749e133c5be8033bf1a205dabec33fee4a8f0eb1060d29587943e8b07286fc1f58b9a1add8e96695d7e9e011b981f33feae39ab751a93856b180ca4cb0dd87fea407ff997525f4dcec6bce25c6cb0f62cc499db761f43fe8be77989b91f99895ad409bf98695fe38bfbfa3d0e8c0c6c8ae407a6ff6ae84684a783cf1fdfc23c8d315fb603f5fd42a8b4f4059c9372f75097e5c4b498e523853862357a959b803f9880e49b4eb01fbca9d7fa5ecd8545b04d4d04a89c1473baa4a24d032553a30ec2ec331b891adc0170f54cc90", 0xec, 0xa}]}) 1.500162393s ago: executing program 4 (id=3501): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x37, 0x3, 0x280, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff000000], 'veth0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x9, 0x4, 0x3, 0x5, 0x1, 0x0, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x8) (async) r5 = socket(0x10, 0x3, 0x8) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x9001004}, 0xc) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@delchain={0x8a0, 0x2c, 0x10, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0xffe0}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x874, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x868, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0x7, 0x5, 0x6, 0x9, 0x40, 0x459f84e5, 0x2, 0x5, 0x2, 0x8001, 0x17d936e9, 0x3, 0xa01, 0xe7, 0x7, 0x800, 0x10, 0x0, 0x80000001, 0x6, 0x4, 0x38, 0x4, 0x401, 0x67, 0x9, 0xf7f, 0x4, 0x1, 0x925d, 0x1, 0x2, 0xfffffffe, 0xecd, 0xd8a, 0x0, 0xfffffffb, 0xfffffffc, 0x702a, 0x6, 0x8, 0x10, 0x4, 0xeff4, 0x5, 0x7, 0x5, 0x0, 0x0, 0x2a8a59ef, 0xffffffff, 0x5, 0xfc, 0x1, 0x49c53607, 0x2, 0x80000001, 0x2f, 0x8, 0xfffffffa, 0x4fa, 0x8, 0xfffff801, 0x3, 0x800, 0x7, 0xffffff7a, 0x0, 0x7f, 0x80000000, 0x9, 0x2, 0x22c, 0x4, 0x180, 0xab, 0x954c, 0x2, 0x0, 0x5, 0x7, 0x5, 0x4, 0x3, 0x7, 0x1, 0x2eda, 0x7f, 0x3, 0x7, 0x540, 0x9, 0x80, 0x180000, 0x2, 0x401, 0x10001, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5, 0x7ff, 0x2, 0x3, 0xfa42, 0xfffffff7, 0x9, 0x7fff800, 0x3, 0x6, 0x6, 0x5, 0x10000, 0x6, 0x9, 0x6cd, 0xa08, 0xe821, 0x8000, 0x5, 0x2, 0x5, 0xc1, 0x6, 0x200, 0x1, 0x7, 0x2, 0x5, 0x7ff, 0x4, 0x4, 0x2, 0xfff, 0x8, 0x78c16f5b, 0x1, 0x4ad9f223, 0x81, 0x1, 0x1, 0x0, 0x3, 0x4, 0xfff, 0x1ff, 0x9, 0xfff, 0xffffff75, 0x9, 0x5b5c142a, 0x8, 0x9, 0x8e73, 0x101, 0x7, 0x1, 0x9, 0x1, 0xe, 0x7, 0x5, 0x1ff, 0xf6, 0x0, 0x3, 0x4, 0x6, 0x57, 0x3, 0x4d80, 0x2, 0xfffff376, 0x61, 0x10000, 0x2, 0x4, 0x74be, 0x7, 0x8001, 0x5, 0x7, 0x8c000000, 0x4, 0x9, 0x6, 0x4, 0x9, 0x5, 0x99f, 0x80000001, 0x7, 0x9, 0x6, 0x10001, 0x200, 0x8, 0x2, 0x8000, 0xcd53, 0x1, 0xc0000, 0x4, 0x6, 0x10000, 0x5, 0x9, 0xe1, 0x8, 0x81, 0x80a1, 0x1, 0x0, 0x6, 0xffffff10, 0x78dcb124, 0x3, 0xd7d0, 0x9, 0xfffffffd, 0x5, 0x9, 0xffff4e05, 0x80, 0x10001, 0x5, 0x5, 0x658bfd45, 0x6, 0x3f6e3ed6, 0x20, 0x3, 0x3, 0x5, 0x2, 0x959, 0x3, 0x9, 0x7, 0x71, 0x3, 0x9, 0x6, 0x7fffffff, 0x1, 0x4, 0x8000, 0x1, 0xb47, 0x1, 0x5, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x3, 0x5, 0x8f, {0x1, 0x1, 0x9, 0x10, 0x3, 0x5}, {0x10, 0x1, 0x8, 0xaad6, 0x1000}, 0xfffffffc, 0x1ff, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x5b01, 0x4, 0xffff0000, 0x0, 0xfffffd0a, 0xfff, 0x0, 0x7, 0xf9b, 0xb, 0x0, 0xe, 0x4, 0x49, 0x6, 0x400, 0x1, 0x7, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x2, 0x6, 0x1d7, 0x0, 0x7fffffff, 0x80, 0x400, 0x6cb7, 0x7, 0x9, 0x8, 0x9, 0x4, 0x1, 0x2, 0x8, 0xe261, 0xffff, 0x9, 0x6, 0xe, 0x25a, 0x4, 0x1000, 0x80000001, 0x4, 0x5, 0x0, 0x9, 0xfffffff7, 0x0, 0x8, 0x1000, 0xb4a, 0x6, 0x1, 0x4c, 0xa, 0xd, 0x7, 0x7, 0x8, 0x8000000, 0xc3a, 0x8001, 0x7, 0x6, 0x7, 0x0, 0x41, 0x7, 0x9, 0x0, 0x2, 0x80000001, 0x7, 0x31bb69ea, 0xfff, 0xfd, 0xd, 0x3, 0x9, 0x6, 0xb3, 0x7, 0x80, 0x3, 0x2e8000, 0x4d0b, 0x8001, 0x9, 0x1, 0x7, 0x390, 0x401, 0x6, 0x0, 0x7, 0x7, 0x2, 0x6, 0x80000001, 0x80000000, 0x7, 0xc, 0x0, 0xae24, 0x7, 0x8, 0x8000, 0x7, 0x5a3, 0x5, 0x7ff, 0x8, 0x1ff, 0x4c, 0x9, 0xabb, 0x9, 0x5, 0x0, 0x9, 0x7f, 0x5, 0x0, 0x8000, 0x4, 0x10, 0x1, 0x88, 0x81, 0x1, 0x950b, 0x400, 0xb7d, 0x1, 0x30c1, 0x3, 0x5, 0x9, 0x38, 0x8001, 0x5c, 0x1, 0x2, 0x7, 0x6, 0x4, 0x10, 0x4, 0xd, 0x4, 0x9, 0x7f, 0x9, 0x909, 0x4, 0xaf7, 0x2ce40000, 0xfffffffc, 0x36b, 0x8, 0x7, 0xfffffff8, 0x9, 0x2, 0x4, 0x2, 0x3, 0x5, 0xfff, 0x2, 0x3, 0x4, 0x5, 0x8, 0xffff, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0xed7, 0x6, 0xd, 0xb, 0x7, 0xcb2, 0x1ff, 0x9, 0x60000000, 0x0, 0x2, 0x4, 0x53, 0x8001, 0x9, 0x3fbe, 0x0, 0x9d, 0x7, 0x9, 0x81, 0x40, 0x6, 0x442a, 0x80000001, 0x80, 0x900, 0x5, 0x1, 0x7fffffff, 0x1, 0xf, 0x9, 0x90000000, 0x3c3e0f69, 0x5, 0x4, 0x8, 0x1ff, 0x9, 0x1, 0x2, 0x3, 0x10, 0x5, 0xd133, 0x8, 0x40, 0x8, 0x1, 0x7fff, 0x7, 0x2, 0xfffffffe, 0x8, 0x5, 0x80000000, 0xa0, 0x7, 0x9, 0x9, 0x4d0, 0x8, 0x4, 0x7, 0x8, 0x2, 0x1]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@delchain={0x8a0, 0x2c, 0x10, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0xffe0}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x874, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x868, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0x7, 0x5, 0x6, 0x9, 0x40, 0x459f84e5, 0x2, 0x5, 0x2, 0x8001, 0x17d936e9, 0x3, 0xa01, 0xe7, 0x7, 0x800, 0x10, 0x0, 0x80000001, 0x6, 0x4, 0x38, 0x4, 0x401, 0x67, 0x9, 0xf7f, 0x4, 0x1, 0x925d, 0x1, 0x2, 0xfffffffe, 0xecd, 0xd8a, 0x0, 0xfffffffb, 0xfffffffc, 0x702a, 0x6, 0x8, 0x10, 0x4, 0xeff4, 0x5, 0x7, 0x5, 0x0, 0x0, 0x2a8a59ef, 0xffffffff, 0x5, 0xfc, 0x1, 0x49c53607, 0x2, 0x80000001, 0x2f, 0x8, 0xfffffffa, 0x4fa, 0x8, 0xfffff801, 0x3, 0x800, 0x7, 0xffffff7a, 0x0, 0x7f, 0x80000000, 0x9, 0x2, 0x22c, 0x4, 0x180, 0xab, 0x954c, 0x2, 0x0, 0x5, 0x7, 0x5, 0x4, 0x3, 0x7, 0x1, 0x2eda, 0x7f, 0x3, 0x7, 0x540, 0x9, 0x80, 0x180000, 0x2, 0x401, 0x10001, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5, 0x7ff, 0x2, 0x3, 0xfa42, 0xfffffff7, 0x9, 0x7fff800, 0x3, 0x6, 0x6, 0x5, 0x10000, 0x6, 0x9, 0x6cd, 0xa08, 0xe821, 0x8000, 0x5, 0x2, 0x5, 0xc1, 0x6, 0x200, 0x1, 0x7, 0x2, 0x5, 0x7ff, 0x4, 0x4, 0x2, 0xfff, 0x8, 0x78c16f5b, 0x1, 0x4ad9f223, 0x81, 0x1, 0x1, 0x0, 0x3, 0x4, 0xfff, 0x1ff, 0x9, 0xfff, 0xffffff75, 0x9, 0x5b5c142a, 0x8, 0x9, 0x8e73, 0x101, 0x7, 0x1, 0x9, 0x1, 0xe, 0x7, 0x5, 0x1ff, 0xf6, 0x0, 0x3, 0x4, 0x6, 0x57, 0x3, 0x4d80, 0x2, 0xfffff376, 0x61, 0x10000, 0x2, 0x4, 0x74be, 0x7, 0x8001, 0x5, 0x7, 0x8c000000, 0x4, 0x9, 0x6, 0x4, 0x9, 0x5, 0x99f, 0x80000001, 0x7, 0x9, 0x6, 0x10001, 0x200, 0x8, 0x2, 0x8000, 0xcd53, 0x1, 0xc0000, 0x4, 0x6, 0x10000, 0x5, 0x9, 0xe1, 0x8, 0x81, 0x80a1, 0x1, 0x0, 0x6, 0xffffff10, 0x78dcb124, 0x3, 0xd7d0, 0x9, 0xfffffffd, 0x5, 0x9, 0xffff4e05, 0x80, 0x10001, 0x5, 0x5, 0x658bfd45, 0x6, 0x3f6e3ed6, 0x20, 0x3, 0x3, 0x5, 0x2, 0x959, 0x3, 0x9, 0x7, 0x71, 0x3, 0x9, 0x6, 0x7fffffff, 0x1, 0x4, 0x8000, 0x1, 0xb47, 0x1, 0x5, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x3, 0x5, 0x8f, {0x1, 0x1, 0x9, 0x10, 0x3, 0x5}, {0x10, 0x1, 0x8, 0xaad6, 0x1000}, 0xfffffffc, 0x1ff, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x5b01, 0x4, 0xffff0000, 0x0, 0xfffffd0a, 0xfff, 0x0, 0x7, 0xf9b, 0xb, 0x0, 0xe, 0x4, 0x49, 0x6, 0x400, 0x1, 0x7, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x2, 0x6, 0x1d7, 0x0, 0x7fffffff, 0x80, 0x400, 0x6cb7, 0x7, 0x9, 0x8, 0x9, 0x4, 0x1, 0x2, 0x8, 0xe261, 0xffff, 0x9, 0x6, 0xe, 0x25a, 0x4, 0x1000, 0x80000001, 0x4, 0x5, 0x0, 0x9, 0xfffffff7, 0x0, 0x8, 0x1000, 0xb4a, 0x6, 0x1, 0x4c, 0xa, 0xd, 0x7, 0x7, 0x8, 0x8000000, 0xc3a, 0x8001, 0x7, 0x6, 0x7, 0x0, 0x41, 0x7, 0x9, 0x0, 0x2, 0x80000001, 0x7, 0x31bb69ea, 0xfff, 0xfd, 0xd, 0x3, 0x9, 0x6, 0xb3, 0x7, 0x80, 0x3, 0x2e8000, 0x4d0b, 0x8001, 0x9, 0x1, 0x7, 0x390, 0x401, 0x6, 0x0, 0x7, 0x7, 0x2, 0x6, 0x80000001, 0x80000000, 0x7, 0xc, 0x0, 0xae24, 0x7, 0x8, 0x8000, 0x7, 0x5a3, 0x5, 0x7ff, 0x8, 0x1ff, 0x4c, 0x9, 0xabb, 0x9, 0x5, 0x0, 0x9, 0x7f, 0x5, 0x0, 0x8000, 0x4, 0x10, 0x1, 0x88, 0x81, 0x1, 0x950b, 0x400, 0xb7d, 0x1, 0x30c1, 0x3, 0x5, 0x9, 0x38, 0x8001, 0x5c, 0x1, 0x2, 0x7, 0x6, 0x4, 0x10, 0x4, 0xd, 0x4, 0x9, 0x7f, 0x9, 0x909, 0x4, 0xaf7, 0x2ce40000, 0xfffffffc, 0x36b, 0x8, 0x7, 0xfffffff8, 0x9, 0x2, 0x4, 0x2, 0x3, 0x5, 0xfff, 0x2, 0x3, 0x4, 0x5, 0x8, 0xffff, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0xed7, 0x6, 0xd, 0xb, 0x7, 0xcb2, 0x1ff, 0x9, 0x60000000, 0x0, 0x2, 0x4, 0x53, 0x8001, 0x9, 0x3fbe, 0x0, 0x9d, 0x7, 0x9, 0x81, 0x40, 0x6, 0x442a, 0x80000001, 0x80, 0x900, 0x5, 0x1, 0x7fffffff, 0x1, 0xf, 0x9, 0x90000000, 0x3c3e0f69, 0x5, 0x4, 0x8, 0x1ff, 0x9, 0x1, 0x2, 0x3, 0x10, 0x5, 0xd133, 0x8, 0x40, 0x8, 0x1, 0x7fff, 0x7, 0x2, 0xfffffffe, 0x8, 0x5, 0x80000000, 0xa0, 0x7, 0x9, 0x9, 0x4d0, 0x8, 0x4, 0x7, 0x8, 0x2, 0x1]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r10 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r10, 0xa401000000000000) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r10, 0xa401000000000000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 1.205585014s ago: executing program 4 (id=3504): ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000080)={0x8000000000000000, 0x8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) (async) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x16, @multicast2, 0x4e21, 0x0, 'wlc\x00', 0x2, 0x8, 0x3d}, {@multicast2, 0x4e22, 0x2000, 0x1, 0x7, 0xfffffff9}}, 0x44) 1.112336922s ago: executing program 4 (id=3505): r0 = socket(0x1a, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x3}, &(0x7f0000000040)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000001c0)=0x84) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000180)) 594.818525ms ago: executing program 5 (id=3507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0xffffffffffffffef) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="6d4fe2c91a68b56a8d5072d22eef9bc63ef8ea5323165414d74d46fe73347b1f34c4ea2d36402650c1f600bd6292728b70dc9e383cd10c41fd687773369eed7e00dcbec7cbf95867622c6517886c07a2716d0ab51f2d4fd886ea3561e8ee7ba0724d4f934d04e60c0848b2cce8cbb088af5cdb64fa543f75099fbc5064f1c7ac02429136a8fd79b97a1ba621d52c897fa0dc5c8b4500da0f15276e5fa891f8267c46cf1c348c3fb5b541", 0xaa}, {&(0x7f0000000540)="983a726ab58440145c692e12e742f1100be909a2e33eb6145706c4eb34b72a6d7364fad9e05293131b8a830c638487aaf1d869cb851c669e4c6af956fd5349314d52470d93362d9aec24418af3f637862d6c6956be4d636f736d5c888ec1ab8a762da519cbe987d9ecc5", 0x31}, {&(0x7f0000000380)="7347df5963adef9044e15bbd9a19f2eb8137fb396accfd6fbeb2c57954accf4a9e0eb665b6", 0x25}, {&(0x7f00000000c0)="e7ce7dd96e47f0e6bc82fd7ce6443dcb01d423a7afc60357821f36f2e080063c1536727c72efbc095091a5013d199f382b1ba3e9c20d1741335a42b469972cd3114bc8ff8096fb5e0abb310e40786c", 0x4f}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000000140)="dd4527b354123186a1197960a847632d88167ba7a47809b1af6df97fcfa79aa7c9443f143fd5d72d0ffa1da0f15f31e5a67ca307e5376353838aef9c33b513ca386e5ddea17a624d989fc7acf878f0f0657d78699dcc3d4888ad75f9e4e84fa3f6a10cbcdd77fb5c72af500e821bb0bec4d85b2a44aee4d11198e874e73de1d8", 0x84}, {&(0x7f00000003c0)="e7124d3b91897a57d22b1e401b4a6a12a49dd03c70ab84bc5efd8936d7331a33f91bb13342314b4a101cc7d215b30c056586099f427fd1ed1322af183105bd9f54e60979a05c8bf844237a151044235dd0bab4753783b158636740b68f9ea22454065ae9fa4e83c83d68928518edb726ece1ed23f5b2f4f4508f2e22d3d8d4ebf8b989bc0381d3de15af21a0720c72d81a36cf15599fd60c7b", 0xfffffea1}], 0x7}}], 0x1, 0x800) 571.01395ms ago: executing program 5 (id=3508): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x6, 0x2, 0x1, 0x7, 0x0, [@local]}]}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xfb, 0x1, 0x74, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x1, 0x170}}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delchain={0x0, 0x65, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x2, 0x6}, {0x8, 0x7}}, [@TCA_CHAIN={0x0, 0xb, 0x296}, @TCA_RATE={0x0, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x0, 0xb, 0xfff}, @TCA_RATE={0x0, 0x5, {0x0, 0xd}}, @TCA_CHAIN={0x0, 0xb, 0x8}, @TCA_RATE={0x0, 0x5, {0x8, 0xfd}}, @TCA_CHAIN={0x0, 0xb, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000900000000000000280000fc000000000000000000000000000001ff0200000000000000000000000000010104040280380600fc02000000000000000000b18e000001fc0100"/94], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2d48}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)={0xd0, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0xbc, 0xe, 0x0, 0x1, [@typed={0xb8, 0xb1, 0x0, 0x0, @binary="2e91a555ccd397be3051ea25a4b2b400e44987f483a31cf3b3a1e2821ac19b52483253c419601b48a9281a9c1b674d3d2806cf2515697b6d3742efbcdbd6945ed21e83459fb4b2f962587558e0260707854b7ac6e97ae8e69edb162b56aa1ad7e116ccd947d5d9d5e06c482e3dcc4ea88370d3f6bf28bb1ed5c83253852573b774a92367211deadc07fa9e3e3cfc440645274f38e57c92093c98a4ede0cf5eaba1ba46d53a7bd288fea913a90f9f29ccc42ebad6"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000006d00010027bd7000fda4741bc1000000", @ANYRES32=0x0, @ANYBLOB="1a02010000280000180034801400350070696d36726567300000000000000000220024000a4a62f828b69215aceaada90ddc6cbcc47f4337e9a6cbda6f85383d1eb300001400140076657468305f746f5f7465616d000000050021002a000000"], 0x78}, 0x1, 0x0, 0x0, 0xc04c065}, 0x40000) 415.861847ms ago: executing program 5 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2, @ANYRESDEC=r0], 0xfdef) socket$qrtr(0x2a, 0x2, 0x0) 191.865576ms ago: executing program 5 (id=3510): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4000005, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x50) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000002c0)="7c773daeef00be00c56f696ab3b04e16c4fd3258cc6e673f71aca63c160e3e41") ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) recvmmsg(r1, &(0x7f000000b680)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000038c0)=""/32, 0x20}, {0x0}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 160.618941ms ago: executing program 5 (id=3511): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f1}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000200300e1ff0000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x20}}]}, 0x2c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtfilter={0x160, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_flower={{0xb}, {0x130, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x124, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8616}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x870}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xb858}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5729}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffe}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x50}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000240)="94", 0x1) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f00000000c0)={0x1d, r14}, 0x18) connect$can_j1939(r13, &(0x7f0000000140)={0x1d, r14, 0xfffffffffffffffd, {}, 0xfd}, 0x18) sendmmsg(r13, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) vmsplice(r12, &(0x7f0000000380), 0x0, 0x4) tee(r10, r12, 0x2, 0x100000000000003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) 0s ago: executing program 5 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000640)={r1, &(0x7f0000000340)='syzkaller\x00', 0x68000, &(0x7f00000003c0)={@_ha_fsid={[0x7, 0x7]}, {0x37, 0x401, 0x3d7a, 0x9}}, 0x7a, &(0x7f00000005c0), &(0x7f0000000600)=0x8}) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000a40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x20c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb577}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73d}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x37}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffc0000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff3d}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xee}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2f2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x994}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r4 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) bind$rxrpc(r5, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010101}}, 0x24) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000008000005c740383a74638da50ec84571e9f7035f056500771e1aa62e8b7641584"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) (async) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000300)=@req3={0x8, 0xffff, 0x1, 0x7, 0x5, 0x1, 0x5}, 0xfffffffffffffefd) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000500410009002abdf000000000000333a0f91af30000000004000ab7bdb9293a0e"], 0x18}}, 0x4004080) (async) r11 = socket$kcm(0x10, 0x2, 0x4) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) (async) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) kernel console output (not intermixed with test programs): 9f98 [ 361.482121][T14842] [ 361.493242][T14844] : renamed from bond0 [ 362.036626][T14861] netlink: 'syz.5.2334': attribute type 1 has an invalid length. [ 362.275296][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 362.647573][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2343'. [ 362.679446][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2343'. [ 362.735558][T14883] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 362.782294][T14883] bond1 (unregistering): Released all slaves [ 364.297960][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.800367][T14943] virt_wifi0: mtu less than device minimum [ 364.935066][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.168121][T14957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2356'. [ 366.272739][T14922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.540941][T14971] xt_NFQUEUE: number of total queues is 0 [ 366.585912][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2359'. [ 366.622797][T14963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2359'. [ 366.864654][T14985] tunl0: entered allmulticast mode [ 366.886207][T14985] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 367.087851][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 367.690255][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 368.006144][T15018] tipc: Enabled bearer , priority 16 [ 368.070044][T15016] lo speed is unknown, defaulting to 1000 [ 368.208663][T15024] erspan0: entered promiscuous mode [ 368.249017][T15024] vlan3: entered promiscuous mode [ 368.515546][T15037] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 368.568737][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2376'. [ 368.617388][T15035] netlink: zone id is out of range [ 368.630565][T15035] netlink: zone id is out of range [ 368.640685][T15035] netlink: zone id is out of range [ 368.650381][T15035] netlink: zone id is out of range [ 368.659991][T15035] netlink: zone id is out of range [ 368.689518][T15035] netlink: zone id is out of range [ 368.710058][T15027] lo speed is unknown, defaulting to 1000 [ 368.846037][T15035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2376'. [ 369.027230][T15044] sctp: [Deprecated]: syz.5.2378 (pid 15044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.027230][T15044] Use struct sctp_sack_info instead [ 369.123708][ T5760] tipc: Node number set to 338584439 [ 369.131950][T15044] syzkaller0: entered promiscuous mode [ 369.150419][T15044] syzkaller0: entered allmulticast mode [ 369.166116][T15051] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2380'. [ 369.317974][T15055] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2381'. [ 369.386306][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 369.432019][T15061] FAULT_INJECTION: forcing a failure. [ 369.432019][T15061] name failslab, interval 1, probability 0, space 0, times 0 [ 369.435700][T15060] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 369.450374][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.2.2383 Not tainted syzkaller #0 PREEMPT(full) [ 369.450400][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.450411][T15061] Call Trace: [ 369.450418][T15061] [ 369.450426][T15061] dump_stack_lvl+0xe8/0x150 [ 369.450453][T15061] should_fail_ex+0x412/0x560 [ 369.450481][T15061] should_failslab+0xa8/0x100 [ 369.450508][T15061] __kmalloc_cache_noprof+0x88/0x660 [ 369.450532][T15061] ? alloc_pipe_info+0xe8/0x4d0 [ 369.450561][T15061] alloc_pipe_info+0xe8/0x4d0 [ 369.450587][T15061] splice_direct_to_actor+0xa08/0xc70 [ 369.450614][T15061] ? kstrtouint+0x6e/0xe0 [ 369.450635][T15061] ? __pfx_direct_splice_actor+0x10/0x10 [ 369.450657][T15061] ? __pfx_aa_file_perm+0x10/0x10 [ 369.450683][T15061] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 369.450713][T15061] do_splice_direct+0x195/0x290 [ 369.450736][T15061] ? __pfx_do_splice_direct+0x10/0x10 [ 369.450758][T15061] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 369.450786][T15061] ? rw_verify_area+0x255/0x4d0 [ 369.450812][T15061] do_sendfile+0x535/0x7d0 [ 369.450831][T15061] ? __pfx_vfs_write+0x10/0x10 [ 369.450859][T15061] ? __pfx_do_sendfile+0x10/0x10 [ 369.450877][T15061] ? __fget_files+0x3a0/0x420 [ 369.450907][T15061] __se_sys_sendfile64+0x144/0x1a0 [ 369.450928][T15061] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 369.450954][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.450973][T15061] do_syscall_64+0x15f/0xf80 [ 369.450996][T15061] ? trace_irq_disable+0x3b/0x140 [ 369.451020][T15061] ? clear_bhb_loop+0x40/0x90 [ 369.451041][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.451058][T15061] RIP: 0033:0x7fe803b9ce59 [ 369.451075][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.451089][T15061] RSP: 002b:00007fe8049ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 369.451109][T15061] RAX: ffffffffffffffda RBX: 00007fe803e15fa0 RCX: 00007fe803b9ce59 [ 369.451120][T15061] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 369.451130][T15061] RBP: 00007fe8049ce090 R08: 0000000000000000 R09: 0000000000000000 [ 369.451148][T15061] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 369.451158][T15061] R13: 00007fe803e16038 R14: 00007fe803e15fa0 R15: 00007ffdf6fb05c8 [ 369.451187][T15061] [ 369.890019][T15060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.933326][T15064] syzkaller1: entered promiscuous mode [ 369.939197][T15064] syzkaller1: entered allmulticast mode [ 369.946852][T15069] syzkaller1: entered promiscuous mode [ 369.952468][T15069] syzkaller1: entered allmulticast mode [ 370.055905][ T7631] net_ratelimit: 62 callbacks suppressed [ 370.055929][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.097366][T15078] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2385'. [ 370.499418][T15097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.698138][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.201257][T15128] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 371.603069][T15139] netlink: 'syz.5.2398': attribute type 1 has an invalid length. [ 371.650918][T15134] __nla_validate_parse: 4 callbacks suppressed [ 371.650939][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2398'. [ 371.856095][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 371.905591][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 372.600514][T15172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2407'. [ 372.646231][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 372.668443][T15177] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2409'. [ 372.742873][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 372.768712][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 372.778638][T15180] netlink: 'syz.4.2408': attribute type 6 has an invalid length. [ 372.786949][T15180] netlink: 'syz.4.2408': attribute type 5 has an invalid length. [ 372.839239][T15173] vlan6: entered allmulticast mode [ 372.852872][T15173] macvtap0: entered allmulticast mode [ 372.862766][T15173] veth0_macvtap: entered allmulticast mode [ 372.874731][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2410'. [ 372.892218][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2410'. [ 372.905775][T15180] netlink: 'syz.4.2408': attribute type 6 has an invalid length. [ 372.921615][T15180] netlink: 'syz.4.2408': attribute type 5 has an invalid length. [ 372.929379][T15174] lo speed is unknown, defaulting to 1000 [ 373.389040][T15190] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 374.289364][T15230] syzkaller1: entered promiscuous mode [ 374.299281][T15230] syzkaller1: entered allmulticast mode [ 374.422268][T15236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.469786][T15240] batman_adv: batadv0: Adding interface: macvlan2 [ 374.493990][T15240] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.523858][T15243] netlink: 'syz.0.2425': attribute type 1 has an invalid length. [ 374.529635][T15240] batman_adv: batadv0: Interface activated: macvlan2 [ 374.648773][T15245] bond10 (unregistering): Released all slaves [ 374.680960][T15241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.814231][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.454279][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.037080][T15213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.241432][T15268] __nla_validate_parse: 6 callbacks suppressed [ 377.241470][T15268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2432'. [ 377.371645][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 377.393098][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 377.407349][T15279] netlink: 'syz.1.2435': attribute type 18 has an invalid length. [ 377.437470][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 377.452015][T15275] syzkaller0: entered promiscuous mode [ 377.467106][T15281] netlink: 'syz.0.2437': attribute type 20 has an invalid length. [ 377.479214][T15275] syzkaller0: entered allmulticast mode [ 377.528166][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'. [ 377.556963][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 377.562027][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'. [ 377.718256][T15292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2438'. [ 378.048113][T15300] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20004 [ 378.977482][T15336] netlink: 209320 bytes leftover after parsing attributes in process `syz.0.2453'. [ 379.016182][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.115068][T15343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2456'. [ 380.592915][T15388] lo speed is unknown, defaulting to 1000 [ 380.995166][T15414] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 381.048306][T15417] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 381.455269][T15428] netlink: 'syz.5.2478': attribute type 1 has an invalid length. [ 381.794869][T15428] bond1: entered promiscuous mode [ 381.824111][T15428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.918715][T15434] bond1: (slave bridge2): making interface the new active one [ 381.926643][T15434] bridge2: entered promiscuous mode [ 381.934840][T15434] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 382.304305][T15460] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 382.313053][T15461] x_tables: duplicate entry at hook 3 [ 382.461445][T15465] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20004 [ 382.521503][T15476] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 382.905418][T15484] tipc: Enabled bearer , priority 0 [ 382.968767][T15487] tipc: Started in network mode [ 382.986644][T15487] tipc: Node identity e6177ddb6219, cluster identity 4711 [ 383.004523][T15487] tipc: Enabled bearer , priority 0 [ 383.012539][T15484] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 383.048133][T15487] tipc: Disabling bearer [ 383.071641][T15484] batman_adv: batadv0: Interface deactivated: dummy0 [ 383.109444][T15484] batman_adv: batadv0: Removing interface: dummy0 [ 383.160465][T15453] __nla_validate_parse: 14 callbacks suppressed [ 383.160487][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2484'. [ 383.220759][T15494] tipc: Resetting bearer [ 383.246263][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2494'. [ 383.357615][T15483] tipc: Disabling bearer [ 383.369251][T15498] IPVS: set_ctl: invalid protocol: 60 16.0.133.6:6651 [ 384.106158][T15518] hsr0: entered promiscuous mode [ 384.176195][T15522] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 384.308535][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2500'. [ 384.453257][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 384.579739][T15526] bond9: (slave bridge9): making interface the new active one [ 384.613331][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 384.639358][T15526] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 384.648995][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2501'. [ 384.692548][T15520] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.814258][T15542] netlink: 'syz.2.2503': attribute type 1 has an invalid length. [ 384.857442][T15542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2503'. [ 384.918302][T15542] syzkaller1: entered promiscuous mode [ 384.939869][T15542] syzkaller1: entered allmulticast mode [ 384.979407][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2504'. [ 385.480799][T15578] vlan3: entered promiscuous mode [ 385.486549][T15578] bridge0: entered promiscuous mode [ 385.615063][T15576] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 385.638949][T15576] bond6 (unregistering): Released all slaves [ 386.435871][T15611] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.568964][ T7633] tipc: Subscription rejected, illegal request [ 386.604245][T15611] bridge_slave_0 (unregistering): left allmulticast mode [ 386.639624][T15611] bridge_slave_0 (unregistering): left promiscuous mode [ 386.660407][T15611] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.821814][T15619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.851208][T10743] team_slave_0: entered promiscuous mode [ 386.858754][T10743] team_slave_1: entered promiscuous mode [ 386.898445][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2522'. [ 386.910817][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 387.037132][T15629] netlink: 'syz.5.2523': attribute type 21 has an invalid length. [ 387.048178][T15629] netlink: 'syz.5.2523': attribute type 1 has an invalid length. [ 387.121162][T15631] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 387.162737][T15631] syz_tun: entered promiscuous mode [ 387.340043][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.352546][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.539837][T15643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.579443][T15643] bond2 (unregistering): Released all slaves [ 387.669387][T15645] : renamed from bond0 (while UP) [ 387.698328][T15645] veth0_to_bond: default FDB implementation only supports local addresses [ 388.932374][T15693] netlink: 'syz.2.2536': attribute type 1 has an invalid length. [ 389.001807][T15698] __nla_validate_parse: 6 callbacks suppressed [ 389.001829][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2536'. [ 389.072587][T15693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.188397][T15698] netlink: 'syz.2.2536': attribute type 1 has an invalid length. [ 389.239424][T15693] bond0: (slave batadv1): Opening slave failed [ 389.257833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.328125][T15707] netlink: 'syz.0.2539': attribute type 2 has an invalid length. [ 390.007873][T15717] lo speed is unknown, defaulting to 1000 [ 390.329324][T15713] bond10: entered allmulticast mode [ 390.335623][T15713] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.336023][T15715] Cannot find del_set index 8192 as target [ 390.569487][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 390.642164][T15735] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2546'. [ 390.683563][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 390.703369][T15735] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2546'. [ 390.892809][T15742] netlink: 'syz.1.2549': attribute type 1 has an invalid length. [ 390.904553][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'. [ 390.920504][T15666] Set syz1 is full, maxelem 65536 reached [ 391.122695][T15748] Set syz1 is full, maxelem 65536 reached [ 391.137653][T15750] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2551'. [ 391.158157][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2552'. [ 391.453386][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2556'. [ 391.667287][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2559'. [ 391.813982][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.943271][T15786] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 391.975112][T15786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.009000][T15786] team0: Port device netdevsim1 added [ 392.010635][T15787] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 392.027304][T15786] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 392.165614][T15787] team0: Port device netdevsim1 removed [ 392.332437][T15799] netlink: 'syz.1.2566': attribute type 5 has an invalid length. [ 392.456274][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.098703][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.750560][T15836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.877508][ T7624] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.954696][T15836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.172402][T15836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.198767][T15869] ip6gre1: entered promiscuous mode [ 394.314379][T15836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.342761][T15872] syzkaller0: entered promiscuous mode [ 394.349395][T15872] syzkaller0: entered allmulticast mode [ 394.355595][T10754] IPVS: starting estimator thread 0... [ 394.396132][T15874] __nla_validate_parse: 5 callbacks suppressed [ 394.396153][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2588'. [ 394.435699][T15872] netlink: 'syz.0.2587': attribute type 1 has an invalid length. [ 394.473784][T15876] IPVS: using max 33 ests per chain, 79200 per kthread [ 394.578955][ T7633] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.736034][ T7633] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.856507][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.925215][ T7633] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.248746][T15898] syzkaller1: entered promiscuous mode [ 395.270472][T15898] syzkaller1: entered allmulticast mode [ 395.417346][T15903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.428622][T15903] batadv_slave_1: entered promiscuous mode [ 395.664757][T15900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.701727][T15900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.930571][T15915] IPv6: sit1: Disabled Multicast RS [ 395.981272][T15900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.992955][T15900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.077513][T15919] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 396.125813][T15900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.144004][T15900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.291042][T15900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.306148][T15900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.525455][ T7633] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.534278][ T7633] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.559573][ T7633] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.568343][ T7633] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.607696][ T7633] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.620307][ T7633] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.650617][ T7633] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.665279][ T7633] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.908204][T15946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2610'. [ 397.486883][T15955] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 397.515280][T15955] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 397.532870][T15955] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 397.842829][T15967] netlink: 'syz.1.2615': attribute type 4 has an invalid length. [ 397.860356][T15967] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2615'. [ 397.933327][T15970] IPv6: Can't replace route, no match found [ 397.954332][T15970] IPv6: Can't replace route, no match found [ 398.000616][T15973] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2617'. [ 398.093911][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.216016][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.229887][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2620'. [ 398.239856][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'. [ 398.457013][T15986] x_tables: ip_tables: ah match: only valid for protocol 51 [ 398.600140][T15993] pimreg9: entered allmulticast mode [ 398.638479][T15988] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 398.672850][T15988] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 398.855670][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.882322][T16003] tipc: Enabled bearer , priority 0 [ 398.914240][T16002] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 398.926842][T16002] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 398.965688][T16002] tipc: Resetting bearer [ 399.022429][T16012] tipc: Resetting bearer [ 399.104900][T16012] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 399.113879][T16016] netlink: 'syz.4.2630': attribute type 2 has an invalid length. [ 399.143786][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 399.236635][T16020] xt_hashlimit: max too large, truncated to 1048576 [ 399.245072][T16020] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 399.391918][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 399.418799][T16024] ip6tnl2: entered allmulticast mode [ 399.491281][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 399.570812][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 399.663207][T16028] lo speed is unknown, defaulting to 1000 [ 399.999108][T12257] tipc: Node number set to 38249894 [ 400.173215][T16042] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2636'. [ 400.464108][T16047] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 400.507542][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2639'. [ 400.688094][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 400.745049][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'. [ 400.785787][T16055] netlink: 'syz.0.2640': attribute type 11 has an invalid length. [ 401.093326][T16060] bond8: entered allmulticast mode [ 401.195427][T16062] macvlan3: entered promiscuous mode [ 401.223647][T16062] macvlan3: entered allmulticast mode [ 401.241818][T16062] bond8: entered promiscuous mode [ 401.255110][T16078] sctp: [Deprecated]: syz.4.2643 (pid 16078) Use of int in maxseg socket option. [ 401.255110][T16078] Use struct sctp_assoc_value instead [ 401.287125][T16062] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 401.332232][T16062] bond8: left promiscuous mode [ 401.423879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.730757][T16096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.140746][T16119] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 402.164173][T16119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.183506][T12257] lo speed is unknown, defaulting to 1000 [ 402.195090][T12257] syz2: Port: 1 Link DOWN [ 402.259422][T16120] syzkaller1: entered promiscuous mode [ 402.273973][T16120] syzkaller1: entered allmulticast mode [ 402.294106][ T60] wlan0: Trigger new scan to find an IBSS to join [ 402.424445][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 402.446991][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'. [ 402.848642][T16141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'. [ 403.018789][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'. [ 403.071339][T16142] nbd: device at index 64 is going down [ 403.106375][T16146] nbd: device at index 64 is going down [ 403.337111][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.382546][T16154] block nbd4: not configured, cannot reconfigure [ 403.432138][T16154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.558608][T16166] syz_tun: entered allmulticast mode [ 403.866375][ T30] audit: type=1804 audit(1779342022.713:10): pid=16174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2663" name="/newroot/80/cgroup.controllers" dev="tmpfs" ino=429 res=1 errno=0 [ 403.938693][ T30] audit: type=1800 audit(1779342022.743:11): pid=16174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2663" name="cgroup.controllers" dev="tmpfs" ino=429 res=0 errno=0 [ 404.625104][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.707915][T16208] netlink: 'syz.5.2673': attribute type 1 has an invalid length. [ 404.797793][T16213] __nla_validate_parse: 4 callbacks suppressed [ 404.797814][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2673'. [ 405.143776][T16229] veth0: entered promiscuous mode [ 405.204659][T16229] veth0: left promiscuous mode [ 405.720077][T16240] tipc: Resetting bearer [ 406.533387][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.559932][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.583125][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.606919][ T4943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.622083][ T4943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.678988][T16283] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2692'. [ 406.821894][T16293] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 407.001974][T16293] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 407.052562][T16301] pimreg: entered allmulticast mode [ 407.115347][T16307] tipc: Enabling of bearer rejected, failed to enable media [ 407.148570][T16298] pimreg: left allmulticast mode [ 407.222088][T16310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2696'. [ 407.302137][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2697'. [ 407.591543][T16326] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2698'. [ 407.916527][T16336] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2700'. [ 407.978442][T16339] xt_hashlimit: invalid rate [ 408.354708][T16351] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 408.575933][T16259] lo speed is unknown, defaulting to 1000 [ 408.693602][ T5630] Bluetooth: hci6: command tx timeout [ 408.934509][T16379] netlink: 'syz.5.2708': attribute type 1 has an invalid length. [ 409.096577][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.430287][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 409.788615][T16414] netlink: 'syz.5.2718': attribute type 11 has an invalid length. [ 410.349351][T16440] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 410.380063][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.448474][T16433] geneve3: entered promiscuous mode [ 410.507571][T16438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2722'. [ 410.711335][T16427] lo speed is unknown, defaulting to 1000 [ 410.749235][T16444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2722'. [ 410.773989][ T5630] Bluetooth: hci6: command tx timeout [ 410.784364][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 410.809507][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.820923][T16460] netlink: 'syz.5.2726': attribute type 2 has an invalid length. [ 410.823358][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.846834][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 410.858258][T16259] bridge_slave_0: entered allmulticast mode [ 410.881453][T16259] bridge_slave_0: entered promiscuous mode [ 410.989570][T16457] team1: entered promiscuous mode [ 411.000826][T16457] team1: entered allmulticast mode [ 411.007608][T16457] 8021q: adding VLAN 0 to HW filter on device team1 [ 411.054555][T16463] team2: entered promiscuous mode [ 411.059915][T16463] team2: entered allmulticast mode [ 411.067617][T16463] 8021q: adding VLAN 0 to HW filter on device team2 [ 411.076533][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.085245][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.092726][T16259] bridge_slave_1: entered allmulticast mode [ 411.102160][T16259] bridge_slave_1: entered promiscuous mode [ 411.241715][T16259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.321830][T16478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2728'. [ 411.369612][T16259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.441984][T16464] lo speed is unknown, defaulting to 1000 [ 411.585899][T16259] team0: Port device team_slave_0 added [ 411.634719][T16259] team0: Port device team_slave_1 added [ 411.767379][T16259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.774848][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.801527][T16259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.820153][T16259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.827404][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.854430][T16259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.951263][T16259] hsr_slave_0: entered promiscuous mode [ 411.958665][T16259] hsr_slave_1: entered promiscuous mode [ 411.965742][T16259] debugfs: 'hsr0' already exists in 'hsr' [ 411.980561][T16259] Cannot create hsr debugfs directory [ 412.266931][T16497] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2734'. [ 412.503026][T16511] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 412.544578][T16509] ip6tnl3: entered allmulticast mode [ 412.619453][T16525] netlink: 'syz.5.2738': attribute type 2 has an invalid length. [ 412.645894][T16525] netlink: 'syz.5.2738': attribute type 2 has an invalid length. [ 412.657498][ T284] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 412.675930][ T284] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 412.684254][T12259] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 412.694916][T16520] nbd: must specify an index to disconnect [ 412.846484][T16259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.860192][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.870394][ T5630] Bluetooth: hci6: command tx timeout [ 412.883389][T16259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.895974][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.903801][T12258] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 412.913340][T16259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 412.928197][T16539] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 412.957903][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.977542][T16259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.994547][T16259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.125205][T16556] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 413.132941][T16556] CPU: 1 UID: 0 PID: 16556 Comm: syz.1.2745 Not tainted syzkaller #0 PREEMPT(full) [ 413.132969][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.132980][T16556] Call Trace: [ 413.132989][T16556] [ 413.132997][T16556] dump_stack_lvl+0xe8/0x150 [ 413.133028][T16556] sysfs_warn_dup+0x8e/0xa0 [ 413.133054][T16556] sysfs_do_create_link_sd+0xc0/0x110 [ 413.133073][T16556] device_add_class_symlinks+0x1cf/0x240 [ 413.133091][T16556] device_add+0x475/0xbb0 [ 413.133107][T16556] wiphy_register+0x1fb1/0x2fe0 [ 413.133134][T16556] ? __pfx_wiphy_register+0x10/0x10 [ 413.133149][T16556] ? __pfx_netdev_run_todo+0x10/0x10 [ 413.133162][T16556] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 413.133180][T16556] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 413.133199][T16556] ieee80211_register_hw+0x3c53/0x4910 [ 413.133224][T16556] ? ieee80211_register_hw+0x1991/0x4910 [ 413.133257][T16556] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 413.133276][T16556] ? __asan_memset+0x22/0x50 [ 413.133290][T16556] ? __hrtimer_setup+0x1b7/0x260 [ 413.133303][T16556] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.133322][T16556] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 413.133355][T16556] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 413.133375][T16556] ? kstrndup+0xbf/0x160 [ 413.133393][T16556] hwsim_new_radio_nl+0xe20/0x26e0 [ 413.133408][T16556] ? unwind_next_frame+0xa6/0x2550 [ 413.133444][T16556] ? is_bpf_text_address+0x26/0x2b0 [ 413.133484][T16556] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.133508][T16556] ? __kernel_text_address+0xd/0x30 [ 413.133535][T16556] ? unwind_get_return_address+0x4d/0x90 [ 413.133559][T16556] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 413.133588][T16556] ? arch_stack_walk+0xfb/0x150 [ 413.133628][T16556] ? stack_trace_save+0xa9/0x100 [ 413.133656][T16556] ? __pfx_stack_trace_save+0x10/0x10 [ 413.133685][T16556] ? stack_depot_save_flags+0x33/0x810 [ 413.133727][T16556] ? __nla_validate_parse+0x2480/0x2dc0 [ 413.133754][T16556] ? ____sys_sendmsg+0x972/0x9f0 [ 413.133771][T16556] ? ___sys_sendmsg+0x2a5/0x360 [ 413.133812][T16556] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.133866][T16556] ? rcu_is_watching+0x15/0xb0 [ 413.133891][T16556] ? trace_kmalloc+0x2a/0xf0 [ 413.133935][T16556] ? __nla_parse+0x40/0x60 [ 413.133968][T16556] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 413.133993][T16556] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 413.134028][T16556] genl_family_rcv_msg_doit+0x22a/0x330 [ 413.134062][T16556] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.134103][T16556] ? bpf_lsm_capable+0x9/0x20 [ 413.134122][T16556] ? security_capable+0x7e/0x2c0 [ 413.134154][T16556] genl_rcv_msg+0x61c/0x7a0 [ 413.134187][T16556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.134211][T16556] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.134257][T16556] netlink_rcv_skb+0x232/0x4b0 [ 413.134279][T16556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.134307][T16556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.134349][T16556] ? down_read+0x270/0x2e0 [ 413.134366][T16556] ? genl_rcv+0xd/0x40 [ 413.134394][T16556] genl_rcv+0x28/0x40 [ 413.134417][T16556] netlink_unicast+0x75c/0x8e0 [ 413.134460][T16556] netlink_sendmsg+0x813/0xb40 [ 413.134490][T16556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.134513][T16556] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.134540][T16556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.134562][T16556] ____sys_sendmsg+0x972/0x9f0 [ 413.134574][T16556] ? __might_fault+0xaf/0x130 [ 413.134592][T16556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.134610][T16556] ? import_iovec+0x73/0xa0 [ 413.134637][T16556] ___sys_sendmsg+0x2a5/0x360 [ 413.134647][T16556] ? __lock_acquire+0x6b5/0x2cf0 [ 413.134663][T16556] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.134683][T16556] ? futex_wait+0x2a2/0x390 [ 413.134718][T16556] ? __fget_files+0x2a/0x420 [ 413.134731][T16556] ? __fget_files+0x3a0/0x420 [ 413.134751][T16556] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.134765][T16556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.134782][T16556] ? rcu_is_watching+0x15/0xb0 [ 413.134802][T16556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.134814][T16556] do_syscall_64+0x15f/0xf80 [ 413.134830][T16556] ? trace_irq_disable+0x3b/0x140 [ 413.134846][T16556] ? clear_bhb_loop+0x40/0x90 [ 413.134860][T16556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.134871][T16556] RIP: 0033:0x7fbb60b9ce59 [ 413.134886][T16556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.134895][T16556] RSP: 002b:00007fbb61995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.134910][T16556] RAX: ffffffffffffffda RBX: 00007fbb60e15fa0 RCX: 00007fbb60b9ce59 [ 413.134926][T16556] RDX: 0000000000000300 RSI: 00002000000005c0 RDI: 0000000000000007 [ 413.134933][T16556] RBP: 00007fbb60c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 413.134940][T16556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.134947][T16556] R13: 00007fbb60e16038 R14: 00007fbb60e15fa0 R15: 00007fff46c5c228 [ 413.134967][T16556] [ 413.658427][T12259] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 413.731150][T16259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.871365][T16259] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.957422][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.964865][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.983366][T16565] netlink: 'syz.4.2746': attribute type 9 has an invalid length. [ 414.024878][T16565] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2746'. [ 414.060491][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.068294][ T7624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.110113][T16561] lo speed is unknown, defaulting to 1000 [ 414.152063][T16568] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 414.855463][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.943913][ T5630] Bluetooth: hci6: command tx timeout [ 415.272383][T16606] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2755'. [ 415.298590][T16606] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 415.440199][T16259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.809902][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 415.835451][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2757'. [ 415.884361][T16620] netlink: 'syz.4.2757': attribute type 13 has an invalid length. [ 415.923766][T16620] netlink: 'syz.4.2757': attribute type 11 has an invalid length. [ 415.989412][T16259] veth0_vlan: entered promiscuous mode [ 416.010264][T16259] veth1_vlan: entered promiscuous mode [ 416.077709][T16259] veth0_macvtap: entered promiscuous mode [ 416.090730][T16259] veth1_macvtap: entered promiscuous mode [ 416.136910][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.158559][T16632] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2759'. [ 416.165783][T16259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.220887][T16259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.273795][ T7624] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.303268][ T7624] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.322108][ T7624] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.335000][ T7624] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.362943][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2761'. [ 416.388207][T16634] bond9: entered allmulticast mode [ 416.427963][T16640] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.613686][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 416.718860][ T7624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.748828][ T7624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.829832][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.859678][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.233354][T16672] netlink: 'syz.1.2766': attribute type 2 has an invalid length. [ 417.247829][T16668] vxcan3: entered allmulticast mode [ 417.332514][T16677] netlink: 'syz.6.2685': attribute type 1 has an invalid length. [ 417.338305][T16676] netlink: 'syz.1.2766': attribute type 2 has an invalid length. [ 417.350408][T16676] netlink: 'syz.1.2766': attribute type 2 has an invalid length. [ 417.448033][T16666] macsec1: entered promiscuous mode [ 417.468966][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.517903][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.549641][T16679] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.584171][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.600684][T16679] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.612072][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 417.997061][T16706] veth2: entered allmulticast mode [ 418.269981][T16720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.280361][T16709] syzkaller0: create flow: hash 4084969282 index 1 [ 418.563215][ T7618] syzkaller0: tun_net_xmit 76 [ 418.579288][ T7618] syzkaller0: tun_net_xmit 48 [ 418.586787][T10743] syzkaller0: tun_net_xmit 76 [ 418.688457][T16732] netlink: 'syz.5.2781': attribute type 1 has an invalid length. [ 418.764065][T10743] syzkaller0: tun_net_xmit 76 [ 418.791310][T16703] syzkaller0: delete flow: hash 4084969282 index 1 [ 419.632625][T16759] netlink: 'syz.5.2789': attribute type 1 has an invalid length. [ 420.625390][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.905880][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.243790][T16766] __nla_validate_parse: 4 callbacks suppressed [ 423.243811][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'. [ 423.411511][T16780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'. [ 423.565273][T16793] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 423.568484][T16784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2795'. [ 423.678612][T16784] lo speed is unknown, defaulting to 1000 [ 424.007918][T16804] netlink: 'syz.0.2800': attribute type 1 has an invalid length. [ 424.161055][T16812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.332949][T16825] netlink: 'syz.4.2803': attribute type 10 has an invalid length. [ 424.437343][T16831] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2804'. [ 424.453911][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 424.541962][T16814] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 424.565994][T16814] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 425.156410][T16852] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 425.239115][T16856] netlink: 'syz.4.2810': attribute type 1 has an invalid length. [ 425.269873][T16847] lo speed is unknown, defaulting to 1000 [ 425.515583][T16855] syzkaller0: entered promiscuous mode [ 425.533199][T16855] syzkaller0: entered allmulticast mode [ 425.682720][T16869] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2814'. [ 425.743818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.290216][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 426.378846][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.658508][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.824799][T16879] bridge1: entered allmulticast mode [ 429.848590][T16875] lo speed is unknown, defaulting to 1000 [ 430.006939][T16898] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2819'. [ 430.009246][T16894] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2819'. [ 430.108822][T16901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2822'. [ 430.527907][T16917] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 430.530814][T16919] netlink: 'syz.1.2825': attribute type 1 has an invalid length. [ 431.381992][T16946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2835'. [ 431.406633][T16943] syzkaller0: entered promiscuous mode [ 431.412358][T16943] syzkaller0: entered allmulticast mode [ 431.435468][T16943] netlink: 'syz.5.2833': attribute type 9 has an invalid length. [ 431.437998][T16948] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2836'. [ 431.496383][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.559936][T16952] tipc: Enabling of bearer rejected, failed to enable media [ 431.575671][T16952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2837'. [ 431.669268][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2839'. [ 431.682793][T16957] netlink: 'syz.6.2838': attribute type 1 has an invalid length. [ 431.749944][T16962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.764367][T16962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.981587][T16973] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2844'. [ 432.024336][T16974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.089047][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 432.307695][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2849'. [ 432.336131][T16986] tipc: Resetting bearer [ 432.369536][T16986] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 432.495873][T16986] tipc: Resetting bearer [ 432.509635][T16986] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 433.199593][T17010] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 433.302253][T17011] netlink: 'syz.0.2857': attribute type 13 has an invalid length. [ 433.396076][T17017] netlink: 'syz.4.2859': attribute type 12 has an invalid length. [ 433.415299][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.457964][T17011] tipc: Resetting bearer [ 433.563914][T17017] netlink: 'syz.4.2859': attribute type 12 has an invalid length. [ 433.568498][T17020] vlan0: entered promiscuous mode [ 433.679365][T17015] syz_tun (unregistering): left allmulticast mode [ 434.018820][T17045] vlan2: entered allmulticast mode [ 434.026015][T17045] geneve1: entered allmulticast mode [ 434.420336][T17057] lo speed is unknown, defaulting to 1000 [ 434.818864][ T4943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 434.835719][ T4943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 434.846370][ T4943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 434.858385][ T4943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 434.868416][ T4943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 435.011171][T17088] netlink: 'syz.6.2875': attribute type 1 has an invalid length. [ 435.429909][T17097] __nla_validate_parse: 12 callbacks suppressed [ 435.429932][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2877'. [ 435.505850][T17097] netlink: 'syz.6.2877': attribute type 4 has an invalid length. [ 435.605806][T17097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2877'. [ 435.682169][T17097] vlan3: entered promiscuous mode [ 435.702008][T17097] veth0: entered promiscuous mode [ 435.745990][T17112] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.2880'. [ 435.837586][T17075] lo speed is unknown, defaulting to 1000 [ 435.927052][T17115] netlink: 212320 bytes leftover after parsing attributes in process `syz.4.2881'. [ 436.161081][T17128] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 436.201047][T17136] netlink: 'syz.6.2886': attribute type 1 has an invalid length. [ 436.251583][T17140] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2888'. [ 436.285118][T17128] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.370520][T17138] bond10: (slave geneve3): making interface the new active one [ 436.383766][T17138] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 436.935333][ T4943] Bluetooth: hci7: command tx timeout [ 437.165089][T17155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2891'. [ 437.256638][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.854096][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 437.957520][T17075] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.982916][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.997377][T17075] bridge_slave_0: entered allmulticast mode [ 438.006057][T17075] bridge_slave_0: entered promiscuous mode [ 438.016981][T17075] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.024479][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.036803][T17075] bridge_slave_1: entered allmulticast mode [ 438.046723][T17075] bridge_slave_1: entered promiscuous mode [ 438.134020][T17188] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 438.154947][T17075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.195543][T17075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.305434][T17075] team0: Port device team_slave_0 added [ 438.320430][T17075] team0: Port device team_slave_1 added [ 438.401157][T17075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.422680][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.482854][T17075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.529448][T17075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.562751][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.621697][T17075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.677696][T17200] netlink: 'syz.5.2899': attribute type 1 has an invalid length. [ 438.924712][T17075] hsr_slave_0: entered promiscuous mode [ 438.947696][T17075] hsr_slave_1: entered promiscuous mode [ 438.965650][T17075] debugfs: 'hsr0' already exists in 'hsr' [ 438.978375][T17075] Cannot create hsr debugfs directory [ 439.024592][ T4943] Bluetooth: hci7: command tx timeout [ 439.173765][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 439.184959][ T7624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.220738][T17203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2901'. [ 439.442091][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2900'. [ 439.473698][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2900'. [ 439.542328][T17075] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.565572][T17075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.800677][T17075] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.845230][T17075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.981451][T17075] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.016684][T17075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.347815][T17075] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.380964][T17075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.461533][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.946414][T17262] netlink: 'syz.6.2914': attribute type 2 has an invalid length. [ 440.953326][T17263] __nla_validate_parse: 2 callbacks suppressed [ 440.953347][T17263] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2913'. [ 440.994799][T17262] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2914'. [ 441.095285][ T4943] Bluetooth: hci7: command tx timeout [ 441.515454][T17075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.648555][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.692892][T17075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.727359][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.761482][T17075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.827276][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.861075][T17075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.910667][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.946682][T17299] xt_bpf: check failed: parse error [ 441.959564][T17302] openvswitch: netlink: Duplicate or invalid key (type 0). [ 441.987220][T17302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.263230][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 442.274016][T17320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.330614][T17075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.387715][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.411976][T17075] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.423358][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'. [ 442.449224][T17328] xt_TCPMSS: Only works on TCP SYN packets [ 442.476025][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.483322][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.549402][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.557379][ T7624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.575123][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 442.590395][T17333] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2928'. [ 442.619954][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 442.695080][T17333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.725931][T17333] batadv_slave_0: entered promiscuous mode [ 442.738237][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2929'. [ 442.751224][T17333] batadv_slave_0: entered allmulticast mode [ 442.761577][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2929'. [ 442.770366][T17335] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2928'. [ 443.173926][ T4943] Bluetooth: hci7: command tx timeout [ 443.330194][T17360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.732867][T17384] netlink: 'syz.4.2938': attribute type 10 has an invalid length. [ 443.992980][T17393] syzkaller1: entered promiscuous mode [ 444.022048][T17393] syzkaller1: entered allmulticast mode [ 444.543584][T17421] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 444.557956][T17075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.675773][T17075] veth0_vlan: entered promiscuous mode [ 444.695871][T17075] veth1_vlan: entered promiscuous mode [ 444.768279][T17075] veth0_macvtap: entered promiscuous mode [ 444.922437][T17075] veth1_macvtap: entered promiscuous mode [ 444.937669][ T7626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.999915][T17075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.052987][T17075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.123376][ T284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.159226][ T284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.192848][ T284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.227207][ T284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.491161][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.528468][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.568518][T17448] hsr0: entered promiscuous mode [ 445.690377][ T7624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.717557][ T7624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.722386][T17446] hsr0: left promiscuous mode [ 445.871862][T17459] lo speed is unknown, defaulting to 1000 [ 446.599898][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.620751][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.631303][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.652824][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.663215][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.288212][T17488] __nla_validate_parse: 9 callbacks suppressed [ 447.288234][T17488] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2961'. [ 447.323968][T17488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2961'. [ 448.057066][ T284] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.144095][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.247012][T17475] lo speed is unknown, defaulting to 1000 [ 448.318113][ T284] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.504529][ T284] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.703824][ T5630] Bluetooth: hci2: command tx timeout [ 448.744325][ T284] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.167673][T17532] lo speed is unknown, defaulting to 1000 [ 449.405570][T17542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 449.469583][T17541] sctp: [Deprecated]: syz.1.2975 (pid 17541) Use of int in maxseg socket option. [ 449.469583][T17541] Use struct sctp_assoc_value instead [ 450.108969][ T284] bridge_slave_0: left allmulticast mode [ 450.116846][ T284] bridge_slave_0: left promiscuous mode [ 450.126915][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.190563][ T284] pimreg9: left allmulticast mode [ 450.594836][ T284] bond7 (unregistering): (slave gretap1): Releasing active interface [ 450.642448][ T284] bond2 (unregistering): (slave geneve2): Releasing active interface [ 450.709897][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.785083][ T5630] Bluetooth: hci2: command tx timeout [ 451.109735][ T284] bond9 (unregistering): (slave bridge9): Releasing active interface [ 451.192593][ T284] bond1 (unregistering): Released all slaves [ 451.211341][ T284] bond2 (unregistering): Released all slaves [ 451.228854][ T284]  (unregistering): Released all slaves [ 451.256147][ T284] bond3 (unregistering): Released all slaves [ 451.274173][ T284] bond4 (unregistering): (slave bond5): Releasing backup interface [ 451.283104][ T284] bond4 (unregistering): Released all slaves [ 451.302234][ T284] bond5 (unregistering): Released all slaves [ 451.322116][ T284] bond6 (unregistering): Released all slaves [ 451.347251][ T284] bond7 (unregistering): Released all slaves [ 451.368001][ T284] bond8 (unregistering): Released all slaves [ 451.385660][ T284] bond0 (unregistering): Released all slaves [ 451.401609][ T284] bond9 (unregistering): Released all slaves [ 451.416547][ T284] bond10 (unregistering): Released all slaves [ 451.475761][T17562] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 451.607756][ T284] tipc: Disabling bearer [ 451.642099][ T284] tipc: Left network mode [ 451.785939][T17572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2981'. [ 451.819494][T17475] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.855409][T17475] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.896167][T17475] bridge_slave_0: entered allmulticast mode [ 451.906300][T17475] bridge_slave_0: entered promiscuous mode [ 451.924533][T17576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2981'. [ 452.067351][T17572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.075904][T17583] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2981'. [ 452.136287][T17572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.167654][T17572] bond0 (unregistering): Released all slaves [ 452.240648][T17475] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.272180][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.299074][T17475] bridge_slave_1: entered allmulticast mode [ 452.321793][T17475] bridge_slave_1: entered promiscuous mode [ 452.856888][ T5630] Bluetooth: hci2: command tx timeout [ 452.949641][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.989030][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.117215][T17475] team0: Port device team_slave_0 added [ 453.144787][T17475] team0: Port device team_slave_1 added [ 453.256865][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 453.402198][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.425460][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.485440][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.571632][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.608271][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.715414][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.800551][T17627] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 453.905974][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.975537][T17633] netlink: 'syz.6.2991': attribute type 12 has an invalid length. [ 454.012788][T17633] netlink: 'syz.6.2991': attribute type 29 has an invalid length. [ 454.036414][T17633] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2991'. [ 454.052681][T17633] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2991'. [ 454.116966][T17636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.148972][T17626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.170461][T17622] lo speed is unknown, defaulting to 1000 [ 454.233803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.288789][T17475] hsr_slave_0: entered promiscuous mode [ 454.301257][T17646] netlink: 'syz.0.2994': attribute type 4 has an invalid length. [ 454.313273][T17475] hsr_slave_1: entered promiscuous mode [ 454.319910][T17475] debugfs: 'hsr0' already exists in 'hsr' [ 454.327490][T17475] Cannot create hsr debugfs directory [ 454.354152][T17647] netlink: 'syz.0.2994': attribute type 4 has an invalid length. [ 454.363748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.438024][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.723818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.755095][T17656] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2996'. [ 454.779578][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.787047][T17652] bridge0: port 2(bridge_slave_1) entered listening state [ 454.896379][T17652] bond1: left promiscuous mode [ 454.901413][T17652] bridge2: left promiscuous mode [ 454.912000][T17652] vlan3: left promiscuous mode [ 454.926569][T17652] ip6gre1: left promiscuous mode [ 454.944236][ T5630] Bluetooth: hci2: command tx timeout [ 455.087308][ T7624] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.156988][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 455.251538][ T7624] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.277598][ T7624] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.486734][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3001'. [ 455.845170][ T7633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.328701][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3003'. [ 456.383924][T17697] netlink: 'syz.6.3003': attribute type 13 has an invalid length. [ 456.392400][T17697] netlink: 'syz.6.3003': attribute type 17 has an invalid length. [ 456.409173][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 456.868972][T17697] vlan0: left promiscuous mode [ 457.035075][T17697] bridge1: left allmulticast mode [ 457.043126][T17697] veth1_to_hsr: entered promiscuous mode [ 457.054429][T17697] vlan2: left allmulticast mode [ 457.059567][T17697] geneve1: left allmulticast mode [ 457.072468][T17697] vlan3: left promiscuous mode [ 457.077772][T17697] veth0: left promiscuous mode [ 457.357901][ T284] hsr_slave_0: left promiscuous mode [ 457.400570][ T284] hsr_slave_1: left promiscuous mode [ 457.408935][ T284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.429951][ T284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.437840][ T284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.460617][ T284] veth1_macvtap: left promiscuous mode [ 457.468409][ T284] veth0_macvtap: left promiscuous mode [ 459.946146][T17696] Set syz1 is full, maxelem 65536 reached [ 462.337267][ T284] team0 (unregistering): Port device team_slave_1 removed [ 462.352386][ T284] team0 (unregistering): Port device team_slave_0 removed [ 462.460182][ T284] team0 (unregistering): Port device dummy0 removed [ 462.971080][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 462.982744][T17726] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 463.056285][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 463.686889][T17739] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 463.734634][T17739] CPU: 0 UID: 0 PID: 17739 Comm: syz.0.3015 Not tainted syzkaller #0 PREEMPT(full) [ 463.734664][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.734676][T17739] Call Trace: [ 463.734684][T17739] [ 463.734694][T17739] dump_stack_lvl+0xe8/0x150 [ 463.734726][T17739] sysfs_warn_dup+0x8e/0xa0 [ 463.734754][T17739] sysfs_do_create_link_sd+0xc0/0x110 [ 463.734783][T17739] device_add_class_symlinks+0x1cf/0x240 [ 463.734813][T17739] device_add+0x475/0xbb0 [ 463.734842][T17739] wiphy_register+0x1fb1/0x2fe0 [ 463.734892][T17739] ? __pfx_wiphy_register+0x10/0x10 [ 463.734922][T17739] ? __pfx_netdev_run_todo+0x10/0x10 [ 463.734945][T17739] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 463.734978][T17739] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 463.735012][T17739] ieee80211_register_hw+0x3c53/0x4910 [ 463.735057][T17739] ? ieee80211_register_hw+0x1991/0x4910 [ 463.735123][T17739] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 463.735164][T17739] ? __asan_memset+0x22/0x50 [ 463.735188][T17739] ? __hrtimer_setup+0x1b7/0x260 [ 463.735214][T17739] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 463.735247][T17739] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 463.735311][T17739] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 463.735337][T17739] ? kstrndup+0xbf/0x160 [ 463.735370][T17739] hwsim_new_radio_nl+0xe20/0x26e0 [ 463.735394][T17739] ? unwind_next_frame+0xa6/0x2550 [ 463.735449][T17739] ? is_bpf_text_address+0x26/0x2b0 [ 463.735486][T17739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.735510][T17739] ? __kernel_text_address+0xd/0x30 [ 463.735538][T17739] ? unwind_get_return_address+0x4d/0x90 [ 463.735562][T17739] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 463.735592][T17739] ? arch_stack_walk+0xfb/0x150 [ 463.735633][T17739] ? stack_trace_save+0xa9/0x100 [ 463.735663][T17739] ? __pfx_stack_trace_save+0x10/0x10 [ 463.735697][T17739] ? stack_depot_save_flags+0x33/0x810 [ 463.735741][T17739] ? __nla_validate_parse+0x2480/0x2dc0 [ 463.735768][T17739] ? ____sys_sendmsg+0x972/0x9f0 [ 463.735786][T17739] ? ___sys_sendmsg+0x2a5/0x360 [ 463.735826][T17739] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.735879][T17739] ? rcu_is_watching+0x15/0xb0 [ 463.735904][T17739] ? trace_kmalloc+0x2a/0xf0 [ 463.735936][T17739] ? __nla_parse+0x40/0x60 [ 463.735968][T17739] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 463.735989][T17739] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 463.736020][T17739] genl_family_rcv_msg_doit+0x22a/0x330 [ 463.736053][T17739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.736097][T17739] ? bpf_lsm_capable+0x9/0x20 [ 463.736117][T17739] ? security_capable+0x7e/0x2c0 [ 463.736152][T17739] genl_rcv_msg+0x61c/0x7a0 [ 463.736181][T17739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.736200][T17739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.736235][T17739] netlink_rcv_skb+0x232/0x4b0 [ 463.736254][T17739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.736284][T17739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.736326][T17739] ? down_read+0x270/0x2e0 [ 463.736345][T17739] ? genl_rcv+0xd/0x40 [ 463.736373][T17739] genl_rcv+0x28/0x40 [ 463.736399][T17739] netlink_unicast+0x75c/0x8e0 [ 463.736452][T17739] netlink_sendmsg+0x813/0xb40 [ 463.736486][T17739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.736513][T17739] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.736543][T17739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.736576][T17739] ____sys_sendmsg+0x972/0x9f0 [ 463.736597][T17739] ? __might_fault+0xaf/0x130 [ 463.736633][T17739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.736666][T17739] ? import_iovec+0x73/0xa0 [ 463.736701][T17739] ___sys_sendmsg+0x2a5/0x360 [ 463.736721][T17739] ? __lock_acquire+0x6b5/0x2cf0 [ 463.736750][T17739] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.736781][T17739] ? futex_wait+0x2a2/0x390 [ 463.736843][T17739] ? __fget_files+0x2a/0x420 [ 463.736866][T17739] ? __fget_files+0x3a0/0x420 [ 463.736905][T17739] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.736929][T17739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.736962][T17739] ? rcu_is_watching+0x15/0xb0 [ 463.737000][T17739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.737023][T17739] do_syscall_64+0x15f/0xf80 [ 463.737051][T17739] ? trace_irq_disable+0x3b/0x140 [ 463.737081][T17739] ? clear_bhb_loop+0x40/0x90 [ 463.737107][T17739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.737127][T17739] RIP: 0033:0x7f41c339ce59 [ 463.737148][T17739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.737164][T17739] RSP: 002b:00007f41c4176028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.737186][T17739] RAX: ffffffffffffffda RBX: 00007f41c3615fa0 RCX: 00007f41c339ce59 [ 463.737200][T17739] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 463.737213][T17739] RBP: 00007f41c3432d6f R08: 0000000000000000 R09: 0000000000000000 [ 463.737225][T17739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.737236][T17739] R13: 00007f41c3616038 R14: 00007f41c3615fa0 R15: 00007ffe45ae80b8 [ 463.737273][T17739] [ 464.268169][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3016'. [ 464.281022][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3016'. [ 464.423879][T17745] lo speed is unknown, defaulting to 1000 [ 464.456035][ T284] IPVS: stop unused estimator thread 0... [ 464.642958][T17475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.685348][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.699242][T17475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.727266][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.878591][T17475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.956047][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.969931][T17775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3022'. [ 464.989518][T17475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.999277][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 465.022763][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.199188][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3024'. [ 465.546967][T17475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.652987][T17475] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.698019][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.705295][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.816249][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.823551][ T7633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.891008][T17823] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 466.079540][T17811] syzkaller0: entered promiscuous mode [ 466.094457][T17830] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3030'. [ 466.095274][T17811] syzkaller0: entered allmulticast mode [ 466.150347][T17830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.601533][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 466.627346][T17841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3032'. [ 468.214498][T17873] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 471.065578][T17869] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 471.075958][T17869] __nla_validate_parse: 3 callbacks suppressed [ 471.075974][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3038'. [ 471.218451][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 471.231908][T17875] lo speed is unknown, defaulting to 1000 [ 471.248965][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 471.341977][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3040'. [ 471.602950][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 471.780603][T17902] sctp: [Deprecated]: syz.5.3046 (pid 17902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.780603][T17902] Use struct sctp_sack_info instead [ 472.751310][T17948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3052'. [ 472.811219][T17475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.087872][T17962] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3054'. [ 473.256068][ T4943] Bluetooth: hci5: command 0x0406 tx timeout [ 474.086750][T18000] syzkaller1: entered promiscuous mode [ 474.112884][T18000] syzkaller1: entered allmulticast mode [ 474.128254][T17475] veth0_vlan: entered promiscuous mode [ 474.171557][T17475] veth1_vlan: entered promiscuous mode [ 474.192716][T18003] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 474.368889][T18007] batman_adv: batadv0: Adding interface: macvlan2 [ 474.377286][T18007] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.409739][T18007] batman_adv: batadv0: Interface activated: macvlan2 [ 474.511453][T17475] veth0_macvtap: entered promiscuous mode [ 474.515782][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'. [ 474.549110][T17475] veth1_macvtap: entered promiscuous mode [ 474.627610][T17475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.667928][T18014] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3067'. [ 474.685098][T17475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.753386][T18014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.796614][T18014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.846659][T18014] bond0 (unregistering): Released all slaves [ 474.931677][ T7631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.987360][ T7631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.049219][ T7631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.087036][ T7631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.526515][ T7624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.554309][ T7624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.758010][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.800482][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.984627][T18059] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3080'. [ 476.029765][T18053] lo speed is unknown, defaulting to 1000 [ 476.815896][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 477.061236][T18102] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3090'. [ 477.542754][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.562530][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.584189][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.608355][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.621096][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.813877][T18122] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.3095'. [ 477.831971][T18122] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 478.102641][T18127] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 478.113671][T18126] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 478.247243][T18133] bridge0: port 3(macvlan2) entered blocking state [ 478.264542][T18133] bridge0: port 3(macvlan2) entered disabled state [ 478.284076][T18133] macvlan2: entered allmulticast mode [ 478.293282][T18133] ip6gretap0: entered allmulticast mode [ 478.317350][T18133] macvlan2: entered promiscuous mode [ 478.344573][T18133] bridge0: port 3(macvlan2) entered blocking state [ 478.351372][T18133] bridge0: port 3(macvlan2) entered forwarding state [ 478.362520][T18136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3099'. [ 478.471564][T18133] bond0: entered promiscuous mode [ 478.698731][T18154] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.713252][T18152] syzkaller1: entered promiscuous mode [ 478.720767][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 478.731260][T18152] syzkaller1: entered allmulticast mode [ 478.930382][T18112] lo speed is unknown, defaulting to 1000 [ 478.957040][T18158] block nbd0: NBD_DISCONNECT [ 478.976912][T18158] block nbd0: Send disconnect failed -32 [ 479.018008][T18158] block nbd0: Send disconnect failed -32 [ 479.049276][T18158] block nbd0: shutting down sockets [ 479.319737][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3108'. [ 479.388016][T18177] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 479.412464][T18178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3108'. [ 479.485176][T18182] gretap1: entered allmulticast mode [ 479.657358][ T5630] Bluetooth: hci0: command tx timeout [ 479.711720][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 479.889232][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 479.916363][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 480.148445][T18112] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.171879][T18112] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.209863][T18112] bridge_slave_0: entered allmulticast mode [ 480.246110][T18112] bridge_slave_0: entered promiscuous mode [ 480.276670][T18112] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.290380][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.306849][T18112] bridge_slave_1: entered allmulticast mode [ 480.322572][T18112] bridge_slave_1: entered promiscuous mode [ 480.444424][T18215] syzkaller0: entered promiscuous mode [ 480.457084][T18215] syzkaller0: entered allmulticast mode [ 481.743737][ T5630] Bluetooth: hci0: command tx timeout [ 482.016176][T18245] sctp: [Deprecated]: syz.0.3129 (pid 18245) Use of int in maxseg socket option. [ 482.016176][T18245] Use struct sctp_assoc_value instead [ 482.362066][T18247] __nla_validate_parse: 6 callbacks suppressed [ 482.362085][T18247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3129'. [ 483.824738][ T5630] Bluetooth: hci0: command tx timeout [ 485.257449][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 485.392232][T18112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.429561][T18237] : entered promiscuous mode [ 485.597377][T18112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.625575][T18257] tc_dump_action: action bad kind [ 486.234852][T18112] team0: Port device team_slave_0 added [ 486.273308][T18112] team0: Port device team_slave_1 added [ 486.404827][T18112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.422042][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.496969][T18112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.566966][T18112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.607887][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.648426][T18112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.661354][T18290] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3139'. [ 486.679619][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 486.910392][T18305] netlink: 'syz.0.3143': attribute type 49 has an invalid length. [ 486.910836][T18112] hsr_slave_0: entered promiscuous mode [ 486.927003][T18112] hsr_slave_1: entered promiscuous mode [ 486.935423][T18112] debugfs: 'hsr0' already exists in 'hsr' [ 486.941411][T18112] Cannot create hsr debugfs directory [ 486.974055][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 487.199821][T18303] syzkaller0: entered promiscuous mode [ 487.206162][T18303] syzkaller0: entered allmulticast mode [ 487.293702][T18318] pim6reg: entered allmulticast mode [ 487.781344][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3149'. [ 488.090519][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3152'. [ 492.044241][T18353] syzkaller0: entered promiscuous mode [ 492.054220][T18353] syzkaller0: entered allmulticast mode [ 492.208326][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3154'. [ 492.329625][T18112] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.347770][T18112] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.394110][T18371] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 492.405811][T18371] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 492.625632][T18112] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.670877][T18112] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.797253][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'. [ 493.255768][T18112] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.272454][T18409] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3165'. [ 493.285201][T18112] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.622458][T18414] hmac(sha2: entered promiscuous mode [ 493.632432][T18420] xt_hashlimit: size too large, truncated to 1048576 [ 493.822635][T18112] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.857018][T18112] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.921449][T18428] netlink: 544 bytes leftover after parsing attributes in process `syz.0.3168'. [ 494.751839][T18452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3174'. [ 494.768220][T18455] team0: entered promiscuous mode [ 494.774313][T18455] team_slave_0: entered promiscuous mode [ 494.780597][T18455] team_slave_1: entered promiscuous mode [ 494.829677][T18112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.855575][T18112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.886170][T18112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.919918][T18112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.944732][T18112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.026413][T18112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.072513][T18463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3176'. [ 495.111346][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 495.126616][T18112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.153371][T18112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.383343][T18488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3181'. [ 495.450655][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3182'. [ 495.688271][T18112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.708639][T18497] netlink: 'syz.6.3183': attribute type 3 has an invalid length. [ 495.820475][ T5288] veth1_vlan: left promiscuous mode [ 495.897820][T18112] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.942197][T14369] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.949614][T14369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.014397][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.021865][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.177793][T18514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.220380][T18514] batadv_slave_0: entered promiscuous mode [ 496.245097][T18514] batadv_slave_0: entered allmulticast mode [ 496.606912][T18532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3191'. [ 497.774823][T18564] netlink: 'syz.6.3195': attribute type 10 has an invalid length. [ 497.803263][T18564] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3195'. [ 497.962782][T18564] geneve1: entered promiscuous mode [ 498.019976][T18564] team0: Port device geneve1 added [ 498.125914][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 498.168751][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 498.200487][T18112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.355300][T18577] FAULT_INJECTION: forcing a failure. [ 498.355300][T18577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.453328][T18112] veth0_vlan: entered promiscuous mode [ 498.458302][T18577] CPU: 1 UID: 0 PID: 18577 Comm: syz.6.3198 Not tainted syzkaller #0 PREEMPT(full) [ 498.458329][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.458339][T18577] Call Trace: [ 498.458347][T18577] [ 498.458354][T18577] dump_stack_lvl+0xe8/0x150 [ 498.458380][T18577] should_fail_ex+0x412/0x560 [ 498.458408][T18577] _copy_from_user+0x2d/0xb0 [ 498.458432][T18577] ___sys_sendmsg+0x1c6/0x360 [ 498.458449][T18577] ? __lock_acquire+0x6b5/0x2cf0 [ 498.458472][T18577] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.458523][T18577] ? __fget_files+0x2a/0x420 [ 498.458543][T18577] ? __fget_files+0x3a0/0x420 [ 498.458573][T18577] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.458593][T18577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.458620][T18577] ? __pfx_ksys_write+0x10/0x10 [ 498.458652][T18577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.458669][T18577] do_syscall_64+0x15f/0xf80 [ 498.458691][T18577] ? trace_irq_disable+0x3b/0x140 [ 498.458715][T18577] ? clear_bhb_loop+0x40/0x90 [ 498.458736][T18577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.458752][T18577] RIP: 0033:0x7fc1aef9ce59 [ 498.458769][T18577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.458784][T18577] RSP: 002b:00007fc1afdb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.458803][T18577] RAX: ffffffffffffffda RBX: 00007fc1af215fa0 RCX: 00007fc1aef9ce59 [ 498.458815][T18577] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 498.458826][T18577] RBP: 00007fc1afdb9090 R08: 0000000000000000 R09: 0000000000000000 [ 498.458836][T18577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.458846][T18577] R13: 00007fc1af216038 R14: 00007fc1af215fa0 R15: 00007ffdf3b84058 [ 498.458875][T18577] [ 498.661121][T18582] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3199'. [ 498.732144][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 498.759082][T18112] veth1_vlan: entered promiscuous mode [ 498.801352][T18590] syzkaller1: entered promiscuous mode [ 498.824248][T18590] syzkaller1: entered allmulticast mode [ 498.976675][T18112] veth0_macvtap: entered promiscuous mode [ 499.025212][T18603] netlink: 'syz.4.3205': attribute type 21 has an invalid length. [ 499.120468][T18112] veth1_macvtap: entered promiscuous mode [ 499.211051][ T758] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.231434][ T758] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.299876][ T758] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.323667][ T758] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.379120][T18112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.412677][T18112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.636850][T18617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.707260][ T7614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.730389][ T7614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.779919][T18624] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 499.790585][T18631] FAULT_INJECTION: forcing a failure. [ 499.790585][T18631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.805051][T18631] CPU: 1 UID: 0 PID: 18631 Comm: syz.4.3212 Not tainted syzkaller #0 PREEMPT(full) [ 499.805074][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.805083][T18631] Call Trace: [ 499.805089][T18631] [ 499.805095][T18631] dump_stack_lvl+0xe8/0x150 [ 499.805118][T18631] should_fail_ex+0x412/0x560 [ 499.805142][T18631] _copy_from_user+0x2d/0xb0 [ 499.805163][T18631] __copy_msghdr+0x3c5/0x5b0 [ 499.805182][T18631] ___sys_sendmsg+0x213/0x360 [ 499.805195][T18631] ? __lock_acquire+0x6b5/0x2cf0 [ 499.805215][T18631] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.805259][T18631] ? __fget_files+0x2a/0x420 [ 499.805275][T18631] ? __fget_files+0x3a0/0x420 [ 499.805301][T18631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.805318][T18631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.805341][T18631] ? __pfx_ksys_write+0x10/0x10 [ 499.805373][T18631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.805390][T18631] do_syscall_64+0x15f/0xf80 [ 499.805410][T18631] ? trace_irq_disable+0x3b/0x140 [ 499.805430][T18631] ? clear_bhb_loop+0x40/0x90 [ 499.805448][T18631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.805462][T18631] RIP: 0033:0x7f8ace99ce59 [ 499.805480][T18631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.805493][T18631] RSP: 002b:00007f8acf7ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.805511][T18631] RAX: ffffffffffffffda RBX: 00007f8acec15fa0 RCX: 00007f8ace99ce59 [ 499.805521][T18631] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 499.805530][T18631] RBP: 00007f8acf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 499.805538][T18631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.805546][T18631] R13: 00007f8acec16038 R14: 00007f8acec15fa0 R15: 00007ffcbf6dd128 [ 499.805571][T18631] [ 499.816327][T18624] dvmrp1: linktype set to 804 [ 499.824144][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3209'. [ 499.994700][ T7614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.994790][ T7614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.344093][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.381880][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.530041][ T758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.560454][ T758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.759317][T18654] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3217'. [ 500.856690][T18656] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3091'. [ 500.976249][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 500.988237][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3217'. [ 501.086568][T18668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.630039][T18688] PKCS7: Unknown OID: [4] (bad) [ 501.642651][T18690] PKCS7: Unknown OID: [4] (bad) [ 501.649913][T18688] PKCS7: Only support pkcs7_signedData type [ 501.660126][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3223'. [ 501.667618][T18690] PKCS7: Only support pkcs7_signedData type [ 501.760981][T18677] openvswitch: : Dropping previously announced user features [ 502.127938][T18708] netlink: 'syz.4.3228': attribute type 34 has an invalid length. [ 502.831510][T18741] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 502.908451][T18747] syzkaller1: entered promiscuous mode [ 502.927256][T18747] syzkaller1: entered allmulticast mode [ 503.376800][T18759] __nla_validate_parse: 4 callbacks suppressed [ 503.376824][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'. [ 503.571144][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3243'. [ 503.973029][T18786] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 503.994272][T18786] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 504.049216][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 505.268884][T18802] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 505.667230][T18839] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3256'. [ 509.270963][T18823] tipc: Enabling of bearer rejected, failed to enable media [ 509.614743][T18854] Bluetooth: MGMT ver 1.23 [ 509.750583][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 509.901773][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3267'. [ 510.383051][T18894] bridge0: port 3(vlan4) entered blocking state [ 510.408018][T18894] bridge0: port 3(vlan4) entered disabled state [ 510.431601][T18894] vlan4: entered allmulticast mode [ 510.446129][T18894] geneve0: entered allmulticast mode [ 510.470878][T18894] vlan4: entered promiscuous mode [ 510.490821][T18894] geneve0: entered promiscuous mode [ 510.842322][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3276'. [ 510.858174][T18927] FAULT_INJECTION: forcing a failure. [ 510.858174][T18927] name failslab, interval 1, probability 0, space 0, times 0 [ 510.915641][T18927] CPU: 1 UID: 0 PID: 18927 Comm: syz.1.3280 Not tainted syzkaller #0 PREEMPT(full) [ 510.915670][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.915681][T18927] Call Trace: [ 510.915688][T18927] [ 510.915696][T18927] dump_stack_lvl+0xe8/0x150 [ 510.915723][T18927] should_fail_ex+0x412/0x560 [ 510.915754][T18927] should_failslab+0xa8/0x100 [ 510.915784][T18927] __kmalloc_cache_noprof+0x88/0x660 [ 510.915808][T18927] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 510.915834][T18927] ? sctp_add_bind_addr+0x8c/0x370 [ 510.915869][T18927] sctp_add_bind_addr+0x8c/0x370 [ 510.915898][T18927] sctp_copy_local_addr_list+0x314/0x4f0 [ 510.915927][T18927] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 510.915961][T18927] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 510.915988][T18927] ? sctp_v6_is_any+0x64/0x80 [ 510.916015][T18927] ? sctp_copy_one_addr+0x93/0x360 [ 510.916043][T18927] sctp_bind_addr_copy+0xb3/0x3c0 [ 510.916069][T18927] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 510.916096][T18927] sctp_connect_new_asoc+0x2ff/0x6b0 [ 510.916119][T18927] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 510.916145][T18927] ? __local_bh_enable_ip+0xd0/0x130 [ 510.916163][T18927] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 510.916189][T18927] ? security_sctp_bind_connect+0x7e/0x2c0 [ 510.916214][T18927] sctp_sendmsg+0x1576/0x2c50 [ 510.916249][T18927] ? __pfx_sctp_sendmsg+0x10/0x10 [ 510.916271][T18927] ? aa_sk_perm+0x6d5/0x900 [ 510.916292][T18927] ? __might_fault+0xaf/0x130 [ 510.916322][T18927] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.916348][T18927] ? sock_rps_record_flow+0x19/0x350 [ 510.916377][T18927] ? inet_sendmsg+0x2f4/0x370 [ 510.916405][T18927] ____sys_sendmsg+0x80a/0x9f0 [ 510.916435][T18927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.916464][T18927] ? import_iovec+0x73/0xa0 [ 510.916496][T18927] ___sys_sendmsg+0x2a5/0x360 [ 510.916512][T18927] ? __lock_acquire+0x6b5/0x2cf0 [ 510.916538][T18927] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.916598][T18927] ? __fget_files+0x2a/0x420 [ 510.916618][T18927] ? __fget_files+0x3a0/0x420 [ 510.916661][T18927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.916682][T18927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.916719][T18927] ? __pfx_ksys_write+0x10/0x10 [ 510.916775][T18927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.916802][T18927] do_syscall_64+0x15f/0xf80 [ 510.916833][T18927] ? trace_irq_disable+0x3b/0x140 [ 510.916860][T18927] ? clear_bhb_loop+0x40/0x90 [ 510.916883][T18927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.916900][T18927] RIP: 0033:0x7fc07159ce59 [ 510.916918][T18927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.916939][T18927] RSP: 002b:00007fc0724a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.916960][T18927] RAX: ffffffffffffffda RBX: 00007fc071815fa0 RCX: 00007fc07159ce59 [ 510.916973][T18927] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 510.916984][T18927] RBP: 00007fc0724a3090 R08: 0000000000000000 R09: 0000000000000000 [ 510.916995][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.917006][T18927] R13: 00007fc071816038 R14: 00007fc071815fa0 R15: 00007ffe3e461b78 [ 510.917039][T18927] [ 511.388349][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 511.684143][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3287'. [ 512.107140][T18971] bond2: option xmit_hash_policy: invalid value (10) [ 512.117623][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3290'. [ 512.140950][T18971] bond2 (unregistering): Released all slaves [ 512.318047][T18987] tipc: Started in network mode [ 512.331475][T18987] tipc: Node identity , cluster identity 4711 [ 512.346800][T18987] tipc: Failed to set node id, please configure manually [ 512.356726][T18987] tipc: Enabling of bearer rejected, failed to enable media [ 512.855963][T19016] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3303'. [ 512.902416][T19016] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3303'. [ 513.171209][T19036] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3308'. [ 513.205190][T19036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3308'. [ 513.232478][T19034] lo speed is unknown, defaulting to 1000 [ 513.640410][T19050] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 514.580999][ T30] audit: type=1107 audit(1779342133.423:12): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 514.956195][T19097] __nla_validate_parse: 6 callbacks suppressed [ 514.956214][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3320'. [ 514.994789][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3320'. [ 515.333527][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.340974][ C0] bridge0: topology change detected, propagating [ 515.554663][T19128] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3329'. [ 515.712177][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 515.856241][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 516.012730][T19138] bond1: option mode: invalid value (254) [ 516.079955][T19138] bond1 (unregistering): Released all slaves [ 516.100915][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 516.386765][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 516.825678][T19186] hm3): entered promiscuous mode [ 517.027706][T19192] syzkaller0: entered promiscuous mode [ 517.033670][T19192] syzkaller0: entered allmulticast mode [ 517.432769][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 517.663035][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3344'. [ 519.139248][T19240] netlink: 'syz.5.3350': attribute type 1 has an invalid length. [ 522.201204][T19235] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 522.231089][T19235] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 522.716722][T19258] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 522.790605][T19273] netlink: 'syz.5.3359': attribute type 14 has an invalid length. [ 522.816211][T19262] lo speed is unknown, defaulting to 1000 [ 523.021116][ T30] audit: type=1804 audit(1779342141.853:13): pid=19281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3365" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1256 res=1 errno=0 [ 523.080313][T19285] openvswitch: netlink: Actions may not be safe on all matching packets [ 523.081218][ T30] audit: type=1800 audit(1779342141.853:14): pid=19281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3365" name="cgroup.controllers" dev="tmpfs" ino=1256 res=0 errno=0 [ 523.389764][T19291] lo speed is unknown, defaulting to 1000 [ 523.419549][T19298] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 523.448153][T19301] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 523.535420][T19297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.690094][T19293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.101476][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'. [ 524.108979][T19326] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 524.123220][T19332] netlink: 'syz.0.3374': attribute type 21 has an invalid length. [ 524.124778][T19326] bond1 (unregistering): Released all slaves [ 524.131624][T19332] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3374'. [ 524.152676][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 524.210950][T19332] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 524.222588][T19332] netlink: 'syz.0.3374': attribute type 5 has an invalid length. [ 524.232952][T19332] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3374'. [ 524.359969][T19334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3376'. [ 525.081249][T19360] : entered promiscuous mode [ 525.093191][T19364] 8021q: VLANs not supported on syzkaller0 [ 525.110321][T19364] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode [ 525.118598][T19364] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode [ 525.140649][T19362] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 525.409101][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 526.049699][T19410] netlink: zone id is out of range [ 526.069964][T19410] netlink: zone id is out of range [ 526.087483][T19410] netlink: zone id is out of range [ 526.101885][T19410] netlink: zone id is out of range [ 526.130669][T19410] netlink: zone id is out of range [ 526.159231][T19410] netlink: zone id is out of range [ 526.179571][T19410] netlink: zone id is out of range [ 526.200251][T19410] netlink: zone id is out of range [ 526.438582][T19395] veth3: entered allmulticast mode [ 526.659272][T19424] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3399'. [ 527.336724][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3405'. [ 527.463146][T19461] ip6gretap0: entered promiscuous mode [ 527.612124][T19465] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 527.631960][T19465] syzkaller0: entered promiscuous mode [ 527.645411][T19465] syzkaller0: entered allmulticast mode [ 527.772624][T19463] lo speed is unknown, defaulting to 1000 [ 528.126831][T19489] pimreg: tun_chr_ioctl cmd 35111 [ 528.397066][T19482] RDS: rds_bind could not find a transport for ::ffff:100.1.1.4, load rds_tcp or rds_rdma? [ 528.455106][T19475] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 528.476332][T19475] CPU: 1 UID: 0 PID: 19475 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 528.476363][T19475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.476376][T19475] Call Trace: [ 528.476384][T19475] [ 528.476393][T19475] dump_stack_lvl+0xe8/0x150 [ 528.476424][T19475] sysfs_warn_dup+0x8e/0xa0 [ 528.476451][T19475] sysfs_do_create_link_sd+0xc0/0x110 [ 528.476490][T19475] device_add_class_symlinks+0x1cf/0x240 [ 528.476520][T19475] device_add+0x475/0xbb0 [ 528.476549][T19475] wiphy_register+0x1fb1/0x2fe0 [ 528.476597][T19475] ? __pfx_wiphy_register+0x10/0x10 [ 528.476625][T19475] ? __pfx_netdev_run_todo+0x10/0x10 [ 528.476646][T19475] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 528.476678][T19475] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 528.476713][T19475] ieee80211_register_hw+0x3c53/0x4910 [ 528.476756][T19475] ? ieee80211_register_hw+0x1991/0x4910 [ 528.476820][T19475] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 528.476854][T19475] ? __asan_memset+0x22/0x50 [ 528.476877][T19475] ? __hrtimer_setup+0x1b7/0x260 [ 528.476900][T19475] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 528.476930][T19475] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 528.476990][T19475] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 528.477014][T19475] ? kstrndup+0xbf/0x160 [ 528.477051][T19475] hwsim_new_radio_nl+0xe20/0x26e0 [ 528.477074][T19475] ? unwind_next_frame+0xa6/0x2550 [ 528.477119][T19475] ? is_bpf_text_address+0x26/0x2b0 [ 528.477155][T19475] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.477182][T19475] ? __kernel_text_address+0xd/0x30 [ 528.477210][T19475] ? unwind_get_return_address+0x4d/0x90 [ 528.477234][T19475] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.477262][T19475] ? arch_stack_walk+0xfb/0x150 [ 528.477303][T19475] ? stack_trace_save+0xa9/0x100 [ 528.477331][T19475] ? __pfx_stack_trace_save+0x10/0x10 [ 528.477357][T19475] ? lock_acquire+0x106/0x350 [ 528.477382][T19475] ? stack_depot_save_flags+0x33/0x810 [ 528.477425][T19475] ? __nla_validate_parse+0x2480/0x2dc0 [ 528.477452][T19475] ? ____sys_sendmsg+0x972/0x9f0 [ 528.477470][T19475] ? ___sys_sendmsg+0x2a5/0x360 [ 528.477522][T19475] ? __pfx___nla_validate_parse+0x10/0x10 [ 528.477575][T19475] ? rcu_is_watching+0x15/0xb0 [ 528.477601][T19475] ? trace_kmalloc+0x2a/0xf0 [ 528.477636][T19475] ? __nla_parse+0x40/0x60 [ 528.477669][T19475] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 528.477696][T19475] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 528.477732][T19475] genl_family_rcv_msg_doit+0x22a/0x330 [ 528.477766][T19475] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 528.477809][T19475] ? bpf_lsm_capable+0x9/0x20 [ 528.477828][T19475] ? security_capable+0x7e/0x2c0 [ 528.477860][T19475] genl_rcv_msg+0x61c/0x7a0 [ 528.477892][T19475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.477915][T19475] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.477955][T19475] netlink_rcv_skb+0x232/0x4b0 [ 528.477977][T19475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.478003][T19475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.478044][T19475] ? down_read+0x270/0x2e0 [ 528.478061][T19475] ? genl_rcv+0xd/0x40 [ 528.478087][T19475] genl_rcv+0x28/0x40 [ 528.478109][T19475] netlink_unicast+0x75c/0x8e0 [ 528.478152][T19475] netlink_sendmsg+0x813/0xb40 [ 528.478187][T19475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.478213][T19475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 528.478243][T19475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.478275][T19475] ____sys_sendmsg+0x972/0x9f0 [ 528.478295][T19475] ? __might_fault+0xaf/0x130 [ 528.478329][T19475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.478362][T19475] ? import_iovec+0x73/0xa0 [ 528.478395][T19475] ___sys_sendmsg+0x2a5/0x360 [ 528.478414][T19475] ? __lock_acquire+0x6b5/0x2cf0 [ 528.478441][T19475] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.478470][T19475] ? futex_wait+0x2a2/0x390 [ 528.478543][T19475] ? __fget_files+0x2a/0x420 [ 528.478566][T19475] ? __fget_files+0x3a0/0x420 [ 528.478604][T19475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 528.478629][T19475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.478660][T19475] ? rcu_is_watching+0x15/0xb0 [ 528.478696][T19475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.478720][T19475] do_syscall_64+0x15f/0xf80 [ 528.478745][T19475] ? trace_irq_disable+0x3b/0x140 [ 528.478775][T19475] ? clear_bhb_loop+0x40/0x90 [ 528.478801][T19475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.478820][T19475] RIP: 0033:0x7fc07159ce59 [ 528.478842][T19475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.478859][T19475] RSP: 002b:00007fc0724a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.478882][T19475] RAX: ffffffffffffffda RBX: 00007fc071815fa0 RCX: 00007fc07159ce59 [ 528.478896][T19475] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 528.478908][T19475] RBP: 00007fc071632d6f R08: 0000000000000000 R09: 0000000000000000 [ 528.478920][T19475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.478931][T19475] R13: 00007fc071816038 R14: 00007fc071815fa0 R15: 00007ffe3e461b78 [ 528.478968][T19475] [ 529.576964][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 529.840258][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3424'. [ 529.913113][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3424'. [ 530.018172][T19533] team1: entered promiscuous mode [ 530.026857][T19533] team1: entered allmulticast mode [ 530.032788][T19533] 8021q: adding VLAN 0 to HW filter on device team1 [ 530.060506][T19535] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 530.107423][T19535] team2: entered promiscuous mode [ 530.116681][T19535] team2: entered allmulticast mode [ 530.141272][T19535] 8021q: adding VLAN 0 to HW filter on device team2 [ 530.164972][T19526] tipc: Enabling of bearer rejected, failed to enable media [ 530.469098][T19556] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 530.679132][T19580] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3434'. [ 530.926187][T19582] syzkaller0: entered promiscuous mode [ 530.933625][T19590] netlink: 'syz.1.3435': attribute type 1 has an invalid length. [ 530.933833][T19582] syzkaller0: entered allmulticast mode [ 535.142116][T19595] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 535.216286][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 535.639156][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 535.861179][T19630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.905116][T19650] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 536.004608][T19635] bond1: (slave veth3): Enslaving as an active interface with an up link [ 536.180844][T19650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.469834][T19630] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3446'. [ 536.996340][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3455'. [ 537.080334][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 537.126690][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 537.164874][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 537.298790][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 537.342952][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 537.358581][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 537.439684][T19681] net_ratelimit: 48 callbacks suppressed [ 537.439704][T19681] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 537.487273][T19704] netlink: 'syz.6.3460': attribute type 9 has an invalid length. [ 537.535315][T19695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.760091][T19698] pim6reg: left allmulticast mode [ 537.861647][T19704] lo speed is unknown, defaulting to 1000 [ 543.461989][T19704] lo speed is unknown, defaulting to 1000 [ 543.490215][T19741] debugfs: '1^!Y [ 543.490215][T19741] 3UH5rBn\' already exists in 'ieee80211' [ 543.548661][T19704] lo speed is unknown, defaulting to 1000 [ 544.041630][T19765] __nla_validate_parse: 51 callbacks suppressed [ 544.041651][T19765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3472'. [ 544.094893][T19767] netlink: 'syz.5.3473': attribute type 1 has an invalid length. [ 544.108919][T19767] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3473'. [ 544.145533][T19767] netlink: 'syz.5.3473': attribute type 1 has an invalid length. [ 544.170712][T19767] netlink: 638 bytes leftover after parsing attributes in process `syz.5.3473'. [ 544.216413][T19771] netlink: 'syz.0.3474': attribute type 16 has an invalid length. [ 544.224771][T19767] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3473'. [ 544.250322][T19771] netlink: 'syz.0.3474': attribute type 17 has an invalid length. [ 544.333464][T19770] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.345817][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 544.368278][T19770] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.421402][T19774] netlink: 'syz.4.3475': attribute type 13 has an invalid length. [ 544.445044][T19774] netlink: 'syz.4.3475': attribute type 17 has an invalid length. [ 544.455607][T19704] infiniband syz0: set down [ 544.472831][T19704] infiniband syz0: added lo [ 544.507762][T19770] bridge0: port 3(macvlan2) entered disabled state [ 544.528263][T19704] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 544.569049][T19704] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 544.629577][T19704] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 544.757604][T19771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 544.791942][T19704] RDS/IB: syz0: added [ 544.801138][T19704] smc: adding ib device syz0 with port count 1 [ 544.810737][T12260] lo speed is unknown, defaulting to 1000 [ 544.819346][T19704] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 544.969324][T19774] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.009165][T12260] lo speed is unknown, defaulting to 1000 [ 545.031618][T19704] lo speed is unknown, defaulting to 1000 [ 545.143196][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 545.374521][T19807] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 545.544042][T19807] bond2: entered promiscuous mode [ 545.562105][T19807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.618088][T19814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.658196][T19814] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 545.693679][T19814] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 545.715528][T19814] bond2: (slave ipip0): making interface the new active one [ 545.723663][T19814] ipip0: entered promiscuous mode [ 545.730892][T19814] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 545.743018][T19815] tap0: tun_chr_ioctl cmd 1074025692 [ 545.780696][T19704] lo speed is unknown, defaulting to 1000 [ 546.077323][T19817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3483'. [ 546.121576][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3483'. [ 546.356680][T19837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.509578][T19842] ip6tnl1: entered promiscuous mode [ 546.563926][T19842] ip6tnl1: entered allmulticast mode [ 546.580930][T19704] lo speed is unknown, defaulting to 1000 [ 546.587918][T19850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3488'. [ 546.655172][T19845] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 546.687171][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.795497][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 546.924617][T19856] bond3: entered promiscuous mode [ 546.944650][T19856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 547.014491][T19863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.023081][T19863] bond4: entered promiscuous mode [ 547.032056][T19863] bond3: (slave bond4): Enslaving as an active interface with an up link [ 547.092909][T19860] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 547.145253][T19860] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 547.379672][T19704] lo speed is unknown, defaulting to 1000 [ 547.929698][T19915] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 547.952135][T19915] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 548.018509][T19704] lo speed is unknown, defaulting to 1000 [ 548.389503][T19704] lo speed is unknown, defaulting to 1000 [ 548.398048][T19928] netlink: 'syz.5.3508': attribute type 1 has an invalid length. [ 548.649344][T19704] lo speed is unknown, defaulting to 1000 [ 548.827634][T19935] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 548.979074][T19704] lo speed is unknown, defaulting to 1000 [ 549.137930][T19704] lo speed is unknown, defaulting to 1000 [ 549.254575][ T31] INFO: task syz.2.2546:15734 blocked for more than 143 seconds. [ 549.262669][ T31] Not tainted syzkaller #0 [ 549.270567][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.280654][ T31] task:syz.2.2546 state:D stack:27128 pid:15734 tgid:15733 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 549.295862][ T31] Call Trace: [ 549.299226][ T31] [ 549.303226][ T31] __schedule+0x1821/0x5740 [ 549.309816][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 549.315388][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 549.322004][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 549.328384][ T31] ? __pfx___schedule+0x10/0x10 [ 549.334363][ T31] ? schedule+0x90/0x360 [ 549.338864][ T31] schedule+0x164/0x360 [ 549.343103][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.349930][ T31] __mutex_lock+0x7f7/0x1550 [ 549.355312][ T31] ? __mutex_lock+0x608/0x1550 [ 549.360348][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x610 [ 549.366846][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.372403][ T31] ? __nlmsg_put+0xef/0x1b0 [ 549.377413][ T31] ? genlmsg_put+0x137/0x2e0 [ 549.382376][ T31] nfsd_nl_listener_get_doit+0x10a/0x610 [ 549.389113][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 549.395660][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 549.402320][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 549.408010][ T31] ? __asan_memcpy+0x40/0x70 [ 549.412839][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 549.419235][ T31] genl_rcv_msg+0x61c/0x7a0 [ 549.424010][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.429280][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 549.435900][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 549.441571][ T31] netlink_rcv_skb+0x232/0x4b0 [ 549.446798][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.452025][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.457768][ T31] ? down_read+0x270/0x2e0 [ 549.462262][ T31] ? genl_rcv+0xd/0x40 [ 549.466785][ T31] genl_rcv+0x28/0x40 [ 549.471022][ T31] netlink_unicast+0x75c/0x8e0 [ 549.476335][ T31] netlink_sendmsg+0x813/0xb40 [ 549.481201][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.486835][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 549.491987][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.497415][ T31] ____sys_sendmsg+0x972/0x9f0 [ 549.502216][ T31] ? __might_fault+0xaf/0x130 [ 549.507383][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.513200][ T31] ? import_iovec+0x73/0xa0 [ 549.518077][ T31] ___sys_sendmsg+0x2a5/0x360 [ 549.523259][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 549.528392][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.534001][ T31] ? futex_wait+0x2a2/0x390 [ 549.538577][ T31] ? __fget_files+0x2a/0x420 [ 549.543355][ T31] ? __fget_files+0x3a0/0x420 [ 549.548165][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 549.553705][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.559877][ T31] ? rcu_is_watching+0x15/0xb0 [ 549.564775][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.570991][ T31] do_syscall_64+0x15f/0xf80 [ 549.576217][ T31] ? trace_irq_disable+0x3b/0x140 [ 549.581660][ T31] ? clear_bhb_loop+0x40/0x90 [ 549.587149][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.594009][ T31] RIP: 0033:0x7fe803b9ce59 [ 549.598546][ T31] RSP: 002b:00007fe8049ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.607460][ T31] RAX: ffffffffffffffda RBX: 00007fe803e15fa0 RCX: 00007fe803b9ce59 [ 549.616161][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 549.624323][ T31] RBP: 00007fe803c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 549.632662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.640772][ T31] R13: 00007fe803e16038 R14: 00007fe803e15fa0 R15: 00007ffdf6fb05c8 [ 549.649096][ T31] [ 549.652523][ T31] [ 549.652523][ T31] Showing all locks held in the system: [ 549.660437][ T31] 1 lock held by khungtaskd/31: [ 549.665395][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 549.675452][ T31] 2 locks held by getty/5384: [ 549.680169][ T31] #0: ffff8880326c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 549.690480][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 549.701340][ T31] 2 locks held by syz.3.2113/13887: [ 549.706649][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.716597][ T31] #1: ffffffff8ec8ace0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 549.727147][ T31] 2 locks held by syz.2.2546/15734: [ 549.732416][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.741140][ T31] #1: ffffffff8ec8ace0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x610 [ 549.751595][ T31] 1 lock held by syz.0.3497/19875: [ 549.756991][ T31] #0: ffff8880287f9140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 549.767062][ T31] 4 locks held by syz.0.3497/19876: [ 549.772478][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.781159][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.790288][ T31] #2: ffff8880287f9140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 549.800042][ T31] #3: ffff88806b3c2348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 549.809762][ T31] 2 locks held by syz.0.3497/19881: [ 549.815441][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.825260][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.834640][ T31] 2 locks held by syz.1.3500/19894: [ 549.839996][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.849084][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.858471][ T31] 2 locks held by syz.1.3500/19896: [ 549.864140][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.872380][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.881800][ T31] 2 locks held by syz.1.3500/19899: [ 549.887245][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.899071][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.908672][ T31] 2 locks held by syz.1.3500/19904: [ 549.914141][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.922539][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.931912][ T31] 2 locks held by syz.1.3500/19909: [ 549.937706][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.946020][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.955136][ T31] 2 locks held by syz.4.3505/19920: [ 549.960389][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.968831][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 549.979304][ T31] 2 locks held by syz.4.3505/19921: [ 549.985293][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 549.993894][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 550.003677][ T31] 2 locks held by syz.5.3512/19938: [ 550.009012][ T31] #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 550.017573][ T31] #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 550.027126][ T31] [ 550.029987][ T31] ============================================= [ 550.029987][ T31] [ 550.039241][ T31] NMI backtrace for cpu 1 [ 550.039262][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.039291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.039302][ T31] Call Trace: [ 550.039310][ T31] [ 550.039318][ T31] dump_stack_lvl+0xe8/0x150 [ 550.039345][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 550.039369][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.039400][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 550.039424][ T31] sys_info+0x135/0x170 [ 550.039442][ T31] watchdog+0xfd3/0x1030 [ 550.039476][ T31] ? watchdog+0x1c9/0x1030 [ 550.039509][ T31] kthread+0x389/0x470 [ 550.039532][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.039556][ T31] ? __pfx_kthread+0x10/0x10 [ 550.039582][ T31] ret_from_fork+0x514/0xb70 [ 550.039607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.039628][ T31] ? __switch_to+0xc79/0x1410 [ 550.039659][ T31] ? __pfx_kthread+0x10/0x10 [ 550.039685][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.039723][ T31] [ 550.039730][ T31] Sending NMI from CPU 1 to CPUs 0: [ 550.155443][ C0] NMI backtrace for cpu 0 [ 550.155463][ C0] CPU: 0 UID: 0 PID: 7614 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 550.155482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.155493][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 550.155517][ C0] RIP: 0010:unwind_next_frame+0x1a33/0x2550 [ 550.155540][ C0] Code: 48 8b 7c 24 78 0f 85 54 01 00 00 48 8b 44 24 58 80 3c 28 00 74 05 e8 6c f6 b9 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 <80> 3c 28 00 74 05 e8 52 f6 b9 00 4d 8b 6e 08 4d 8d 7e 10 4c 89 f8 [ 550.155552][ C0] RSP: 0018:ffffc90003957518 EFLAGS: 00000a06 [ 550.155565][ C0] RAX: 1ffff9200072aebe RBX: ffffffff90c49c01 RCX: 0000000000000001 [ 550.155577][ C0] RDX: ffffc90003957628 RSI: dffffc0000000000 RDI: ffffc900039575f0 [ 550.155588][ C0] RBP: dffffc0000000000 R08: ffffc90003957f38 R09: 0000000000000000 [ 550.155598][ C0] R10: ffffc90003957638 R11: fffff5200072aec9 R12: ffffc90003957f48 [ 550.155616][ C0] R13: 1ffff9200072aebf R14: ffffc900039575e8 R15: ffffffff8176f256 [ 550.155627][ C0] FS: 0000000000000000(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 550.155640][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.155650][ C0] CR2: 0000000000000000 CR3: 0000000052f8c000 CR4: 00000000003526f0 [ 550.155666][ C0] Call Trace: [ 550.155672][ C0] [ 550.155682][ C0] ? unwind_next_frame+0xa6/0x2550 [ 550.155700][ C0] ? ret_from_fork+0x514/0xb70 [ 550.155717][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.155739][ C0] arch_stack_walk+0x11b/0x150 [ 550.155761][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 550.155781][ C0] stack_trace_save+0xa9/0x100 [ 550.155801][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 550.155820][ C0] ? __kfree_skb+0x5d/0x210 [ 550.155841][ C0] ? kthread+0x389/0x470 [ 550.155858][ C0] ? ret_from_fork+0x514/0xb70 [ 550.155876][ C0] kasan_save_track+0x3e/0x80 [ 550.155895][ C0] ? kasan_save_track+0x3e/0x80 [ 550.155912][ C0] ? kasan_save_free_info+0x46/0x50 [ 550.155927][ C0] ? __kasan_slab_free+0x5c/0x80 [ 550.155944][ C0] ? kmem_cache_free+0x182/0x650 [ 550.155962][ C0] ? nsim_dev_trap_report_work+0x7de/0xb90 [ 550.155976][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 550.155991][ C0] ? worker_thread+0xa53/0xfc0 [ 550.156005][ C0] ? kthread+0x389/0x470 [ 550.156022][ C0] ? ret_from_fork+0x514/0xb70 [ 550.156058][ C0] ? nsim_dev_trap_report_work+0x7de/0xb90 [ 550.156072][ C0] kasan_save_free_info+0x46/0x50 [ 550.156088][ C0] __kasan_slab_free+0x5c/0x80 [ 550.156108][ C0] kmem_cache_free+0x182/0x650 [ 550.156130][ C0] nsim_dev_trap_report_work+0x7de/0xb90 [ 550.156154][ C0] ? process_scheduled_works+0xa70/0x1860 [ 550.156170][ C0] process_scheduled_works+0xb5d/0x1860 [ 550.156200][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.156219][ C0] ? assign_work+0x3d5/0x5e0 [ 550.156236][ C0] worker_thread+0xa53/0xfc0 [ 550.156265][ C0] kthread+0x389/0x470 [ 550.156282][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.156296][ C0] ? __pfx_kthread+0x10/0x10 [ 550.156315][ C0] ret_from_fork+0x514/0xb70 [ 550.156331][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 550.156347][ C0] ? __switch_to+0xc79/0x1410 [ 550.156369][ C0] ? __pfx_kthread+0x10/0x10 [ 550.156388][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.156412][ C0] [ 550.183648][T19876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.193550][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 550.193573][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.193594][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.193604][ T31] Call Trace: [ 550.193613][ T31] [ 550.193623][ T31] vpanic+0x56c/0xa60 [ 550.193650][ T31] ? __pfx___schedule+0x10/0x10 [ 550.193675][ T31] ? __pfx_vpanic+0x10/0x10 [ 550.193695][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 550.193723][ T31] panic+0xc5/0xd0 [ 550.193741][ T31] ? __pfx_panic+0x10/0x10 [ 550.193762][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 550.193791][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 550.193815][ T31] watchdog+0x102c/0x1030 [ 550.193846][ T31] ? watchdog+0x1c9/0x1030 [ 550.193876][ T31] kthread+0x389/0x470 [ 550.193900][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.193924][ T31] ? __pfx_kthread+0x10/0x10 [ 550.193949][ T31] ret_from_fork+0x514/0xb70 [ 550.193973][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.193994][ T31] ? __switch_to+0xc79/0x1410 [ 550.194022][ T31] ? __pfx_kthread+0x10/0x10 [ 550.194047][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.194084][ T31] [ 550.194771][ T31] Kernel Offset: disabled