last executing test programs: 23m10.418113482s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) recvmmsg(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1}, 0xf}], 0x1, 0x20, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r7) socket$nl_route(0x10, 0x3, 0x0) 23m9.307746125s ago: executing program 4 (id=7): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4d, 0x400c080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211bb3bda660", 0x8b, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) 23m8.086440614s ago: executing program 4 (id=8): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4d, 0x400c080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211bb3bda660", 0x8b, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) 23m0.21149348s ago: executing program 1 (id=2): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 22m54.873305785s ago: executing program 1 (id=17): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 22m51.804694981s ago: executing program 32 (id=8): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4d, 0x400c080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211bb3bda660", 0x8b, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) 22m46.414261401s ago: executing program 1 (id=24): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 22m41.417830139s ago: executing program 1 (id=29): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) 22m35.285482177s ago: executing program 1 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) recvmmsg(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1}, 0xf}], 0x1, 0x20, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410d00, 0x10a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r7) socket$nl_route(0x10, 0x3, 0x0) 22m19.455618753s ago: executing program 33 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) recvmmsg(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1}, 0xf}], 0x1, 0x20, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410d00, 0x10a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r7) socket$nl_route(0x10, 0x3, 0x0) 21m7.955573778s ago: executing program 2 (id=122): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 21m4.332384091s ago: executing program 2 (id=127): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) close(r2) r5 = inotify_init() close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) 21m0.352156847s ago: executing program 2 (id=130): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 20m55.969719417s ago: executing program 2 (id=133): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 20m52.266352657s ago: executing program 2 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050000000900010073797a300000"], 0xcc}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0xf) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/ipc\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r8, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x2001f, 0x6}}) prlimit64(0x0, 0xe, 0x0, 0x0) creat(&(0x7f0000000580)='./file0/file0\x00', 0x91) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x40000000, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x200}) 20m49.15383719s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) read$FUSE(r4, &(0x7f0000006780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, &(0x7f0000000000), 0x0, &(0x7f0000000180), {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r1], 0x1, {r6}}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) 20m32.925490024s ago: executing program 34 (id=142): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0) read$FUSE(r4, &(0x7f0000006780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, &(0x7f0000000000), 0x0, &(0x7f0000000180), {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r1], 0x1, {r6}}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) 27.505110827s ago: executing program 3 (id=2632): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 27.067188571s ago: executing program 3 (id=2638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00000000000000", 0x8) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 26.910990814s ago: executing program 3 (id=2640): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) 26.29249347s ago: executing program 3 (id=2644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10019}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x160a, 0x1313}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) 26.081780264s ago: executing program 3 (id=2646): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x3, 0xb2, 0xa8}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 22.928221134s ago: executing program 3 (id=2658): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000002000010000000000000000000a142000000000070014000200fe8000000000000000000000200000bb09000100fc0100000000000000000800004e428b24f7fccc0f00000007000000b9610c80e7e25f22e1e21bfb03315b"], 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, 0x0) listen(0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) accept4$alg(r6, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728", @ANYRESDEC=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f0000001540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 12.141250475s ago: executing program 5 (id=2706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0x5, 0x80000000, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 7.058541013s ago: executing program 0 (id=2738): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x2, [{0x5, 0x4, "d2c0"}]}]}}}], 0x20}, 0x80) 6.996704441s ago: executing program 8 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="811bfa00c19e231ce161f000"/39, @ANYRES32=r4, @ANYBLOB="7c0f3e11946d5ae9c98044ed65c0b99d25"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0xc005c}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001080)=r8, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x8000) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 6.668349559s ago: executing program 0 (id=2741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) 6.36732297s ago: executing program 7 (id=2743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000006c0)="8c3fe11ab9", 0x5, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 6.299071962s ago: executing program 0 (id=2744): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 5.919537494s ago: executing program 5 (id=2746): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x3, 0xb2, 0xa8}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 5.535161789s ago: executing program 8 (id=2747): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x4, r4, 0x1, 0x12, 0x6, @broadcast}, 0x14) 4.065280305s ago: executing program 7 (id=2748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84, 0x0, r1}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0xc0) 4.015632516s ago: executing program 0 (id=2749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448e0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.925143569s ago: executing program 8 (id=2750): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.889870636s ago: executing program 7 (id=2751): socket(0x21, 0x80002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000340)={0xb, 0xeb}, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r0}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000100)=0xa, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac41ec498e66efbb406cc14cf16550e34b1e252f922679c3f1c0eca330292c075c4fc4a1c5913252ec2f992c2b9196a2cc9763b7e3db26a5e2d1a1b1314a369be04124421666d1d825ba7cceb3c1fa2fd3b1aa2f9f3380be3b7ab4620102be991cf876028a9ef36578524557ce3c05576e0e010f77c15c038d529935f631ad3fa9c69d4bec7190b3f8a2e46ce1f31eedf5f2b2bb4869", @ANYRESOCT=r0], 0x184}}, 0x20040800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="245af10950c53a2ec3697c8a095e1092dc5788fd77150100b3f0e2d5342e50b9062f6a3995046068782bedb9e6a121a592da5beeddc0dd3aaae703de2cd9d101400eb8edcf3e489086dd27751b"], 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000003c0)=""/254, 0xfe}], 0x2}, 0xfff}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r6, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \b\x00\x00', @ANYRES16=r6, @ANYBLOB="000427bd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000f0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000000001006e657464657673696d000000000002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000"], 0x120}, 0x1, 0x0, 0x0, 0x11}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="5886", 0x2}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900025a726d7eea3ba83fe00073797a3000000000fbff400072786500140000000000"], 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) 3.805701611s ago: executing program 5 (id=2752): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000034000380300000800c000180060001001e1c000020000a80040002"], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) getuid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 3.528402958s ago: executing program 7 (id=2754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 3.43319156s ago: executing program 8 (id=2755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea90", 0x54}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30fc82c7897cc1af4d30ef0c0793f737a63a8a1c", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)}}], 0x2, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.358564447s ago: executing program 8 (id=2756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x9, 0x2c, 0x65, 0x0, 0x20, 0x6, 0x0, @private=0xa010101, @remote}, @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x82, 0xffff, 0x4, 0x4e21, 0x4e21}}}}}}}, 0x0) 3.195394609s ago: executing program 8 (id=2757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)={0x964, 0x0, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x5}, 0x8, 0x5, 0x1, 0x27c, 0xe, 'syz0\x00', "d4f6af64900653c1d499370304f017d25376835374297adb00bdd721417af4e2", "09340f3f0f3a761548bbed9a3c6ae4aede5ce5073a8bbcbdbfa3d008b1ccd2a8", [{0x6, 0x0, {0x7, 0x5}}, {0x7, 0x33, {0x2, 0x6}}, {0x401, 0x6}, {0x3, 0x9}, {0x7, 0x6, {0x0, 0x1000}}, {0x3, 0x6, {0x3, 0x800000}}, {0x7f, 0x7f, {0x1, 0x7}}, {0x80, 0x4, {0x0, 0x6}}, {0x100, 0xfffd, {0x3, 0x9}}, {0x4, 0x6, {0x0, 0x8}}, {0x0, 0x1, {0x6, 0x7}}, {0x3, 0x6, {0x0, 0x9a56}}, {0x8001, 0x9, {0x3, 0xffffffff}}, {0x400, 0x10, {0x1, 0x7}}, {0x582b, 0x400, {0x0, 0x40}}, {0xb, 0x6, {0x2, 0xc}}, {0x8000, 0x3, {0x1, 0x5}}, {0xfff9, 0x3, {0x2, 0x3}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x14, {0x3, 0x80000001}}, {0x5, 0xa0, {0x1, 0x7fffffff}}, {0x6, 0x3, {0x3, 0x80000001}}, {0xfffe, 0xffff, {0x1, 0x8}}, {0x8, 0xcaf4, {0x0, 0x3}}, {0x5, 0x3, {0x0, 0x501}}, {0x4, 0x1, {0x3, 0x6}}, {0x2, 0x8, {0x2, 0x7}}, {0x1000, 0x96, {0x3, 0x81}}, {0x200, 0x3ff, {0x3, 0xff}}, {0x3, 0x3bdb, {0x0, 0x3}}, {0x5, 0x5, {0x3, 0x7}}, {0x6, 0x3, {0x2, 0x4}}, {0x1, 0x8, {0x2, 0x4}}, {0x97ad, 0x10, {0x0, 0x7}}, {0x880, 0xfff7, {0x0, 0x9d}}, {0x3, 0x6, {0x1, 0xfb17}}, {0x7, 0x8, {0x0, 0x7f}}, {0x9, 0xa, {0x0, 0x7fff}}, {0x1, 0xc, {0x1, 0xffff}}, {0x10, 0xb, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x5, 0x75df, 0xfff, 0x1a, 'syz0\x00', "42733ddef064d65069b91af61b550b2db03104e6f9eede178369e893c7c10c3e", "d678ff2871d0757f2d78db07d917c19f03286dd92c18e37c95a5e036bc9bb1f4", [{0x9, 0x231, {0x2, 0x4}}, {0x0, 0x81, {0x3, 0x7}}, {0x5, 0x9, {0x1, 0x80000000}}, {0x6, 0x4, {0x3, 0x5}}, {0x400, 0x80, {0x3, 0x27}}, {0xc0f, 0xf000, {0x1, 0x3}}, {0x7405, 0xf, {0x0, 0x2}}, {0x3b, 0xa, {0x3, 0x9}}, {0x6, 0x5, {0x3, 0x7ad}}, {0x0, 0x9, {0x0, 0x2}}, {0x2, 0x9, {0x2, 0x23b}}, {0x5, 0x1, {0x2, 0x4}}, {0x6d6e, 0x80, {0x0, 0x8}}, {0x7fff, 0x9, {0x2, 0x2}}, {0xff98, 0x8, {0x1, 0x4}}, {0x6, 0x3, {0x2, 0x7}}, {0x2, 0x6, {0x1, 0x87ea}}, {0x3, 0x4, {0x1, 0x432}}, {0x200, 0x5, {0x0, 0x80000001}}, {0x6755, 0x8, {0x0, 0x2}}, {0x2, 0xffff, {0x1, 0xfffffff9}}, {0x400, 0x5, {0x3, 0x1}}, {0x3ff, 0x604c, {0x3, 0xf}}, {0xa, 0x2, {0x1, 0x5ad}}, {0x2, 0x81, {0x0, 0xffff7fff}}, {0x8, 0xaa0, {0x3, 0x7fff}}, {0x7d1a, 0x0, {0x0, 0x1}}, {0x7, 0x3, {0x1, 0x6432}}, {0x8, 0x4, {0x2, 0xa4d9}}, {0x8, 0x503, {0x1, 0x65b4}}, {0x100, 0x200, {0xef69d41b6a70b01d, 0x10}}, {0x700, 0x0, {0x3, 0xffff}}, {0x3ff, 0x3, {0x2, 0x9a}}, {0x1, 0x1, {0x0, 0x8}}, {0x4, 0x7, {0x1, 0x10}}, {0x4, 0x5, {0x1, 0x8}}, {0x9, 0x8, {0x0, 0x7fffffff}}, {0x6, 0x7, {0x3, 0x7}}, {0x7, 0x7, {0x2}}, {0x31f6, 0x2, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x8ae9}, 0x3, 0x28, 0xeba, 0x3, 0x10, 'syz1\x00', "c26a90139204558a2010369e8adee7ee3049111f7c340bf3cfe8467cab2a0151", "49a1214ff2b207ea8d4731fec1534a0afe8d5b53774267d2bbb46bb812f17951", [{0x1, 0x0, {0x2, 0x76}}, {0x0, 0x8, {0x1}}, {0x6, 0x2, {0x1, 0x40}}, {0x2, 0x800, {0x1, 0xd70}}, {0x5, 0x3, {0x2, 0x8}}, {0x200, 0x8, {0x3, 0x2}}, {0x1c00, 0x3, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0x14}}, {0x10, 0x2, {0x3, 0x1}}, {0x4, 0x2, {0x2, 0x3}}, {0x8001, 0x713, {0x2, 0xb}}, {0xfffd, 0x100, {0x0, 0x8}}, {0x800, 0x8c, {0x208fc59bd5621f77, 0xc38}}, {0x6, 0x4, {0x3, 0x6}}, {0x3, 0x1ff, {0x1, 0x7}}, {0x7, 0x9, {0x0, 0x8}}, {0x1, 0x9, {0x2, 0x8}}, {0xc, 0x3, {0x1, 0x400}}, {0x665, 0xa, {0x3, 0x36}}, {0xfff, 0x6, {0x3, 0x5}}, {0xfff8, 0x6, {0x0, 0x2}}, {0xee, 0xb, {0x0, 0x49c}}, {0x2, 0x683, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x25c}}, {0x5, 0x8, {0x2, 0x1}}, {0xff, 0x1, {0x1, 0x7}}, {0x2, 0xb, {0x3, 0x81}}, {0x7, 0x6a58, {0x2, 0x8}}, {0x7, 0x8, {0x1, 0x9}}, {0x1, 0x7, {0x1, 0xd}}, {0x3, 0x9, {0x2, 0x9}}, {0x2c58, 0x9, {0x1, 0x2}}, {0xb2c, 0x1, {0x1, 0x8}}, {0x0, 0x200, {0x2, 0x10}}, {0x4, 0x7ff, {0x2, 0x1000}}, {0x8, 0x401, {0x1, 0x8000}}, {0x4, 0x9, {0x1}}, {0x0, 0xffff, {0x2}}, {0xb64e, 0xff, {0x2, 0x1}}, {0x7, 0x0, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x54, 0xb5, 0x6, 0x8001, 0x8, 'syz1\x00', "30175b774750ad14e6e1cc24a06fc19e2ec79bbed3e4240f95406b8831d9b879", "ae9222fc0a1a128fa938ce7dc7efc12e3817478d44d0b5f54ec2ec5bc616d4bc", [{0x8, 0x4, {0x2, 0x1000}}, {0xfff6, 0x4, {0x3, 0x3}}, {0xfffb, 0xfff9, {0x2, 0x8}}, {0x240, 0x1, {0x1, 0x4}}, {0x7, 0x4, {0x1, 0x7}}, {0x40, 0x7, {0x1, 0xcd2}}, {0x6, 0x7, {0x1, 0x7}}, {0x4, 0x400, {0x2, 0x3}}, {0xfbff, 0x200, {0x3, 0x47}}, {0xdb, 0x6, {0x2, 0xfffeffff}}, {0x3, 0xb8a3, {0x0, 0x7}}, {0x1, 0x0, {0x2, 0x2}}, {0x9, 0xff, {0x3, 0x5}}, {0x4, 0x51, {0x3, 0x2}}, {0xe, 0x3ff, {0x2, 0x8}}, {0xfff9, 0x8, {0x2, 0x8}}, {0x0, 0x3, {0x0, 0x5}}, {0xc7c, 0x7ff, {0x0, 0x3}}, {0xa7, 0xe97d, {0x1, 0xe8}}, {0x3, 0x3, {0x0, 0xae}}, {0x3, 0x2, {0x0, 0x9}}, {0x9, 0x4, {0x1}}, {0x2, 0xfff8, {0x1, 0x5}}, {0x70, 0x3, {0x3, 0x1}}, {0x2c33, 0x3, {0x1}}, {0xff80, 0xb143, {0x0, 0xfffffe01}}, {0x0, 0x800, {0x3, 0x9}}, {0x3, 0x1, {0x0, 0x400}}, {0x9d50, 0x0, {0x0, 0x1ff}}, {0x1, 0xf800, {0x2, 0x5}}, {0x80, 0x2, {0x1, 0x8}}, {0x400, 0x9, {0x2, 0xd}}, {0xfffb, 0x0, {0x3, 0x4}}, {0xa8, 0x4c, {0x0, 0x5e}}, {0x34d1, 0x1, {0x2, 0x3}}, {0x3, 0x5, {0x3}}, {0x6, 0x709c, {0x0, 0x5}}, {0x0, 0x800, {0x0, 0x7fffffff}}, {0xfa, 0x7, {0x3, 0x5de08920}}, {0x5, 0x9, {0x0, 0x81}}]}}}]}, 0x964}}, 0x20000000) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0x5, 0x80000000, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.003840266s ago: executing program 5 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 2.857642028s ago: executing program 6 (id=2759): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x68}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89}, 0x24048800) 2.675002063s ago: executing program 0 (id=2760): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 2.57186798s ago: executing program 7 (id=2761): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x4, r4, 0x1, 0x12, 0x6, @broadcast}, 0x14) 2.293411696s ago: executing program 6 (id=2762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84, 0x0, r1}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0xc0) 2.266111008s ago: executing program 5 (id=2763): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c00"], 0x28}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48) socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet(0xa, 0x6, 0x200085) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) 1.996585681s ago: executing program 7 (id=2764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.978840677s ago: executing program 6 (id=2765): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000004}], 0x1, 0x40080) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1) 1.691967941s ago: executing program 6 (id=2766): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x20008000) 1.466515597s ago: executing program 0 (id=2767): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom(r0, 0x0, 0x0, 0x40000073, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, 0x0, 0x40000010) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) 1.386473012s ago: executing program 6 (id=2768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x9, 0x2c, 0x65, 0x0, 0x20, 0x6, 0x0, @private=0xa010101, @remote}, @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x82, 0xffff, 0x4, 0x4e21, 0x4e21}}}}}}}, 0x0) 1.049071956s ago: executing program 6 (id=2769): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r2 = socket(0x14, 0x6, 0x5) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) shutdown(r1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1411, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x3c, 0xc, 0x5c}, 0x2c) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10) 0s ago: executing program 5 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fffffff, 0x3, 0x6361, 0x5, 0xffffffff, 0x13}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c9}, 0x400c000) kernel console output (not intermixed with test programs): 139.614025][T13813] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1122'. [ 1142.346503][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1142.396382][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1142.410147][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1142.431318][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1142.440448][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1142.450423][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1142.460789][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1144.569890][T12600] Bluetooth: hci2: command tx timeout [ 1144.834976][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1127'. [ 1144.912239][T13852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'. [ 1145.593085][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1127'. [ 1145.823303][T13859] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1128'. [ 1146.398649][T13865] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1129'. [ 1146.686354][T12600] Bluetooth: hci2: command 0x041b tx timeout [ 1148.082150][T13877] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1130'. [ 1148.612231][T13874] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 1148.903584][T12600] Bluetooth: hci2: command 0x041b tx timeout [ 1149.557862][T13874] ftl_cs: FTL header not found. [ 1150.836650][T13721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.875286][T13721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.900303][T13721] bridge_slave_0: entered allmulticast mode [ 1150.953077][T13721] bridge_slave_0: entered promiscuous mode [ 1150.973037][T12600] Bluetooth: hci2: command 0x041b tx timeout [ 1151.013385][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.014276][T13721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.015031][T13721] bridge_slave_1: entered allmulticast mode [ 1151.056971][T13721] bridge_slave_1: entered promiscuous mode [ 1151.099434][T13906] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1133'. [ 1151.293213][T13909] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1134'. [ 1153.049883][T12600] Bluetooth: hci2: command 0x041b tx timeout [ 1155.323865][ T1155] bridge_slave_1: left allmulticast mode [ 1155.343016][ T1155] bridge_slave_1: left promiscuous mode [ 1155.362730][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.475711][ T1155] bridge_slave_0: left allmulticast mode [ 1155.512858][ T1155] bridge_slave_0: left promiscuous mode [ 1155.535262][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.413907][T13940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1139'. [ 1156.449836][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1139'. [ 1156.473413][T13940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1139'. [ 1156.684864][T13943] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 1156.984971][T13943] ftl_cs: FTL header not found. [ 1157.770331][T13954] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1142'. [ 1158.945197][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.999417][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.052490][ T1155] bond0 (unregistering): Released all slaves [ 1159.102822][T13721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.162456][T13721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.188741][ T5285] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1159.245903][T13721] team0: Port device team_slave_0 added [ 1159.257404][T13721] team0: Port device team_slave_1 added [ 1160.283713][T13971] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1144'. [ 1161.477864][ T1155] hsr_slave_0: left promiscuous mode [ 1161.515038][ T1155] hsr_slave_1: left promiscuous mode [ 1161.521267][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.546930][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.561972][T13995] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1146'. [ 1164.453590][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1164.511427][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1165.669138][T14019] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1151'. [ 1167.022307][T13721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.029466][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.074199][T13721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.120489][T13721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.143635][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.170975][T13721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.342874][T13721] hsr_slave_0: entered promiscuous mode [ 1167.349297][T13721] hsr_slave_1: entered promiscuous mode [ 1167.355908][T13721] debugfs: 'hsr0' already exists in 'hsr' [ 1167.363965][T13721] Cannot create hsr debugfs directory [ 1167.966965][ T5981] bridge_slave_1: left allmulticast mode [ 1167.972824][ T5981] bridge_slave_1: left promiscuous mode [ 1167.978607][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.990482][ T5981] bridge_slave_0: left allmulticast mode [ 1167.996174][ T5981] bridge_slave_0: left promiscuous mode [ 1168.002461][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.142875][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.155779][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.166624][ T5981] bond0 (unregistering): Released all slaves [ 1168.309577][ T5981] hsr_slave_0: left promiscuous mode [ 1168.315840][ T5981] hsr_slave_1: left promiscuous mode [ 1168.327556][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.337702][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.490006][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 1168.515472][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1169.727936][T14057] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1153'. [ 1171.269871][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1171.392916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1171.399992][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1171.431006][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1171.443263][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1171.454190][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1171.464431][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1171.593281][T13818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.608111][T13818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.624450][T13818] bridge_slave_0: entered allmulticast mode [ 1171.639472][T13818] bridge_slave_0: entered promiscuous mode [ 1171.883053][T14071] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1155'. [ 1173.529800][ T5629] Bluetooth: hci5: command tx timeout [ 1174.633983][T13818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.661670][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.754264][T13818] bridge_slave_1: entered allmulticast mode [ 1174.854413][T14083] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1157'. [ 1174.915774][T13818] bridge_slave_1: entered promiscuous mode [ 1175.704695][T14092] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1158'. [ 1175.733738][ T5629] Bluetooth: hci5: command tx timeout [ 1175.999366][T13818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.081615][T13818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.670617][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.677212][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.269960][T13818] team0: Port device team_slave_0 added [ 1177.317549][T13818] team0: Port device team_slave_1 added [ 1177.503906][T13818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.511656][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.538190][T13818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.859807][ T5629] Bluetooth: hci5: command tx timeout [ 1178.695915][T13818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.713115][T13818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.740370][T13818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.553827][T14134] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1164'. [ 1179.953845][ T5629] Bluetooth: hci5: command tx timeout [ 1180.204116][T13721] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1180.217602][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.225798][T13721] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1180.238564][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.246691][T13721] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1180.260511][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.268661][T13721] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1180.282285][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1180.378912][T13818] hsr_slave_0: entered promiscuous mode [ 1180.403601][T13818] hsr_slave_1: entered promiscuous mode [ 1181.263349][T13818] debugfs: 'hsr0' already exists in 'hsr' [ 1181.291534][T13818] Cannot create hsr debugfs directory [ 1181.737770][T14143] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1165'. [ 1182.348049][T13818] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1182.364580][T13818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.385775][T13818] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1182.407959][T13818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.433521][T13818] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1182.446894][T13818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.466439][T13818] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1182.483462][T13818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.744268][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.757012][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.764655][T14060] bridge_slave_0: entered allmulticast mode [ 1182.774983][T14060] bridge_slave_0: entered promiscuous mode [ 1182.816346][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.828482][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.838310][T14060] bridge_slave_1: entered allmulticast mode [ 1182.848228][T14060] bridge_slave_1: entered promiscuous mode [ 1182.919650][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.935263][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.999499][T14060] team0: Port device team_slave_0 added [ 1183.024838][T14060] team0: Port device team_slave_1 added [ 1183.107678][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.119623][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.146649][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.163003][ T1160] bridge_slave_1: left allmulticast mode [ 1183.168656][ T1160] bridge_slave_1: left promiscuous mode [ 1183.175827][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.184956][ T1160] bridge_slave_0: left allmulticast mode [ 1183.190865][ T1160] bridge_slave_0: left promiscuous mode [ 1183.196567][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.364496][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.512120][T14187] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1168'. [ 1183.670841][T14191] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1166'. [ 1184.131968][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.809228][ T1160] bond0 (unregistering): Released all slaves [ 1185.863026][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.870125][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.079775][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.149919][T14060] hsr_slave_0: entered promiscuous mode [ 1186.707916][T14060] hsr_slave_1: entered promiscuous mode [ 1186.731902][T14060] debugfs: 'hsr0' already exists in 'hsr' [ 1186.739764][T14060] Cannot create hsr debugfs directory [ 1186.944561][T14202] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1169'. [ 1188.597678][T12600] Bluetooth: hci5: command 0x0405 tx timeout [ 1188.699862][T14210] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1170'. [ 1189.742215][T14218] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1171'. [ 1190.416847][ T1160] hsr_slave_0: left promiscuous mode [ 1190.459958][ T1160] hsr_slave_1: left promiscuous mode [ 1190.625757][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.308958][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.108753][T12600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1192.119235][T12600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1192.128672][T12600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1192.137039][T12600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1192.144917][T12600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1193.797413][T14241] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1175'. [ 1194.173080][T12600] Bluetooth: hci1: command tx timeout [ 1194.855828][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1195.058967][T14250] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1177'. [ 1196.122629][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1196.196135][T14254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1178'. [ 1196.246288][T14254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'. [ 1196.259853][T12600] Bluetooth: hci1: command tx timeout [ 1196.304041][T14254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1178'. [ 1196.838070][T13818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.315121][T14266] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1180'. [ 1198.330077][T12600] Bluetooth: hci1: command tx timeout [ 1199.137417][T13818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.725622][T14273] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1181'. [ 1200.419760][T12600] Bluetooth: hci1: command tx timeout [ 1201.780142][T14284] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1182'. [ 1204.195650][T14301] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1205.105349][T14060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1205.140403][T14060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1205.153696][T14060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1205.181441][T14060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1205.192136][T14060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1205.263552][T14060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1205.318797][T14060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.355374][T14060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1205.363851][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1205.383162][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1205.392051][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1205.406490][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1205.417956][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1206.792862][T14328] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1188'. [ 1207.915745][T12600] Bluetooth: hci6: command tx timeout [ 1208.341753][T14337] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1189'. [ 1210.013496][T12600] Bluetooth: hci6: command tx timeout [ 1211.214673][T14359] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1193'. [ 1212.789929][T12600] Bluetooth: hci6: command tx timeout [ 1214.778375][T14373] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1194'. [ 1214.910306][T12600] Bluetooth: hci6: command tx timeout [ 1216.677018][T14383] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1196'. [ 1218.184570][ T5285] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1218.358216][T14060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.675918][T14060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.756392][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.763581][ T5915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.005262][T14406] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1198'. [ 1222.857132][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.864361][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.782335][T14447] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1205'. [ 1226.470161][T14450] fuse: Unknown parameter 'user_i00000000000000000000' [ 1226.559850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1226.912453][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1208'. [ 1226.950778][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1208'. [ 1226.969834][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1208'. [ 1227.239114][T14220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.265558][T14220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.299909][T14220] bridge_slave_0: entered allmulticast mode [ 1227.366918][T14220] bridge_slave_0: entered promiscuous mode [ 1227.399058][T14220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.758785][T14220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.766106][T14220] bridge_slave_1: entered allmulticast mode [ 1228.440442][T14220] bridge_slave_1: entered promiscuous mode [ 1228.893994][ T5285] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1228.933339][ T37] bridge_slave_1: left allmulticast mode [ 1228.942601][ T37] bridge_slave_1: left promiscuous mode [ 1228.960466][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.001524][ T37] bridge_slave_0: left allmulticast mode [ 1229.021756][ T37] bridge_slave_0: left promiscuous mode [ 1229.039273][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.383686][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.394588][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.404706][ T37] bond0 (unregistering): Released all slaves [ 1229.420342][T14220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.473674][T14220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.494182][ T37] hsr_slave_0: left promiscuous mode [ 1229.500610][ T37] hsr_slave_1: left promiscuous mode [ 1229.506478][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.515280][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.664351][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1229.682486][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1229.878681][T14220] team0: Port device team_slave_0 added [ 1229.895941][T14220] team0: Port device team_slave_1 added [ 1229.930761][ T5629] Bluetooth: hci6: command 0x0405 tx timeout [ 1229.963975][T14220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.971070][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.999082][T14220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.020837][T14220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.027855][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.055181][T14220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.139851][T14220] hsr_slave_0: entered promiscuous mode [ 1230.171396][T14220] hsr_slave_1: entered promiscuous mode [ 1230.177792][T14220] debugfs: 'hsr0' already exists in 'hsr' [ 1230.190391][T14220] Cannot create hsr debugfs directory [ 1230.441223][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.448730][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.458535][T14305] bridge_slave_0: entered allmulticast mode [ 1230.468487][T14305] bridge_slave_0: entered promiscuous mode [ 1230.498404][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.508657][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.516917][T14305] bridge_slave_1: entered allmulticast mode [ 1230.526952][T14305] bridge_slave_1: entered promiscuous mode [ 1232.749572][T14305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.787052][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1232.797470][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1232.806310][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1232.823146][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1232.830986][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1233.043648][T14305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.322569][T14305] team0: Port device team_slave_0 added [ 1233.335624][T14305] team0: Port device team_slave_1 added [ 1233.408096][T14305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.416275][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.453223][T14305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.484458][T14305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.493115][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.525982][T14305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.676364][T14305] hsr_slave_0: entered promiscuous mode [ 1233.682975][T14305] hsr_slave_1: entered promiscuous mode [ 1233.689143][T14305] debugfs: 'hsr0' already exists in 'hsr' [ 1233.695806][T14305] Cannot create hsr debugfs directory [ 1233.859630][ T37] bridge_slave_1: left allmulticast mode [ 1233.865704][ T37] bridge_slave_1: left promiscuous mode [ 1233.871609][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.881143][ T37] bridge_slave_0: left allmulticast mode [ 1233.886772][ T37] bridge_slave_0: left promiscuous mode [ 1233.892897][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.089154][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.100891][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.111012][ T37] bond0 (unregistering): Released all slaves [ 1234.273596][ T37] hsr_slave_0: left promiscuous mode [ 1234.279553][ T37] hsr_slave_1: left promiscuous mode [ 1234.285625][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.294134][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.473392][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1234.496732][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1234.658682][T14220] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1234.668614][T14220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.676997][T14220] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1234.687777][T14220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1234.730689][T14220] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1234.743948][T14220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1234.753431][T14220] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1234.763233][T14220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.057171][ T5629] Bluetooth: hci2: command tx timeout [ 1235.267865][T14220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.333040][T14506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.340288][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.347471][T14506] bridge_slave_0: entered allmulticast mode [ 1235.356235][T14506] bridge_slave_0: entered promiscuous mode [ 1235.370892][T14506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.378106][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.390032][T14506] bridge_slave_1: entered allmulticast mode [ 1235.398230][T14506] bridge_slave_1: entered promiscuous mode [ 1235.476056][T14506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.498180][T14506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.528589][T14220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.578985][T14305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1235.591742][T14305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.600488][T14305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1235.611830][T14305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.633499][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.640679][T13912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.652518][T14506] team0: Port device team_slave_0 added [ 1235.664676][T14305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1235.678221][T14305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.688786][T14305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1235.699198][T14305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.715191][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.722367][T13912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.735700][T14506] team0: Port device team_slave_1 added [ 1235.807269][T14506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.814537][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.847255][T14506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.866364][T14506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.873718][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.903397][T14506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.025551][T14506] hsr_slave_0: entered promiscuous mode [ 1236.032337][T14506] hsr_slave_1: entered promiscuous mode [ 1236.038803][T14506] debugfs: 'hsr0' already exists in 'hsr' [ 1236.045772][T14506] Cannot create hsr debugfs directory [ 1236.443452][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.515984][T14305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.543198][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.550363][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.597000][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.604158][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.999438][T14506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1237.032069][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.052155][T14506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1237.076830][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.104647][T14506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1237.130815][ T5629] Bluetooth: hci2: command tx timeout [ 1237.146841][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.171560][T14506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1237.191645][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.259454][T14220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.483604][T14506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.541314][T14506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.567761][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.574931][T13912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.614297][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.621448][T13912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.982820][T14305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.012149][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.018517][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.047313][T14220] veth0_vlan: entered promiscuous mode [ 1238.085335][T14220] veth1_vlan: entered promiscuous mode [ 1238.169499][T14220] veth0_macvtap: entered promiscuous mode [ 1238.215785][T14220] veth1_macvtap: entered promiscuous mode [ 1238.269848][T14220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.290461][T14220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.324397][ T5983] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.350380][ T5983] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.378367][ T5983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.401959][ T1160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.527107][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.552105][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.590367][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.613508][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.645636][T14305] veth0_vlan: entered promiscuous mode [ 1238.683061][T14305] veth1_vlan: entered promiscuous mode [ 1238.753684][T14305] veth0_macvtap: entered promiscuous mode [ 1238.786205][T14305] veth1_macvtap: entered promiscuous mode [ 1238.803656][T14506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.827022][T14305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.839606][T14305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.881920][T13912] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.896671][T13912] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.918050][T13912] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.933363][T13912] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.078643][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.093161][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.236700][ T5629] Bluetooth: hci2: command tx timeout [ 1239.488326][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.579288][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.127160][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.7.50'. [ 1240.138788][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.7.50'. [ 1240.150538][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.7.50'. [ 1240.229348][T14506] veth0_vlan: entered promiscuous mode [ 1240.246838][T14506] veth1_vlan: entered promiscuous mode [ 1240.282714][T14506] veth0_macvtap: entered promiscuous mode [ 1240.295458][T14506] veth1_macvtap: entered promiscuous mode [ 1240.315849][T14506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.334854][T14506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.352360][ T1155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.363316][ T1155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.373792][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.384211][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.483623][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.496312][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.534893][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.543144][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.774059][T14641] netlink: 260 bytes leftover after parsing attributes in process `syz.6.20'. [ 1241.334978][ T5629] Bluetooth: hci2: command tx timeout [ 1259.857579][T14662] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1216'. [ 1260.040638][T14665] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1214'. [ 1262.900631][T14668] fuse: Bad value for 'fd' [ 1263.228254][T14669] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1215'. [ 1263.441198][T14682] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1220'. [ 1264.231473][T14683] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1221'. [ 1267.708896][T14699] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1224'. [ 1268.231872][T14701] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1222'. [ 1268.858909][T14715] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1226'. [ 1269.963236][T14718] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1225'. [ 1273.823727][T14734] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1230'. [ 1276.224909][T14738] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1229'. [ 1276.445484][T14747] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1231'. [ 1278.361317][T14765] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1233'. [ 1279.651459][T14772] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1234'. [ 1279.891105][T14762] fuse: Unknown parameter 'user_i00000000000000000000' [ 1281.508706][T14781] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1238'. [ 1282.233581][T12600] Bluetooth: hci2: command 0x0405 tx timeout [ 1282.347898][T14781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1238'. [ 1282.438418][T14781] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1238'. [ 1282.697244][T14794] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1241'. [ 1284.234743][T14802] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1242'. [ 1284.810913][T14808] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1243'. [ 1286.904720][T14818] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1247'. [ 1287.111688][T14822] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1245'. [ 1289.011568][T14831] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1244'. [ 1289.096796][T14832] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1246'. [ 1289.594991][T14838] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1248'. [ 1292.713449][T14853] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1250'. [ 1294.897351][T14867] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1253'. [ 1296.004758][T14876] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1255'. [ 1298.284080][T14891] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1258'. [ 1299.452785][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.791329][T14896] loop7: detected capacity change from 0 to 40427 [ 1299.803766][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.823556][T14896] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1299.830040][T14896] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1299.861509][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1257'. [ 1299.897137][T14896] F2FS-fs (loop7): invalid crc value [ 1299.927837][T14888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 1300.016772][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1257'. [ 1300.084345][T14896] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1300.114897][T14896] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1300.122223][T14896] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1300.307336][T14305] syz-executor: attempt to access beyond end of device [ 1300.307336][T14305] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1300.552544][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1300.552600][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.552624][T14305] Call Trace: [ 1300.552635][T14305] [ 1300.552650][T14305] dump_stack_lvl+0x100/0x190 [ 1300.552704][T14305] f2fs_stop_checkpoint+0x600/0x9b0 [ 1300.552771][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.552820][T14305] ? errseq_set+0xe3/0x150 [ 1300.552864][T14305] ? errseq_set+0xe3/0x150 [ 1300.552906][T14305] f2fs_write_end_io+0xf59/0x1340 [ 1300.552954][T14305] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1300.553003][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.553061][T14305] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1300.553104][T14305] bio_endio+0x78f/0x8f0 [ 1300.553172][T14305] submit_bio_noacct+0x64c/0x2000 [ 1300.553230][T14305] f2fs_submit_write_bio+0x135/0x340 [ 1300.553300][T14305] __submit_merged_bio+0x331/0x780 [ 1300.553351][T14305] __submit_merged_write_cond+0x3fe/0x510 [ 1300.553405][T14305] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1300.553460][T14305] ? __pfx___might_resched+0x10/0x10 [ 1300.553517][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.553579][T14305] f2fs_write_cache_pages+0x20e9/0x2630 [ 1300.553658][T14305] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1300.553714][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.553763][T14305] ? bpf_ksym_find+0x124/0x1c0 [ 1300.553823][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.553871][T14305] ? __kasan_check_byte+0x13/0x50 [ 1300.553931][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.553981][T14305] ? unwind_next_frame+0x3be/0x2090 [ 1300.554037][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554085][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.554149][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554212][T14305] ? bpf_ksym_find+0x124/0x1c0 [ 1300.554324][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554380][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554428][T14305] ? add_lock_to_list+0x99/0x110 [ 1300.554465][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554513][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.554577][T14305] f2fs_write_data_pages+0x799/0x16d0 [ 1300.554643][T14305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1300.554694][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554752][T14305] ? do_writepages+0x4b5/0x600 [ 1300.554814][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.554867][T14305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1300.554924][T14305] do_writepages+0x278/0x600 [ 1300.554993][T14305] ? __pfx_do_writepages+0x10/0x10 [ 1300.555055][T14305] ? do_raw_spin_unlock+0x145/0x1e0 [ 1300.555114][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.555166][T14305] ? _raw_spin_unlock+0x28/0x50 [ 1300.555231][T14305] filemap_writeback+0x22d/0x2e0 [ 1300.555272][T14305] ? __pfx_filemap_writeback+0x10/0x10 [ 1300.555308][T14305] ? check_noncircular+0x97/0x160 [ 1300.555400][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.555460][T14305] ? find_held_lock+0x2b/0x80 [ 1300.555522][T14305] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1300.555577][T14305] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1300.555629][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.555688][T14305] f2fs_sync_dirty_inodes+0x469/0x990 [ 1300.555764][T14305] block_operations+0x2a6/0xfc0 [ 1300.555815][T14305] ? __bfs+0x150/0x2a0 [ 1300.555860][T14305] ? __pfx_block_operations+0x10/0x10 [ 1300.555914][T14305] ? check_noncircular+0x97/0x160 [ 1300.556004][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556058][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556105][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.556168][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556223][T14305] f2fs_write_checkpoint+0x582/0x5550 [ 1300.556286][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556334][T14305] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1300.556392][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556439][T14305] ? __wait_for_common+0x1f3/0x4c0 [ 1300.556476][T14305] ? __pfx_schedule_timeout+0x10/0x10 [ 1300.556538][T14305] ? __pfx___wait_for_common+0x10/0x10 [ 1300.556577][T14305] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1300.556643][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556694][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.556751][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.556799][T14305] ? kthread_stop+0x280/0x640 [ 1300.556847][T14305] kill_f2fs_super+0x3f1/0x4a0 [ 1300.556901][T14305] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1300.556975][T14305] ? lockdep_hardirqs_on+0x78/0x100 [ 1300.557041][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.557090][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.557158][T14305] deactivate_locked_super+0xc1/0x1b0 [ 1300.557220][T14305] deactivate_super+0xe7/0x110 [ 1300.557280][T14305] cleanup_mnt+0x21f/0x450 [ 1300.557322][T14305] task_work_run+0x150/0x240 [ 1300.557373][T14305] ? __pfx_task_work_run+0x10/0x10 [ 1300.557425][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.557472][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.557537][T14305] exit_to_user_mode_loop+0x107/0x4f0 [ 1300.557587][T14305] ? rcu_is_watching+0x12/0xc0 [ 1300.557650][T14305] do_syscall_64+0x706/0xf80 [ 1300.557694][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.557735][T14305] RIP: 0033:0x7f3975b9e097 [ 1300.557766][T14305] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1300.557805][T14305] RSP: 002b:00007ffc05fc1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1300.557841][T14305] RAX: 0000000000000000 RBX: 00007f3975c321ca RCX: 00007f3975b9e097 [ 1300.557867][T14305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc05fc1b50 [ 1300.557891][T14305] RBP: 00007ffc05fc1b50 R08: 00007ffc05fc2b50 R09: 00000000ffffffff [ 1300.557917][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc05fc2be0 [ 1300.557941][T14305] R13: 00007f3975c321ca R14: 000000000013d6d2 R15: 00007ffc05fc2c20 [ 1300.557992][T14305] [ 1301.191526][T14305] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1301.375808][T14305] CPU: 0 UID: 0 PID: 14305 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1301.375858][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1301.375881][T14305] Call Trace: [ 1301.375894][T14305] [ 1301.375907][T14305] dump_stack_lvl+0x100/0x190 [ 1301.375955][T14305] f2fs_stop_checkpoint+0x600/0x9b0 [ 1301.376022][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.376070][T14305] ? errseq_set+0xe3/0x150 [ 1301.376117][T14305] ? errseq_set+0xe3/0x150 [ 1301.376159][T14305] f2fs_write_end_io+0xf59/0x1340 [ 1301.376206][T14305] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1301.376255][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.376312][T14305] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1301.376354][T14305] bio_endio+0x78f/0x8f0 [ 1301.376416][T14305] submit_bio_noacct+0x64c/0x2000 [ 1301.376473][T14305] f2fs_submit_write_bio+0x135/0x340 [ 1301.376542][T14305] __submit_merged_bio+0x331/0x780 [ 1301.376592][T14305] __submit_merged_write_cond+0x3fe/0x510 [ 1301.376652][T14305] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1301.376708][T14305] ? __pfx___might_resched+0x10/0x10 [ 1301.376763][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.376821][T14305] f2fs_write_cache_pages+0x20e9/0x2630 [ 1301.376896][T14305] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1301.376951][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377000][T14305] ? bpf_ksym_find+0x124/0x1c0 [ 1301.377060][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377106][T14305] ? __kasan_check_byte+0x13/0x50 [ 1301.377166][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377218][T14305] ? unwind_next_frame+0x3be/0x2090 [ 1301.377273][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377320][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.377377][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377439][T14305] ? bpf_ksym_find+0x124/0x1c0 [ 1301.377550][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377601][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377655][T14305] ? add_lock_to_list+0x99/0x110 [ 1301.377692][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377740][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.377803][T14305] f2fs_write_data_pages+0x799/0x16d0 [ 1301.377869][T14305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1301.377920][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.377976][T14305] ? do_writepages+0x4b5/0x600 [ 1301.378038][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.378090][T14305] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1301.378146][T14305] do_writepages+0x278/0x600 [ 1301.378215][T14305] ? __pfx_do_writepages+0x10/0x10 [ 1301.378275][T14305] ? do_raw_spin_unlock+0x145/0x1e0 [ 1301.378333][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.378380][T14305] ? _raw_spin_unlock+0x28/0x50 [ 1301.378443][T14305] filemap_writeback+0x22d/0x2e0 [ 1301.378484][T14305] ? __pfx_filemap_writeback+0x10/0x10 [ 1301.378520][T14305] ? check_noncircular+0x97/0x160 [ 1301.378611][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.378664][T14305] ? find_held_lock+0x2b/0x80 [ 1301.378725][T14305] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1301.378779][T14305] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1301.378831][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.378889][T14305] f2fs_sync_dirty_inodes+0x469/0x990 [ 1301.378962][T14305] block_operations+0x2a6/0xfc0 [ 1301.379013][T14305] ? __bfs+0x150/0x2a0 [ 1301.379057][T14305] ? __pfx_block_operations+0x10/0x10 [ 1301.379111][T14305] ? check_noncircular+0x97/0x160 [ 1301.379200][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379253][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379300][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.379356][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379411][T14305] f2fs_write_checkpoint+0x582/0x5550 [ 1301.379472][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379520][T14305] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1301.379577][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379624][T14305] ? __wait_for_common+0x1f3/0x4c0 [ 1301.379666][T14305] ? __pfx_schedule_timeout+0x10/0x10 [ 1301.379729][T14305] ? __pfx___wait_for_common+0x10/0x10 [ 1301.379768][T14305] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1301.379833][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379880][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.379936][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.379984][T14305] ? kthread_stop+0x280/0x640 [ 1301.380030][T14305] kill_f2fs_super+0x3f1/0x4a0 [ 1301.380084][T14305] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1301.380157][T14305] ? lockdep_hardirqs_on+0x78/0x100 [ 1301.380221][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.380269][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.380331][T14305] deactivate_locked_super+0xc1/0x1b0 [ 1301.380392][T14305] deactivate_super+0xe7/0x110 [ 1301.380450][T14305] cleanup_mnt+0x21f/0x450 [ 1301.380492][T14305] task_work_run+0x150/0x240 [ 1301.380544][T14305] ? __pfx_task_work_run+0x10/0x10 [ 1301.380595][T14305] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.380648][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.380711][T14305] exit_to_user_mode_loop+0x107/0x4f0 [ 1301.380761][T14305] ? rcu_is_watching+0x12/0xc0 [ 1301.380823][T14305] do_syscall_64+0x706/0xf80 [ 1301.380867][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.380907][T14305] RIP: 0033:0x7f3975b9e097 [ 1301.380937][T14305] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1301.380976][T14305] RSP: 002b:00007ffc05fc1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1301.381012][T14305] RAX: 0000000000000000 RBX: 00007f3975c321ca RCX: 00007f3975b9e097 [ 1301.381037][T14305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc05fc1b50 [ 1301.381062][T14305] RBP: 00007ffc05fc1b50 R08: 00007ffc05fc2b50 R09: 00000000ffffffff [ 1301.381087][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc05fc2be0 [ 1301.381111][T14305] R13: 00007f3975c321ca R14: 000000000013d6d2 R15: 00007ffc05fc2c20 [ 1301.381161][T14305] [ 1302.073297][T14910] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1260'. [ 1303.926930][T14305] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1304.274101][T14922] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1262'. [ 1306.135615][T14930] netlink: 'syz.5.1267': attribute type 21 has an invalid length. [ 1306.916002][T14926] Cannot find set identified by id 0 to match [ 1307.833953][T14935] block nbd6: not configured, cannot reconfigure [ 1308.279041][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1274'. [ 1308.910168][T14954] xt_hashlimit: size too large, truncated to 1048576 [ 1309.068126][T14962] Zero length message leads to an empty skb [ 1309.929456][T14979] Bluetooth: MGMT ver 1.23 [ 1311.128273][T15009] Illegal XDP return value 70 on prog (id 758) dev syz_tun, expect packet loss! [ 1311.289564][T15013] netlink: 'syz.5.1295': attribute type 1 has an invalid length. [ 1311.373424][T15013] netlink: 'syz.5.1295': attribute type 2 has an invalid length. [ 1311.534978][T15012] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1295'. [ 1311.634269][T15012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.703594][T15012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.746270][T15012] bond0 (unregistering): Released all slaves [ 1312.233282][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 1312.909248][T15042] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.684868][ T24] IPVS: starting estimator thread 0... [ 1313.722858][T15042] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.800141][T15075] IPVS: using max 21 ests per chain, 50400 per kthread [ 1313.986727][T15042] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.099114][T15084] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1317'. [ 1314.311826][T15042] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.335657][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1319'. [ 1314.575470][T15098] syzkaller0: entered promiscuous mode [ 1314.599861][T15098] syzkaller0: entered allmulticast mode [ 1314.985540][ T5983] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.124235][ T5982] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.187309][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 1315.224626][ T5982] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.224699][T15119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1329'. [ 1315.308930][ T5982] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.656359][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 1315.724058][T15128] netlink: 'syz.6.1333': attribute type 1 has an invalid length. [ 1316.119239][T11327] Bluetooth: hci2: link tx timeout [ 1316.128250][T11327] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1316.151563][T12600] Bluetooth: hci2: link tx timeout [ 1316.156884][T12600] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1316.560921][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1339'. [ 1316.682745][T15159] openvswitch: netlink: Flow actions attr not present in new flow. [ 1316.890659][T12600] Bluetooth: hci1: command 0x0406 tx timeout [ 1316.967286][T15163] netlink: 'syz.5.1343': attribute type 1 has an invalid length. [ 1316.977647][T15163] netlink: 'syz.5.1343': attribute type 2 has an invalid length. [ 1316.997751][T15163] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1343'. [ 1318.170062][ T5629] Bluetooth: hci2: command 0x0405 tx timeout [ 1319.124830][T15208] netlink: 'syz.5.1362': attribute type 1 has an invalid length. [ 1319.136453][T15208] netlink: 'syz.5.1362': attribute type 2 has an invalid length. [ 1319.154116][T15208] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1362'. [ 1319.812801][ T24] IPVS: starting estimator thread 0... [ 1319.832003][T15220] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1319.895505][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 1319.921780][T15222] IPVS: using max 23 ests per chain, 55200 per kthread [ 1320.532605][T15249] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1375'. [ 1320.653125][T15249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.702183][T15249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.747996][T15249] bond0 (unregistering): Released all slaves [ 1320.846780][T15247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1376'. [ 1320.875123][ T30] audit: type=1804 audit(1779559440.990:16): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1377" name="/newroot/419/cgroup.controllers" dev="tmpfs" ino=2167 res=1 errno=0 [ 1320.877962][T15252] syzkaller0: entered promiscuous mode [ 1320.933521][ T30] audit: type=1800 audit(1779559441.030:17): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1377" name="cgroup.controllers" dev="tmpfs" ino=2167 res=0 errno=0 [ 1320.988937][T15252] syzkaller0: entered allmulticast mode [ 1321.061392][ T30] audit: type=1800 audit(1779559441.080:18): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1377" name="cgroup.controllers" dev="tmpfs" ino=2167 res=0 errno=0 [ 1322.542208][T15291] warning: `syz.6.1392' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1322.599562][T15292] netlink: zone id is out of range [ 1322.966534][T15303] netlink: 'syz.8.1397': attribute type 9 has an invalid length. [ 1323.028660][T15303] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1397'. [ 1323.660805][T15320] netlink: 'syz.8.1403': attribute type 1 has an invalid length. [ 1323.688326][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 1323.712599][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1403'. [ 1323.762689][T15327] syz_tun: entered promiscuous mode [ 1323.778481][T15327] macvtap1: entered promiscuous mode [ 1323.792083][T15327] macvtap1: entered allmulticast mode [ 1323.803616][T15327] syz_tun: entered allmulticast mode [ 1324.068986][T15329] syz_tun: left allmulticast mode [ 1324.078692][T15329] syz_tun: left promiscuous mode [ 1324.104875][T15329] macvtap1: left promiscuous mode [ 1324.118689][T15329] macvtap1: left allmulticast mode [ 1324.720305][T15345] Bluetooth: MGMT ver 1.23 [ 1326.085813][T15378] Cannot find set identified by id 0 to match [ 1326.116671][T15378] netlink: 'syz.8.1423': attribute type 21 has an invalid length. [ 1327.196026][T15403] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1432'. [ 1327.274943][T15403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.312469][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.363236][T15403] bond0 (unregistering): Released all slaves [ 1327.723376][T15409] syz.8.1434 uses obsolete (PF_INET,SOCK_PACKET) [ 1327.768018][T15409] syzkaller1: entered promiscuous mode [ 1327.794424][T15409] syzkaller1: entered allmulticast mode [ 1328.328710][T15424] netlink: 'syz.5.1441': attribute type 9 has an invalid length. [ 1328.360849][T15424] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1441'. [ 1328.394812][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 1328.590563][T15434] netlink: 'syz.8.1443': attribute type 2 has an invalid length. [ 1328.618337][T15434] netlink: 'syz.8.1443': attribute type 2 has an invalid length. [ 1328.634446][T15428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1328.728061][T15431] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1329.085760][T15449] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 1329.095496][T15449] netlink: 'syz.3.1448': attribute type 2 has an invalid length. [ 1329.133136][T15449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1329.367317][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.375995][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.683322][T15438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.713193][T15438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.995824][T15449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.088646][T15449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.165996][T15449] bond0 (unregistering): Released all slaves [ 1330.297070][T13912] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.334597][T13912] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.379191][T15469] tipc: Started in network mode [ 1330.398906][T15469] tipc: Node identity , cluster identity 4711 [ 1330.415284][T15469] tipc: Failed to obtain node identity [ 1330.422717][T15469] tipc: Enabling of bearer rejected, failed to enable media [ 1330.441468][T13912] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.463989][T13912] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.487548][T15494] infiniband syz2: set down [ 1331.512603][T15494] infiniband syz2: added ipvlan1 [ 1331.547410][T15494] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1331.566860][T15494] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1331.593427][T15494] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1331.674166][T15494] RDS/IB: syz2: added [ 1331.687810][T15494] smc: adding ib device syz2 with port count 1 [ 1331.698194][T15494] smc: ib device syz2 port 1 has no pnetid [ 1332.252270][ T5629] Bluetooth: hci6: command 0x0405 tx timeout [ 1333.309041][T15475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.747658][T15534] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 1333.821514][T15534] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 1333.840873][T15531] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1472'. [ 1333.906872][T15540] netlink: 'syz.8.1475': attribute type 9 has an invalid length. [ 1333.956906][T15540] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1475'. [ 1334.023863][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1476'. [ 1334.352789][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1481'. [ 1334.735533][T15563] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1335.769233][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1501'. [ 1337.569590][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1517'. [ 1337.834564][T15651] bond0 (unregistering): Released all slaves [ 1338.130471][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1524'. [ 1338.358919][T15674] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1526'. [ 1338.398845][T15674] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1526'. [ 1338.977373][T15684] trusted_key: syz.7.1528 sent an empty control message without MSG_MORE. [ 1340.648369][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.656196][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.924592][T15729] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 1340.941205][T15710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.955822][T15710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.998030][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1545'. [ 1341.295463][T15729] bond0: entered promiscuous mode [ 1341.303083][T15729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.316514][T15731] bond0: entered allmulticast mode [ 1341.398867][T15734] bond0: (slave bridge2): making interface the new active one [ 1341.427906][T15734] bridge2: entered promiscuous mode [ 1341.445984][T15734] bridge2: entered allmulticast mode [ 1341.485869][T15734] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1341.496685][ T1160] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.518867][ T1160] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.547270][ T1160] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.567271][ T1160] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.758164][T15749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1551'. [ 1341.772188][T15749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1551'. [ 1342.128970][T15758] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 1342.170880][T15758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1342.215115][T15758] bond1: (slave geneve2): making interface the new active one [ 1342.228063][T15758] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1343.217930][T15703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.334447][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1576'. [ 1345.066601][T15840] netlink: 'syz.7.1585': attribute type 4 has an invalid length. [ 1345.713467][T15858] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1348.538535][T15915] syzkaller0: entered promiscuous mode [ 1348.565585][T15915] syzkaller0: entered allmulticast mode [ 1349.430856][T15929] syzkaller0: entered promiscuous mode [ 1349.456012][T15929] syzkaller0: entered allmulticast mode [ 1350.347286][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1639'. [ 1350.444586][T15973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1643'. [ 1350.466490][T15973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1643'. [ 1350.723039][T15979] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 1350.731031][T15979] netlink: 'syz.3.1644': attribute type 2 has an invalid length. [ 1350.745841][T15979] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1644'. [ 1353.094525][T16009] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1656'. [ 1353.125206][T16009] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1656'. [ 1353.597386][T16023] netlink: 'syz.5.1661': attribute type 1 has an invalid length. [ 1353.653773][T16027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1661'. [ 1353.749535][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1662'. [ 1353.779408][T16023] bond0: entered promiscuous mode [ 1353.815924][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.884666][T16027] bond0: entered allmulticast mode [ 1353.980719][T16031] bond0: (slave bridge2): making interface the new active one [ 1354.031806][T16031] bridge2: entered promiscuous mode [ 1354.049937][T16031] bridge2: entered allmulticast mode [ 1354.105373][T16031] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1354.552101][T16038] syzkaller1: entered promiscuous mode [ 1354.574696][T16038] syzkaller1: entered allmulticast mode [ 1355.012917][T16044] syzkaller0: entered promiscuous mode [ 1355.037124][T16044] syzkaller0: entered allmulticast mode [ 1355.096996][T16057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1672'. [ 1355.126061][T16057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1672'. [ 1356.491990][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 1357.084104][T16086] netlink: 'syz.6.1683': attribute type 9 has an invalid length. [ 1357.109740][T16086] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1683'. [ 1358.816654][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 1358.875721][T16106] veth0_macvtap: left promiscuous mode [ 1359.588865][T16129] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1694'. [ 1359.633100][T16129] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1694'. [ 1359.661335][T16125] syzkaller0: entered promiscuous mode [ 1359.669327][T16125] syzkaller0: entered allmulticast mode [ 1359.751894][T16133] netlink: 'syz.7.1696': attribute type 9 has an invalid length. [ 1359.812940][T16133] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1696'. [ 1360.367916][T16149] netlink: 'syz.5.1703': attribute type 1 has an invalid length. [ 1360.610380][T16149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1360.894360][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.907259][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.907086][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1716'. [ 1362.895575][T16222] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1362.923617][T16223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1362.945930][T16222] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1363.227229][T16232] netlink: 'syz.8.1734': attribute type 1 has an invalid length. [ 1363.271393][T16232] netlink: 'syz.8.1734': attribute type 2 has an invalid length. [ 1363.354577][T16231] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1734'. [ 1363.527587][T16239] netlink: 'syz.6.1738': attribute type 1 has an invalid length. [ 1363.643896][T16231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.705030][T16231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.753381][T16231] bond0 (unregistering): Released all slaves [ 1363.901905][T16247] netlink: 'syz.5.1739': attribute type 11 has an invalid length. [ 1364.748891][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1747'. [ 1364.934816][T16281] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 1364.944314][T16281] netlink: 'syz.5.1752': attribute type 2 has an invalid length. [ 1364.957469][T16281] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1752'. [ 1365.185252][T16285] netlink: 'syz.7.1754': attribute type 1 has an invalid length. [ 1365.455052][T16291] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1757'. [ 1365.489106][T16291] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1757'. [ 1366.166618][T16315] netlink: 'syz.5.1766': attribute type 1 has an invalid length. [ 1366.196874][T16315] netlink: 'syz.5.1766': attribute type 2 has an invalid length. [ 1366.237051][T16315] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1766'. [ 1366.423959][T16325] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 1366.691005][T16330] syzkaller1: entered promiscuous mode [ 1366.724447][T16330] syzkaller1: entered allmulticast mode [ 1367.203677][T16354] netlink: 'syz.3.1780': attribute type 4 has an invalid length. [ 1367.641337][T16365] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1785'. [ 1367.899420][T16371] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1788'. [ 1369.483026][T16421] validate_nla: 1 callbacks suppressed [ 1369.483051][T16421] netlink: 'syz.0.1805': attribute type 4 has an invalid length. [ 1369.583110][ T5629] Bluetooth: hci2: link tx timeout [ 1369.588289][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.599778][ T5629] Bluetooth: hci2: link tx timeout [ 1369.604978][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.617179][ T5629] Bluetooth: hci2: link tx timeout [ 1369.623897][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.644874][ T5629] Bluetooth: hci2: link tx timeout [ 1369.650540][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.658728][ T5629] Bluetooth: hci2: link tx timeout [ 1369.664928][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.673822][ T5629] Bluetooth: hci2: link tx timeout [ 1369.679750][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.687483][ T5629] Bluetooth: hci2: link tx timeout [ 1369.692924][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.702866][ T5629] Bluetooth: hci2: link tx timeout [ 1369.708011][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.716345][ T5629] Bluetooth: hci2: link tx timeout [ 1369.721590][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1369.779048][T16423] syzkaller0: entered promiscuous mode [ 1369.816220][T16423] syzkaller0: entered allmulticast mode [ 1370.609207][T16451] netlink: 87 bytes leftover after parsing attributes in process `syz.8.1819'. [ 1371.185006][T16471] netlink: 'syz.6.1828': attribute type 1 has an invalid length. [ 1371.207659][ T5629] Bluetooth: hci2: link tx timeout [ 1371.214656][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.234356][ T5629] Bluetooth: hci2: link tx timeout [ 1371.239501][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.248947][ T5629] Bluetooth: hci2: link tx timeout [ 1371.256131][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.281332][ T5629] Bluetooth: hci2: link tx timeout [ 1371.286489][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.295991][ T5629] Bluetooth: hci2: link tx timeout [ 1371.302828][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.312021][ T5629] Bluetooth: hci2: link tx timeout [ 1371.319078][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.329650][ T5629] Bluetooth: hci2: link tx timeout [ 1371.336358][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.345713][ T5629] Bluetooth: hci2: link tx timeout [ 1371.351010][ T5629] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1371.450733][T16471] bond0: entered promiscuous mode [ 1371.476835][T16471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.611459][ T5629] Bluetooth: hci2: command 0x0405 tx timeout [ 1372.545325][T16499] syzkaller0: entered promiscuous mode [ 1372.582036][T16499] syzkaller0: entered allmulticast mode [ 1372.944063][T16510] netlink: 'syz.6.1842': attribute type 1 has an invalid length. [ 1372.968558][T16510] netlink: 'syz.6.1842': attribute type 2 has an invalid length. [ 1373.053737][T16510] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1842'. [ 1373.152265][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.160722][T16514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.258693][T16528] netlink: 79 bytes leftover after parsing attributes in process `syz.0.1847'. [ 1373.387027][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.425253][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.708921][T16526] tipc: Started in network mode [ 1373.720141][T16526] tipc: Node identity ac14140f, cluster identity 4711 [ 1373.750920][T16526] tipc: New replicast peer: 255.255.255.255 [ 1373.780715][T16526] tipc: Enabled bearer , priority 10 [ 1373.798248][ T5982] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.835541][ T5982] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.903815][ T5982] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.928443][ T5982] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.083951][T16542] ip6tnl1: entered allmulticast mode [ 1374.185573][T16553] netlink: 'syz.8.1851': attribute type 1 has an invalid length. [ 1374.243570][T16553] bridge_slave_0: left allmulticast mode [ 1374.285094][T16553] bridge_slave_0: left promiscuous mode [ 1374.296676][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.358410][T16553] bridge_slave_1: left allmulticast mode [ 1374.381418][T16553] bridge_slave_1: left promiscuous mode [ 1374.404461][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.479623][T16553] team0: Port device team_slave_0 removed [ 1374.492800][T16553] team0: Port device team_slave_1 removed [ 1374.500653][T16553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.513104][T16553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.524617][T16553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.883889][T12818] tipc: Node number set to 2886997007 [ 1375.372003][T16590] hsr0: entered promiscuous mode [ 1375.933422][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1874'. [ 1376.197925][T16615] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1878'. [ 1376.254663][T16586] hsr0: left promiscuous mode [ 1376.292922][T16619] lo speed is unknown, defaulting to 1000 [ 1376.365385][T16619] lo speed is unknown, defaulting to 1000 [ 1376.376412][T16622] syzkaller0: entered promiscuous mode [ 1376.403849][T16622] syzkaller0: entered allmulticast mode [ 1376.427988][T16619] lo speed is unknown, defaulting to 1000 [ 1376.533907][T16633] netlink: 'syz.8.1884': attribute type 1 has an invalid length. [ 1376.543636][T16633] netlink: 'syz.8.1884': attribute type 2 has an invalid length. [ 1376.564436][T16633] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1884'. [ 1376.922298][T16643] netlink: 'syz.8.1888': attribute type 1 has an invalid length. [ 1377.056180][T16643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.249908][T16657] netlink: 'syz.5.1890': attribute type 4 has an invalid length. [ 1377.541486][T16619] infiniband syz0: set down [ 1377.546180][T12818] lo speed is unknown, defaulting to 1000 [ 1377.561584][T16619] infiniband syz0: added lo [ 1377.583907][T16619] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1377.601799][T16619] infiniband syz0: Couldn't open port 1 [ 1377.640956][T16619] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1377.692976][T16619] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1377.768641][T16619] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1377.805949][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1894'. [ 1377.952223][T16619] RDS/IB: syz0: added [ 1377.969259][T16619] smc: adding ib device syz0 with port count 1 [ 1378.022827][T16619] smc: ib device syz0 port 1 has no pnetid [ 1378.044760][T16619] lo speed is unknown, defaulting to 1000 [ 1378.080596][T12818] lo speed is unknown, defaulting to 1000 [ 1378.458735][T16687] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 1378.657713][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1903'. [ 1379.321774][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1911'. [ 1379.657591][ T1160] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1379.815312][T16619] lo speed is unknown, defaulting to 1000 [ 1380.097615][T16742] netlink: 'syz.6.1919': attribute type 1 has an invalid length. [ 1380.141151][T16742] netlink: 'syz.6.1919': attribute type 2 has an invalid length. [ 1380.193620][T16742] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1919'. [ 1380.492777][T16752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1921'. [ 1380.925158][T16619] lo speed is unknown, defaulting to 1000 [ 1381.419128][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 1381.765837][T16778] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1931'. [ 1382.111946][T16619] lo speed is unknown, defaulting to 1000 [ 1382.701892][T16806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1383.287983][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1943'. [ 1383.328856][T16819] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1943'. [ 1383.358476][T16619] lo speed is unknown, defaulting to 1000 [ 1383.585348][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1945'. [ 1384.128713][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1949'. [ 1384.801658][T16853] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 1384.822228][T16619] lo speed is unknown, defaulting to 1000 [ 1384.945399][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.447241][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1958'. [ 1385.538234][T16875] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1960'. [ 1386.193583][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1962'. [ 1386.810553][T16873] lo speed is unknown, defaulting to 1000 [ 1387.502839][T16914] syzkaller0: entered promiscuous mode [ 1387.526446][T16914] syzkaller0: entered allmulticast mode [ 1387.966446][T16922] tipc: Started in network mode [ 1387.975578][T16922] tipc: Node identity 26e2a98a43a4, cluster identity 4711 [ 1387.995901][T16922] tipc: Enabled bearer , priority 0 [ 1388.052488][T16928] syzkaller0: entered promiscuous mode [ 1388.068731][T16928] syzkaller0: entered allmulticast mode [ 1388.242895][T16934] ipip0: entered allmulticast mode [ 1388.384703][T16936] tipc: Resetting bearer [ 1388.418802][T16921] tipc: Resetting bearer [ 1388.463455][T16921] tipc: Disabling bearer [ 1388.464770][T16945] netlink: 'syz.8.1983': attribute type 1 has an invalid length. [ 1388.471682][T16946] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1982'. [ 1388.488814][T16945] netlink: 'syz.8.1983': attribute type 2 has an invalid length. [ 1388.514351][T16945] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1983'. [ 1389.519450][T16975] syz0: rxe_newlink: already configured on lo [ 1390.259997][T16989] netlink: 'syz.5.1996': attribute type 1 has an invalid length. [ 1390.303368][T16989] netlink: 'syz.5.1996': attribute type 2 has an invalid length. [ 1390.393268][T16988] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1996'. [ 1390.591453][T16997] hsr0: entered promiscuous mode [ 1390.887373][T17006] syzkaller0: entered promiscuous mode [ 1390.902530][T17006] syzkaller0: entered allmulticast mode [ 1391.017988][T17012] rdma_rxe: rxe_newlink: failed to add lo [ 1391.394319][T16996] hsr0: left promiscuous mode [ 1391.827226][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2012'. [ 1391.857310][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2012'. [ 1392.285951][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2016'. [ 1392.303908][T17052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1392.487380][T17056] syzkaller1: entered promiscuous mode [ 1392.513319][T17056] syzkaller1: entered allmulticast mode [ 1393.443339][T17050] lo speed is unknown, defaulting to 1000 [ 1393.699404][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2026'. [ 1394.228572][T17094] netlink: 'syz.6.2032': attribute type 1 has an invalid length. [ 1395.045820][T17121] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1395.163260][T17125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2042'. [ 1395.298850][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1396.816181][T17168] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2060'. [ 1396.946523][T17175] syzkaller0: entered promiscuous mode [ 1396.988201][T17175] syzkaller0: entered allmulticast mode [ 1397.440690][T17198] Cannot find del_set index 1 as target [ 1398.492944][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 1398.558482][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 1398.923305][T17239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2083'. [ 1399.101980][ T7866] IPVS: starting estimator thread 0... [ 1399.198412][T17251] IPVS: using max 23 ests per chain, 55200 per kthread [ 1399.398062][T17253] syzkaller0: entered promiscuous mode [ 1399.408633][T17253] syzkaller0: entered allmulticast mode [ 1399.421063][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2089'. [ 1399.645601][T17267] syzkaller0: entered promiscuous mode [ 1399.670092][T17267] syzkaller0: entered allmulticast mode [ 1399.770931][T17269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2092'. [ 1400.410659][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2102'. [ 1400.888282][T17306] tipc: Started in network mode [ 1400.914502][T17306] tipc: Node identity 7e564a275d9b, cluster identity 4711 [ 1400.941897][T17306] tipc: Enabled bearer , priority 0 [ 1400.962775][T17311] syzkaller0: entered promiscuous mode [ 1400.973826][T17311] syzkaller0: entered allmulticast mode [ 1401.003458][T17312] syzkaller0: entered promiscuous mode [ 1401.031252][T17312] syzkaller0: entered allmulticast mode [ 1401.203587][T17312] tipc: Resetting bearer [ 1401.245184][T17305] tipc: Resetting bearer [ 1401.329497][T17305] tipc: Disabling bearer [ 1401.457882][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'. [ 1401.780447][T17338] syzkaller0: entered promiscuous mode [ 1401.804864][T17338] syzkaller0: entered allmulticast mode [ 1401.862059][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2120'. [ 1402.117725][T17317] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1402.707606][T17366] 8021q: VLANs not supported on gre0 [ 1403.647847][T17390] syzkaller0: entered promiscuous mode [ 1403.678123][T17390] syzkaller0: entered allmulticast mode [ 1404.198162][T17401] syzkaller0: entered promiscuous mode [ 1404.219838][T17401] syzkaller0: entered allmulticast mode [ 1404.296020][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2144'. [ 1404.624797][T17413] syzkaller0: entered promiscuous mode [ 1404.641301][T17413] syzkaller0: entered allmulticast mode [ 1406.013296][T17447] syzkaller0: entered promiscuous mode [ 1406.039196][T17447] syzkaller0: entered allmulticast mode [ 1406.488614][T17462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2165'. [ 1406.850845][T17473] openvswitch: netlink: Message has 4 unknown bytes. [ 1406.901535][T17473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.346163][T17485] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 1407.367397][T17485] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 1407.407250][T17485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2177'. [ 1407.882612][T17498] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2183'. [ 1408.199590][T17506] ipip0: entered allmulticast mode [ 1409.903480][T17560] rdma_rxe: rxe_newlink: failed to add lo [ 1410.179105][T17571] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1410.737419][T17584] hsr0: entered promiscuous mode [ 1411.043185][T17593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2206'. [ 1411.403854][T17605] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2208'. [ 1411.532923][T17583] hsr0: left promiscuous mode [ 1411.597265][T17611] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2211'. [ 1411.642424][T17611] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1411.778203][T17607] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2211'. [ 1411.959565][T17620] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2216'. [ 1411.996350][T17618] syzkaller0: entered promiscuous mode [ 1412.005357][T17618] syzkaller0: entered allmulticast mode [ 1412.574764][T17604] lo speed is unknown, defaulting to 1000 [ 1412.637977][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2224'. [ 1412.872848][T17644] syzkaller0: entered promiscuous mode [ 1412.894581][T17644] syzkaller0: entered allmulticast mode [ 1412.905350][T17645] hsr0: entered promiscuous mode [ 1413.408000][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2231'. [ 1413.715791][T17643] hsr0: left promiscuous mode [ 1413.888803][T17668] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2233'. [ 1415.023091][T17699] netlink: 'syz.5.2243': attribute type 4 has an invalid length. [ 1415.547691][T17705] syzkaller0: entered promiscuous mode [ 1415.554795][T17705] syzkaller0: entered allmulticast mode [ 1416.496738][T17733] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2256'. [ 1416.778669][T17738] netlink: 'syz.5.2259': attribute type 4 has an invalid length. [ 1417.633538][T17764] syzkaller0: entered promiscuous mode [ 1417.653656][T17764] syzkaller0: entered allmulticast mode [ 1418.308805][T17782] netlink: 'syz.7.2275': attribute type 4 has an invalid length. [ 1418.686165][T17791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.693570][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.989058][T17791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.029004][T17791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.336286][T17812] hsr0: entered promiscuous mode [ 1419.372885][ T5926] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.412250][ T5926] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.526730][ T5926] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.562263][ T5926] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.046736][T17811] hsr0: left promiscuous mode [ 1420.983869][T17862] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1421.363262][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2304'. [ 1421.395807][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2304'. [ 1421.437752][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 1421.747437][T17891] syzkaller0: entered promiscuous mode [ 1421.764186][T17891] syzkaller0: entered allmulticast mode [ 1421.767414][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2308'. [ 1421.797011][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2308'. [ 1421.837411][T17892] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2308'. [ 1422.333474][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.349015][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.034447][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 1423.073444][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 1423.809022][T17936] syzkaller0: entered promiscuous mode [ 1423.843969][T17936] syzkaller0: entered allmulticast mode [ 1424.304708][T17928] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1425.027235][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 1426.675532][T18013] tipc: Enabled bearer , priority 0 [ 1426.783813][T18019] syzkaller0: entered promiscuous mode [ 1426.824675][T18019] syzkaller0: entered allmulticast mode [ 1426.857061][T18018] syzkaller1: entered promiscuous mode [ 1426.877458][T18018] syzkaller1: entered allmulticast mode [ 1426.902315][T18006] tipc: Resetting bearer [ 1426.985142][T18004] tipc: Resetting bearer [ 1427.105595][T18004] tipc: Disabling bearer [ 1427.326774][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.334168][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.527229][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2348'. [ 1427.641903][T18025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.699351][T18025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.014062][T18048] syzkaller0: entered promiscuous mode [ 1428.043225][T18048] syzkaller0: entered allmulticast mode [ 1428.080269][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.116714][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.279318][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.321403][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.444673][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2355'. [ 1428.568028][T18070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.721385][T18070] batadv_slave_1: entered promiscuous mode [ 1428.857120][T18081] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1429.454888][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2365'. [ 1429.485071][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2365'. [ 1429.656673][T18103] netlink: 'syz.8.2365': attribute type 1 has an invalid length. [ 1430.090916][T18109] syzkaller0: entered promiscuous mode [ 1430.118007][T18109] syzkaller0: entered allmulticast mode [ 1430.382795][T18113] tipc: Started in network mode [ 1430.406305][T18113] tipc: Node identity c29d58ae0c21, cluster identity 4711 [ 1430.442464][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1430.456412][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1430.463511][T18113] tipc: Enabled bearer , priority 0 [ 1430.471756][T18117] syzkaller0: entered promiscuous mode [ 1430.471786][T18117] syzkaller0: entered allmulticast mode [ 1430.487651][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1430.499650][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1430.508758][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1430.518137][T18113] tipc: Resetting bearer [ 1430.628786][T18112] tipc: Resetting bearer [ 1430.775601][T18112] tipc: Disabling bearer [ 1430.829828][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 1430.857632][T18125] ipip0: entered allmulticast mode [ 1431.736497][T18151] syzkaller0: entered promiscuous mode [ 1431.752680][T18151] syzkaller0: entered allmulticast mode [ 1432.225890][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 1432.336027][T18165] tipc: Enabled bearer , priority 0 [ 1432.394800][T18168] syzkaller0: entered promiscuous mode [ 1432.410424][T18168] syzkaller0: entered allmulticast mode [ 1432.466186][T18165] tipc: Resetting bearer [ 1432.507816][T18164] tipc: Resetting bearer [ 1432.572635][ T5629] Bluetooth: hci5: command tx timeout [ 1432.588942][T18164] tipc: Disabling bearer [ 1432.704275][T18175] hsr0: entered promiscuous mode [ 1432.924561][T18114] lo speed is unknown, defaulting to 1000 [ 1433.103502][T18174] hsr0: left promiscuous mode [ 1433.430401][T18189] syzkaller0: entered promiscuous mode [ 1433.457123][T18189] syzkaller0: entered allmulticast mode [ 1434.245033][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2404'. [ 1434.256261][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1434.569044][T18219] tipc: Enabled bearer , priority 0 [ 1434.618236][T18219] syzkaller0: entered promiscuous mode [ 1434.650850][ T5629] Bluetooth: hci5: command tx timeout [ 1434.657674][T18219] syzkaller0: entered allmulticast mode [ 1434.797130][T18219] tipc: Resetting bearer [ 1434.816662][T18230] hsr0: entered promiscuous mode [ 1434.902416][T18218] tipc: Resetting bearer [ 1434.962983][T18218] tipc: Disabling bearer [ 1435.507384][T18227] hsr0: left promiscuous mode [ 1435.617746][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 1436.269616][T18289] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2424'. [ 1436.324447][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.341836][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.364039][T18114] bridge_slave_0: entered allmulticast mode [ 1436.379039][T18114] bridge_slave_0: entered promiscuous mode [ 1436.412554][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.439970][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.464512][T18114] bridge_slave_1: entered allmulticast mode [ 1436.497274][T18114] bridge_slave_1: entered promiscuous mode [ 1436.715284][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.732071][ T5629] Bluetooth: hci5: command tx timeout [ 1436.741919][T18292] syzkaller0: entered promiscuous mode [ 1436.760805][T18292] syzkaller0: entered allmulticast mode [ 1436.783342][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.106777][T18114] team0: Port device team_slave_0 added [ 1437.213174][T18114] team0: Port device team_slave_1 added [ 1437.412483][T18314] tipc: Enabling of bearer rejected, failed to enable media [ 1437.443004][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.460316][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.519259][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.576953][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.603144][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.640219][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.806411][T18322] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1437.975502][T18114] hsr_slave_0: entered promiscuous mode [ 1437.998442][T18114] hsr_slave_1: entered promiscuous mode [ 1438.018806][T18114] debugfs: 'hsr0' already exists in 'hsr' [ 1438.034360][T18114] Cannot create hsr debugfs directory [ 1438.277448][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1438.314566][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1438.332669][T18342] netlink: 'syz.7.2440': attribute type 3 has an invalid length. [ 1438.399653][T18345] netlink: 'syz.7.2440': attribute type 12 has an invalid length. [ 1438.423236][T18345] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2440'. [ 1438.537751][T18340] syzkaller0: entered promiscuous mode [ 1438.543056][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 1438.553776][T18340] syzkaller0: entered allmulticast mode [ 1438.762073][T18347] netlink: 'syz.0.2442': attribute type 33 has an invalid length. [ 1438.774905][T18347] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2442'. [ 1438.811537][ T5629] Bluetooth: hci5: command tx timeout [ 1438.865942][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2445'. [ 1438.984607][T18348] bond2: entered promiscuous mode [ 1439.001034][T18348] bond2: entered allmulticast mode [ 1439.006653][T18348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1439.064585][T18359] bridge3: entered promiscuous mode [ 1439.076369][T18359] bridge3: entered allmulticast mode [ 1439.084900][T18359] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1439.153597][T18347] `: renamed from team0 [ 1439.185290][T18369] syzkaller0: entered promiscuous mode [ 1439.192535][T18369] syzkaller0: entered allmulticast mode [ 1439.331555][T18378] syzkaller1: entered promiscuous mode [ 1439.358357][T18378] syzkaller1: entered allmulticast mode [ 1439.429856][T18378] netlink: 'syz.8.2447': attribute type 21 has an invalid length. [ 1439.499102][T18386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2449'. [ 1440.032884][T18114] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.145743][T18411] bridge0: port 3(syz_tun) entered blocking state [ 1440.157404][T18411] bridge0: port 3(syz_tun) entered disabled state [ 1440.176202][T18411] syz_tun: entered allmulticast mode [ 1440.197653][T18411] syz_tun: entered promiscuous mode [ 1440.494045][T18114] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.801077][T18114] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.849028][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2462'. [ 1440.982926][T18114] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.326836][T18446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2467'. [ 1441.343441][T18420] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1441.548108][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1441.593533][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1441.885994][T18463] syz0: rxe_newlink: already configured on lo [ 1441.942360][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2474'. [ 1442.147513][T18114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1442.167306][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.198241][T18114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1442.224836][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.378364][T18471] syzkaller0: entered promiscuous mode [ 1442.395023][T18471] syzkaller0: entered allmulticast mode [ 1442.427330][T18114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1442.441569][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.960198][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2483'. [ 1443.785563][T18114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1443.797253][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.806056][T18485] syzkaller0: entered promiscuous mode [ 1443.812696][T18485] syzkaller0: entered allmulticast mode [ 1443.819639][T18487] tipc: Enabled bearer , priority 0 [ 1443.835746][T18490] tipc: Resetting bearer [ 1443.985206][T18483] tipc: Disabling bearer [ 1444.452636][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.625651][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.652277][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.659439][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.728552][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.735731][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.742778][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2493'. [ 1444.845061][T18538] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2495'. [ 1444.876791][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1444.886807][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2496'. [ 1444.973473][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1445.448984][T18560] syzkaller0: entered promiscuous mode [ 1445.481830][T18560] syzkaller0: entered allmulticast mode [ 1446.107128][T18583] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1446.125429][ T5629] block nbd0: Receive control failed (result -32) [ 1446.133791][T11327] block nbd0: Receive control failed (result -32) [ 1446.685592][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.805962][T18614] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1447.876008][T18595] lo speed is unknown, defaulting to 1000 [ 1447.909415][T18114] veth0_vlan: entered promiscuous mode [ 1447.966046][T18114] veth1_vlan: entered promiscuous mode [ 1448.061517][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2526'. [ 1448.085361][T18114] veth0_macvtap: entered promiscuous mode [ 1448.113289][T18114] veth1_macvtap: entered promiscuous mode [ 1448.188578][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.248537][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.319211][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.364335][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.403384][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.444231][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.804191][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.840474][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.872109][T18659] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2531'. [ 1449.185998][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.204804][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.302904][T18669] syzkaller0: entered promiscuous mode [ 1449.309944][T18669] syzkaller0: entered allmulticast mode [ 1449.338354][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2538'. [ 1450.112425][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1450.134762][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1450.156905][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1450.175265][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1450.184585][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1451.678248][T18710] hsr0: entered promiscuous mode [ 1451.944920][T18710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 1452.256945][T11327] Bluetooth: hci0: command tx timeout [ 1452.275038][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2551'. [ 1452.482786][T18706] hsr0: left promiscuous mode [ 1453.218871][T18754] Bluetooth: MGMT ver 1.23 [ 1453.239809][T18752] bridge0: port 3(geneve2) entered blocking state [ 1453.257239][T18752] bridge0: port 3(geneve2) entered disabled state [ 1453.275090][T18752] geneve2: entered allmulticast mode [ 1453.317243][T18752] geneve2: entered promiscuous mode [ 1453.737128][T18695] lo speed is unknown, defaulting to 1000 [ 1453.968919][T18772] hsr0: entered promiscuous mode [ 1454.023875][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 1454.042869][T18772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 1454.058939][ T5629] block nbd1: Receive control failed (result -32) [ 1454.065921][T11327] block nbd1: Receive control failed (result -32) [ 1454.335135][T11327] Bluetooth: hci0: command tx timeout [ 1454.357736][T18785] tipc: Enabling of bearer rejected, failed to enable media [ 1454.594349][T18771] hsr0: left promiscuous mode [ 1454.816046][T18793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1454.891649][T18748] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1455.190273][T18807] syz_tun: left allmulticast mode [ 1455.204862][T18810] netlink: 'syz.8.2581': attribute type 1 has an invalid length. [ 1455.207683][T18817] netlink: 'syz.3.2578': attribute type 10 has an invalid length. [ 1455.220078][T18807] syz_tun: left promiscuous mode [ 1455.231994][T18810] netlink: 'syz.8.2581': attribute type 2 has an invalid length. [ 1455.252956][T18807] bridge0: port 3(syz_tun) entered disabled state [ 1455.267910][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2581'. [ 1455.299966][T18807] bridge_slave_0: left allmulticast mode [ 1455.309484][T18816] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2581'. [ 1455.320465][T18807] bridge_slave_0: left promiscuous mode [ 1455.333000][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.342944][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2583'. [ 1455.347049][T18807] bridge_slave_1: left allmulticast mode [ 1455.368017][T18807] bridge_slave_1: left promiscuous mode [ 1455.374650][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.393495][T18807] bond0: (slave bond_slave_0): Releasing backup interface [ 1455.416139][T18807] bond0: (slave bond_slave_1): Releasing backup interface [ 1455.450987][T18807] team0: Port device team_slave_0 removed [ 1455.469146][T18807] team0: Port device team_slave_1 removed [ 1455.477356][T18807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.485823][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.493900][T18807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1455.569264][T18817] team0: Failed to send options change via netlink (err -105) [ 1455.614919][T18817] team0: Port device dummy0 added [ 1456.307640][T18849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1456.409901][T11327] Bluetooth: hci0: command tx timeout [ 1456.987394][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.005243][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.021989][T18695] bridge_slave_0: entered allmulticast mode [ 1457.040628][T18695] bridge_slave_0: entered promiscuous mode [ 1457.114231][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.131156][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.145479][T18695] bridge_slave_1: entered allmulticast mode [ 1457.161973][T18695] bridge_slave_1: entered promiscuous mode [ 1457.181530][T18881] syzkaller0: entered promiscuous mode [ 1457.189437][T18881] syzkaller0: entered allmulticast mode [ 1457.337762][T18887] bond1: entered promiscuous mode [ 1457.353923][T18887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1457.487311][T18888] bridge6: entered promiscuous mode [ 1457.495972][T18897] syz0: rxe_newlink: already configured on lo [ 1457.504948][T18888] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 1457.837969][T18695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.879216][T18901] 8021q: VLANs not supported on ip6gre0 [ 1457.922769][T18695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.996820][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2614'. [ 1458.101520][T18695] team0: Port device team_slave_0 added [ 1458.136026][T18695] team0: Port device team_slave_1 added [ 1458.288908][T18695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.306957][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.357021][T18695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.384304][T18695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.391515][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.419919][T18695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.502501][T11327] Bluetooth: hci0: command tx timeout [ 1458.568968][T18695] hsr_slave_0: entered promiscuous mode [ 1458.595608][T18695] hsr_slave_1: entered promiscuous mode [ 1458.615858][T18695] debugfs: 'hsr0' already exists in 'hsr' [ 1458.628402][T18695] Cannot create hsr debugfs directory [ 1459.696966][T18949] syzkaller0: entered promiscuous mode [ 1459.710707][T18949] syzkaller0: entered allmulticast mode [ 1459.733372][T18957] tipc: Enabling of bearer rejected, failed to enable media [ 1460.216522][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2631'. [ 1462.885106][T19000] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 1462.893526][T18990] bond1: entered promiscuous mode [ 1462.928394][T18990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1462.952770][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2640'. [ 1463.023227][T18996] bridge8: entered promiscuous mode [ 1463.031615][T18996] bond1: (slave bridge8): Enslaving as an active interface with an up link [ 1463.078567][T19000] bond3: entered promiscuous mode [ 1463.085944][T19000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1463.097975][T19003] bond3: entered allmulticast mode [ 1463.276745][T19003] bond3: (slave bridge7): making interface the new active one [ 1463.285653][T19003] bridge7: entered promiscuous mode [ 1463.295424][T19003] bridge7: entered allmulticast mode [ 1463.305890][T19003] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 1463.318055][T19008] syzkaller0: entered promiscuous mode [ 1463.325048][T19008] syzkaller0: entered allmulticast mode [ 1463.563452][T19017] tipc: Enabling of bearer rejected, failed to enable media [ 1463.630769][T18695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1463.673668][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1463.698068][T18695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1463.724106][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1463.753949][T18695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1463.807828][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1463.842423][T18695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1463.879555][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.094318][T19020] syzkaller0: entered promiscuous mode [ 1464.111415][T19020] syzkaller0: entered allmulticast mode [ 1464.272613][T19039] syzkaller0: entered promiscuous mode [ 1464.286687][T19039] syzkaller0: entered allmulticast mode [ 1464.970965][T19063] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1467.036057][T19079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2658'. [ 1468.522672][T19055] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1468.652836][T19088] tipc: Enabled bearer , priority 0 [ 1468.724893][T19086] tipc: Disabling bearer [ 1468.798814][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2662'. [ 1468.979620][T11327] block nbd2: Receive control failed (result -32) [ 1468.991391][ T5629] block nbd2: Receive control failed (result -32) [ 1469.045817][T18695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.092954][T18695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.140558][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.147732][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.239076][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.246280][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.548702][T19105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1469.571852][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2667'. [ 1469.713548][T19120] syzkaller0: entered promiscuous mode [ 1469.739186][T19120] syzkaller0: entered allmulticast mode [ 1469.804190][T19081] lo speed is unknown, defaulting to 1000 [ 1470.188588][T19130] 8021q: VLANs not supported on ip6gre0 [ 1470.888550][T18695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.140697][T18695] veth0_vlan: entered promiscuous mode [ 1471.180447][T18695] veth1_vlan: entered promiscuous mode [ 1471.330976][T18695] veth0_macvtap: entered promiscuous mode [ 1471.376450][T18695] veth1_macvtap: entered promiscuous mode [ 1471.462404][T18695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.518841][T18695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.623503][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.653779][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.708196][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.768608][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.197252][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.239048][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.431968][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.468528][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.414101][T19178] syzkaller0: entered promiscuous mode [ 1473.444242][T19178] syzkaller0: entered allmulticast mode [ 1473.452975][T11327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1473.466620][T11327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1473.477363][T11327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1473.493896][T11327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1473.505285][T11327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1475.611319][T11327] Bluetooth: hci3: command tx timeout [ 1476.768069][T19207] syzkaller0: entered promiscuous mode [ 1476.791543][T19207] syzkaller0: entered allmulticast mode [ 1476.933111][T19215] netlink: 'syz.8.2697': attribute type 1 has an invalid length. [ 1477.074395][T19223] netlink: 'syz.6.2700': attribute type 1 has an invalid length. [ 1477.084146][T19223] netlink: 'syz.6.2700': attribute type 2 has an invalid length. [ 1477.098374][T19223] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2700'. [ 1477.159115][T19215] bond2: entered promiscuous mode [ 1477.192438][T19215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1477.311708][T19220] bridge7: entered promiscuous mode [ 1477.344361][T19220] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 1477.385784][T19217] syzkaller0: entered promiscuous mode [ 1477.407628][T19217] syzkaller0: entered allmulticast mode [ 1477.691585][T11327] Bluetooth: hci3: command tx timeout [ 1477.965409][T19251] netlink: 'syz.7.2708': attribute type 1 has an invalid length. [ 1478.153985][T19251] bond2: entered promiscuous mode [ 1478.181180][T19251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1478.323676][T19256] bond2: (slave bridge5): making interface the new active one [ 1478.396232][T19256] bridge5: entered promiscuous mode [ 1478.432360][T19256] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 1479.011447][T19282] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2714'. [ 1479.296453][T19289] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 1479.375776][T19289] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 1479.402215][T19285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2716'. [ 1479.528802][T19285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.596884][T19285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.624215][T19285] bond0 (unregistering): Released all slaves [ 1479.675755][T19182] lo speed is unknown, defaulting to 1000 [ 1479.781532][T11327] Bluetooth: hci3: command tx timeout [ 1480.329388][ T37] bridge_slave_1: left allmulticast mode [ 1480.358618][ T37] bridge_slave_1: left promiscuous mode [ 1480.388198][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.464132][ T37] bridge_slave_0: left allmulticast mode [ 1480.484806][ T37] bridge_slave_0: left promiscuous mode [ 1480.508130][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.043947][ T37] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1481.461343][ T37] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 1481.469660][ T37] bridge7 (unregistering): left promiscuous mode [ 1481.483788][ T37] bridge7 (unregistering): left allmulticast mode [ 1481.548227][ T37] bond1 (unregistering): Released all slaves [ 1481.572749][ T37] bond0 (unregistering): Released all slaves [ 1481.609438][ T37] bond2 (unregistering): Released all slaves [ 1481.652043][ T37] bond3 (unregistering): Released all slaves [ 1481.677563][T19309] syzkaller0: entered promiscuous mode [ 1481.687922][T19309] syzkaller0: entered allmulticast mode [ 1481.852632][T11327] Bluetooth: hci3: command tx timeout [ 1481.976598][ T37] tipc: Disabling bearer [ 1482.026460][ T37] tipc: Left network mode [ 1482.366325][T19346] netlink: 'syz.8.2734': attribute type 1 has an invalid length. [ 1482.395767][T19346] netlink: 'syz.8.2734': attribute type 2 has an invalid length. [ 1482.507130][T19346] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2734'. [ 1482.739524][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2737'. [ 1482.882203][T19356] bridge_slave_0: left allmulticast mode [ 1482.891501][ T5629] block nbd3: Receive control failed (result -32) [ 1482.891518][T11327] block nbd3: Receive control failed (result -32) [ 1482.905656][T19356] bridge_slave_0: left promiscuous mode [ 1482.934357][T19356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.970862][T19356] bridge_slave_1: left allmulticast mode [ 1482.976615][T19356] bridge_slave_1: left promiscuous mode [ 1482.990115][T19356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.032205][T19356] team0: Port device team_slave_0 removed [ 1483.047109][T19356] team0: Port device team_slave_1 removed [ 1483.060226][T19356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.094260][T19356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.124694][T19356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1483.678627][T19383] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 1483.767139][T19383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 1483.785691][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.904717][T19380] syzkaller0: entered promiscuous mode [ 1483.912743][T19380] syzkaller0: entered allmulticast mode [ 1483.958268][T19383] hsr_slave_1: entered allmulticast mode [ 1485.667018][ T5285] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1485.753595][T19391] syzkaller0: entered promiscuous mode [ 1485.771498][T19391] syzkaller0: entered allmulticast mode [ 1485.780409][T19407] 8021q: VLANs not supported on ip6tnl0 [ 1486.386048][T19430] netlink: 'syz.6.2753': attribute type 10 has an invalid length. [ 1486.496051][T19430] team0: Port device dummy0 added [ 1486.689501][ T5629] block nbd4: Receive control failed (result -32) [ 1486.692161][T11327] block nbd4: Receive control failed (result -32) [ 1486.902271][T19182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.923194][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.950143][T19182] bridge_slave_0: entered allmulticast mode [ 1486.995566][T19182] bridge_slave_0: entered promiscuous mode [ 1487.036631][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.063684][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.100329][T19182] bridge_slave_1: entered allmulticast mode [ 1487.134474][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2758'. [ 1487.201713][T19182] bridge_slave_1: entered promiscuous mode [ 1487.265343][T19457] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 1487.377780][T19462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1487.563071][T19460] 8021q: VLANs not supported on ip6gre0 [ 1487.589250][T19462] macvlan1: entered promiscuous mode [ 1487.624297][T19462] macvlan1: entered allmulticast mode [ 1487.668187][T19462] veth1_vlan: entered allmulticast mode [ 1487.736743][T19182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.862820][T19182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.318192][ T37] hsr_slave_0: left promiscuous mode [ 1488.356363][ T37] hsr_slave_1: left promiscuous mode [ 1488.389937][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.433147][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.635996][ T5926] smc: removing ib device syz2 [ 1489.247018][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1489.327310][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1489.665444][ T37] team0 (unregistering): Port device dummy0 removed [ 1489.717389][T19501] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1489.767175][T19182] team0: Port device team_slave_0 added [ 1489.785252][T19482] syzkaller0: entered promiscuous mode [ 1489.803360][T19482] syzkaller0: entered allmulticast mode [ 1489.859507][T12818] ================================================================== [ 1489.867579][T12818] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 1489.876460][T12818] Read of size 8 at addr ffff8880785702f0 by task kworker/0:1/12818 [ 1489.884445][T12818] [ 1489.886771][T12818] CPU: 0 UID: 0 PID: 12818 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1489.886820][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1489.886848][T12818] Workqueue: events smc_ib_port_event_work [ 1489.886892][T12818] Call Trace: [ 1489.886905][T12818] [ 1489.886920][T12818] dump_stack_lvl+0x100/0x190 [ 1489.886964][T12818] print_report+0x13d/0x4b0 [ 1489.887024][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.887074][T12818] ? __virt_addr_valid+0x239/0x430 [ 1489.887118][T12818] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1489.887174][T12818] kasan_report+0xdf/0x1d0 [ 1489.887237][T12818] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1489.887294][T12818] __ethtool_get_link_ksettings+0x190/0x1c0 [ 1489.887346][T12818] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1489.887397][T12818] ib_get_eth_speed+0x13a/0xb40 [ 1489.887451][T12818] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1489.887513][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.887563][T12818] ? do_raw_spin_unlock+0x145/0x1e0 [ 1489.887628][T12818] rxe_query_port+0x12a/0x330 [ 1489.887695][T12818] ib_query_port+0x445/0x8b0 [ 1489.887749][T12818] smc_ib_port_event_work+0x14c/0xbd0 [ 1489.887794][T12818] ? smc_ib_port_event_work+0x54/0xbd0 [ 1489.887839][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.887896][T12818] process_one_work+0xa0e/0x1980 [ 1489.887958][T12818] ? __pfx_process_one_work+0x10/0x10 [ 1489.888007][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.888066][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.888119][T12818] worker_thread+0x5ef/0xe50 [ 1489.888180][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1489.888231][T12818] ? kthread+0x13a/0x450 [ 1489.888274][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1489.888322][T12818] kthread+0x370/0x450 [ 1489.888365][T12818] ? __pfx_kthread+0x10/0x10 [ 1489.888412][T12818] ret_from_fork+0x72b/0xd50 [ 1489.888461][T12818] ? __pfx_ret_from_fork+0x10/0x10 [ 1489.888511][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.888560][T12818] ? __switch_to+0x800/0x1100 [ 1489.888617][T12818] ? __switch_to_asm+0x39/0x70 [ 1489.888672][T12818] ? __pfx_kthread+0x10/0x10 [ 1489.888719][T12818] ret_from_fork_asm+0x1a/0x30 [ 1489.888788][T12818] [ 1489.888801][T12818] [ 1490.102918][T12818] Allocated by task 5630: [ 1490.107245][T12818] kasan_save_stack+0x30/0x50 [ 1490.111954][T12818] kasan_save_track+0x14/0x30 [ 1490.116663][T12818] __kasan_kmalloc+0xaa/0xb0 [ 1490.121283][T12818] __kvmalloc_node_noprof+0x360/0xa00 [ 1490.126687][T12818] alloc_netdev_mqs+0xd7/0x1560 [ 1490.131563][T12818] rtnl_create_link+0xc13/0xf80 [ 1490.136440][T12818] rtnl_newlink+0x13bd/0x2380 [ 1490.141145][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1490.146115][T12818] netlink_rcv_skb+0x159/0x420 [ 1490.150928][T12818] netlink_unicast+0x585/0x850 [ 1490.155817][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1490.160621][T12818] __sys_sendto+0x468/0x4b0 [ 1490.165141][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1490.169929][T12818] do_syscall_64+0x10b/0xf80 [ 1490.174533][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.180444][T12818] [ 1490.182762][T12818] Freed by task 37: [ 1490.186568][T12818] kasan_save_stack+0x30/0x50 [ 1490.191273][T12818] kasan_save_track+0x14/0x30 [ 1490.195978][T12818] kasan_save_free_info+0x3b/0x70 [ 1490.201021][T12818] __kasan_slab_free+0x5f/0x80 [ 1490.205813][T12818] kfree+0x223/0x6c0 [ 1490.209727][T12818] device_release+0xd2/0x270 [ 1490.214357][T12818] kobject_put+0x1f7/0x640 [ 1490.218794][T12818] netdev_run_todo+0x80f/0x12b0 [ 1490.223672][T12818] default_device_exit_batch+0x92b/0xc10 [ 1490.229339][T12818] ops_undo_list+0x363/0xab0 [ 1490.233961][T12818] cleanup_net+0x499/0x920 [ 1490.238409][T12818] process_one_work+0xa0e/0x1980 [ 1490.243370][T12818] worker_thread+0x5ef/0xe50 [ 1490.247986][T12818] kthread+0x370/0x450 [ 1490.252075][T12818] ret_from_fork+0x72b/0xd50 [ 1490.256689][T12818] ret_from_fork_asm+0x1a/0x30 [ 1490.261486][T12818] [ 1490.263809][T12818] The buggy address belongs to the object at ffff888078570000 [ 1490.263809][T12818] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1490.278131][T12818] The buggy address is located 752 bytes inside of [ 1490.278131][T12818] freed 4096-byte region [ffff888078570000, ffff888078571000) [ 1490.292032][T12818] [ 1490.294356][T12818] The buggy address belongs to the physical page: [ 1490.300762][T12818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78570 [ 1490.309551][T12818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1490.318057][T12818] memcg:ffff8880782dc801 [ 1490.322293][T12818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1490.329849][T12818] page_type: f5(slab) [ 1490.333842][T12818] raw: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1490.342443][T12818] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1490.351044][T12818] head: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1490.359730][T12818] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1490.368421][T12818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1490.377104][T12818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1490.385775][T12818] page dumped because: kasan: bad access detected [ 1490.392189][T12818] page_owner tracks the page as allocated [ 1490.397899][T12818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (syz-executor), ts 93855794213, free_ts 93828811113 [ 1490.419291][T12818] post_alloc_hook+0xfd/0x120 [ 1490.423993][T12818] get_page_from_freelist+0x11a6/0x33b0 [ 1490.429570][T12818] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1490.435502][T12818] new_slab+0xa6/0x6c0 [ 1490.439590][T12818] refill_objects+0x277/0x420 [ 1490.444288][T12818] __pcs_replace_empty_main+0x375/0x650 [ 1490.449863][T12818] __kmalloc_cache_noprof+0x493/0x6f0 [ 1490.455252][T12818] register_vlan_dev+0x5f8/0x910 [ 1490.460219][T12818] vlan_newlink+0x48c/0x750 [ 1490.464765][T12818] rtnl_newlink+0x1499/0x2380 [ 1490.469467][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1490.474432][T12818] netlink_rcv_skb+0x159/0x420 [ 1490.479241][T12818] netlink_unicast+0x585/0x850 [ 1490.484044][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1490.488846][T12818] __sys_sendto+0x468/0x4b0 [ 1490.493369][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1490.498151][T12818] page last free pid 5626 tgid 5626 stack trace: [ 1490.504481][T12818] __free_frozen_pages+0x747/0x1040 [ 1490.509702][T12818] qlist_free_all+0x47/0xf0 [ 1490.514231][T12818] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1490.519721][T12818] __kasan_slab_alloc+0x69/0x90 [ 1490.524609][T12818] __kmalloc_cache_noprof+0x243/0x6f0 [ 1490.530003][T12818] ref_tracker_alloc+0x190/0x590 [ 1490.534972][T12818] register_netdevice+0x174d/0x24b0 [ 1490.540197][T12818] veth_newlink+0x316/0xa00 [ 1490.544726][T12818] rtnl_newlink+0x1499/0x2380 [ 1490.549430][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1490.554399][T12818] netlink_rcv_skb+0x159/0x420 [ 1490.559230][T12818] netlink_unicast+0x585/0x850 [ 1490.564034][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1490.568836][T12818] __sys_sendto+0x468/0x4b0 [ 1490.573356][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1490.578143][T12818] do_syscall_64+0x10b/0xf80 [ 1490.582823][T12818] [ 1490.585143][T12818] Memory state around the buggy address: [ 1490.590777][T12818] ffff888078570180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.598866][T12818] ffff888078570200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.606933][T12818] >ffff888078570280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.614996][T12818] ^ [ 1490.622712][T12818] ffff888078570300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.630777][T12818] ffff888078570380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1490.638835][T12818] ================================================================== [ 1490.772389][T12818] Disabling lock debugging due to kernel taint [ 1490.789728][T12818] ================================================================== [ 1490.797791][T12818] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1490.806578][T12818] Read of size 8 at addr ffff8880785700a8 by task kworker/0:1/12818 [ 1490.814562][T12818] [ 1490.816889][T12818] CPU: 0 UID: 0 PID: 12818 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) [ 1490.816944][T12818] Tainted: [B]=BAD_PAGE [ 1490.816957][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1490.816984][T12818] Workqueue: events smc_ib_port_event_work [ 1490.817026][T12818] Call Trace: [ 1490.817038][T12818] [ 1490.817051][T12818] dump_stack_lvl+0x100/0x190 [ 1490.817093][T12818] print_report+0x13d/0x4b0 [ 1490.817150][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.817202][T12818] ? __virt_addr_valid+0x239/0x430 [ 1490.817245][T12818] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1490.817292][T12818] kasan_report+0xdf/0x1d0 [ 1490.817351][T12818] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1490.817404][T12818] kasan_check_range+0x10f/0x1e0 [ 1490.817443][T12818] __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1490.817491][T12818] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1490.817539][T12818] ib_get_eth_speed+0x13a/0xb40 [ 1490.817589][T12818] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1490.817648][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.817695][T12818] ? do_raw_spin_unlock+0x145/0x1e0 [ 1490.817757][T12818] rxe_query_port+0x12a/0x330 [ 1490.817822][T12818] ib_query_port+0x445/0x8b0 [ 1490.817873][T12818] smc_ib_port_event_work+0x14c/0xbd0 [ 1490.817916][T12818] ? smc_ib_port_event_work+0x54/0xbd0 [ 1490.817958][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.818011][T12818] process_one_work+0xa0e/0x1980 [ 1490.818070][T12818] ? __pfx_process_one_work+0x10/0x10 [ 1490.818116][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.818172][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.818229][T12818] worker_thread+0x5ef/0xe50 [ 1490.818282][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1490.818331][T12818] ? kthread+0x13a/0x450 [ 1490.818372][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1490.818418][T12818] kthread+0x370/0x450 [ 1490.818461][T12818] ? __pfx_kthread+0x10/0x10 [ 1490.818505][T12818] ret_from_fork+0x72b/0xd50 [ 1490.818552][T12818] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.818599][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.818646][T12818] ? __switch_to+0x800/0x1100 [ 1490.818700][T12818] ? __switch_to_asm+0x39/0x70 [ 1490.818754][T12818] ? __pfx_kthread+0x10/0x10 [ 1490.818798][T12818] ret_from_fork_asm+0x1a/0x30 [ 1490.818865][T12818] [ 1490.818877][T12818] [ 1491.043144][T12818] Allocated by task 5630: [ 1491.047463][T12818] kasan_save_stack+0x30/0x50 [ 1491.052158][T12818] kasan_save_track+0x14/0x30 [ 1491.056853][T12818] __kasan_kmalloc+0xaa/0xb0 [ 1491.061455][T12818] __kvmalloc_node_noprof+0x360/0xa00 [ 1491.066841][T12818] alloc_netdev_mqs+0xd7/0x1560 [ 1491.071699][T12818] rtnl_create_link+0xc13/0xf80 [ 1491.076561][T12818] rtnl_newlink+0x13bd/0x2380 [ 1491.081247][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1491.086196][T12818] netlink_rcv_skb+0x159/0x420 [ 1491.090983][T12818] netlink_unicast+0x585/0x850 [ 1491.095767][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1491.100552][T12818] __sys_sendto+0x468/0x4b0 [ 1491.105066][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1491.109834][T12818] do_syscall_64+0x10b/0xf80 [ 1491.114425][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.120321][T12818] [ 1491.122630][T12818] Freed by task 37: [ 1491.126423][T12818] kasan_save_stack+0x30/0x50 [ 1491.131110][T12818] kasan_save_track+0x14/0x30 [ 1491.135803][T12818] kasan_save_free_info+0x3b/0x70 [ 1491.140827][T12818] __kasan_slab_free+0x5f/0x80 [ 1491.145605][T12818] kfree+0x223/0x6c0 [ 1491.149498][T12818] device_release+0xd2/0x270 [ 1491.154108][T12818] kobject_put+0x1f7/0x640 [ 1491.158531][T12818] netdev_run_todo+0x80f/0x12b0 [ 1491.163391][T12818] default_device_exit_batch+0x92b/0xc10 [ 1491.169037][T12818] ops_undo_list+0x363/0xab0 [ 1491.173637][T12818] cleanup_net+0x499/0x920 [ 1491.178068][T12818] process_one_work+0xa0e/0x1980 [ 1491.183014][T12818] worker_thread+0x5ef/0xe50 [ 1491.187611][T12818] kthread+0x370/0x450 [ 1491.191706][T12818] ret_from_fork+0x72b/0xd50 [ 1491.196303][T12818] ret_from_fork_asm+0x1a/0x30 [ 1491.201082][T12818] [ 1491.203397][T12818] The buggy address belongs to the object at ffff888078570000 [ 1491.203397][T12818] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1491.217709][T12818] The buggy address is located 168 bytes inside of [ 1491.217709][T12818] freed 4096-byte region [ffff888078570000, ffff888078571000) [ 1491.231592][T12818] [ 1491.233902][T12818] The buggy address belongs to the physical page: [ 1491.240299][T12818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78570 [ 1491.249054][T12818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1491.257547][T12818] memcg:ffff8880782dc801 [ 1491.261773][T12818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1491.269337][T12818] page_type: f5(slab) [ 1491.273318][T12818] raw: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1491.281903][T12818] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1491.290489][T12818] head: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1491.299159][T12818] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1491.307834][T12818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1491.316506][T12818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1491.325164][T12818] page dumped because: kasan: bad access detected [ 1491.331566][T12818] page_owner tracks the page as allocated [ 1491.337267][T12818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (syz-executor), ts 93855794213, free_ts 93828811113 [ 1491.358641][T12818] post_alloc_hook+0xfd/0x120 [ 1491.363326][T12818] get_page_from_freelist+0x11a6/0x33b0 [ 1491.368881][T12818] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1491.374789][T12818] new_slab+0xa6/0x6c0 [ 1491.378857][T12818] refill_objects+0x277/0x420 [ 1491.383539][T12818] __pcs_replace_empty_main+0x375/0x650 [ 1491.389095][T12818] __kmalloc_cache_noprof+0x493/0x6f0 [ 1491.394472][T12818] register_vlan_dev+0x5f8/0x910 [ 1491.399422][T12818] vlan_newlink+0x48c/0x750 [ 1491.403949][T12818] rtnl_newlink+0x1499/0x2380 [ 1491.408639][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1491.413593][T12818] netlink_rcv_skb+0x159/0x420 [ 1491.418378][T12818] netlink_unicast+0x585/0x850 [ 1491.423163][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1491.427949][T12818] __sys_sendto+0x468/0x4b0 [ 1491.432453][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1491.437220][T12818] page last free pid 5626 tgid 5626 stack trace: [ 1491.443535][T12818] __free_frozen_pages+0x747/0x1040 [ 1491.448732][T12818] qlist_free_all+0x47/0xf0 [ 1491.453243][T12818] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1491.458716][T12818] __kasan_slab_alloc+0x69/0x90 [ 1491.463583][T12818] __kmalloc_cache_noprof+0x243/0x6f0 [ 1491.468960][T12818] ref_tracker_alloc+0x190/0x590 [ 1491.473998][T12818] register_netdevice+0x174d/0x24b0 [ 1491.479211][T12818] veth_newlink+0x316/0xa00 [ 1491.483726][T12818] rtnl_newlink+0x1499/0x2380 [ 1491.488418][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1491.493384][T12818] netlink_rcv_skb+0x159/0x420 [ 1491.498172][T12818] netlink_unicast+0x585/0x850 [ 1491.502973][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1491.507758][T12818] __sys_sendto+0x468/0x4b0 [ 1491.512262][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1491.517030][T12818] do_syscall_64+0x10b/0xf80 [ 1491.521619][T12818] [ 1491.523928][T12818] Memory state around the buggy address: [ 1491.529547][T12818] ffff88807856ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1491.537602][T12818] ffff888078570000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1491.545657][T12818] >ffff888078570080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1491.553711][T12818] ^ [ 1491.559072][T12818] ffff888078570100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1491.567126][T12818] ffff888078570180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1491.575179][T12818] ================================================================== [ 1491.627506][T12818] ================================================================== [ 1491.635574][T12818] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1491.644444][T12818] Read of size 8 at addr ffff8880785700a8 by task kworker/0:1/12818 [ 1491.652424][T12818] [ 1491.654753][T12818] CPU: 0 UID: 0 PID: 12818 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) [ 1491.654808][T12818] Tainted: [B]=BAD_PAGE [ 1491.654821][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1491.654845][T12818] Workqueue: events smc_ib_port_event_work [ 1491.654885][T12818] Call Trace: [ 1491.654896][T12818] [ 1491.654910][T12818] dump_stack_lvl+0x100/0x190 [ 1491.654952][T12818] print_report+0x13d/0x4b0 [ 1491.655007][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.655054][T12818] ? __virt_addr_valid+0x239/0x430 [ 1491.655095][T12818] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1491.655140][T12818] kasan_report+0xdf/0x1d0 [ 1491.655199][T12818] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1491.655252][T12818] __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1491.655300][T12818] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1491.655348][T12818] ib_get_eth_speed+0x13a/0xb40 [ 1491.655396][T12818] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1491.655454][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.655511][T12818] ? do_raw_spin_unlock+0x145/0x1e0 [ 1491.655570][T12818] rxe_query_port+0x12a/0x330 [ 1491.655632][T12818] ib_query_port+0x445/0x8b0 [ 1491.655688][T12818] smc_ib_port_event_work+0x14c/0xbd0 [ 1491.655729][T12818] ? smc_ib_port_event_work+0x54/0xbd0 [ 1491.655770][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.655822][T12818] process_one_work+0xa0e/0x1980 [ 1491.655878][T12818] ? __pfx_process_one_work+0x10/0x10 [ 1491.655924][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.655978][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.656030][T12818] worker_thread+0x5ef/0xe50 [ 1491.656085][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1491.656132][T12818] ? kthread+0x13a/0x450 [ 1491.656172][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1491.656217][T12818] kthread+0x370/0x450 [ 1491.656257][T12818] ? __pfx_kthread+0x10/0x10 [ 1491.656299][T12818] ret_from_fork+0x72b/0xd50 [ 1491.656344][T12818] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.656390][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.656436][T12818] ? __switch_to+0x800/0x1100 [ 1491.656490][T12818] ? __switch_to_asm+0x39/0x70 [ 1491.656543][T12818] ? __pfx_kthread+0x10/0x10 [ 1491.656587][T12818] ret_from_fork_asm+0x1a/0x30 [ 1491.656650][T12818] [ 1491.656669][T12818] [ 1491.876284][T12818] Allocated by task 5630: [ 1491.880600][T12818] kasan_save_stack+0x30/0x50 [ 1491.885305][T12818] kasan_save_track+0x14/0x30 [ 1491.889997][T12818] __kasan_kmalloc+0xaa/0xb0 [ 1491.894598][T12818] __kvmalloc_node_noprof+0x360/0xa00 [ 1491.899985][T12818] alloc_netdev_mqs+0xd7/0x1560 [ 1491.904845][T12818] rtnl_create_link+0xc13/0xf80 [ 1491.909705][T12818] rtnl_newlink+0x13bd/0x2380 [ 1491.914390][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1491.919337][T12818] netlink_rcv_skb+0x159/0x420 [ 1491.924121][T12818] netlink_unicast+0x585/0x850 [ 1491.928907][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1491.933692][T12818] __sys_sendto+0x468/0x4b0 [ 1491.938199][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1491.942967][T12818] do_syscall_64+0x10b/0xf80 [ 1491.947557][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.953450][T12818] [ 1491.955761][T12818] Freed by task 37: [ 1491.959553][T12818] kasan_save_stack+0x30/0x50 [ 1491.964243][T12818] kasan_save_track+0x14/0x30 [ 1491.968930][T12818] kasan_save_free_info+0x3b/0x70 [ 1491.973954][T12818] __kasan_slab_free+0x5f/0x80 [ 1491.978734][T12818] kfree+0x223/0x6c0 [ 1491.982631][T12818] device_release+0xd2/0x270 [ 1491.987248][T12818] kobject_put+0x1f7/0x640 [ 1491.991671][T12818] netdev_run_todo+0x80f/0x12b0 [ 1491.996533][T12818] default_device_exit_batch+0x92b/0xc10 [ 1492.002179][T12818] ops_undo_list+0x363/0xab0 [ 1492.006779][T12818] cleanup_net+0x499/0x920 [ 1492.011227][T12818] process_one_work+0xa0e/0x1980 [ 1492.016175][T12818] worker_thread+0x5ef/0xe50 [ 1492.020772][T12818] kthread+0x370/0x450 [ 1492.024859][T12818] ret_from_fork+0x72b/0xd50 [ 1492.029458][T12818] ret_from_fork_asm+0x1a/0x30 [ 1492.034235][T12818] [ 1492.036548][T12818] The buggy address belongs to the object at ffff888078570000 [ 1492.036548][T12818] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1492.050856][T12818] The buggy address is located 168 bytes inside of [ 1492.050856][T12818] freed 4096-byte region [ffff888078570000, ffff888078571000) [ 1492.064738][T12818] [ 1492.067047][T12818] The buggy address belongs to the physical page: [ 1492.073440][T12818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78570 [ 1492.082198][T12818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1492.090697][T12818] memcg:ffff8880782dc801 [ 1492.094922][T12818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1492.102460][T12818] page_type: f5(slab) [ 1492.106438][T12818] raw: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1492.115021][T12818] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1492.123605][T12818] head: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1492.132276][T12818] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1492.140949][T12818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1492.149620][T12818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1492.158281][T12818] page dumped because: kasan: bad access detected [ 1492.164682][T12818] page_owner tracks the page as allocated [ 1492.170379][T12818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (syz-executor), ts 93855794213, free_ts 93828811113 [ 1492.191754][T12818] post_alloc_hook+0xfd/0x120 [ 1492.196438][T12818] get_page_from_freelist+0x11a6/0x33b0 [ 1492.201991][T12818] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1492.207895][T12818] new_slab+0xa6/0x6c0 [ 1492.211964][T12818] refill_objects+0x277/0x420 [ 1492.216648][T12818] __pcs_replace_empty_main+0x375/0x650 [ 1492.222206][T12818] __kmalloc_cache_noprof+0x493/0x6f0 [ 1492.227583][T12818] register_vlan_dev+0x5f8/0x910 [ 1492.232531][T12818] vlan_newlink+0x48c/0x750 [ 1492.237058][T12818] rtnl_newlink+0x1499/0x2380 [ 1492.241743][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1492.246695][T12818] netlink_rcv_skb+0x159/0x420 [ 1492.251479][T12818] netlink_unicast+0x585/0x850 [ 1492.256264][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1492.261045][T12818] __sys_sendto+0x468/0x4b0 [ 1492.265553][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1492.270317][T12818] page last free pid 5626 tgid 5626 stack trace: [ 1492.276631][T12818] __free_frozen_pages+0x747/0x1040 [ 1492.281835][T12818] qlist_free_all+0x47/0xf0 [ 1492.286346][T12818] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1492.291815][T12818] __kasan_slab_alloc+0x69/0x90 [ 1492.296687][T12818] __kmalloc_cache_noprof+0x243/0x6f0 [ 1492.302063][T12818] ref_tracker_alloc+0x190/0x590 [ 1492.307012][T12818] register_netdevice+0x174d/0x24b0 [ 1492.312219][T12818] veth_newlink+0x316/0xa00 [ 1492.316730][T12818] rtnl_newlink+0x1499/0x2380 [ 1492.321413][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1492.326360][T12818] netlink_rcv_skb+0x159/0x420 [ 1492.331148][T12818] netlink_unicast+0x585/0x850 [ 1492.335934][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1492.340718][T12818] __sys_sendto+0x468/0x4b0 [ 1492.345224][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1492.349990][T12818] do_syscall_64+0x10b/0xf80 [ 1492.354577][T12818] [ 1492.356886][T12818] Memory state around the buggy address: [ 1492.362503][T12818] ffff88807856ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1492.370561][T12818] ffff888078570000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.378617][T12818] >ffff888078570080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.386673][T12818] ^ [ 1492.392033][T12818] ffff888078570100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.400088][T12818] ffff888078570180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.408139][T12818] ================================================================== [ 1492.442443][T12818] ================================================================== [ 1492.450530][T12818] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1492.459403][T12818] Read of size 8 at addr ffff8880785702f0 by task kworker/0:1/12818 [ 1492.467382][T12818] [ 1492.469709][T12818] CPU: 0 UID: 0 PID: 12818 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) [ 1492.469766][T12818] Tainted: [B]=BAD_PAGE [ 1492.469779][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1492.469805][T12818] Workqueue: events smc_ib_port_event_work [ 1492.469845][T12818] Call Trace: [ 1492.469857][T12818] [ 1492.469871][T12818] dump_stack_lvl+0x100/0x190 [ 1492.469912][T12818] print_report+0x13d/0x4b0 [ 1492.469967][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.470015][T12818] ? __virt_addr_valid+0x239/0x430 [ 1492.470057][T12818] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1492.470102][T12818] kasan_report+0xdf/0x1d0 [ 1492.470160][T12818] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1492.470212][T12818] __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1492.470260][T12818] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1492.470308][T12818] ib_get_eth_speed+0x13a/0xb40 [ 1492.470358][T12818] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1492.470415][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.470462][T12818] ? do_raw_spin_unlock+0x145/0x1e0 [ 1492.470522][T12818] rxe_query_port+0x12a/0x330 [ 1492.470586][T12818] ib_query_port+0x445/0x8b0 [ 1492.470635][T12818] smc_ib_port_event_work+0x14c/0xbd0 [ 1492.470682][T12818] ? smc_ib_port_event_work+0x54/0xbd0 [ 1492.470723][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.470777][T12818] process_one_work+0xa0e/0x1980 [ 1492.470835][T12818] ? __pfx_process_one_work+0x10/0x10 [ 1492.470881][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.470935][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.470985][T12818] worker_thread+0x5ef/0xe50 [ 1492.471039][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1492.471086][T12818] ? kthread+0x13a/0x450 [ 1492.471126][T12818] ? __pfx_worker_thread+0x10/0x10 [ 1492.471171][T12818] kthread+0x370/0x450 [ 1492.471211][T12818] ? __pfx_kthread+0x10/0x10 [ 1492.471254][T12818] ret_from_fork+0x72b/0xd50 [ 1492.471301][T12818] ? __pfx_ret_from_fork+0x10/0x10 [ 1492.471346][T12818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1492.471392][T12818] ? __switch_to+0x800/0x1100 [ 1492.471446][T12818] ? __switch_to_asm+0x39/0x70 [ 1492.471498][T12818] ? __pfx_kthread+0x10/0x10 [ 1492.471546][T12818] ret_from_fork_asm+0x1a/0x30 [ 1492.471612][T12818] [ 1492.471625][T12818] [ 1492.691261][T12818] Allocated by task 5630: [ 1492.695578][T12818] kasan_save_stack+0x30/0x50 [ 1492.700276][T12818] kasan_save_track+0x14/0x30 [ 1492.704989][T12818] __kasan_kmalloc+0xaa/0xb0 [ 1492.709592][T12818] __kvmalloc_node_noprof+0x360/0xa00 [ 1492.714979][T12818] alloc_netdev_mqs+0xd7/0x1560 [ 1492.719839][T12818] rtnl_create_link+0xc13/0xf80 [ 1492.724700][T12818] rtnl_newlink+0x13bd/0x2380 [ 1492.729383][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1492.734332][T12818] netlink_rcv_skb+0x159/0x420 [ 1492.739116][T12818] netlink_unicast+0x585/0x850 [ 1492.743899][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1492.748686][T12818] __sys_sendto+0x468/0x4b0 [ 1492.753193][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1492.757965][T12818] do_syscall_64+0x10b/0xf80 [ 1492.762554][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.768447][T12818] [ 1492.770755][T12818] Freed by task 37: [ 1492.774549][T12818] kasan_save_stack+0x30/0x50 [ 1492.779236][T12818] kasan_save_track+0x14/0x30 [ 1492.783924][T12818] kasan_save_free_info+0x3b/0x70 [ 1492.788949][T12818] __kasan_slab_free+0x5f/0x80 [ 1492.793726][T12818] kfree+0x223/0x6c0 [ 1492.797622][T12818] device_release+0xd2/0x270 [ 1492.802239][T12818] kobject_put+0x1f7/0x640 [ 1492.806667][T12818] netdev_run_todo+0x80f/0x12b0 [ 1492.811615][T12818] default_device_exit_batch+0x92b/0xc10 [ 1492.817266][T12818] ops_undo_list+0x363/0xab0 [ 1492.821866][T12818] cleanup_net+0x499/0x920 [ 1492.826298][T12818] process_one_work+0xa0e/0x1980 [ 1492.831243][T12818] worker_thread+0x5ef/0xe50 [ 1492.835841][T12818] kthread+0x370/0x450 [ 1492.839912][T12818] ret_from_fork+0x72b/0xd50 [ 1492.844509][T12818] ret_from_fork_asm+0x1a/0x30 [ 1492.849287][T12818] [ 1492.851600][T12818] The buggy address belongs to the object at ffff888078570000 [ 1492.851600][T12818] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1492.865911][T12818] The buggy address is located 752 bytes inside of [ 1492.865911][T12818] freed 4096-byte region [ffff888078570000, ffff888078571000) [ 1492.879794][T12818] [ 1492.882101][T12818] The buggy address belongs to the physical page: [ 1492.888494][T12818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78570 [ 1492.897249][T12818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1492.905743][T12818] memcg:ffff8880782dc801 [ 1492.909969][T12818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1492.917509][T12818] page_type: f5(slab) [ 1492.921487][T12818] raw: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1492.930069][T12818] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1492.938651][T12818] head: 00fff00000000040 ffff88813fe4c500 dead000000000100 dead000000000122 [ 1492.947325][T12818] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880782dc801 [ 1492.955996][T12818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1492.964671][T12818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1492.973327][T12818] page dumped because: kasan: bad access detected [ 1492.979723][T12818] page_owner tracks the page as allocated [ 1492.985422][T12818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (syz-executor), ts 93855794213, free_ts 93828811113 [ 1493.006795][T12818] post_alloc_hook+0xfd/0x120 [ 1493.011479][T12818] get_page_from_freelist+0x11a6/0x33b0 [ 1493.017034][T12818] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1493.022940][T12818] new_slab+0xa6/0x6c0 [ 1493.027010][T12818] refill_objects+0x277/0x420 [ 1493.031697][T12818] __pcs_replace_empty_main+0x375/0x650 [ 1493.037252][T12818] __kmalloc_cache_noprof+0x493/0x6f0 [ 1493.042627][T12818] register_vlan_dev+0x5f8/0x910 [ 1493.047581][T12818] vlan_newlink+0x48c/0x750 [ 1493.052106][T12818] rtnl_newlink+0x1499/0x2380 [ 1493.056795][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1493.061743][T12818] netlink_rcv_skb+0x159/0x420 [ 1493.066528][T12818] netlink_unicast+0x585/0x850 [ 1493.071312][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1493.076097][T12818] __sys_sendto+0x468/0x4b0 [ 1493.080602][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1493.085375][T12818] page last free pid 5626 tgid 5626 stack trace: [ 1493.091691][T12818] __free_frozen_pages+0x747/0x1040 [ 1493.096890][T12818] qlist_free_all+0x47/0xf0 [ 1493.101400][T12818] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1493.106873][T12818] __kasan_slab_alloc+0x69/0x90 [ 1493.111740][T12818] __kmalloc_cache_noprof+0x243/0x6f0 [ 1493.117119][T12818] ref_tracker_alloc+0x190/0x590 [ 1493.122067][T12818] register_netdevice+0x174d/0x24b0 [ 1493.127276][T12818] veth_newlink+0x316/0xa00 [ 1493.131786][T12818] rtnl_newlink+0x1499/0x2380 [ 1493.136474][T12818] rtnetlink_rcv_msg+0x95e/0xe90 [ 1493.141421][T12818] netlink_rcv_skb+0x159/0x420 [ 1493.146204][T12818] netlink_unicast+0x585/0x850 [ 1493.150989][T12818] netlink_sendmsg+0x8b0/0xda0 [ 1493.155780][T12818] __sys_sendto+0x468/0x4b0 [ 1493.160285][T12818] __x64_sys_sendto+0xe0/0x1c0 [ 1493.165051][T12818] do_syscall_64+0x10b/0xf80 [ 1493.169640][T12818] [ 1493.171952][T12818] Memory state around the buggy address: [ 1493.177568][T12818] ffff888078570180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1493.185622][T12818] ffff888078570200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1493.193685][T12818] >ffff888078570280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1493.201736][T12818] ^ [ 1493.209444][T12818] ffff888078570300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1493.217500][T12818] ffff888078570380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1493.225552][T12818] ================================================================== [ 1493.267077][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1493.267691][ T5926] smbdirect: ib_dev[syz2] removed [ 1493.276096][T19182] team0: Port device team_slave_1 added [ 1493.399221][T19182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.426685][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.455078][T19182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.496443][T19182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.509859][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.544905][T19182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.639320][T19182] hsr_slave_0: entered promiscuous mode [ 1493.657099][T19182] hsr_slave_1: entered promiscuous mode [ 1493.663564][T19182] debugfs: 'hsr0' already exists in 'hsr' [ 1493.669338][T19182] Cannot create hsr debugfs directory [ 1494.554093][T19182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1494.574156][T19182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.608347][T19182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1494.653604][T19182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1494.671462][T19182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1494.671570][ T37] IPVS: stop unused estimator thread 0... [ 1494.706459][T19182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.726037][T19182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1494.737507][T19182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.808583][ T1155] bridge_slave_1: left allmulticast mode [ 1494.814620][ T1155] bridge_slave_1: left promiscuous mode [ 1494.821028][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.831927][ T1155] bridge_slave_0: left allmulticast mode [ 1494.837636][ T1155] bridge_slave_0: left promiscuous mode [ 1494.850058][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.937113][ T1155] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1495.033283][ T1155] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 1495.042124][ T1155] bridge2 (unregistering): left promiscuous mode [ 1495.048472][ T1155] bridge2 (unregistering): left allmulticast mode [ 1495.082941][ T1155] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1495.092894][ T1155] bridge3 (unregistering): left promiscuous mode [ 1495.099254][ T1155] bridge3 (unregistering): left allmulticast mode [ 1495.134455][ T1155] bond0 (unregistering): Released all slaves [ 1495.145139][ T1155] bond1 (unregistering): Released all slaves [ 1495.157598][ T1155] bond2 (unregistering): Released all slaves [ 1495.176318][T19182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.221799][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.238001][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.245122][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.272886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.280022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.686992][ T1155] hsr_slave_0: left promiscuous mode [ 1495.699575][ T1155] hsr_slave_1: left promiscuous mode [ 1495.708034][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.724237][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.840047][ T1155] ` (unregistering): Port device team_slave_1 removed [ 1495.872025][ T1155] ` (unregistering): Port device team_slave_0 removed [ 1496.211777][T19182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.268014][T19182] veth0_vlan: entered promiscuous mode [ 1496.285347][T19182] veth1_vlan: entered promiscuous mode [ 1496.316590][T19182] veth0_macvtap: entered promiscuous mode [ 1496.326529][T19182] veth1_macvtap: entered promiscuous mode [ 1496.352384][T19182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.368382][T19182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.385105][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.407646][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.417226][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.429559][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.484444][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.503766][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.541358][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.549272][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50