last executing test programs: 4m30.783675791s ago: executing program 0 (id=4104): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000400095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000001f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) 4m30.612560752s ago: executing program 0 (id=4106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05000000000000000000008b98e7ce0bb500d0d8d2e931e17b7fc1bc7f55045ae434bc2707a3cb0630fb7967b9f8514141d578a221bfa3da1d2cc62973c5eee80d06452c72d6046cf50201f3a7f29c01a1e4c569cb41c832f08b48ef8a55f2a899aa8138548ce309ec8445c3ea7fd3b6ce3d1bc4a76ce8ee8c1b78428a9191d061732381e17aab9f74defd7c77a88f5a35947ed39144314cd7c38b52759a1e8c631d4031e48fefb62f219a484d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x16, 0xa01, 0x4, 0x0, {0x1f}}, 0x14}}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f00000005c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000800)={r6, 0x5}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(r7, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x24000000) r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x800) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x800, 0x8, 0x0, 0x40, 0xee]}, &(0x7f00000001c0)=0x54) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000091bb7c8123b05de3f98f275d1a60aebc00000000000061102c000000000095000f0000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x59}, 0x48c0) 4m30.157139022s ago: executing program 0 (id=4110): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f000000000766bc9d963db27bf1"], 0x18}}, 0x4000) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (fail_nth: 3) 4m29.775706423s ago: executing program 0 (id=4112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0xfffffffe, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x102, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) 4m29.513153915s ago: executing program 0 (id=4118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000022418010000696c6c2500000000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) 4m29.392791836s ago: executing program 0 (id=4121): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000002ee3460915078d5b5ad41ff6146a3a02000000000000000000000200010000000000000000fe0000bd473e3b8163bb00000300"], 0x50}, 0x1, 0x7}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000002800)=[{r2, 0x4020}], 0x1, 0x80000000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f00000001c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r3}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x2d, "34b144359bb952233ebb2d0ebe0ea8dd9fb7f2c0a30fb72c82961b63e6a35cdbfcfd3d88ddb64a1cf048ea8711"}, &(0x7f0000000580)=0x35) socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001680), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0xf0bd23, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x48000) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000027c0)={&(0x7f0000001640), 0xc, &(0x7f0000002780)={&(0x7f00000016c0)={0x1088, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="ff3f709837c1d79c9919dd6b3147c03dda01b8fb9f9dd4a4023bdc8a993fc9e5d7736e582a63ae24013862a6f9e1e84be0c1a12ca3ce59fbed36b7982cec2439895c616c1526dad6d408b755eaa631ca13975be96c21bdae4785625f9d3c6cadbd1b0eccf344a7d2cb9a8cac20fb722d9d1626a241aa62234c051df95580f0eb377fb99c0ea7a4f64e31e1cab357b51cd22d01076b71dadac940622523c4386bc99fefb111750753c4dfb4ab7cd32e567098a5eba142afc72a65653ce516833879bc4fc0e7ea599009112dea1df01fc81c551928eed6e604d5bbfe52a364f2250e3a3ca8cc8f748b4aaa9178cd564ba30aef2712185b3724f61188a25a18c2bb2927132eb9633cdbfc5265db6a1ab5c634d37a51b42cfd392ef88e1cb932c64059d8ae382fef91d9f56d3ee2bac3f6cb7b3c130fffd3e3c3fcdf3c34270c863d1e0d2e2d89f1802bbb01695637bf5cfcf30856b61a22885fc27168b0b6a1f661e1fa644902fedbe4e276a80b287d00c2d2f7fe48c5a3b705dba5cc5c8dc17044e22d01d03927f11a3ba4251d5fc6da2fbed5cdb7d2b04efe20289d49317f534bed530288886c9e57c0b34cb66335b7ac2d528c438c85767f3d808e4ef154c492f7148f3bc21c7d0864201b49ba70d77af5a17f6f55afb2207a2ef344e92817240188e5a8b02c23beb5543866abd39f4b9cff369b8b1bc0bb1785a815242f273c615f6219b145d970806cd7e44756ba1c37946e7847022b6ca5c3f6b128b880652cdfc02d3df160ed657e6dcba5dacd06d28c3edc6962089b5f00574799a2fd72cbec6ab1d1200bba6b25ff6ca4f3ad347f7976238a29ce52a0c4396cc4413a5c3b63a08d77f2be22789fdc9af877dfd16399f504e6d6a3dd20be00424bf263d835415028ac73c7b93e3e4bc53e750c5006845aa49f9323df50f33c520a83ff648b1f42e2dead862306d77e87f0634967e2483c6fa9451be6dc2213e9f2d0e275c73c1e808833574119c92cae4a638261a91eb6d0e6243fca0e821a70caaa5c0ff9af3e8d17f9a501515cf8a79b9f45e952028f511a8b06edff187a5c2be33f68eb8cb14711936e859bcc3125e9528597d5064b035b610d03d5e6a8bdfbcb8e34d987555663a092357dd3ae14a247809dba4507af0324f636a863d1112f97ffdb400f340b6cdeee5246f179259ee5450761f2fe820d094402cbf4c85a8567afd65b93a83087c704caa506a0a3867a086e30b6b554b9742bed1b07bb96ccbeb738aa11d224f377af984a5ea1bb0541bdde1449504ffc8f36c4997b7272d2c5b32a5e34b1e4951fbedee1b9497311677ff26ce1d55d04670c49946f883429e6c42a6147923e6e852afd5c852e3c66f392b56dc684e424403933e6e626ba70baa8658faaeef0f8d83f7a6e33a07936a5da1ae4c766113e66f8c629efa62a26efea323d558a18beb9e2c7a14bcede91e3906dbb77d03dcd8712ac05291a2279aee57cac65420d1fd96a7224f12f622dd34683d658f6aa0515c10d637017983cb96c8125a0eeb8db27e3ac8be1ca7de5cee39cdb77aac0272d9906d8ef079d54c521a766c30cb0c7e779c56ea3d810b14083e66bca0bef32b233a98e9cb7c85c07df344ef1e3f2461a62916b88d261709ac48ac4e9ee3b87fc130f99a2a63b5d02b388ca7efb226f0749a2e999e717667ff932a4d4583c0d63725fa31a260db54bc3bb560c6f4d4fc38a85e8710a80ac08b828c3574b791412624abc5dc8792ecacbc8f6bdef3058ecfa777131ac64307c0baee9ea4e8e841bb8906eaa85aafd3609653927a945bec489fe9ea876968d6f56cd7b79c5345eda9fbee9b435c1ae745858a9daf8587124c82c7632d86486fc108f9b633528325fa378f43e61f90d89e23f3314e50ea4ab16126a5c17b33781a3be84b4f20844e215e2c4063df5612437ce288dbfbb5396b234d20a14f0f0d95cf7adb1c76711d4eb4fab1760d4dc3f755c6dc0206e90c5e8b17c3db05910dda49a7956a0e6173c510af43c9901f970760599f8f45a1a764f5a0013c74420a30a147bc901092bb40a1597b2f36d7e155654c54d05e003122e176543beac87bdbaf3710c6029c27bb0a58ca408d63e6340633a967b3ff0c4abaca95d18cdbaeba8df12470cebbf8eb093f3e4a47e29e3a769e39bcee3ad42fa994ab71e96127d2975470f85aeacca0e1e6e27dc9f7d5299b8140db833b988d8fb4417f09bb5412ac61e2ebe1c99aa58af129cec481f2e619f398a532e0172da11ab94b8989ee7a3c706992523749c72400210863da222b3e0130fccb0c226a9b62e93e4cfd9f192f245f8ca8c426642b75eec2c8e9fd656095cf0bfe7407b460f40db798ea722c34bb4646b268351d34c2294d5ec137c5fc93a680f7c0efae8ddebbfba7ed0dc0c517c43b81b87b37c274908b11b09424a70d88779c8f0a57978b86fc2a5ad01fcc21fd03c389237bbbdb41c0c1bb367f108e454fea643240c1c2d5f06797103ee054c28d2033b03d3444e4f9875d06e74735e0d697cf309319a2cdafb0afe22154c3e3bd7dc4720a29eb470c5d3e2d5388081b65dd572374ff69078a788a8367a5d0f6086cc451bd394580c901e66800920840d5e16089322c9e0be011cc52bdc4a898718d74ab90248bb313fb6cfa74dddeeb0dfe4e8fe9b11e878a714adf9ef2e5ad8432b8a61e5936a6354924432493bcd3e503bb10b93b8ea3751b28baf65f16c9219f246e3f33b4ea2d587178961f6609a730fd299643da83a470c6db63be37d2c71535f23ddade329b41ba307aa34df3bff0cb139e84f315ef9a1f56639f8229fef8b9ddbf4258f18439ee4225e6a82403fccfd7be938fa64761cf857016b5e853b16e3942f0158c760ffe9e70887fe4082ec798a5ed4571693b818da83ef3c5f179430fd1ec84c20487a1f5477da99431bdbee763707e2731d4c909cc9a98ce1df1f5022dddb9b984fe6ece899b4f48b9f7791f0c87cf270d94b0a0e601b6791f91ea5b92615ae853d2bff6c94bfe5586bc51a45534cffdac85133f91c95ed745f8caef71c0938c518246647b2043c120cfdb3635c29aa5bff0ad46ef8676a8b5aeae609baa555d67f70e0ec4e9f7bc0c01a6421f59fcf073b736ebb50689086bee7ab44da664d2f78ea2f21974ef24add337909d90b40c7f98d0c35faf02ca9c74173f4f1473c5eed98784c6f95e8e2872f06e4eb350109a6ebc1a86e12ceed66c21dd0c70bcccf51899858213cd36d014a11cc721bc0134531dcf53984cbb75c099ff6b2a7dd09319cfb634b5c76b628073aaa76d6380fc5f57c1b1697abd67cae13aa34ec24ee8ed0b482a4adfe8b8823445d3e0b3aa212c0e9dbeee5ddc68edb7b653517cb8ae6aaba7e82be29d00ded28d65353f0a98f3b4e15b8d3fbbd34b3e6bce307bcc4adaa276b799e4b4a49d1c3fdedad81df4ec05be1a5c164c3df521987f7b5363b7a658add8e7d75c8a2637d08d39b6456f3459bbd37d82694970bd46769b1d10ebd0a1bbc993f19706aa7e64755c2def54425e41e50f227367568945e9c446f955a3dc05571c72f7de5784d06addb7e8d107847de3edb2701d5ce13fa1f39d8d690be74239fcead42fd385c810e704614dcbe40d43b9e6944c1606dee795545752ee839872918c0cbc30e438845e306d6aa2703345b6efb6541c5e32fcf06ef7caeaa18da8599d7eaa27a2afce22e509b0a8728b6ed03333aa26bb8735e97d29ba1fba7f163ec265fb20866d9398d2d5f43ff843d6ebf1e40653eeb469fa0743824af8fc5f052171798222a1dc4c67ada113e47f015067f2b6a9af4a1d98945d1c53aa9f496994c043a7043e104e92610878474eaf9f60e6fe7481ca41e8120a181f2b1307d1c31925ab25127b3698b9960f003385186b379fc189e03508d87f619aa6d96238c04343429cbf18847a06e9f2eabb8bddb538967cb8107ab02b2fdfef164967dba9be81b39ef089aee401349ff7ac58b30546b2aa97d36e85b9fbeff0be0d8222ee947783b6947faba1d3e033a1e337756c2870d360335cf8142f36e237372c94350839548a9ce64d01096676f5386ec54873eadc04af108affea125a3df49f2c1713484b3382a8f1faa18cc7ef0e1762ea3836952fe188016965efc3e62cf99e4754648a0e8621dd7af3a2ea0cba65d9b2893c5abcc5e0ae8b409aac6c1ec9e1491084faef733ac142b5891af1697d9735fdbdfb5d578f8cf740cba4103f6a923c71c5c0f1e70f70e2aafdccf086a0478da6646406f352e702d3944875c7dd69dd1fc4ac0168cb0d26dd5b7758c12588750e3864db1c3a7be821ad32a0c3a3533a3f6ede4d454a21058a5429aaf9b6fa44e33f4efa058ba6bfdfe1d65bc1304a5a0bf1310f0d3f8c650e3e4e42a30ca4a655faf0c9a068b6950777bc3908ffba6d3a8005a3db0114d0f536bb501b14ef1442551a943c9083ca7a054dc92f3559a9684760a4259614ec4db6065771be85c063295f2a1b180d495d80105051af936fa6792adda44fc86ed4185ff72bd3d954ab70c2ccfb8680c545ee5477a503f3486cb0defa8af8c5a83bf90d37cafefd14e3374072256ca7eafcd5339a1798400d312e3458f0f06252fb80c3f7e71b6c8632c5a4755be106c464e5f6c95f8bd1b8f7288705e33fba94a3f778b77728356c93c973f61ef16f6a33210606922aba48b8a54c92fb5adcdce0a9f4815053044a28b3e0a88f2d5c2b1da98f4ca2cb8a036a8e5451754c145045def219d0d9ab81e9dd7b113416180bd6a8e517b4dbdcf7e99897bfe224d2bd7f0a6277c4e6a4f303b748161e8b2c34b0d44d04c7e6be9d9605f40b2ddb74950f0a0cfa21e23aa06c02ef4412ab4010cc4e7403e9a49d2a37e6eff399b6c9d1298131f397d70bcbe079d95e2a9c53e7a5b64f9713c008e18e0ffb6fa348978a3bbcd38ce67a5c772348c58e1b05f8bfba863701d6f706106d3e7ac32b17675967c4b441a17a727833d64e25d0f269c842bf66e0e18562c0eaccd43a97396bfa675ee2a13f294e5ae551e55ce681cb0b3f50638771686155e18ea8f720d03414e34e226f843960b806b402942288521da894ba23fbf28f760fe9a5d7a800100728ea9a05fcfa592067de8557a45c5ef7e49e44b9e74aa6cb5685ded3ec313ce5674e01a63d3d50eb204e63a3ea5e1d046ab1ab262b1810e451e2048d603f90b698ea7f46cbb23ba1dcd5000986c49b5476d565ce2a7c3c46919d11ec73af105e5f1a8117109e5af31528b0805c505bd158e5ca4ae35244464be61da46f3f7d591e51166aabf2d45b46a89427f03713019f798602c23013c4ce93fcfb142fe23665c0edb8c06cb77949bc5885eb2850b4e9782515f134ea28e15ea3e265a9613de0a2a692b4cada1e31bd89cfc1280ea1e8bbc697a53271bb1bc45c6055ac2a06f44c982e767e7d549d2200de53d8cb30fa26e839f7c44691d63b1cf39494eb4d9e7c8ca14f5878c24bb46f01b8aec474fd1fb3f991cea34058fed468875ef0f2ff6d45cbe22ca74a84ca8bfdd54b9b70166d5493d0f78609806ce16efeb73b0dae5f330b892f623998328a83bacc6abe501827220255b5a62031267555ab14d12368ff3697d5fe16141cbe46028baae707342235f2fd86348bbce892a53f1dcadbcb6d8f21884557fd840c2c3f9b742e2d6b65de516a906a513aa3c1f374cc121b9c73a7e4fce07fc7ade80fa66440be74e9d4d76d5d86ef6029aff24ca5098a461b7bbcecfd00da92cabcce8ec98116f43039ca62cdbc6"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1088}, 0x1, 0x0, 0x0, 0x40095}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x7}, @func={0x7}]}}, 0x0, 0x4a}, 0x28) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000005c0)={r6, 0x1000, "27c722040008fc4a4d0eeca1282bce41bf95c7acac0a5a83ca3201043d902d656650216e251c8bf85b8b75b51aa3f1876de8f20eb1b723096f62728187f5a7200aafa733e98d6a6856a55a47e9b3b9b2805c97f8d9119303ec15a03ec679fe34a76e2854e5ba39c663d239361e249b9f5bdc650ed4e3c715aeedec3550b36e83f5b1db9294f0261b6e59cf6756146be36b02260c8b6758846cdff4794e5f56ed05251772c2b6d937092fc05815bb3f8e07172cfe8a4798c38cc10eb78b12f33f33d60e60e88b13fa90d1ce3e1fb5afd12216c0b713c8f2642d859f4783a6f8ee34393e36156fe5af6352ee9c89a943714eefd9f8bf5c9da1a41ea3f0df5535e34a5efbc173e2ef568d2988ceb3f0dbe5bfa10be986cc37186dfb33cf74e39be8139b6f9bfb801c5fc5e256dc8f3efeeeed93d9f5cea635dfa8d34705b97fa5e3f53930f0ae4f71fa9a938267d745863e6bc45876f7aa4031944b2904b612d0105270afc6d4337217ce409d288e30af30ebd335385d8d17cde78e2e7e993eaf52e6c809831bd31eb9172160a677331771458e0f8dc6ca0115bc3e5114cf674afb9b9ccca576ba68885dc3f4813185061dac0f6e94bfcaa4d5ec1aa6483ae8991c8a551c56e0760a8979678ce7010bf29d0f8e0e1986cd734182bfb4144734bc3c2c7ce2dfad28322cc29834e47ff7a0df05c6f7857550f1496b0f0c2f51c0ccc0fcd694eff18816e9a7c02f3482fe6480e0c4e707943fee86e8df61ffe2aec3ac5c688c737f159ecb6c3fc6be9d7d11cf9a57d10b554da45a1af3f114ea381c9da5e0547c0585d3b876c4372ea9165aa1e032c20ea6f96b6242851b93cfed77ad058ec8597ef4f58e3f81ec512f845390a6191d5bd12fb63d4acf45dab9bc9615810c415b54e88672595c4349218ac51c3ad8d7ba3b3edd8d1c89a2e89c1f542220edc1f91b313258ba17863bc78819cb573295a5b70abd549efe02bbfa30baae8cd564544ff99107a72551c56dd588f5f8f064f03aa78bb976659cdd9a708fe74fea20a309ace8e19b52270a29b318273e52886e4706ad9f0cb7118244d6e4a6051c38b93c4e88fb782b6821eb914fd4d829d51e36894ca2aab678ba47753d9757ee25cf93a73a7f57b71d80b49180e5c31d1fa03b7179cb510c874965956b4508d98ee67b3bfc08ad098f7bbd2eaa6b8d7fd813d8a32677d619b41684dffaa4ffdbf435f09650f98bcb53ce83abd2374f10784e26b60d628973506135ca6d662b15b518dced8e7b20a0acd519b7aa83a95a020f018ac82f46a062fdc9c76dba566bc9850aad3977209ef17a2d225dc0e77963b9a45b62c7a3e41b3c4d97996c3c06f86ad92a218b953b2690eca961a681c10dc1e267c77895d6a4ea031c286ebe027380c35861a2dad70c1411b2e1d5765f78e76d0bc1a520ec66f77273aeb3c40bf8ff28af8f0b62003842084bf490b673b1f883e02374151f73a20a84adda29f57fb5944113c509379d79c63a134c266507ab9d06e9bd3f0ccc65b570ceac62a6fdccc86e9e3c6385f107410675700cff5f03376c846717b938e13c8aefa741216ec99cee8cce38064e3615e85fda69e7e38875df1c38d9edca367d47572e9fdb84f764c4827aa24f31eede479a08befd210a658148a96f11b4960d35555064fdd60794d4423ef37dcf0b1424684eed187a707f760f7cfc3b31c167a5d0624eafd2e2ad99eaa14890364bc1a1273f865962c99990686c5bda15df4c82bfe2b2c21c61a968d920d4d91fc674c939634795bcafbfa0e57d2c7dbfa83365d402c2385993189f637cbca6272d7f8b3e06e559b0b009e6042d0965bc3373c3f980651ac801f214e7ca9966e4e078937aa6ca8ee5b95c20fb8a2ba61437ea562163374708105885e8840f6617f519cd980dffeb1544d3760eaaf3740835dd25ac7a8c45b99b51bf67fc9280da24728b5ec8d0163fa553e9903684b0c096ac5280b6c88eb77630af5e74f0f76e7fc7fd2d1b4cbf7cc069de8fd38629999683498ca3e14ce49c466289f5b2fe8c72c5b8a0e2cf3c10aeaabb4c1858a79453ea0ec8682ae14d6b06d06f9b47500ab56c3adc1f72c7fef898bbfc731499f26c162f0853553b713fb7280c880c08af2f96f706683cb5d11eec71971fc137d7e88de2838fce101bc75cf818061b1ef7edca9126bb7b26f1fdef7b670761d8e375c519f87a0cdec48ada2b7299692ff5a9ddd4697a4273dbaa68ba8d7da03d50e7fda00138a83e0fa911bec3d56237ba25e9cb2b97c2af2e761b1a2b0971765d8969c8805c18f8ea3ef3628171ab2cb71180d1b662ee3e3e3c7b75347c1b0622e5a9206688bd50cbd4e767af996d212a87d0bf9fa61cd03a547d196d9e80bc5d23f096aa8fc1498c452e071af3597731da9cf9b999a340501c09cacaa1afebe0c8fcb45fe2043e06ac9d3789851fa6dda93c49e9324f0d6ac24a22094988128687fcc4697cfaf7be63bc1a359ec34687d1b3b037c6507646d7c000d17b99c19ebd64ec476a6513bd66f32eb08b9d9042eb0cf63071a749819a3d6b7415424ddf5f929af3756b4d089f97d91caf989824a516ec597ed46fa85d1a4297ce747f0e422b9cb61c3d5fd5851342da6257c004c5b0370349ce65edce4af73bf05222dfee8bbeceeed01c4347167f97e7b098a3dd15a8ce65b6c9a8f324f8908ad668602bd47a521c7cb73f3051633fcde200e79b7823c63117a30a28f5e2f1da40825914ddf223d7ed24e093da669d7c0497b176f088a3aa7ad68d5fbb3db20e6861ad0e00497446de5cdba2dc70c65d218a0f52545b7d2ff944e459962d6d0d36df3d89fcbc00b2c107849a72a997f940f7924e842adfb53c77b727414cedbbc85ddd0b1b4054181335138c3a49f683792633647505cf16a775c168213f47083231e42dfad55e5b53f5b4876aac07bc654c024b9a6fb9663c6a46a05a934d31488a043ad41e40aeba46ae5f8626cba3d623aea53a3204f3d20e7dc1f6ab619b992ea991a734c6d25ae92c49c762fd570e4a0faa7fb17a4914c11933c27d86f8c0930e69f60d22db447a53831f9691fab9cc113dff3ef4948f5762a8eadee0e00b33e8e43c7a5b6f6f264c1ce6b8b75312fba843e0098ae6861c9bfcad056f0ef262211a3e70e5bba2651581c13cae5d3b20722de0b7ab62851c99571710ede263446fb872bbe33a80c518cbc045c7db2f61670e499c631c82fc5b02b4df4718b59d1a82e42fb9a1ffc8bce62f5c404733f9387a04d5d9f75963511c5604eaa56e5aef3019d4e8d355ad225e9faac566af10db2077e408ae68bdb7ffaa73f690cfebd3ff0f04ecb45eface03bb8f321178cf5cb7eb0be59125001d6f5f57a1646474e11391819c6a068f7570f0a636ff2cdc1ab687d8a66e1cdb846ab53b783fa4eeaaa2457327e5971c61b10ddf2c1f90e43824554f8bf74aecd86ec6b6640679c80f3cd9b65b32f465dc75eac54037a10ff8991b40c42ad55df4971322a90a75f2e93302aef75a02c964b17c44ed1fa7964036c30dd69b854b59397a51c684c59b4b47a733d32719c54deaba57ddd0e34adfe8db39ecfade8aee0eadb21f075e897545006c735141628f3568515c4cb067140b0a87d934788d277723e16ba8a8e00838c3781bb75334052d8d1d620b2f7dac448b9604e1173907b88c0db8fb46ec9ad8dd7796c9b5ed582aa8416d368761395829efb9282b15220f50a94bfb6e55db77f83f24f9c6388d58b856da1b8b98d95719609844e0c8f796b037af69311109158ce633f963d063ee16bcf8dd8ca7394511ffda6350ddbdbc455a1174aa941e0d4396fe453df94c5e94915a3a29286d496edea92d417226d3214c61da654aa0a0cee2131e1302a7bcfa1179b755859c69e57cf80c1c1cfd262e033cadb3b6ff3743e6e81b16d8cf78cf0b4b8050d7d84a869cc8637f7b6d37c99a38e903cb2f1c6237a85c202ba7d4c76506320306cd564e8a52f96ddc5f3c3bd8604faed182537cef437c9a8d0fe9b3d13fa6c81b0ee9f06edba1d4ed8b1d3d7a00c64f9e361fff6ed185a73004c8fd54e8e85caefae374409418c511f00c09f05a22d4a2e31e87e390b9f0e8fb516c90f07ef5a6d0df4cd1377d5c1855e45da3fb49757bc9f22b0134edf103269641759e5e7a0c3181f994959cb61bcf0d620d4dc7c95fa64949feb3385d1ee0784b776c8944064c0a19292723465b68acb636f6bfaf0b3cffcb0b49afbdb6e2167a584b8eb78000287874502ffa976c5cf772511ea50027e2dd0c628f287dcd0a065a22cd92ecdb5587cfdd3307ef47962f3412c5485f13b200e1cfbcc95bf158fd0ad2d9f8fb644a5c27617eba15c2baf770707b24ec3acf0446e454c3d28ddb8028f808e6ef074560528bc8c8f3c6893a7a5505411362b61dc396f56621d745741b4be3112f871259ec69af10953eb27a1d5b4672d2f3fb50e892d67b5447585e663c0a89e8adeda561180846175f1e33d739985ffedf935868898ab26246e202bfaf2ac722c0548830e34b27f9bbb3a3fa70e44a14e40ef98f5e4b8a0f46784fcf44d42803b8d0390326df4e802e30219773dbdf1f7d44493d22ee5cd4b32102915282588862555f634f2977b44c934e29c27c9fc1958c0fac6db4ff5e868319f04fddc5df4539e1b870b26de639126517cfcc62b0f91fec85151a2d534edb27896e3bedb5a98291aa0f102ef02f12a45ee43823999c322d6f46748061d1bccc7028c601c156204bfc520070c0f8bcdebdd5abbfe5264a2b496da2a1986c969586faa6dc1a5ee953e5271570d458a1e0ac044eaf404bea49024989dab76a051780505e4c3f284185a2e200b2db918231bfb5ebdb0c3c29dde9ddb295550013f0727e01b46de7cf0233095d773d7f835c0385ffc9fd42bfc359b68a7c2cc1b9078ce2cd9245f7594f8ea8245c7a1b4f68a9f218760c213fb3c9bc16c749d19bc111166881afffc91680bb7f06b1b810c4fddac8fd217a8e579351412c9e4b8e08ec873c89d0428f21a44823d0cf6be89066b7193c6c298f3794f1ced14d5e858ad1a114d2afbb124813a95b7695ff04121d491e4729b5748eda59ccc61106a96bf0ec9cb824c214a67d9f400cecbec92f1d8fcec628a3332dad8c7b7e3ecaff17018b67989a3bad19087c7591e82e9bcaa74c4306f0cc5eca22a1f171622d56abb285fd4a148ba811ab80039f9d72617688fc744b870e2d876af7a6d240b612ab29c89bdae2519c7c69b2a6a55cdf3b8e4677c015172404939928707e4f83f49fa8e7962e500f9bac2c08c620bbde3cd763d3559f86404742e1642379a4d379b5a5b37c0124fac7a1cbd2032e27680473faaa756661435831a00b6de24c93bbcf7328a1eabd7502bf3adf793ae852ef8879d1d2506edf3b1f7fefd2321647bbb8d43be01cf43c62925e743f4e007e801cfdac80344ff405506b02052f29b7029665a0a1a6a97f14d7de03d18013a455d32d6c8c5d4eb1d1c013329e9e926fd8b97efa54ae0c6284ec9d60f961b7503016e6cded1891b927332e23a9c9e0c4552539e339f9af735e08d932d0e1a174d1b490eaa997e647b81857200065705a3ed29e4efd36a2a75a2ad96b6866cbfc95d081d48781012d7ce5ea0b533e11f374c289ed54da730077eabbae9945d7f163a0a4f696d67a3b599df6b6e37e8ac0f6bd27c22095c8c7c6ea24e116fe0a2704396b908f883d4dd7b07f7d68592f3b5977f1fc5ee34e31468b3bfd83ab62d0f0be5572f19f2c7d385c75c55b"}, &(0x7f0000001600)=0x1008) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x14, 0x0, &(0x7f0000000180)) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 4m14.308701018s ago: executing program 32 (id=4121): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000002ee3460915078d5b5ad41ff6146a3a02000000000000000000000200010000000000000000fe0000bd473e3b8163bb00000300"], 0x50}, 0x1, 0x7}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000002800)=[{r2, 0x4020}], 0x1, 0x80000000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f00000001c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r3}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x2d, "34b144359bb952233ebb2d0ebe0ea8dd9fb7f2c0a30fb72c82961b63e6a35cdbfcfd3d88ddb64a1cf048ea8711"}, &(0x7f0000000580)=0x35) socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001680), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0xf0bd23, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x48000) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000027c0)={&(0x7f0000001640), 0xc, &(0x7f0000002780)={&(0x7f00000016c0)={0x1088, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1088}, 0x1, 0x0, 0x0, 0x40095}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x7}, @func={0x7}]}}, 0x0, 0x4a}, 0x28) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000005c0)={r6, 0x1000, "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"}, &(0x7f0000001600)=0x1008) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x14, 0x0, &(0x7f0000000180)) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 2m40.140883514s ago: executing program 1 (id=5350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000000000000020000fe214b6fb2306989b34a6941490e083759c249c9a974de7f30ef093400e000000108060200e00000010c00028005000100"/76], 0x44}}, 0x0) 2m39.995264736s ago: executing program 1 (id=5352): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0200fd00bf19327e42e690246ecc10d3d532c7ef3129d999769812ae39eded91588dc0d8fd3f8ad15b320f1cb3b90855ff8b8d11e47eabe704fc19d2f3ddb880190ffacbc71b7d084a68abe414baed10abf9e37bdc84c6f7aa1bcc53480755ee2d269bf29bc21209ca765af6901952fdf8a946ab48219381f783f655fed3eaf49adf98f12520774e9d2aefe33a5dad4b61188656089ac33befe5e468a0ad268916c034de9a0d71d5"], 0x14c}}, 0x4810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 2m39.702901261s ago: executing program 1 (id=5356): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0xfffffc00, './file0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRESOCT=r0, @ANYBLOB="08001f0004"], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000140)=0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) accept4$inet(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x24000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r9, &(0x7f00000004c0)=@id, &(0x7f0000000500)=0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000003c0)={0x0, 0x3, 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x0, 0x5}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m38.75198101s ago: executing program 1 (id=5368): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000008000000000000000000000000000308004900"/180], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="0c1f1faea44a36739c21c5d976f490a448963065", @ANYRESOCT=r2, @ANYRES64=r2, @ANYBLOB="967b6fbdf3d0842993970fdb8d6560aad5960657b3937a14a4fc7840f185051546e9d3e4cbfc12384dfff3760abf09", @ANYRESDEC=r0, @ANYBLOB="a0df45b537409e002053db05e94e577010febffa7c56e14b33aaf9e9db14afa53728adf97f8805f0ff26df75ad0a98ddad09eef89dffb1c9e47ba3b752dc77b0492aaadc13972ab08b81f1ea2cd6a493b44ea9dbe26487574145ca613af79451e94e37e7da0ecf6835a24f8a972a76c1bd9e8c5142f5ea8a10511da11604b664a29796d37e2231ab0058ddb3ab51c6e3719fe21df51cb565b26464ea413cf5bda8f621e133373e00c44af8bba1", @ANYRESOCT=r0], 0x10}}, 0x4024) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400fa556de2000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010074797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40c0) 2m35.510883743s ago: executing program 1 (id=5378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x1, 0x10, 0x400, 0xfffffc01, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x64, 0x0, 0x33, 0x29, 0x0, @empty, @remote, {[@rr={0x7, 0xb, 0xf2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_addr={0x44, 0xc, 0xd7, 0x1, 0x5, [{@remote, 0x3a0}]}, @lsrr={0x83, 0x2b, 0xed, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @rand_addr=0x64010102, @broadcast, @multicast2, @multicast2, @loopback]}, @end, @lsrr={0x83, 0x23, 0x81, [@multicast1, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfffff000, 0xef5, 0x2, 0x8, 0xffffffffffffffff, 0xfff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x6}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r7, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500e0000001000000000000000000000000000004d63c00000002000000e00000010000000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d36c00000002"], 0x1fc}}, 0x0) getsockopt$packet_int(r7, 0x107, 0x11, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000ed661b1d08cc000000000000000000a9874c6f070025590c13538cc0a6a0c4a0cd8b3e966cf0cc7475774c2236e9021a5b20335e3b6c2d165a17fe49f848", @ANYRES32=0x0, @ANYBLOB="04000000000000002c0012800900010069706970000000001c000280080003006401010205000a0000000000060012004e20000008001f0005000000"], 0x54}}, 0x0) 2m35.010780385s ago: executing program 1 (id=5385): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000090) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 2m19.901247068s ago: executing program 33 (id=5385): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000090) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 4.5543174s ago: executing program 3 (id=7016): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000150a010200000000000900000000fffd08000340000000010900020900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x6, {[@exp_fastopen={0xfe, 0xb, 0xf989, "a9f1eb321d7542"}]}}}}}}}}, 0x0) write(r3, &(0x7f0000000040)="05000000010000", 0x7) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x9, @local, 0x6}}}, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000051401000000000000000000080001"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000400000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) 4.345513961s ago: executing program 3 (id=7021): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r4, &(0x7f00000002c0), 0x0, 0x8004045) 3.796892081s ago: executing program 3 (id=7029): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000), 0x23) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa3}, 0x1c) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x2, 0x202}]}, 0x10) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) (async) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) (async) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 3.600666808s ago: executing program 3 (id=7032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6b, 0x1, 0x3}) getpeername$llc(r2, &(0x7f0000000180), &(0x7f0000000080)=0x7) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x5, 0x1, 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6b, 0x1, 0x3}) (async) getpeername$llc(r2, &(0x7f0000000180), &(0x7f0000000080)=0x7) (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x5, 0x1, 0x1000}) (async) 3.417474173s ago: executing program 3 (id=7036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x102, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x35}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x27}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x48080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000400)=':)]\x00', 0x103040, &(0x7f0000000440)={@align=0x7, {0x775, 0x0, 0x7ff, 0x8001}}, 0xfffffff7, &(0x7f0000000480), &(0x7f00000004c0)=0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9798}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfaf}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xe616bcf6c9ca4f2e}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}]}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x44ec3ac1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20048081}, 0x4) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=@upd={0x108, 0x12, 0x200, 0x70bd26, 0x25dfdbfe, {{'xts-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xc83}]}, 0x108}, 0x1, 0x0, 0x0, 0x48041}, 0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000a80)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xc}, {0xc}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40811}, 0x4000004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c800}, 0x40041) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10021114}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x4040811) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb8, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x3c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040845}, 0x104) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000001040)=@dstopts={0x1d, 0x230, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x38, 0xf1, "f6ffc01ca3d3639c28e500e4f1a18e44c508b4a4ffc45cddb64b7af993ee2cecd0706ffc8d29055b3e7a71064ebd0767540a2baced0e1c3dc4daef7ca0e59a0d92e48f255f5fb13741968f1eeb36cf7ae7f3b61eff6cc94c775eb890796ea580733496eb10e1a4c2d5fa02b083cd16d80fe6b5f6fb6112317c595f3085bd28a708d7513748eefd62fd90f4637cd0858a045dc17b4f83e5459166a9102bf893862c753b8242d02cbafc470533193c7dbf6345a84ad70d76c5d68c911ab7c133f0ac7a3deaa989a3b04e645baf4b80db42cac788d40010d3cc9191993ac6b883fe1ed5dcdb938618c4f751b772a1ef453218"}, @hao={0xc9, 0x10, @loopback}, @pad1, @generic={0x80, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x8, {0x0, 0x0, 0x28, 0x8f9}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x9, 0xb6, [0x0, 0x9, 0x645b, 0x9, 0x1, 0x7, 0x8, 0x7e2d, 0x7]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x1190) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10880}, 0x8084) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002380), r0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000002500)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x60, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r10, 0x4008941a, &(0x7f0000002540)) 3.117945055s ago: executing program 3 (id=7040): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x39, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb"}}}}}}}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) (async) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4) (async) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = accept4$x25(r3, 0x0, &(0x7f0000000040), 0x80000) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000000c0)) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x1, 0x3, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) 2.398174956s ago: executing program 4 (id=7048): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) 1.820485397s ago: executing program 6 (id=7051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0xc0000, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x25, 0x3, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x94}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) 1.818980799s ago: executing program 2 (id=7052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00006830e97bf4694059000008000000850000001a0000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0xa0010, r1, 0x445de000) 1.684636305s ago: executing program 5 (id=7053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.619737641s ago: executing program 2 (id=7054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24048884) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd569ff4f22ad3557d00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) 1.493410403s ago: executing program 5 (id=7055): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1b, 0x400, 0x70bd27, 0x25dfdbfd, {0x12}, [@nested={0x8, 0x74, 0x0, 0x1, [@nested={0x4, 0xd9}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r3, 0x0) (async, rerun: 64) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeff2ef1020000ffe203f03adcac4b74fffffffffffeffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f00000008c0)={{0x4000000000000006, 0x0, 0x4, 0x7, 0x8000}, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) 1.355882994s ago: executing program 4 (id=7056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x10, 0x2, 0x1, @local, @mcast2, 0x40, 0x7800, 0x2, 0x6}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) 1.181934132s ago: executing program 2 (id=7057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000180)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000080)={0x6, 'veth0_to_team\x00', {0xfffffff9}, 0x1ff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0xc, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.151713849s ago: executing program 6 (id=7058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x44044047) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x4008011) getuid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 1.151597548s ago: executing program 5 (id=7059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c25ffd00000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) 1.142788233s ago: executing program 4 (id=7060): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x5e, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000091) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) (async) close(r2) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e1f, 0x4, @local, 0x6}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x30}, 0x4, 0x700000000000000, 0x0, 0x20000000}, 0x44051) ioctl$sock_bt_hci(r8, 0x800448d7, &(0x7f0000000000)) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000740)="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", 0x2fd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="52bd", 0x2}], 0x1}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) 1.128230815s ago: executing program 2 (id=7061): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x180800) ioctl(r0, 0x0, &(0x7f0000000080)="f1cb7a49034e3440b6c8c7f45ed1f6aaa85feb11c885a1688ca7f91a8724801c7f11c951f18e153e232898a2199f1fc6fa5e3d693a034905a60240e8285e74a5e6acf18d8ce3a465feeadb9f722555386b8f00bc204dfed16ad36b8837662279c1c07b2a10c19318032c899ad99aea6ca245ebe37fcb997149ba47d722e1d7f5f17d") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x28, 0x1, 0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000280)=0x6, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) write$nci(r5, &(0x7f0000000300)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x4, 0x1}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20100, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000380)={r7}) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}]}, &(0x7f0000000440)='syzkaller\x00', 0x953b, 0x9c, &(0x7f0000000480)=""/156, 0xf4f73b07832d8224, 0x5f, '\x00', r8, @fallback=0x2f, r5, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x2, 0x5, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r5], &(0x7f0000000680)=[{0x2, 0x4, 0x1, 0xa}], 0x10, 0xb500}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000780)={0x0, @adiantum, 0x0, @desc4}) syz_extract_tcp_res$synack(&(0x7f00000007c0)={0x41424344}, 0x1, 0x0) write$tun(r7, &(0x7f0000000800)={@void, @void, @ipv6=@tcp={0x3, 0x6, "73d331", 0x21c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[@routing={0x4, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}, @fragment={0x8, 0x0, 0x7, 0x1, 0x0, 0x3, 0x68}, @routing={0x2e, 0x4, 0x0, 0xc, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1]}, @hopopts={0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0xab}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x0, 0x68}, @srh={0x62, 0x4, 0x4, 0x2, 0x6, 0x0, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x2f, 0x8, 0x0, 0xff, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}]}], {{0x4e20, 0x4e21, 0x41424344, r10, 0x1, 0x0, 0x8, 0x10, 0x7, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x9, 0xfffffffa}]}}, {"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"}}}}}, 0x244) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000a80)={0x6}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x453, 0x400, 0x70bd2c, 0x25dfdbfb, "d3732ca7bc593900bac6a5b834bc50568b3b7a4e2a45b5c0d4b9cbc64b6e8045c3886cb417e633bc5905107a8fa20f7370d6ff22092d6f163e2176576b9381e432d9e3bc61", ["", "", "", "", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000090) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x3f7, 0x6f0b051827f7ef33, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x8011) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000d00)="c4d764352717bd579eb71a84360c6c925af8c235199545df00e67dd812b6a16040f375467b8a964b915ffab52d4342825c88f5ed0cdaee3527d9bac5a5c33b8cac140546d73eeb8043b965557200897f0ac54da9f2f3cb33960c25018d865e5e1de2b61aefca56c5c1dd2b1888169db7b44cf752805fe78df92a47c2a4387836b29f28394eafee46110c699defe1ee2e854287cb4feabcf4", 0x98) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000f00)={&(0x7f0000000dc0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r11, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x20000050) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000f40)={'geneve1\x00', 0x4d}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000f80)={0x0, 'syzkaller1\x00', {0x4}, 0x48b}) 1.102744715s ago: executing program 6 (id=7062): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x4, 0xfffffffe}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000560001060000000000000000070000008feb8134a9332c0f9ee3b41d9ed261df304dcad987ee288f6e19f01d0067b415fc1fefbc1094396e"], 0x1c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) connect$inet6(r8, &(0x7f00000011c0)={0xa, 0x3ffd, 0x0, @empty, 0x3}, 0x1c) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940200001e00010004000000fcdbdf250a000000080004000a01010210002c800c00c100ff03000000000000200001800c006800000000000000008004009b8008008900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\x00\x00'], 0x294}, 0x1, 0x0, 0x0, 0x810}, 0x4018800) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) 951.705069ms ago: executing program 5 (id=7063): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0x18, @void}, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x80000000, 0x7f, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x68, 0x0, 0x81, 0x29, 0x0, @multicast1, @local, {[@generic={0x82, 0x10, "16200a4cede8d629f27003005264"}, @noop, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x37}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0x9}, {@multicast2, 0x3}, {@multicast1, 0x6}]}, @generic={0x88, 0x5, "455d8b"}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x284, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40080}, 0x5420b26db0441e15) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0x18, @void}, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x80000000, 0x7f, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x68, 0x0, 0x81, 0x29, 0x0, @multicast1, @local, {[@generic={0x82, 0x10, "16200a4cede8d629f27003005264"}, @noop, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x37}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0x9}, {@multicast2, 0x3}, {@multicast1, 0x6}]}, @generic={0x88, 0x5, "455d8b"}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x284, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40080}, 0x5420b26db0441e15) (async) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 761.26677ms ago: executing program 2 (id=7064): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x1, 0x1c000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="98245e5bc8f77e89", 0x8}, {&(0x7f0000000200)="1f8e71ea4b488b41171b5c9f9e9f195854d95f9163be198b82b9b79ae11b0c9db6f9a3cb4a1b2e06b8d4242e345ad4690e9b20b73a8a54fce9970b9cd9a905dc1bb41a0de5c2ecafc271ecfdcfdff712f7619bbde80a858a001bd9f7b3506ad2e078b64fa2b5600517b743a0357e7d25969bfb5532", 0x75}, {&(0x7f0000000300)="a8d3b2e4a2c46efb5866994f41dc6406749e5b6214db602bc454279f8261b49b6314fbec2eb61e4d1b3c2dd78c03f3f7413f15e7157350f13f0f", 0x3a}, {&(0x7f00000003c0)="7cdaf3a0793262fbcfeec88db4c271f91f44d9644d210807dc6aa7119b8ee44f03f8466608a0fa8e129403711fe74c7ce7b6d4cdc63f0e984fdf0b8823116c96f07a481ae900dcfdd8c945af939af131279a7a637693c40cd1b46da0dda575c0716bf8e392df0c963a9883bcc2ac41a7fa", 0x71}, {&(0x7f0000000540)="e45d0478afc370a86e655c5a3eb6fbf78d654ff67d80576d976e23f1aaf0262f0a4a8d34196fdb725c1552035c1f8a7099e76560417e268fd0900812d2be68feab7fa79168a2a4cc03a6f39e1b7c91c1298afe3b21e6a96b2db0f7460db0a83efa938063b97e8ee80d86e3c8722be08785db80bd0dff3096c4789be354859b2ab1cc028d909f3ac8421b99b707c13e8aa7ca5f1a8efae587f4b6686f9c0d4a717b2fa34116c20672ea832dfd248897fe02e99b8d0ae592b7cf78a805e3968b1acd9bbac3de2c487c414e82f15f0198e7efbcbd985bf5da092ce6c2", 0xdb}, {&(0x7f0000000640)="2ba5a8bb72200b768dff2f21fec5fc291cee9026af77946efa35de94b8af486faff3fcdaf092d902", 0x28}, {&(0x7f0000000680)="6d3bdd5b25083d0939ceed60701d9c2bf772caf4f8bd8859c048841a69f5a0da0e76bc16094cee2689d4a7b78e8e69e447", 0x31}, {&(0x7f00000006c0)="9d36a5cc3886047999d300ef62f4c72c5d4122b64660c29d05589e6fcff00ecc223565e658be59108bf4448be5ea819a099a3f4a966d2a68959a43031b6ba6b421ee527483ab60b520f792328260a669de85b604a98053f76380b37f91be4f170dd9f5ce47ffdd97b39080824ae9a24dd7b61d235fd167b0121a6d0b39c40a612bfd365964fe76ed36aae7de6efb0a", 0x8f}, {&(0x7f0000000780)="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", 0xfa}, {&(0x7f0000000880)="3642b38312da220c761ecc6e5f7a524f8f55a9ab6c18475a0f1cf48aa043cfe34723e2e9a25cf1602aced42a9f9070f54d1c7944d47b", 0x36}], 0xa}, 0x4004000) close(r4) (async) close(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 695.519096ms ago: executing program 4 (id=7065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 636.590887ms ago: executing program 5 (id=7066): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r4}, 0x10) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000008080)={{r6}, r7, 0x2, @unused=[0x2, 0x9, 0x4], @subvolid=0x7ff}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@multicast2, @multicast1}, &(0x7f00000005c0)=0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 569.457719ms ago: executing program 6 (id=7067): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f00000007c0)="c16977f1ac") (async) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f00000007c0)="c16977f1ac") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) socket(0x200000000000011, 0x2, 0xd) (async) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x4, r8}, 0x14) (async) bind$packet(r5, &(0x7f0000000040)={0x11, 0x4, r8}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r11, 0x4) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x2, &(0x7f0000000180)=@raw=[@alu={0x7, 0x0, 0x7, 0x2, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x3, 0x46, &(0x7f0000000200)=""/70, 0x41000, 0x20, '\x00', 0x0, @sk_reuseport=0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x5fd2, 0x6}, 0x10, r11, r12, 0x0, &(0x7f0000000380)=[r2], 0x0, 0x10, 0xfffffffb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x2, &(0x7f0000000180)=@raw=[@alu={0x7, 0x0, 0x7, 0x2, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x3, 0x46, &(0x7f0000000200)=""/70, 0x41000, 0x20, '\x00', 0x0, @sk_reuseport=0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x5fd2, 0x6}, 0x10, r11, r12, 0x0, &(0x7f0000000380)=[r2], 0x0, 0x10, 0xfffffffb}, 0x94) 487.957448ms ago: executing program 4 (id=7068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) 263.969712ms ago: executing program 6 (id=7069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x6000000, {0x0, 0x0, 0x0, r5, {0xf2ff, 0x2}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8855}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 263.509698ms ago: executing program 5 (id=7070): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="984e0600c16a01002c001280110001006272696467655f736c617665000000001400058006000200060000000500010010"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 260.270065ms ago: executing program 2 (id=7071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c001a000100000000003d0000004600003f000000350625a63da1b78bffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000907800180e0300050200000000000000000002d588dc050391000000"], 0x4e) 183.788948ms ago: executing program 4 (id=7072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x44044047) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x4008011) getuid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 0s ago: executing program 6 (id=7073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085c30000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 652.753508][ T147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.799846][ T147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.902447][ T5289] veth1_macvtap: entered promiscuous mode [ 652.916757][T24122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5019'. [ 653.021035][T20490] Bluetooth: hci2: command 0x0405 tx timeout [ 653.468212][T24137] syzkaller0: entered promiscuous mode [ 653.484834][T24137] syzkaller0: entered allmulticast mode [ 654.093558][T24160] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 654.129125][T24168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 654.208077][T24172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5031'. [ 654.241194][T24168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 654.284471][T24168] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 654.367521][T24166] macvlan4: entered promiscuous mode [ 654.373305][T24166] macvlan4: entered allmulticast mode [ 654.386166][T24166] bond7: entered promiscuous mode [ 654.393479][T24166] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 654.405512][T24166] bond7: left promiscuous mode [ 654.876018][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5037'. [ 654.897147][T24191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5037'. [ 655.525610][T24217] syzkaller0: entered promiscuous mode [ 655.552588][T24217] syzkaller0: entered allmulticast mode [ 655.724424][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5044'. [ 655.768192][T24221] syzkaller1: entered promiscuous mode [ 655.790966][T24221] syzkaller1: entered allmulticast mode [ 657.254375][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.336076][T24280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5055'. [ 657.434785][T24284] netlink: 'syz.4.5056': attribute type 1 has an invalid length. [ 657.469670][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5056'. [ 657.493852][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5056'. [ 657.584809][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'. [ 657.737243][T24284] 8021q: adding VLAN 0 to HW filter on device bond10 [ 657.794346][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 658.723274][T24337] netlink: 'syz.3.5067': attribute type 1 has an invalid length. [ 658.747391][T24342] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5068'. [ 658.846133][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5070'. [ 659.017298][T24356] netlink: 'syz.2.5072': attribute type 1 has an invalid length. [ 659.047671][T24356] netlink: 'syz.2.5072': attribute type 3 has an invalid length. [ 659.082638][T24356] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5072'. [ 659.106552][T24356] NCSI netlink: No device for ifindex 813332851 [ 659.124063][T24361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5074'. [ 659.124982][T24360] netlink: 1116 bytes leftover after parsing attributes in process `syz.2.5072'. [ 659.301126][T24371] veth0_to_bridge: mtu greater than device maximum [ 659.322211][T24371] veth0_to_bridge: mtu greater than device maximum [ 659.405161][T24378] netlink: 'syz.2.5081': attribute type 1 has an invalid length. [ 659.675806][T24394] veth3: entered allmulticast mode [ 659.683795][T24383] can: request_module (can-proto-0) failed. [ 659.849793][T24402] veth1_macvtap: left promiscuous mode [ 659.917993][T24406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.934878][T24412] netlink: 'syz.4.5091': attribute type 1 has an invalid length. [ 660.087280][T24412] 8021q: adding VLAN 0 to HW filter on device bond11 [ 660.277405][T24434] x_tables: unsorted entry at hook 2 [ 660.684863][T24452] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 660.768555][T24457] xt_hashlimit: size too large, truncated to 1048576 [ 660.810050][T24457] netlink: 'syz.5.5105': attribute type 2 has an invalid length. [ 660.917375][T24457] : entered promiscuous mode [ 660.983754][T24474] netlink: 'syz.1.5109': attribute type 17 has an invalid length. [ 661.013721][T24474] gretap0: entered promiscuous mode [ 661.027948][T24474] gretap0: left promiscuous mode [ 661.301552][T24486] Cannot find add_set index 46338 as target [ 661.351902][T24496] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 661.388027][T24487] 0·: renamed from hsr0 [ 661.417804][T24487] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.454014][T24487] 0·: entered allmulticast mode [ 661.474645][T24487] hsr_slave_0: entered allmulticast mode [ 661.506578][T24487] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 661.589667][T24505] netlink: 'syz.3.5120': attribute type 1 has an invalid length. [ 661.725727][T24515] ipt_REJECT: ECHOREPLY no longer supported. [ 661.812946][T24515] nbd2: detected capacity change from 0 to 63 [ 661.886407][T20490] block nbd2: Receive control failed (result -104) [ 661.998833][T24527] tipc: Enabling of bearer rejected, failed to enable media [ 662.295497][T24548] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 662.351736][T24552] syzkaller0: entered promiscuous mode [ 662.367448][T24552] syzkaller0: entered allmulticast mode [ 662.428567][T24550] bond3: entered promiscuous mode [ 662.434861][T24550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.534599][T24550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.553171][T24550] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 662.579585][T24550] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 662.636555][T24550] bond3: (slave vti0): making interface the new active one [ 662.647688][T24550] vti0: entered promiscuous mode [ 662.660152][T24550] vti0: left promiscuous mode [ 663.407031][T24597] __nla_validate_parse: 18 callbacks suppressed [ 663.407053][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5147'. [ 663.538174][T24606] validate_nla: 1 callbacks suppressed [ 663.538196][T24606] netlink: 'syz.1.5150': attribute type 1 has an invalid length. [ 663.752160][T24623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 663.767155][T24611] 8021q: adding VLAN 0 to HW filter on device bond9 [ 663.793992][T24611] bond8: (slave bond9): making interface the new active one [ 663.825805][T24611] bond8: (slave bond9): Enslaving as an active interface with an up link [ 663.857161][T24606] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 663.911368][T24623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.389187][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 664.417667][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5159'. [ 664.440573][T24656] netlink: 'syz.3.5159': attribute type 14 has an invalid length. [ 664.459167][T24656] netlink: 'syz.3.5159': attribute type 13 has an invalid length. [ 664.483135][T24661] netlink: 'syz.1.5163': attribute type 10 has an invalid length. [ 664.636304][T24655] syzkaller1: entered promiscuous mode [ 664.660715][T24655] syzkaller1: entered allmulticast mode [ 664.676069][T24661] bond0: (slave dummy0): Releasing backup interface [ 664.743907][T24661] team0: Port device dummy0 added [ 665.544999][T24706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.624203][T24719] xt_hashlimit: invalid interval [ 665.658735][T24711] xt_hashlimit: invalid interval [ 665.969497][T24738] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 666.292852][T24757] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5184'. [ 666.599906][T24724] nbd3: detected capacity change from 0 to 63 [ 666.684490][T24767] netlink: 'syz.3.5188': attribute type 11 has an invalid length. [ 666.752732][T20490] block nbd3: Receive control failed (result -104) [ 666.760756][ T4944] block nbd3: Receive control failed (result -32) [ 667.006594][T24757] vxcan1 speed is unknown, defaulting to 1000 [ 667.142916][T24789] x_tables: unsorted underflow at hook 2 [ 667.535829][T24757] xfrm0 speed is unknown, defaulting to 1000 [ 667.886104][T24825] netlink: 340 bytes leftover after parsing attributes in process `syz.1.5202'. [ 667.931277][T24824] netlink: 'syz.2.5203': attribute type 24 has an invalid length. [ 667.972627][T24757] lo speed is unknown, defaulting to 1000 [ 668.032966][T24829] macsec0: entered promiscuous mode [ 668.049703][T24829] macsec0: entered allmulticast mode [ 668.083437][T24830] macsec0: left promiscuous mode [ 668.101386][T24830] macsec0: left allmulticast mode [ 668.530131][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5212'. [ 668.583556][T24849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5212'. [ 668.806420][T24863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5214'. [ 668.838721][T24863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5214'. [ 668.851250][T24867] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5216'. [ 668.947846][T24876] netlink: 'syz.4.5217': attribute type 13 has an invalid length. [ 669.081538][ T5766] xfrm0 speed is unknown, defaulting to 1000 [ 669.495145][T24894] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.5222'. [ 669.976123][T24916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5227'. [ 671.031496][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 671.322450][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'. [ 672.398314][T25021] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 672.418421][T25023] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5254'. [ 672.457912][T25023] nbd: illegal input index 65508 [ 673.186291][T25062] netlink: 'syz.1.5262': attribute type 4 has an invalid length. [ 673.272948][T25069] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 673.381741][T25078] bond11: (slave gretap1): making interface the new active one [ 673.392399][T25078] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 673.413788][T25087] netlink: 'syz.3.5267': attribute type 1 has an invalid length. [ 673.643717][T25087] bond6: entered promiscuous mode [ 673.653510][T25087] 8021q: adding VLAN 0 to HW filter on device bond6 [ 673.678692][T25088] macvlan2: entered promiscuous mode [ 673.685049][T25088] macvlan2: entered allmulticast mode [ 673.774847][T25101] __nla_validate_parse: 7 callbacks suppressed [ 673.774867][T25101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5270'. [ 673.823591][T25103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5271'. [ 673.866755][T25101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5270'. [ 673.912396][T25101] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5270'. [ 674.185731][T25117] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 674.212969][T25117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5275'. [ 674.241741][T25123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5278'. [ 674.277690][T25123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.725266][T25146] netlink: 'syz.3.5287': attribute type 2 has an invalid length. [ 674.733544][T25146] netlink: 'syz.3.5287': attribute type 8 has an invalid length. [ 674.742081][T25146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5287'. [ 674.751759][T25147] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5286'. [ 674.833199][T25146] netlink: 'syz.3.5287': attribute type 2 has an invalid length. [ 674.858000][T25146] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5287'. [ 675.071125][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5290'. [ 675.127375][T25161] veth0: entered promiscuous mode [ 675.211708][T25161] veth0: left promiscuous mode [ 675.412860][T25181] lo: Caught tx_queue_len zero misconfig [ 675.782735][T25198] netlink: 'syz.2.5300': attribute type 1 has an invalid length. [ 675.820669][T25198] 8021q: adding VLAN 0 to HW filter on device bond12 [ 676.177416][T25213] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 676.202702][T25219] xt_NFQUEUE: number of total queues is 0 [ 676.554429][T25238] pimreg: entered allmulticast mode [ 676.843797][T25258] netlink: 'syz.5.5319': attribute type 1 has an invalid length. [ 676.970261][T25258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.014728][T25265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.024366][T25265] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 677.056597][T25265] bond4: (slave gre1): Error -95 calling set_mac_address [ 677.264260][T25261] syzkaller0: entered promiscuous mode [ 677.295664][T25261] syzkaller0: entered allmulticast mode [ 678.000132][T25324] tipc: Enabling of bearer rejected, failed to enable media [ 678.024373][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.033393][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.040237][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.047124][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.053985][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.060959][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.067758][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.074679][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.081530][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.088366][T25326] tc action pedit offset must be on 32 bit boundaries [ 678.095250][T25326] 0: reclassify loop, rule prio 0, protocol 800 [ 678.577162][T25356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 678.683695][T25371] syzkaller0: entered promiscuous mode [ 678.696086][T25371] syzkaller0: entered allmulticast mode [ 678.871327][T25371] IPv6: NLM_F_REPLACE set, but no existing node found! [ 678.911315][T25384] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 678.912628][T25371] __nla_validate_parse: 8 callbacks suppressed [ 678.912673][T25371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5347'. [ 679.343709][T25404] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 679.380265][T25413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5360'. [ 679.393495][T25404] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 679.516812][T25422] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5362'. [ 679.591246][T25426] FAULT_INJECTION: forcing a failure. [ 679.591246][T25426] name failslab, interval 1, probability 0, space 0, times 0 [ 679.604120][T25426] CPU: 0 UID: 0 PID: 25426 Comm: syz.4.5363 Not tainted syzkaller #0 PREEMPT(full) [ 679.604163][T25426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.604183][T25426] Call Trace: [ 679.604192][T25426] [ 679.604201][T25426] dump_stack_lvl+0xe8/0x150 [ 679.604238][T25426] should_fail_ex+0x40c/0x560 [ 679.604277][T25426] should_failslab+0xa8/0x100 [ 679.604305][T25426] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 679.604332][T25426] ? pfn_valid+0x125/0x4c0 [ 679.604361][T25426] ? pfn_valid+0x125/0x4c0 [ 679.604387][T25426] ? pfn_valid+0x125/0x4c0 [ 679.604417][T25426] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 679.604457][T25426] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 679.604495][T25426] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 679.604522][T25426] ? 0xffffffffa0205480 [ 679.604595][T25426] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 679.604630][T25426] ? _copy_from_user+0x94/0xb0 [ 679.604655][T25426] ? bpf_test_init+0x113/0x150 [ 679.604676][T25426] ? xdp_convert_md_to_buff+0x5b/0x330 [ 679.604714][T25426] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 679.604758][T25426] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 679.604790][T25426] ? __fget_files+0x2a/0x420 [ 679.604819][T25426] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 679.604846][T25426] bpf_prog_test_run+0x2c5/0x340 [ 679.604877][T25426] __sys_bpf+0xa22/0xd90 [ 679.604908][T25426] ? __pfx___sys_bpf+0x10/0x10 [ 679.604942][T25426] ? __fget_files+0x2a/0x420 [ 679.604983][T25426] ? ksys_write+0x242/0x270 [ 679.605012][T25426] ? __pfx_ksys_write+0x10/0x10 [ 679.605044][T25426] __x64_sys_bpf+0xba/0xd0 [ 679.605076][T25426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.605101][T25426] do_syscall_64+0x174/0x580 [ 679.605123][T25426] ? trace_irq_disable+0x3b/0x140 [ 679.605143][T25426] ? clear_bhb_loop+0x40/0x90 [ 679.605170][T25426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.605192][T25426] RIP: 0033:0x7fd58899ce59 [ 679.605212][T25426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.605231][T25426] RSP: 002b:00007fd5898a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.605254][T25426] RAX: ffffffffffffffda RBX: 00007fd588c15fa0 RCX: 00007fd58899ce59 [ 679.605269][T25426] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 679.605283][T25426] RBP: 00007fd5898a9090 R08: 0000000000000000 R09: 0000000000000000 [ 679.605296][T25426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.605309][T25426] R13: 00007fd588c16038 R14: 00007fd588c15fa0 R15: 00007ffe8fdbb8a8 [ 679.605344][T25426] [ 680.006931][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'. [ 680.298770][T15440] IPVS: starting estimator thread 0... [ 680.392010][T25447] IPVS: using max 28 ests per chain, 67200 per kthread [ 680.417401][T25453] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5371'. [ 680.522320][T25459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5372'. [ 683.497982][T25476] veth0: entered promiscuous mode [ 683.514919][T25474] veth0: left promiscuous mode [ 683.555129][T25484] syzkaller1: entered promiscuous mode [ 683.569754][T25484] syzkaller1: entered allmulticast mode [ 683.726156][T25491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5382'. [ 683.802611][T25491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5382'. [ 683.822346][T25500] netlink: 'syz.2.5381': attribute type 4 has an invalid length. [ 683.826535][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5382'. [ 683.839383][T25496] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5384'. [ 683.859919][T25496] syzkaller0: entered promiscuous mode [ 683.870475][T25496] syzkaller0: entered allmulticast mode [ 684.284786][T25523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5389'. [ 684.556706][T25535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5391'. [ 684.601386][T25537] netlink: 'syz.2.5393': attribute type 21 has an invalid length. [ 684.619998][T25537] netlink: 'syz.2.5393': attribute type 22 has an invalid length. [ 684.657094][T25537] netlink: 'syz.2.5393': attribute type 23 has an invalid length. [ 684.685714][T25537] netlink: 'syz.2.5393': attribute type 25 has an invalid length. [ 684.729834][T25537] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5393'. [ 684.933020][T25553] netlink: 'syz.5.5398': attribute type 2 has an invalid length. [ 685.386156][ T35] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.409953][ T35] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.464356][ T35] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.769488][T25571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.066849][T25599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.109749][T25602] netlink: 'syz.4.5411': attribute type 15 has an invalid length. [ 686.244933][T25571] bond0: (slave netdevsim1): Releasing backup interface [ 687.268801][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5423'. [ 687.315256][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5423'. [ 687.479506][T25655] netlink: 'syz.5.5425': attribute type 13 has an invalid length. [ 687.518584][T25656] xt_hashlimit: size too large, truncated to 1048576 [ 687.817184][T25668] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 687.892866][T25668] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#­¦ûËŒ [ 687.892866][T25668] d]WÊ”+NC”m­÷Y<ƒ­9Åê [ 688.748750][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5442'. [ 688.960010][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5445'. [ 689.210148][T25739] erspan0: entered allmulticast mode [ 689.860946][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5466'. [ 689.940678][T25783] lo: Caught tx_queue_len zero misconfig [ 690.029721][T25790] syzkaller0: entered promiscuous mode [ 690.035613][T25790] syzkaller0: entered allmulticast mode [ 690.053336][T25790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5467'. [ 690.363272][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5473'. [ 690.376939][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5474'. [ 690.392598][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5474'. [ 690.473251][T25814] netlink: 'syz.3.5475': attribute type 18 has an invalid length. [ 690.493914][ T3334] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.504713][T25814] netlink: 'syz.3.5475': attribute type 18 has an invalid length. [ 690.513092][ T3334] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.532100][ T3334] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.561854][ T3334] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.608572][T25816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5476'. [ 690.703461][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5479'. [ 691.175098][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5483'. [ 691.197011][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5488'. [ 691.307441][T25867] tunl0: entered promiscuous mode [ 691.313232][T25867] gre0: entered promiscuous mode [ 691.318899][T25867] gretap0: entered promiscuous mode [ 691.325893][T25867] erspan0: entered promiscuous mode [ 691.336045][T25867] ip_vti0: entered promiscuous mode [ 691.358103][ T29] audit: type=1804 audit(1782505513.511:12): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5492" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2390 res=1 errno=0 [ 691.399265][ T29] audit: type=1800 audit(1782505513.511:13): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5492" name="cgroup.controllers" dev="tmpfs" ino=2390 res=0 errno=0 [ 691.424333][T25874] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5491'. [ 691.497587][T25879] netlink: 'syz.4.5493': attribute type 10 has an invalid length. [ 691.508325][T25874] bond7 (unregistering): Released all slaves [ 692.305447][ T1616] block nbd2: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 30 seconds [ 692.318004][ T1616] block nbd2: Possible stuck request ffff888026ef5240: control (read@1024,1024B). Runtime 30 seconds [ 692.331416][ T1616] block nbd2: Possible stuck request ffff888026ef5400: control (read@2048,1024B). Runtime 30 seconds [ 692.344084][ T1616] block nbd2: Possible stuck request ffff888026ef55c0: control (read@3072,1024B). Runtime 30 seconds [ 693.944003][T25843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.107300][ T29] audit: type=1804 audit(1782505516.261:14): pid=25893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5497" name="/newroot/469/cgroup.controllers" dev="tmpfs" ino=2407 res=1 errno=0 [ 694.178151][ T29] audit: type=1800 audit(1782505516.261:15): pid=25893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5497" name="cgroup.controllers" dev="tmpfs" ino=2407 res=0 errno=0 [ 694.916552][T25941] netlink: 'syz.4.5512': attribute type 1 has an invalid length. [ 694.967829][ T3284] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 695.042634][T25941] 8021q: adding VLAN 0 to HW filter on device bond14 [ 695.603686][T25972] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 696.781914][ T1616] block nbd3: Connection timed out, retrying (0/2 alive) [ 696.792319][ T1616] block nbd3: Connection timed out, retrying (0/2 alive) [ 696.799497][ T1616] block nbd3: Connection timed out, retrying (0/2 alive) [ 696.807202][ T1616] block nbd3: Connection timed out, retrying (0/2 alive) [ 696.815083][ T25] block nbd3: Dead connection, failed to find a fallback [ 696.831785][ T25] block nbd3: shutting down sockets [ 696.838295][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.850912][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 696.858907][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.868477][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 696.876871][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.886074][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 696.893987][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.903602][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 696.915635][ T1616] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 696.928226][ T1616] Buffer I/O error on dev nbd3, logical block 0, async page read [ 696.936608][ T1616] Buffer I/O error on dev nbd3, logical block 1, async page read [ 696.944723][ T1616] Buffer I/O error on dev nbd3, logical block 2, async page read [ 696.952640][ T1616] Buffer I/O error on dev nbd3, logical block 3, async page read [ 696.966008][ T1616] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.969278][ T1645] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.975723][ T1616] Buffer I/O error on dev nbd3, logical block 0, async page read [ 696.976263][ T1616] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 697.000208][ T1645] Buffer I/O error on dev nbd3, logical block 1, async page read [ 697.012804][ T1616] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 697.023634][ T1616] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.035855][T21168] ldm_validate_partition_table(): Disk read failed. [ 697.044827][T21168] Dev nbd3: unable to read RDB block 0 [ 697.053586][T21168] nbd3: unable to read partition table [ 697.075999][T21168] ldm_validate_partition_table(): Disk read failed. [ 697.093251][T21168] Dev nbd3: unable to read RDB block 0 [ 697.104452][T21168] nbd3: unable to read partition table [ 697.691884][T25933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.704711][T25978] netlink: 'syz.5.5522': attribute type 11 has an invalid length. [ 697.733664][T25978] netlink: 'syz.5.5522': attribute type 11 has an invalid length. [ 697.755426][T25978] __nla_validate_parse: 3 callbacks suppressed [ 697.755446][T25978] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5522'. [ 697.858904][T25987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'. [ 698.062759][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'. [ 698.104869][T26002] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 698.176990][T26005] netlink: 'syz.3.5530': attribute type 29 has an invalid length. [ 698.185734][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5530'. [ 698.330089][T26012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5533'. [ 698.435245][T26021] netlink: 'syz.5.5537': attribute type 1 has an invalid length. [ 698.493757][T26021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.568955][T26021] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 698.692666][T26037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5540'. [ 699.243981][T26067] IPv6: NLM_F_REPLACE set, but no existing node found! [ 699.363370][T20490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.378289][T20490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.387759][T20490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.399664][T20490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.409409][T20490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 699.541705][T26082] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.876398][T26102] geneve3: entered promiscuous mode [ 699.887074][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 53200 - 0 [ 699.926721][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5562'. [ 699.943211][T26102] veth1: Caught tx_queue_len zero misconfig [ 699.964726][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 53200 - 0 [ 699.993248][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 53200 - 0 [ 700.021818][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 53200 - 0 [ 700.076349][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5563'. [ 700.364326][T26123] netlink: 'syz.3.5567': attribute type 10 has an invalid length. [ 700.464669][T26128] IPv6: sit2: Disabled Multicast RS [ 700.589167][T26130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5569'. [ 700.688638][T26139] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5570'. [ 701.045428][T26073] vxcan1 speed is unknown, defaulting to 1000 [ 701.205410][T26162] C: renamed from lo [ 701.409502][T26162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 701.505750][T20490] Bluetooth: hci6: command tx timeout [ 701.558758][T26073] xfrm0 speed is unknown, defaulting to 1000 [ 702.013553][T26073] lo speed is unknown, defaulting to 1000 [ 702.423548][T26208] netlink: 'syz.2.5595': attribute type 1 has an invalid length. [ 702.891525][T26212] bond13: (slave geneve4): making interface the new active one [ 702.901472][T26212] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 702.934624][T26215] 8021q: adding VLAN 0 to HW filter on device bond13 [ 702.973018][ T3284] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 702.983008][ T3284] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 703.012497][ T3284] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 703.045258][ T3284] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 703.565736][T26255] __nla_validate_parse: 13 callbacks suppressed [ 703.565757][T26255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5606'. [ 703.582472][T20490] Bluetooth: hci6: command tx timeout [ 705.671103][T20490] Bluetooth: hci6: command tx timeout [ 706.211091][T26263] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 706.230593][T26263] syzkaller1: Refused to change device type [ 706.262312][T26274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5610'. [ 706.725140][T26301] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5615'. [ 706.761057][T26301] nbd: illegal input index 65508 [ 706.790744][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5615'. [ 706.949684][T26073] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.957766][T26073] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.967255][T26073] bridge_slave_0: entered allmulticast mode [ 706.975584][T26073] bridge_slave_0: entered promiscuous mode [ 706.985636][T26073] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.993045][T26073] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.000582][T26073] bridge_slave_1: entered allmulticast mode [ 707.012281][T26073] bridge_slave_1: entered promiscuous mode [ 707.077466][T26073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.091716][T26073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.156358][T26073] team0: Port device team_slave_0 added [ 707.174123][T26073] team0: Port device team_slave_1 added [ 707.253740][T26073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.261380][T26073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.288805][T26073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.333292][T26073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.354519][T26073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.402191][T26073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.537409][T26073] hsr_slave_0: entered promiscuous mode [ 707.552128][T26073] hsr_slave_1: entered promiscuous mode [ 707.559818][T26073] debugfs: 'hsr0' already exists in 'hsr' [ 707.566888][T26073] Cannot create hsr debugfs directory [ 707.696340][T26336] 8021q: VLANs not supported on ip_vti0 [ 707.740916][T20490] Bluetooth: hci6: command tx timeout [ 707.874746][T26342] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 708.079197][T26073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 708.091832][T26073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.101903][T26073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 708.123508][T26073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.145333][T26073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 708.173477][T26073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.182064][T26073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 708.199165][T26073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.318924][T26073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.353328][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5634'. [ 708.368633][T26073] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.395345][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.402686][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.427810][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.435147][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.848742][T26389] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5638'. [ 708.903562][T26389] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5638'. [ 709.062981][T26398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5640'. [ 709.075847][T26397] geneve2: entered promiscuous mode [ 709.084966][ T35] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 34412 - 0 [ 709.094227][ T35] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 34412 - 0 [ 709.128146][ T35] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 34412 - 0 [ 709.137929][ T35] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 34412 - 0 [ 709.390129][T26073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.715075][T26073] veth0_vlan: entered promiscuous mode [ 709.729882][T26073] veth1_vlan: entered promiscuous mode [ 709.775189][T26073] veth0_macvtap: entered promiscuous mode [ 709.788362][T26073] veth1_macvtap: entered promiscuous mode [ 709.809502][T26073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.827483][T26073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.844789][ T3334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.853904][ T3334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.865225][ T3334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.875300][ T3334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.311443][T26364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.494016][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.536968][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.575716][T26437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5647'. [ 711.597839][T26440] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 711.623339][T26440] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 711.651042][T26440] gretap2: entered promiscuous mode [ 711.661791][T26440] gretap2: entered allmulticast mode [ 711.722487][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.735641][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.892544][T26456] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 711.904946][T26458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5652'. [ 711.917878][T26456] netlink: 'syz.3.5653': attribute type 1 has an invalid length. [ 711.934827][T26457] netlink: 'syz.4.5654': attribute type 11 has an invalid length. [ 712.037839][T26461] netlink: 'syz.6.5548': attribute type 9 has an invalid length. [ 712.336527][T26466] bond7: option lp_interval: invalid value (0) [ 712.358135][T26466] bond7: option lp_interval: allowed values 1 - 2147483647 [ 712.385407][ T4944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 712.402279][ T4944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 712.417684][ T4944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 712.441202][ T4944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 712.455490][ T4944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 712.682540][T26466] bond7 (unregistering): Released all slaves [ 713.050688][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5661'. [ 713.219418][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5664'. [ 713.449392][T26518] syzkaller1: entered promiscuous mode [ 713.506774][T26518] syzkaller1: entered allmulticast mode [ 713.598918][T15670] syz_tun (unregistering): left allmulticast mode [ 713.808022][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5671'. [ 714.358668][T26564] sock: sock_set_timeout: `syz.5.5679' (pid 26564) tries to set negative timeout [ 714.534995][T26479] vxcan1 speed is unknown, defaulting to 1000 [ 714.541948][T20490] Bluetooth: hci7: command tx timeout [ 715.003826][T26591] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5687'. [ 715.139148][T26479] xfrm0 speed is unknown, defaulting to 1000 [ 715.324994][T26604] tc_dump_action: action bad kind [ 715.435877][T26606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5693'. [ 715.510169][T26608] netlink: 'syz.6.5694': attribute type 1 has an invalid length. [ 715.691087][T26615] bond16: option resend_igmp: invalid value (32767) [ 715.711828][T26615] bond16: option resend_igmp: allowed values 0 - 255 [ 715.753009][T26615] bond16 (unregistering): Released all slaves [ 715.799074][T26613] ip6tnl0: Caught tx_queue_len zero misconfig [ 715.836748][T26621] netlink: 'syz.6.5698': attribute type 4 has an invalid length. [ 715.845331][T26479] lo speed is unknown, defaulting to 1000 [ 716.094210][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5699'. [ 716.319048][T26642] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5703'. [ 716.632691][T20490] Bluetooth: hci7: command tx timeout [ 716.913962][T26656] syzkaller0: entered promiscuous mode [ 716.919719][T26656] syzkaller0: entered allmulticast mode [ 717.485632][T26479] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.493739][T26479] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.501341][T26479] bridge_slave_0: entered allmulticast mode [ 717.509640][T26479] bridge_slave_0: entered promiscuous mode [ 717.519543][T26479] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.526995][T26479] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.550675][T26479] bridge_slave_1: entered allmulticast mode [ 717.576200][T26479] bridge_slave_1: entered promiscuous mode [ 717.725069][T26479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.774219][T26479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.785744][T26701] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5716'. [ 717.932523][T26479] team0: Port device team_slave_0 added [ 717.963893][T26479] team0: Port device team_slave_1 added [ 718.108199][T26479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.129144][T26479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.201052][T26479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.240078][T26710] vlan2: entered allmulticast mode [ 718.260615][T26710] bond0: entered allmulticast mode [ 718.276879][T26710] bond_slave_0: entered allmulticast mode [ 718.295042][T26710] bond_slave_1: entered allmulticast mode [ 718.307859][T26479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.316656][T26479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.351119][T26479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.574403][T26479] hsr_slave_0: entered promiscuous mode [ 718.595091][T26479] hsr_slave_1: entered promiscuous mode [ 718.620979][T26479] debugfs: 'hsr0' already exists in 'hsr' [ 718.644417][T26479] Cannot create hsr debugfs directory [ 718.703204][ T4944] Bluetooth: hci7: command tx timeout [ 718.944163][T26744] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5730'. [ 719.097076][T26749] sctp: [Deprecated]: syz.6.5732 (pid 26749) Use of int in maxseg socket option. [ 719.097076][T26749] Use struct sctp_assoc_value instead [ 719.778415][T26777] pimreg3: entered allmulticast mode [ 719.949523][T26479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.990192][T26479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.026589][T26479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.068605][T26786] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5737'. [ 720.320920][T26479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.351867][T26801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5742'. [ 720.369254][T26479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.386207][T26802] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5743'. [ 720.417990][T26479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.467257][T26807] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 720.490160][T26801] tipc: Invalid UDP bearer configuration [ 720.490749][T26801] tipc: Enabling of bearer rejected, failed to enable media [ 720.513222][T26806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5745'. [ 720.776221][T26479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.792264][ T4944] Bluetooth: hci7: command tx timeout [ 720.803758][T26479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.817198][T26479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.873266][T26823] netlink: 'syz.4.5750': attribute type 2 has an invalid length. [ 721.049697][T26479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.067209][T26835] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5754'. [ 721.080759][T26479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.101915][T26479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 721.126464][T26835] netlink: 'syz.6.5754': attribute type 21 has an invalid length. [ 721.143585][T26835] IPv6: NLM_F_CREATE should be specified when creating new route [ 721.164430][T26831] h: entered promiscuous mode [ 721.342253][T26843] netlink: 'syz.4.5756': attribute type 26 has an invalid length. [ 721.353268][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5756'. [ 721.365043][T26843] netlink: 'syz.4.5756': attribute type 26 has an invalid length. [ 721.388033][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5756'. [ 721.672430][T26479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 721.687466][T26479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.697019][T26479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 721.709431][T26479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.718439][T26479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 721.732852][T26479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.746729][T26479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 721.805358][T26479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.949100][T26871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5761'. [ 721.987256][T26871] 0ªî{X¹¦: renamed from gretap0 [ 721.999896][T26871] 0ªî{X¹¦: left promiscuous mode [ 722.008985][T26871] 0ªî{X¹¦: entered allmulticast mode [ 722.030821][T26871] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 722.075614][T26882] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5764'. [ 722.135330][T26479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.192503][T26479] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.239510][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.246778][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.301400][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.308617][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.384557][ T1616] block nbd2: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 60 seconds [ 722.396331][ T1616] block nbd2: Possible stuck request ffff888026ef5240: control (read@1024,1024B). Runtime 60 seconds [ 722.408380][ T1616] block nbd2: Possible stuck request ffff888026ef5400: control (read@2048,1024B). Runtime 60 seconds [ 722.421077][ T1616] block nbd2: Possible stuck request ffff888026ef55c0: control (read@3072,1024B). Runtime 60 seconds [ 722.519988][T26897] sctp: [Deprecated]: syz.5.5768 (pid 26897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 722.519988][T26897] Use struct sctp_sack_info instead [ 722.604882][T26903] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 722.622449][T26903] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5771'. [ 722.705302][T26911] Cannot find add_set index 0 as target [ 722.829824][T26917] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 722.869959][T26917] bond0: Caught tx_queue_len zero misconfig [ 723.276992][T26940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.465037][T26479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.625419][T26479] veth0_vlan: entered promiscuous mode [ 723.769291][T26479] veth1_vlan: entered promiscuous mode [ 723.897084][T26479] veth0_macvtap: entered promiscuous mode [ 723.954211][T26479] veth1_macvtap: entered promiscuous mode [ 724.082060][T26479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.138427][T26479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.221018][ T3284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.253612][ T3284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.312552][ T3284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.339278][ T3284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.442552][T26972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.637291][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.654504][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.708159][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.719346][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.921431][T27006] xt_hashlimit: size too large, truncated to 1048576 [ 725.582745][T27038] __nla_validate_parse: 8 callbacks suppressed [ 725.582768][T27038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5808'. [ 725.995116][T27053] vxcan1: entered promiscuous mode [ 726.001085][T27053] vxcan1: entered allmulticast mode [ 726.530016][T27083] x_tables: unsorted underflow at hook 2 [ 726.606121][T27051] vxcan1 speed is unknown, defaulting to 1000 [ 726.855857][T27096] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5824'. [ 726.898843][T27098] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5824'. [ 727.077422][T27100] syzkaller0: entered promiscuous mode [ 727.085706][T27100] syzkaller0: entered allmulticast mode [ 730.048930][T27051] xfrm0 speed is unknown, defaulting to 1000 [ 730.131486][ T4994] udevd[4994]: worker [21680] /devices/virtual/block/nbd2 is taking a long time [ 730.283720][T27108] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.333621][T27133] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5833'. [ 730.502710][T27108] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.557213][T27051] lo speed is unknown, defaulting to 1000 [ 730.578256][T27141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 730.788720][T27108] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.215757][T27108] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.402709][T27171] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5845'. [ 731.740085][T27178] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 731.954114][T27193] vlan2: entered allmulticast mode [ 731.959519][T27193] bond0: entered allmulticast mode [ 731.968623][T27193] bond_slave_0: entered allmulticast mode [ 731.981269][T27193] bond_slave_1: entered allmulticast mode [ 731.987734][T27195] C: entered allmulticast mode [ 732.011038][T27195] C: left allmulticast mode [ 732.326499][T27212] netlink: 'syz.3.5852': attribute type 11 has an invalid length. [ 732.595505][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5855'. [ 732.699712][T27220] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 733.129311][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5861'. [ 733.244906][T27239] bond1: option xmit_hash_policy: invalid value (64) [ 733.261788][T27239] bond1 (unregistering): Released all slaves [ 733.951268][T27270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5870'. [ 733.998141][T27268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.059102][T27268] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 734.515588][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5876'. [ 734.558826][T27295] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5876'. [ 734.576180][T27285] xt_CT: No such helper "snmp" [ 734.582081][T27295] netlink: 'syz.3.5876': attribute type 5 has an invalid length. [ 734.691714][T27303] netlink: 'syz.5.5878': attribute type 10 has an invalid length. [ 734.843184][T27313] vlan3: entered allmulticast mode [ 734.857006][T27313] bond0: entered allmulticast mode [ 734.867100][T27313] bond_slave_0: entered allmulticast mode [ 734.988798][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5883'. [ 735.257876][T27328] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 735.273724][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 735.351332][T27328] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 735.369755][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 735.491136][T27344] netlink: 'syz.6.5889': attribute type 1 has an invalid length. [ 735.519395][T27343] netlink: 'syz.6.5889': attribute type 1 has an invalid length. [ 735.538734][T27328] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 735.554200][T27348] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5891'. [ 735.715784][T27328] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 735.898164][T27328] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 736.630207][T27413] __nla_validate_parse: 4 callbacks suppressed [ 736.630229][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5911'. [ 736.918520][T27414] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 736.936393][T27420] macvlan2: entered promiscuous mode [ 736.942911][T27420] macvlan2: entered allmulticast mode [ 736.952689][T27420] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 737.026517][T27430] netlink: 'syz.5.5915': attribute type 1 has an invalid length. [ 737.138583][T27432] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 737.223034][T27438] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5920'. [ 737.514545][T27452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.287703][T27494] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5933'. [ 738.318413][T27497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5938'. [ 738.343249][T27497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5938'. [ 738.372343][T27497] pimreg3: entered allmulticast mode [ 738.496912][T27505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.003444][T27544] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5950'. [ 739.053229][T27545] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5950'. [ 739.108866][T27544] vlan2: entered allmulticast mode [ 739.123989][T27544] gretap0: entered allmulticast mode [ 739.486027][T27567] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5956'. [ 739.534206][T27566] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5956'. [ 740.084700][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5965'. [ 740.162803][T20490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.197241][T20490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.209561][T20490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.224161][T20490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.234908][T20490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.684057][T27620] validate_nla: 1 callbacks suppressed [ 740.684094][T27620] netlink: 'syz.2.5969': attribute type 1 has an invalid length. [ 740.732308][T27620] netlink: 'syz.2.5969': attribute type 1 has an invalid length. [ 741.570261][T27662] openvswitch: netlink: Actions may not be safe on all matching packets [ 741.945613][T27671] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 742.065646][T27609] vxcan1 speed is unknown, defaulting to 1000 [ 742.301738][T20490] Bluetooth: hci5: command tx timeout [ 742.367515][T27675] __nla_validate_parse: 2 callbacks suppressed [ 742.367539][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5983'. [ 742.608308][T27695] netlink: 15 bytes leftover after parsing attributes in process `syz.5.5987'. [ 742.610097][T27694] netlink: 15 bytes leftover after parsing attributes in process `syz.5.5987'. [ 742.853094][T27708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 742.877515][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5990'. [ 742.879107][T27609] xfrm0 speed is unknown, defaulting to 1000 [ 742.922804][T27708] netlink: 'syz.2.5990': attribute type 12 has an invalid length. [ 742.938423][T27703] veth0: entered promiscuous mode [ 742.955902][T27708] netlink: 'syz.2.5990': attribute type 11 has an invalid length. [ 743.582184][T27699] veth0: left promiscuous mode [ 743.794073][T27609] lo speed is unknown, defaulting to 1000 [ 743.989914][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6000'. [ 744.240034][T27770] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 744.287958][T27770] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 744.315910][T27770] gretap1: entered promiscuous mode [ 744.322400][T27770] gretap1: entered allmulticast mode [ 744.381280][T20490] Bluetooth: hci5: command tx timeout [ 744.391825][T27786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.439807][T27776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.532106][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6008'. [ 744.567185][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6008'. [ 744.634123][T27797] netlink: 'syz.5.6008': attribute type 13 has an invalid length. [ 744.654380][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6008'. [ 744.684987][T27797] netlink: 'syz.5.6008': attribute type 58 has an invalid length. [ 744.724205][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6008'. [ 744.761812][T27797] netlink: 'syz.5.6008': attribute type 13 has an invalid length. [ 744.775448][T27797] netlink: 'syz.5.6008': attribute type 58 has an invalid length. [ 744.837674][T27797] netlink: 'syz.5.6008': attribute type 13 has an invalid length. [ 744.869785][T27797] netlink: 'syz.5.6008': attribute type 58 has an invalid length. [ 745.436393][T27829] syzkaller0: entered promiscuous mode [ 745.442638][T27829] syzkaller0: entered allmulticast mode [ 746.466303][T20490] Bluetooth: hci5: command tx timeout [ 748.551305][T20490] Bluetooth: hci5: command tx timeout [ 748.990061][T27877] __nla_validate_parse: 97 callbacks suppressed [ 748.990107][T27877] netlink: 632 bytes leftover after parsing attributes in process `syz.5.6029'. [ 749.010083][T27609] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.046809][T27609] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.069080][T27609] bridge_slave_0: entered allmulticast mode [ 749.081315][T27609] bridge_slave_0: entered promiscuous mode [ 749.089850][T27874] tipc: Started in network mode [ 749.104097][T27874] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 749.127782][T27874] tipc: Enabling of bearer rejected, failed to enable media [ 749.138484][ T29] audit: type=1804 audit(1782505571.291:16): pid=27883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6030" name="/newroot/594/cgroup.controllers" dev="tmpfs" ino=3041 res=1 errno=0 [ 749.168773][T27609] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.186850][T27609] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.202434][ T29] audit: type=1800 audit(1782505571.291:17): pid=27883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6030" name="cgroup.controllers" dev="tmpfs" ino=3041 res=0 errno=0 [ 749.225313][T27609] bridge_slave_1: entered allmulticast mode [ 749.240425][T27609] bridge_slave_1: entered promiscuous mode [ 749.399638][T27609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.448243][T27609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.593371][T27609] team0: Port device team_slave_0 added [ 749.617693][T27609] team0: Port device team_slave_1 added [ 749.739701][T27609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.762891][T27609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.850138][T27609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.962714][T27902] syzkaller0: entered promiscuous mode [ 749.969021][T27902] syzkaller0: entered allmulticast mode [ 749.979586][T27609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.992066][T27609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.021438][T27609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.238950][T27922] openvswitch: netlink: Key type 153 is out of range max 32 [ 751.073580][T20490] block nbd5: Receive control failed (result -32) [ 752.482741][ T1616] block nbd2: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 90 seconds [ 752.494150][ T1616] block nbd2: Possible stuck request ffff888026ef5240: control (read@1024,1024B). Runtime 90 seconds [ 752.505222][ T1616] block nbd2: Possible stuck request ffff888026ef5400: control (read@2048,1024B). Runtime 90 seconds [ 752.516177][ T1616] block nbd2: Possible stuck request ffff888026ef55c0: control (read@3072,1024B). Runtime 90 seconds [ 753.059821][T27609] hsr_slave_0: entered promiscuous mode [ 753.071489][T27609] hsr_slave_1: entered promiscuous mode [ 753.078571][T27609] debugfs: 'hsr0' already exists in 'hsr' [ 753.086338][T27609] Cannot create hsr debugfs directory [ 753.483864][T27954] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.6052'. [ 753.511171][T27956] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.6052'. [ 753.550766][T27609] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.647678][T27962] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6054'. [ 753.667408][T27962] validate_nla: 60 callbacks suppressed [ 753.667425][T27962] netlink: 'syz.2.6054': attribute type 4 has an invalid length. [ 753.687778][T27609] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.785285][T27609] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.878694][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6056'. [ 753.915327][T27609] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.048287][T27971] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 754.071226][T27971] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6056'. [ 754.413613][T27999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6068'. [ 754.527189][T27998] syzkaller1: entered promiscuous mode [ 754.543257][T27998] syzkaller1: entered allmulticast mode [ 754.728097][T28008] netlink: 'syz.2.6071': attribute type 12 has an invalid length. [ 754.740226][T28008] netlink: 'syz.2.6071': attribute type 29 has an invalid length. [ 754.749181][T28008] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6071'. [ 754.759612][T28008] netlink: 'syz.2.6071': attribute type 1 has an invalid length. [ 754.768425][T28008] netlink: 'syz.2.6071': attribute type 2 has an invalid length. [ 754.781701][T28008] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6071'. [ 754.797185][T27609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 754.838183][T27609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.869806][T27609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 754.896676][T27609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.003504][T27609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 755.052972][T27609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.069402][T27609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 755.092506][T27609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.314335][T27609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.375956][T27609] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.428186][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.435445][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.473983][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.481268][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.567416][T28056] IPVS: sh: FWM 3 0x00000003 - no destination available [ 755.626764][T28046] bond2: entered promiscuous mode [ 756.116793][T28086] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 756.173174][T28086] netlink: 576 bytes leftover after parsing attributes in process `syz.5.6088'. [ 756.999302][T27609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.167963][T28141] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6105'. [ 757.188572][T28142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'. [ 757.201007][T28142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'. [ 757.284194][T27609] veth0_vlan: entered promiscuous mode [ 757.334832][T27609] veth1_vlan: entered promiscuous mode [ 757.369461][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6107'. [ 757.445145][T28154] netlink: 'syz.2.6109': attribute type 21 has an invalid length. [ 757.449684][T28150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6107'. [ 757.570105][T27609] veth0_macvtap: entered promiscuous mode [ 757.616498][T28158] tipc: Started in network mode [ 757.629649][T28158] tipc: Node identity , cluster identity 4711 [ 757.649267][T28158] tipc: Failed to obtain node identity [ 757.657490][T28158] tipc: Enabling of bearer rejected, failed to enable media [ 757.712843][T28156] syzkaller0: entered promiscuous mode [ 757.731580][T28156] syzkaller0: entered allmulticast mode [ 757.756065][T28158] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 757.846089][T27609] veth1_macvtap: entered promiscuous mode [ 757.999412][T27609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.041028][T27609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.092795][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.138867][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.167042][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.180750][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.175442][T28198] __nla_validate_parse: 1 callbacks suppressed [ 761.175465][T28198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6123'. [ 761.217027][T28198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6123'. [ 761.471242][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.499017][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.594900][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.631815][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.764628][T28228] netlink: 'syz.6.6132': attribute type 4 has an invalid length. [ 761.819142][T28230] netlink: 'syz.6.6132': attribute type 4 has an invalid length. [ 761.969167][T28239] pim6reg: entered allmulticast mode [ 761.990094][T28239] pim6reg: left allmulticast mode [ 762.048848][T28244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6137'. [ 762.589651][ T4944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.603879][T28260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6143'. [ 762.619295][ T4944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.632953][ T4944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.645790][ T4944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.654662][ T4944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.767893][T28273] xt_hashlimit: size too large, truncated to 1048576 [ 763.018647][T28280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.025993][T28280] IPv6: NLM_F_CREATE should be set when creating new route [ 763.033313][T28280] IPv6: NLM_F_CREATE should be set when creating new route [ 763.087914][T28284] netlink: 'syz.5.6151': attribute type 4 has an invalid length. [ 763.299338][T28289] netlink: 'syz.2.6152': attribute type 1 has an invalid length. [ 763.322768][T28286] erspan0: entered promiscuous mode [ 763.363289][T28286] vlan2: entered promiscuous mode [ 763.731722][T28310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6157'. [ 764.514164][T28342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6165'. [ 764.611524][T28346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6165'. [ 764.701435][T20490] Bluetooth: hci3: command tx timeout [ 764.734194][T28343] bridge5: entered promiscuous mode [ 764.744385][T28343] bridge5: entered allmulticast mode [ 764.809991][T28346] team0 (unregistering): Port device team_slave_0 removed [ 764.865625][T28346] team0 (unregistering): Port device team_slave_1 removed [ 764.905077][T28266] vxcan1 speed is unknown, defaulting to 1000 [ 764.946511][T28340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.424585][T28266] xfrm0 speed is unknown, defaulting to 1000 [ 765.433883][T28376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6173'. [ 765.459880][T28376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6173'. [ 765.569360][T28381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6174'. [ 765.879389][T28398] netlink: 'syz.3.6180': attribute type 39 has an invalid length. [ 765.986180][T28266] lo speed is unknown, defaulting to 1000 [ 766.028468][T28406] veth0: Caught tx_queue_len zero misconfig [ 766.285681][T28422] __nla_validate_parse: 2 callbacks suppressed [ 766.285703][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6186'. [ 766.319611][T28422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6186'. [ 766.459605][T28438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6189'. [ 766.479853][T28428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6187'. [ 766.780658][T20490] Bluetooth: hci3: command tx timeout [ 767.006283][T28456] x_tables: unsorted entry at hook 2 [ 767.136602][T28462] netlink: 'syz.5.6196': attribute type 4 has an invalid length. [ 767.222848][T28465] tap0: tun_chr_ioctl cmd 1074025672 [ 767.228329][T28465] tap0: ignored: set checksum disabled [ 767.252610][T28466] vlan3: entered allmulticast mode [ 767.257835][T28466] bond0: entered allmulticast mode [ 767.459053][T28476] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 767.656022][T28486] xt_hashlimit: size too large, truncated to 1048576 [ 767.891068][T28266] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.898536][T28266] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.906866][T28266] bridge_slave_0: entered allmulticast mode [ 767.931306][T28266] bridge_slave_0: entered promiscuous mode [ 767.944512][T28496] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6204'. [ 767.956796][T28266] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.976303][T28266] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.997040][T28266] bridge_slave_1: entered allmulticast mode [ 768.028691][T28266] bridge_slave_1: entered promiscuous mode [ 768.166980][T28266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.223700][T28266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.257062][T28511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6208'. [ 768.271263][T28511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6208'. [ 768.374484][T28512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6207'. [ 768.408793][T28266] team0: Port device team_slave_0 added [ 768.430061][T28266] team0: Port device team_slave_1 added [ 768.437402][T28512] only policy match revision 0 supported [ 768.437424][T28512] unable to load match [ 768.578186][T28266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.587624][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.617919][T28266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.634592][T28266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.657878][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.726477][T28266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.819100][T28504] netlink: 'syz.6.6206': attribute type 18 has an invalid length. [ 768.861906][T20490] Bluetooth: hci3: command tx timeout [ 769.089035][T28266] hsr_slave_0: entered promiscuous mode [ 769.117249][T28266] hsr_slave_1: entered promiscuous mode [ 769.143167][T28266] debugfs: 'hsr0' already exists in 'hsr' [ 769.158391][T28266] Cannot create hsr debugfs directory [ 769.357066][T28554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6219'. [ 769.369614][T28557] netlink: 'syz.5.6220': attribute type 1 has an invalid length. [ 769.451442][T28557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.564992][T28563] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 769.612073][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6220'. [ 769.736363][T28557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.759648][T28557] bond6: (slave bond7): Enslaving as an active interface with a down link [ 770.098968][T28591] bridge0: port 3(gretap0) entered blocking state [ 770.112468][T28591] bridge0: port 3(gretap0) entered disabled state [ 770.119242][T28591] gretap0: entered allmulticast mode [ 770.158529][T28591] gretap0: entered promiscuous mode [ 770.165191][T28591] bridge0: port 3(gretap0) entered blocking state [ 770.171840][T28591] bridge0: port 3(gretap0) entered forwarding state [ 770.226006][T28266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.238821][T28266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.253409][T28266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 53200 - 0 [ 770.507872][T28609] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 770.537585][T28266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.569247][T28266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.593283][T28266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 53200 - 0 [ 770.797524][T28266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.824161][T28266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.836850][T28266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 53200 - 0 [ 770.941676][T20490] Bluetooth: hci3: command tx timeout [ 771.000404][T28266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.033692][T28266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 771.058785][T28266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 53200 - 0 [ 771.498020][T28652] nbd: socks must be embedded in a SOCK_ITEM attr [ 771.704796][T28266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.717289][T28665] __nla_validate_parse: 4 callbacks suppressed [ 771.717311][T28665] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6249'. [ 771.757407][T28266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.770130][T28669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6249'. [ 771.783241][T28266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.799605][T28266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.821017][T28266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.844929][T28266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.862046][T28266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.892234][T28266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.032356][T28682] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6253'. [ 772.056853][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6254'. [ 772.086793][T28682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6253'. [ 772.172341][T28266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.203151][T28266] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.222335][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.229543][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.274258][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.281562][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.408044][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'. [ 772.820229][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 772.867171][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 772.920935][T28712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6262'. [ 773.539932][T28710] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.547774][T28710] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.623900][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048f8e800: rx timeout, send abort [ 774.070856][T28739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6270'. [ 774.124032][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048f8e400: rx timeout, send abort [ 774.134949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048f8e800: abort rx timeout. Force session deactivation [ 774.170110][T28710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.194113][T28710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.632323][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048f8e400: abort rx timeout. Force session deactivation [ 774.871227][T28713] geneve2: entered promiscuous mode [ 774.876543][T28713] geneve2: entered allmulticast mode [ 774.906516][T28726] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 774.948814][T15801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.985707][T15801] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 775.013146][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.034959][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 775.118952][T28747] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 775.134467][T28747] bond5 (unregistering): Released all slaves [ 775.142633][T28757] set match dimension is over the limit! [ 775.174050][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.183553][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 775.194693][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.204443][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 775.223488][T28750] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 775.228583][T28756] veth1_macvtap: left promiscuous mode [ 775.308445][T28764] netlink: 'syz.5.6275': attribute type 3 has an invalid length. [ 775.338491][T28764] netlink: 'syz.5.6275': attribute type 1 has an invalid length. [ 775.485645][T28772] netlink: 'syz.3.6278': attribute type 1 has an invalid length. [ 775.494524][T28772] netlink: 'syz.3.6278': attribute type 11 has an invalid length. [ 775.962764][T28266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.453152][T28818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.603924][T28266] veth0_vlan: entered promiscuous mode [ 776.606005][T28826] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 776.649051][T28828] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 776.655566][T28266] veth1_vlan: entered promiscuous mode [ 776.761791][T28266] veth0_macvtap: entered promiscuous mode [ 776.774790][T28266] veth1_macvtap: entered promiscuous mode [ 776.824017][T28831] tipc: Started in network mode [ 776.832590][T28831] tipc: Node identity ac14140f, cluster identity 4711 [ 776.843322][T28831] tipc: Enabled bearer , priority 10 [ 776.858860][T28266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.895427][T28266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.948328][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.984503][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.038790][ T147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.076821][ T147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.185894][T28846] __nla_validate_parse: 9 callbacks suppressed [ 777.185924][T28846] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6301'. [ 777.521125][T15801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.545775][T15801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.627348][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.648263][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.712981][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'. [ 777.775475][T15801] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.794246][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'. [ 777.827152][T15801] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.851460][T15801] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.876717][T15801] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.876875][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'. [ 777.964572][T12142] tipc: Node number set to 2886997007 [ 778.126605][T28882] netlink: 'syz.6.6313': attribute type 12 has an invalid length. [ 778.145275][T28886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6314'. [ 778.158714][T28882] netlink: 'syz.6.6313': attribute type 29 has an invalid length. [ 778.169769][T28882] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6313'. [ 778.182654][T28882] netlink: 51 bytes leftover after parsing attributes in process `syz.6.6313'. [ 778.211729][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6313'. [ 778.331740][T28889] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 778.358121][T28889] bond1 (unregistering): Released all slaves [ 778.775338][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'. [ 778.900423][T28915] syzkaller0: entered promiscuous mode [ 778.915505][T28915] syzkaller0: entered allmulticast mode [ 779.154121][T28927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6324'. [ 779.295095][T28932] netlink: 'syz.2.6326': attribute type 10 has an invalid length. [ 779.321830][T28932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.339142][T28932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.409351][T28984] veth0: entered promiscuous mode [ 782.556474][ T1616] block nbd2: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 120 seconds [ 782.568552][ T1616] block nbd2: Possible stuck request ffff888026ef5240: control (read@1024,1024B). Runtime 120 seconds [ 782.579644][ T1616] block nbd2: Possible stuck request ffff888026ef5400: control (read@2048,1024B). Runtime 120 seconds [ 782.591429][ T1616] block nbd2: Possible stuck request ffff888026ef55c0: control (read@3072,1024B). Runtime 120 seconds [ 783.187703][T28980] veth0: left promiscuous mode [ 783.406283][T29003] __nla_validate_parse: 7 callbacks suppressed [ 783.406303][T29003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6348'. [ 783.639123][T29015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6354'. [ 783.653311][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6352'. [ 783.661773][T29015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6354'. [ 783.677509][T29019] syzkaller0: entered promiscuous mode [ 783.686523][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6352'. [ 783.699765][T29019] syzkaller0: entered allmulticast mode [ 783.732171][T29015] macvlan2: entered promiscuous mode [ 783.750255][T29015] macvlan2: entered allmulticast mode [ 784.090624][T29043] unsupported nla_type 291 [ 784.229411][T29050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6364'. [ 784.259553][T29050] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6364'. [ 784.477085][T29061] tipc: Enabled bearer , priority 0 [ 784.505950][T29061] syzkaller0: entered promiscuous mode [ 784.528113][T29061] syzkaller0: entered allmulticast mode [ 784.578866][T29061] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 784.676933][T29072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6373'. [ 784.716989][T29079] netlink: 'syz.6.6375': attribute type 1 has an invalid length. [ 784.739222][T29061] tipc: Resetting bearer [ 784.774851][T29082] netlink: 'syz.5.6374': attribute type 9 has an invalid length. [ 784.796147][ T5725] IPVS: starting estimator thread 0... [ 784.803509][T29074] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.840028][T29079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.849619][T29057] tipc: Resetting bearer [ 784.889806][T29057] tipc: Disabling bearer [ 784.902856][T29088] netlink: 'syz.3.6376': attribute type 11 has an invalid length. [ 784.904264][T29084] IPVS: using max 24 ests per chain, 57600 per kthread [ 784.992849][T29079] bond1: (slave gretap2): making interface the new active one [ 785.029246][T29079] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 785.223505][T29096] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6377'. [ 785.692679][T29136] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6390'. [ 786.003532][T29146] netlink: 'syz.2.6394': attribute type 2 has an invalid length. [ 786.636500][T29177] syzkaller0: entered promiscuous mode [ 786.654678][T29177] syzkaller0: entered allmulticast mode [ 788.782372][ T4944] Bluetooth: hci3: command 0x0405 tx timeout [ 790.058282][T29227] tipc: Failed to obtain node identity [ 790.070034][T29227] tipc: Enabling of bearer rejected, failed to enable media [ 790.212309][T29235] __nla_validate_parse: 1 callbacks suppressed [ 790.212330][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6420'. [ 790.315714][T29237] syzkaller0: entered promiscuous mode [ 790.331090][T29237] syzkaller0: entered allmulticast mode [ 790.452081][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6424'. [ 790.496954][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6426'. [ 790.551278][T29244] macvtap1: entered promiscuous mode [ 790.567208][T29244] macvtap1: entered allmulticast mode [ 790.579813][T29244] veth1_vlan: entered allmulticast mode [ 790.619771][T29249] macvtap2: entered promiscuous mode [ 790.634794][T29249] macvtap2: entered allmulticast mode [ 790.986740][T29255] tipc: Enabling of bearer rejected, failed to enable media [ 791.336197][T29281] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6436'. [ 791.716794][T29307] tipc: Started in network mode [ 791.732650][T29307] tipc: Node identity aae8142696db, cluster identity 4711 [ 791.748378][T29307] tipc: Enabled bearer , priority 0 [ 791.768272][T29307] syzkaller0: entered promiscuous mode [ 791.785467][T29307] syzkaller0: entered allmulticast mode [ 791.806152][T29307] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 791.919066][T29307] tipc: Resetting bearer [ 792.015168][T29306] tipc: Resetting bearer [ 792.073329][T29306] tipc: Disabling bearer [ 792.288588][T29337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 792.395244][T29346] syzkaller0: entered promiscuous mode [ 792.406136][T29346] syzkaller0: entered allmulticast mode [ 792.507364][T29353] FAULT_INJECTION: forcing a failure. [ 792.507364][T29353] name failslab, interval 1, probability 0, space 0, times 0 [ 792.523835][T29353] CPU: 1 UID: 0 PID: 29353 Comm: syz.2.6458 Not tainted syzkaller #0 PREEMPT(full) [ 792.523865][T29353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.523880][T29353] Call Trace: [ 792.523889][T29353] [ 792.523898][T29353] dump_stack_lvl+0xe8/0x150 [ 792.523944][T29353] should_fail_ex+0x40c/0x560 [ 792.523983][T29353] should_failslab+0xa8/0x100 [ 792.524013][T29353] __kmalloc_noprof+0xfe/0x720 [ 792.524048][T29353] ? ip_tun_build_state+0x145/0x6d0 [ 792.524184][T29353] ? ip_tun_build_state+0x145/0x6d0 [ 792.524216][T29353] ip_tun_build_state+0x145/0x6d0 [ 792.524243][T29353] ? __pfx_ip_tun_build_state+0x10/0x10 [ 792.524264][T29353] ? pcpu_chunk_relocate+0x1d0/0x430 [ 792.524333][T29353] ? lwtunnel_build_state+0xe2/0x4c0 [ 792.524418][T29353] lwtunnel_build_state+0x384/0x4c0 [ 792.524451][T29353] ? lwtunnel_build_state+0xe2/0x4c0 [ 792.524485][T29353] fib_nh_common_init+0x130/0x3d0 [ 792.524543][T29353] ? __pfx_fib_nh_common_init+0x10/0x10 [ 792.524563][T29353] ? trace_kmalloc+0x2a/0xf0 [ 792.524594][T29353] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 792.524621][T29353] ? __kmalloc_noprof+0x396/0x720 [ 792.524657][T29353] fib_nh_init+0x9e/0x410 [ 792.524690][T29353] fib_create_info+0x1b9b/0x3170 [ 792.524721][T29353] ? trace_contention_end+0x3d/0x140 [ 792.524770][T29353] fib_table_insert+0xcb/0x1b10 [ 792.524798][T29353] ? __pfx___mutex_lock+0x10/0x10 [ 792.524836][T29353] ? fib_new_table+0x110/0x320 [ 792.524899][T29353] inet_rtm_newroute+0x14f/0x250 [ 792.524942][T29353] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 792.525000][T29353] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 792.525030][T29353] rtnetlink_rcv_msg+0x802/0xc00 [ 792.525065][T29353] ? netlink_sendmsg+0x5d4/0xb40 [ 792.525094][T29353] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 792.525127][T29353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 792.525163][T29353] ? __lock_acquire+0x683/0x2cf0 [ 792.525201][T29353] netlink_rcv_skb+0x226/0x4a0 [ 792.525227][T29353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 792.525264][T29353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.525304][T29353] ? netlink_deliver_tap+0x2e/0x1b0 [ 792.525328][T29353] ? netlink_deliver_tap+0x2e/0x1b0 [ 792.525360][T29353] netlink_unicast+0x7bb/0x940 [ 792.525398][T29353] netlink_sendmsg+0x813/0xb40 [ 792.525435][T29353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.525467][T29353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 792.525502][T29353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.525526][T29353] sock_sendmsg_nosec+0x13a/0x180 [ 792.525562][T29353] ____sys_sendmsg+0x54e/0x850 [ 792.525598][T29353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.525634][T29353] ? import_iovec+0x73/0xa0 [ 792.525662][T29353] ___sys_sendmsg+0x2a5/0x360 [ 792.525686][T29353] ? __lock_acquire+0x683/0x2cf0 [ 792.525714][T29353] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.525781][T29353] ? __fget_files+0x2a/0x420 [ 792.525804][T29353] ? __fget_files+0x3a2/0x420 [ 792.525839][T29353] __x64_sys_sendmsg+0x1b1/0x290 [ 792.525866][T29353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.525910][T29353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.525944][T29353] do_syscall_64+0x174/0x580 [ 792.525964][T29353] ? trace_irq_disable+0x3b/0x140 [ 792.525986][T29353] ? clear_bhb_loop+0x40/0x90 [ 792.526015][T29353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.526037][T29353] RIP: 0033:0x7f4857f9ce59 [ 792.526059][T29353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.526078][T29353] RSP: 002b:00007f4858da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.526103][T29353] RAX: ffffffffffffffda RBX: 00007f4858215fa0 RCX: 00007f4857f9ce59 [ 792.526120][T29353] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 792.526134][T29353] RBP: 00007f4858da1090 R08: 0000000000000000 R09: 0000000000000000 [ 792.526148][T29353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.526162][T29353] R13: 00007f4858216038 R14: 00007f4858215fa0 R15: 00007ffd1d281198 [ 792.526198][T29353] [ 793.303770][T29373] x_tables: duplicate underflow at hook 1 [ 793.309644][T29369] x_tables: duplicate underflow at hook 1 [ 793.569619][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6469'. [ 793.618239][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6469'. [ 793.629343][T29388] vlan0: entered promiscuous mode [ 793.654319][T29377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.829970][T29400] pim6reg: entered allmulticast mode [ 793.837168][T29403] pim6reg: left allmulticast mode [ 793.892949][T29401] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6474'. [ 793.902673][T29402] netlink: 'syz.3.6476': attribute type 11 has an invalid length. [ 793.942462][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6477'. [ 794.025370][T29406] bridge1: port 1(veth0_to_bond) entered blocking state [ 794.077646][T29406] bridge1: port 1(veth0_to_bond) entered disabled state [ 794.102639][T29406] veth0_to_bond: entered allmulticast mode [ 794.114952][T29406] veth0_to_bond: entered promiscuous mode [ 794.144840][T29406] bridge1: port 1(veth0_to_bond) entered blocking state [ 794.152044][T29406] bridge1: port 1(veth0_to_bond) entered forwarding state [ 794.597413][T29440] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 794.647222][T29443] netlink: 'syz.5.6489': attribute type 4 has an invalid length. [ 794.679268][T29443] netlink: 'syz.5.6489': attribute type 4 has an invalid length. [ 794.754195][T29440] bond5: entered promiscuous mode [ 794.774209][T29440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 794.817578][T29440] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 794.882948][T29441] bond5: (slave bridge2): making interface the new active one [ 794.910512][T29441] bridge2: entered promiscuous mode [ 794.918514][T29441] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 794.969963][T29441] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 795.013644][T29441] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 795.036212][T29440] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 795.082613][T29441] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 795.146290][T29461] macvtap1: entered promiscuous mode [ 795.184044][T29440] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 795.248616][T29441] bond5: (slave bridge6): Enslaving as a backup interface with an up link [ 795.297323][T29441] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 795.307900][T29440] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 795.311901][T29465] netlink: 'syz.6.6495': attribute type 2 has an invalid length. [ 795.394148][T29441] bond5: (slave bridge8): Enslaving as a backup interface with an up link [ 795.453694][T29441] bond5: (slave bridge9): Enslaving as a backup interface with an up link [ 795.541304][T29469] team0: Device gtp0 is up. Set it down before adding it as a team port [ 795.734391][T29480] netlink: 'syz.2.6501': attribute type 1 has an invalid length. [ 795.799642][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6501'. [ 795.834928][T29480] bond6: entered promiscuous mode [ 795.840715][T29480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 795.978613][T29493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.003540][T29493] batadv0: entered allmulticast mode [ 796.016518][T29493] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 796.146552][T29503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 796.938407][T29495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.954777][T29495] bond_slave_0: left allmulticast mode [ 796.981599][T29495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.996211][T29495] bond_slave_1: left allmulticast mode [ 797.017987][T29495] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 797.029588][T29495] batadv0: left allmulticast mode [ 797.043680][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6512'. [ 797.053657][T29495] bond0 (unregistering): Released all slaves [ 797.095910][T29524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6512'. [ 797.110191][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6511'. [ 797.657767][T29546] netlink: 296 bytes leftover after parsing attributes in process `syz.5.6519'. [ 797.844780][T29556] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6524'. [ 798.013312][T29564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6526'. [ 798.208505][T29577] xt_hashlimit: size too large, truncated to 1048576 [ 798.378277][T29585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6535'. [ 798.662682][T29587] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 799.329903][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6555'. [ 799.427341][T29634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.726585][T29647] atomic_op ffff88803ee69198 conn xmit_atomic 0000000000000000 [ 800.218609][T29640] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 801.583644][ T4944] Bluetooth: hci2: command 0x0405 tx timeout [ 801.653791][T29725] __nla_validate_parse: 1 callbacks suppressed [ 801.653813][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6589'. [ 801.679149][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6591'. [ 801.893992][T29733] validate_nla: 1 callbacks suppressed [ 801.894014][T29733] netlink: 'syz.4.6593': attribute type 21 has an invalid length. [ 801.933629][T29733] netlink: 'syz.4.6593': attribute type 22 has an invalid length. [ 802.032314][T29746] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 802.363128][T29759] syzkaller0: entered promiscuous mode [ 802.438118][T29759] syzkaller0: entered allmulticast mode [ 802.575425][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6598'. [ 802.714808][T29775] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6602'. [ 803.096929][T29787] macvtap1: entered promiscuous mode [ 803.122961][T29787] team0: Device macvtap1 failed to register rx_handler [ 803.136509][T29796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6609'. [ 803.437922][T29804] syzkaller0: entered promiscuous mode [ 803.459066][T29804] syzkaller0: entered allmulticast mode [ 803.483655][T29804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6613'. [ 803.484279][T29812] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6616'. [ 803.903503][T29835] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 803.937176][T29835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 804.267097][T29854] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6625'. [ 804.711202][T29866] bond2: entered promiscuous mode [ 804.777817][T29870] macvlan2: entered promiscuous mode [ 804.809921][T29870] macvlan2: entered allmulticast mode [ 804.837478][T29870] bond2: (slave macvlan2): Opening slave failed [ 804.887044][T29871] ip6tnl0: Master is either lo or non-ether device [ 805.169860][T29890] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 805.185397][T29890] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 805.407770][T29908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6640'. [ 805.698117][T29921] netlink: 'syz.4.6642': attribute type 5 has an invalid length. [ 805.739240][ T147] bridge1: port 1(veth0_to_bond) entered disabled state [ 805.753299][T20490] Bluetooth: hci2: command 0x0405 tx timeout [ 805.759724][T29923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6644'. [ 806.695920][T29961] __nla_validate_parse: 1 callbacks suppressed [ 806.695941][T29961] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6653'. [ 806.794721][T29961] syzkaller0: entered promiscuous mode [ 806.812692][T29961] syzkaller0: entered allmulticast mode [ 806.820049][T29972] netlink: 'syz.3.6658': attribute type 1 has an invalid length. [ 806.845504][T29973] netlink: 'syz.5.6657': attribute type 1 has an invalid length. [ 806.995867][T29981] netlink: 'syz.3.6659': attribute type 75 has an invalid length. [ 807.057741][T29973] 8021q: adding VLAN 0 to HW filter on device bond8 [ 807.147094][T29974] bond8: (slave geneve3): making interface the new active one [ 807.165520][T29974] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 807.177210][T29976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.327933][T29976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.409141][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6659'. [ 807.576337][T30002] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6667'. [ 807.654342][T30002] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6667'. [ 807.675687][T30012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6671'. [ 808.323652][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6680'. [ 808.639059][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6684'. [ 808.768021][T30071] netlink: 'syz.4.6688': attribute type 1 has an invalid length. [ 808.885144][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6689'. [ 809.196384][T30089] IPv6: sit1: Disabled Multicast RS [ 809.209020][T30089] sit1: entered allmulticast mode [ 809.227903][T30092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6691'. [ 809.440239][T30104] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6696'. [ 809.999102][T30134] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 810.104708][T30138] pimreg3: entered allmulticast mode [ 810.149999][T30140] netlink: 'syz.2.6707': attribute type 24 has an invalid length. [ 810.338136][T30147] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 810.365676][T30147] netlink: 'syz.2.6710': attribute type 11 has an invalid length. [ 810.533617][T30162] netlink: 'syz.6.6715': attribute type 1 has an invalid length. [ 810.717953][T30173] netlink: 'syz.2.6719': attribute type 2 has an invalid length. [ 811.449841][T30210] netlink: 'syz.6.6731': attribute type 10 has an invalid length. [ 811.886357][T30235] __nla_validate_parse: 8 callbacks suppressed [ 811.886377][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6739'. [ 811.905993][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6739'. [ 811.933198][T30236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6740'. [ 812.113062][T30247] dvmrp0: left allmulticast mode [ 812.263142][T30249] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 812.325330][T30249] bond9 (unregistering): Released all slaves [ 812.623851][ T1616] block nbd2: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 150 seconds [ 812.636830][ T1616] block nbd2: Possible stuck request ffff888026ef5240: control (read@1024,1024B). Runtime 150 seconds [ 812.653074][ T1616] block nbd2: Possible stuck request ffff888026ef5400: control (read@2048,1024B). Runtime 150 seconds [ 812.665685][ T1616] block nbd2: Possible stuck request ffff888026ef55c0: control (read@3072,1024B). Runtime 150 seconds [ 812.742428][T30266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6748'. [ 813.549928][T30302] xt_TCPMSS: Only works on TCP SYN packets [ 813.855145][T30313] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 813.960175][T30313] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6762'. [ 814.048619][T30320] tipc: Enabled bearer , priority 0 [ 814.075754][T30324] syzkaller0: entered promiscuous mode [ 814.095694][T30324] syzkaller0: entered allmulticast mode [ 814.124233][T30313] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 814.253311][T30313] tipc: Resetting bearer [ 814.296045][T30311] tipc: Resetting bearer [ 814.416179][T30311] tipc: Disabling bearer [ 814.480038][T30339] netlink: 'syz.3.6768': attribute type 1 has an invalid length. [ 814.726588][T30354] rdma_rxe: rxe_newlink: failed to add lo [ 814.771449][T30354] netlink: 'syz.5.6773': attribute type 1 has an invalid length. [ 814.824466][T30355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6773'. [ 815.006060][T30373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6780'. [ 815.340369][ T4944] Bluetooth: hci3: command 0x0405 tx timeout [ 815.514998][T30400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6784'. [ 815.855587][T30412] sctp: [Deprecated]: syz.3.6789 (pid 30412) Use of int in max_burst socket option. [ 815.855587][T30412] Use struct sctp_assoc_value instead [ 815.970026][T30408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6788'. [ 816.488138][T30439] bond0: entered promiscuous mode [ 816.494645][T30439] bond_slave_0: entered promiscuous mode [ 816.507188][T30439] bond_slave_1: entered promiscuous mode [ 816.519855][T30439] batadv0: entered promiscuous mode [ 816.534397][T30439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 816.544667][T30439] bond0: left promiscuous mode [ 816.554662][T30439] bond_slave_0: left promiscuous mode [ 816.564769][T30439] bond_slave_1: left promiscuous mode [ 816.587294][T30439] batadv0: left promiscuous mode [ 816.995547][T30464] SET target dimension over the limit! [ 817.278286][T30476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6808'. [ 817.288456][T30479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6811'. [ 817.837471][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.875085][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 818.077244][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.118401][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 818.158465][T30495] syzkaller1: entered promiscuous mode [ 818.169327][T30495] syzkaller1: entered allmulticast mode [ 818.197973][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 818.241564][T30518] bond7: entered promiscuous mode [ 818.257309][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.268339][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 818.353220][T30521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 818.374444][T30521] batman_adv: batadv0: Adding interface: gretap1 [ 818.387423][T30530] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 818.388892][T30521] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.427622][T30521] batman_adv: batadv0: Interface activated: gretap1 [ 818.450775][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.460061][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 818.540705][T30532] syzkaller0: entered promiscuous mode [ 818.578500][T30532] syzkaller0: entered allmulticast mode [ 818.590026][T30530] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.6824'. [ 819.002148][T30558] syz_tun: entered allmulticast mode [ 819.105441][T30558] syz_tun: left allmulticast mode [ 819.570740][T30587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6835'. [ 819.738920][T30594] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6837'. [ 819.749485][T30594] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6837'. [ 819.815201][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6836'. [ 819.949575][T30607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.297525][T30642] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6844'. [ 820.359400][T30641] xt_TCPMSS: Only works on TCP SYN packets [ 820.429423][T30647] veth0: entered promiscuous mode [ 820.576493][T30646] veth0: left promiscuous mode [ 820.700979][T30661] vcan0: entered allmulticast mode [ 820.731019][T30663] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 820.778416][T30668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6852'. [ 820.875154][T30671] bridge0: port 3(vlan3) entered blocking state [ 820.895077][T30671] bridge0: port 3(vlan3) entered disabled state [ 820.907674][T30671] vlan3: entered allmulticast mode [ 820.917181][T30671] vlan3: entered promiscuous mode [ 821.046111][T30680] batadv_slave_0: entered promiscuous mode [ 821.071390][T30680] netlink: 'syz.4.6857': attribute type 11 has an invalid length. [ 821.092287][T30679] batadv_slave_0: left promiscuous mode [ 821.229330][T30691] netlink: 'syz.3.6859': attribute type 1 has an invalid length. [ 821.537969][T30708] netlink: 'syz.2.6862': attribute type 9 has an invalid length. [ 821.983947][T30725] tipc: Enabling of bearer rejected, failed to enable media [ 822.044988][T30735] tipc: Enabling of bearer rejected, failed to enable media [ 822.745757][T30765] netlink: 'syz.2.6881': attribute type 2 has an invalid length. [ 822.775500][T30765] netlink: 'syz.2.6881': attribute type 2 has an invalid length. [ 822.785328][T30714] vxcan1 speed is unknown, defaulting to 1000 [ 822.819489][T30766] xt_hashlimit: overflow, rate too high: 0 [ 822.917673][T30768] __nla_validate_parse: 4 callbacks suppressed [ 822.917693][T30768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6884'. [ 823.406035][T30714] xfrm0 speed is unknown, defaulting to 1000 [ 824.226751][T30714] lo speed is unknown, defaulting to 1000 [ 824.580227][T30834] No such timeout policy "syz0" [ 824.769286][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6904'. [ 824.934703][T30848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.631188][T30875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6916'. [ 825.837331][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6922'. [ 825.911174][T30891] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6920'. [ 826.220750][T20490] Bluetooth: hci6: command 0x0406 tx timeout [ 827.007422][T30928] xt_TCPMSS: Only works on TCP SYN packets [ 827.248380][T30935] FAULT_INJECTION: forcing a failure. [ 827.248380][T30935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.276573][T30936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6930'. [ 827.295768][T30935] CPU: 1 UID: 0 PID: 30935 Comm: syz.6.6932 Not tainted syzkaller #0 PREEMPT(full) [ 827.295809][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.295823][T30935] Call Trace: [ 827.295832][T30935] [ 827.295841][T30935] dump_stack_lvl+0xe8/0x150 [ 827.295875][T30935] should_fail_ex+0x40c/0x560 [ 827.295912][T30935] _copy_from_user+0x2d/0xb0 [ 827.295938][T30935] ___sys_sendmsg+0x1c6/0x360 [ 827.295964][T30935] ? __lock_acquire+0x683/0x2cf0 [ 827.295994][T30935] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.296058][T30935] ? __fget_files+0x2a/0x420 [ 827.296081][T30935] ? __fget_files+0x3a2/0x420 [ 827.296115][T30935] __x64_sys_sendmsg+0x1b1/0x290 [ 827.296142][T30935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 827.296186][T30935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.296210][T30935] do_syscall_64+0x174/0x580 [ 827.296230][T30935] ? trace_irq_disable+0x3b/0x140 [ 827.296251][T30935] ? clear_bhb_loop+0x40/0x90 [ 827.296279][T30935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.296300][T30935] RIP: 0033:0x7f3b5d99ce59 [ 827.296321][T30935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.296341][T30935] RSP: 002b:00007f3b5e88a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.296365][T30935] RAX: ffffffffffffffda RBX: 00007f3b5dc15fa0 RCX: 00007f3b5d99ce59 [ 827.296382][T30935] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 827.296395][T30935] RBP: 00007f3b5e88a090 R08: 0000000000000000 R09: 0000000000000000 [ 827.296410][T30935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.296423][T30935] R13: 00007f3b5dc16038 R14: 00007f3b5dc15fa0 R15: 00007fff3d3d7968 [ 827.296468][T30935] [ 828.229894][T12142] IPVS: starting estimator thread 0... [ 828.287298][T30965] netlink: 'syz.2.6940': attribute type 21 has an invalid length. [ 828.314399][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6940'. [ 828.332000][T30966] IPVS: using max 24 ests per chain, 57600 per kthread [ 828.573955][T30975] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 828.597879][T30975] syzkaller1: linktype set to 823 [ 828.635523][T30910] vxcan1 speed is unknown, defaulting to 1000 [ 828.806637][T30982] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 828.936824][T30987] netlink: 'syz.4.6947': attribute type 1 has an invalid length. [ 828.958005][T30987] netlink: 'syz.4.6947': attribute type 1 has an invalid length. [ 829.389560][T30910] xfrm0 speed is unknown, defaulting to 1000 [ 829.709990][T31016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6954'. [ 829.725246][T31016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6954'. [ 830.008000][T31029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.073816][T30910] lo speed is unknown, defaulting to 1000 [ 830.417051][T31042] FAULT_INJECTION: forcing a failure. [ 830.417051][T31042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.469480][T31042] CPU: 0 UID: 0 PID: 31042 Comm: syz.6.6964 Not tainted syzkaller #0 PREEMPT(full) [ 830.469511][T31042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.469525][T31042] Call Trace: [ 830.469534][T31042] [ 830.469544][T31042] dump_stack_lvl+0xe8/0x150 [ 830.469578][T31042] should_fail_ex+0x40c/0x560 [ 830.469626][T31042] _copy_from_iter+0x1d3/0x1660 [ 830.469748][T31042] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 830.469785][T31042] ? rcu_is_watching+0x15/0xb0 [ 830.469814][T31042] ? trace_kmem_cache_alloc+0x29/0xe0 [ 830.469850][T31042] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 830.469884][T31042] ? __pfx__copy_from_iter+0x10/0x10 [ 830.469916][T31042] ? __alloc_skb+0x276/0x7a0 [ 830.469966][T31042] ? __alloc_skb+0x276/0x7a0 [ 830.469994][T31042] ? netlink_sendmsg+0x650/0xb40 [ 830.470020][T31042] ? skb_put+0x112/0x210 [ 830.470045][T31042] netlink_sendmsg+0x6c0/0xb40 [ 830.470082][T31042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.470113][T31042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 830.470147][T31042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.470172][T31042] sock_sendmsg_nosec+0x13a/0x180 [ 830.470207][T31042] ____sys_sendmsg+0x54e/0x850 [ 830.470238][T31042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.470271][T31042] ? import_iovec+0x73/0xa0 [ 830.470298][T31042] ___sys_sendmsg+0x2a5/0x360 [ 830.470327][T31042] ? __lock_acquire+0x683/0x2cf0 [ 830.470356][T31042] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.470422][T31042] ? __fget_files+0x2a/0x420 [ 830.470443][T31042] ? __fget_files+0x3a2/0x420 [ 830.470482][T31042] __x64_sys_sendmsg+0x1b1/0x290 [ 830.470511][T31042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.470558][T31042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.470582][T31042] do_syscall_64+0x174/0x580 [ 830.470603][T31042] ? trace_irq_disable+0x3b/0x140 [ 830.470633][T31042] ? clear_bhb_loop+0x40/0x90 [ 830.470660][T31042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.470683][T31042] RIP: 0033:0x7f3b5d99ce59 [ 830.470704][T31042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.470723][T31042] RSP: 002b:00007f3b5e88a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.470747][T31042] RAX: ffffffffffffffda RBX: 00007f3b5dc15fa0 RCX: 00007f3b5d99ce59 [ 830.470763][T31042] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 830.470777][T31042] RBP: 00007f3b5e88a090 R08: 0000000000000000 R09: 0000000000000000 [ 830.470791][T31042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.470804][T31042] R13: 00007f3b5dc16038 R14: 00007f3b5dc15fa0 R15: 00007fff3d3d7968 [ 830.470839][T31042] [ 830.827738][T31049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6968'. [ 831.110877][T31067] netlink: 'syz.5.6972': attribute type 1 has an invalid length. [ 831.167780][T31063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.906608][T31084] netlink: 'syz.5.6978': attribute type 4 has an invalid length. [ 832.327475][T31101] syzkaller1: entered promiscuous mode [ 832.338382][T31101] syzkaller1: entered allmulticast mode [ 832.697033][T31115] syzkaller0: entered promiscuous mode [ 832.715745][T31115] syzkaller0: entered allmulticast mode [ 833.148965][T31135] veth1_to_team: Caught tx_queue_len zero misconfig [ 833.715009][T31160] netlink: 'syz.6.7003': attribute type 1 has an invalid length. [ 833.803493][T31159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.829275][T31165] Unsupported ieee802154 address type: 0 [ 834.011904][T31175] syz_tun: entered allmulticast mode [ 834.022022][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7007'. [ 834.050970][T31175] dvmrp6: entered allmulticast mode [ 834.068466][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7007'. [ 834.157510][T31175] syz_tun: left allmulticast mode [ 834.200223][T31182] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7012'. [ 834.272594][T31191] netlink: 'syz.6.7015': attribute type 1 has an invalid length. [ 834.273108][T31190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7013'. [ 834.333029][T31194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7016'. [ 834.433460][T31191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.559011][T31195] vlan2: entered promiscuous mode [ 834.572623][T31195] bond2: entered promiscuous mode [ 834.584662][T31195] vlan2: entered allmulticast mode [ 834.600062][T31195] bond2: entered allmulticast mode [ 834.648384][T31200] bond2: (slave bridge3): making interface the new active one [ 834.656655][T31200] bridge3: entered promiscuous mode [ 834.672718][T31200] bridge3: entered allmulticast mode [ 834.680948][T31200] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 834.742714][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7021'. [ 834.800996][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7021'. [ 834.825732][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7021'. [ 834.849140][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7021'. [ 834.871900][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7021'. [ 834.999983][T31219] Cannot find del_set index 4 as target [ 835.529678][T31254] syzkaller1: entered promiscuous mode [ 835.556886][T31254] syzkaller1: entered allmulticast mode [ 835.802042][T31267] syzkaller0: entered promiscuous mode [ 835.815150][T31267] syzkaller0: entered allmulticast mode [ 836.469349][ T4944] Bluetooth: hci7: command 0x0406 tx timeout [ 836.884477][T31271] vxcan1 speed is unknown, defaulting to 1000 [ 837.480213][T31317] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 837.546931][T31271] xfrm0 speed is unknown, defaulting to 1000 [ 838.001800][T31345] sit0: Caught tx_queue_len zero misconfig [ 838.038337][T31345] tunl0: Caught tx_queue_len zero misconfig [ 838.233218][T31271] lo speed is unknown, defaulting to 1000 [ 838.276958][T31353] syzkaller0: entered promiscuous mode [ 838.296049][T31353] syzkaller0: entered allmulticast mode [ 838.503770][T31362] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 838.550122][T31362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 838.863631][ T30] INFO: task syz.1.5385:25505 blocked for more than 143 seconds. [ 838.878924][ T30] Not tainted syzkaller #0 [ 838.898442][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.919357][ T30] task:syz.1.5385 state:D stack:27656 pid:25505 tgid:25502 ppid:18042 task_flags:0x400040 flags:0x00080002 [ 838.936300][ T30] Call Trace: [ 838.939738][ T30] [ 838.949409][ T30] __schedule+0x17d9/0x56c0 [ 838.957501][ T30] ? __lock_acquire+0x683/0x2cf0 [ 838.963726][ T30] ? __lock_acquire+0x683/0x2cf0 [ 838.969040][ T30] ? __pfx___schedule+0x10/0x10 [ 838.974641][ T30] ? schedule+0x90/0x2b0 [ 838.979235][ T30] schedule+0x164/0x2b0 [ 838.984249][ T30] schedule_preempt_disabled+0x13/0x30 [ 838.990033][ T30] __mutex_lock+0x7bf/0x1550 [ 838.996115][ T30] ? __mutex_lock+0x5d4/0x1550 [ 839.001469][ T30] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 839.015987][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 839.036894][ T30] ? __nlmsg_put+0xef/0x1b0 [ 839.043550][ T30] ? genlmsg_put+0x137/0x2e0 [ 839.048404][ T30] nfsd_nl_listener_get_doit+0x104/0x610 [ 839.055159][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 839.062032][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 839.068706][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 839.074854][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 839.082291][ T30] ? __lock_acquire+0x683/0x2cf0 [ 839.087502][ T30] genl_rcv_msg+0x614/0x7a0 [ 839.092368][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.097602][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 839.105076][ T30] netlink_rcv_skb+0x226/0x4a0 [ 839.113081][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.118282][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.124595][ T30] ? down_read+0x2be/0x330 [ 839.129112][ T30] genl_rcv+0x28/0x40 [ 839.133839][ T30] netlink_unicast+0x7bb/0x940 [ 839.138832][ T30] netlink_sendmsg+0x813/0xb40 [ 839.144505][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.149938][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 839.155296][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.160811][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 839.165936][ T30] ____sys_sendmsg+0x54e/0x850 [ 839.171682][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.177089][ T30] ? import_iovec+0x73/0xa0 [ 839.182467][ T30] ___sys_sendmsg+0x2a5/0x360 [ 839.187232][ T30] ? __lock_acquire+0x683/0x2cf0 [ 839.192713][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.197999][ T30] ? futex_wait+0x2a2/0x390 [ 839.203457][ T30] ? __fget_files+0x2a/0x420 [ 839.208120][ T30] ? __fget_files+0x3a2/0x420 [ 839.214913][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 839.219955][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.225794][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.233012][ T30] do_syscall_64+0x174/0x580 [ 839.237759][ T30] ? trace_irq_disable+0x3b/0x140 [ 839.250816][ T30] ? clear_bhb_loop+0x40/0x90 [ 839.256291][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.262870][ T30] RIP: 0033:0x7ff96959ce59 [ 839.267321][ T30] RSP: 002b:00007ff96a38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.278133][ T30] RAX: ffffffffffffffda RBX: 00007ff969815fa0 RCX: 00007ff96959ce59 [ 839.288097][ T30] RDX: 0000000020000090 RSI: 0000200000000100 RDI: 000000000000001b [ 839.296931][ T30] RBP: 00007ff969632e6f R08: 0000000000000000 R09: 0000000000000000 [ 839.305337][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.315867][ T30] R13: 00007ff969816038 R14: 00007ff969815fa0 R15: 00007ffda2eb4f38 [ 839.324637][ T30] [ 839.329262][ T30] [ 839.329262][ T30] Showing all locks held in the system: [ 839.342548][ T30] 1 lock held by ksoftirqd/1/23: [ 839.347608][ T30] 1 lock held by khungtaskd/30: [ 839.354510][ T30] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 839.394535][ T30] 2 locks held by getty/5384: [ 839.405284][ T30] #0: ffff888031e0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 839.428624][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 839.452448][ T30] 2 locks held by syz.0.4121/20810: [ 839.470318][ T30] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 839.479564][ T30] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 839.492802][ T30] 1 lock held by udevd/21680: [ 839.497627][ T30] #0: ffff888026e3a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 839.514983][ T30] 2 locks held by syz.1.5385/25505: [ 839.524788][ T30] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 839.535339][ T30] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 839.547541][ T30] 2 locks held by syz.3.7040/31271: [ 839.556078][ T30] 1 lock held by syz.2.7071/31370: [ 839.563428][ T30] #0: ffffffff8e95fdf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 839.576862][ T30] [ 839.600688][ T30] ============================================= [ 839.600688][ T30] [ 839.639621][ T30] NMI backtrace for cpu 0 [ 839.639646][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 839.639670][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.639682][ T30] Call Trace: [ 839.639692][ T30] [ 839.639701][ T30] dump_stack_lvl+0xe8/0x150 [ 839.639734][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 839.639865][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 839.639911][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 839.639943][ T30] sys_info+0x135/0x170 [ 839.639966][ T30] watchdog+0xfd7/0x1030 [ 839.640016][ T30] ? watchdog+0x1c7/0x1030 [ 839.640056][ T30] kthread+0x388/0x470 [ 839.640088][ T30] ? __pfx_watchdog+0x10/0x10 [ 839.640117][ T30] ? __pfx_kthread+0x10/0x10 [ 839.640142][ T30] ret_from_fork+0x514/0xb70 [ 839.640186][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 839.640220][ T30] ? __switch_to+0xc89/0x1420 [ 839.640261][ T30] ? __pfx_kthread+0x10/0x10 [ 839.640286][ T30] ret_from_fork_asm+0x1a/0x30 [ 839.640331][ T30] [ 839.746592][ T30] Sending NMI from CPU 0 to CPUs 1: [ 839.752495][ C1] NMI backtrace for cpu 1 [ 839.752514][ C1] CPU: 1 UID: 0 PID: 30602 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 839.752536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.752549][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 839.752618][ C1] RIP: 0010:unwind_next_frame+0xa7/0x2550 [ 839.752646][ C1] Code: 5c 4c 89 6c 24 68 e8 c8 0f 35 00 4c 8d 2d 00 00 00 00 48 c7 c7 20 9c 95 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 64 30 2b 00 48 83 c4 08 e8 4b b8 3c 0a 85 c0 74 3a e8 a2 5a 34 [ 839.752663][ C1] RSP: 0018:ffffc90000a08738 EFLAGS: 00000046 [ 839.752690][ C1] RAX: 0000000000000003 RBX: ffffffff8b7a5a8a RCX: 0000000000000002 [ 839.752703][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e959c20 [ 839.752716][ C1] RBP: 1ffff92000141104 R08: 0000000000000000 R09: 0000000000000000 [ 839.752729][ C1] R10: ffffc90000a08838 R11: ffffffff81b168f0 R12: dffffc0000000000 [ 839.752743][ C1] R13: ffffffff8176f21f R14: ffffc90000a087e8 R15: 1ffff920001410fd [ 839.752758][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 839.752774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.752787][ C1] CR2: 00007f48581e7458 CR3: 0000000025ce0000 CR4: 00000000003526f0 [ 839.752804][ C1] Call Trace: [ 839.752812][ C1] [ 839.752819][ C1] ? unwind_next_frame+0x8f/0x2550 [ 839.752848][ C1] ? batadv_iv_ogm_schedule+0x4a4/0xff0 [ 839.752876][ C1] ? unwind_next_frame+0x8f/0x2550 [ 839.752901][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 839.752931][ C1] arch_stack_walk+0x11b/0x150 [ 839.752959][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 839.752992][ C1] stack_trace_save+0xa9/0x100 [ 839.753020][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 839.753053][ C1] ? __lock_acquire+0x683/0x2cf0 [ 839.753073][ C1] kasan_save_stack+0x3e/0x60 [ 839.753090][ C1] ? kasan_save_stack+0x3e/0x60 [ 839.753106][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 839.753131][ C1] ? insert_work+0x3d/0x330 [ 839.753154][ C1] ? __queue_work+0xcd8/0x10a0 [ 839.753181][ C1] ? call_timer_fn+0x192/0x5e0 [ 839.753202][ C1] ? __run_timer_base+0x67e/0x8b0 [ 839.753220][ C1] ? run_timer_softirq+0xb7/0x170 [ 839.753239][ C1] ? handle_softirqs+0x225/0x840 [ 839.753273][ C1] ? __irq_exit_rcu+0xca/0x220 [ 839.753298][ C1] ? irq_exit_rcu+0x9/0x30 [ 839.753323][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 839.753350][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.753371][ C1] ? rcu_is_watching+0x3a/0xb0 [ 839.753392][ C1] ? batadv_iv_ogm_schedule+0x4a4/0xff0 [ 839.753419][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 839.753475][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 839.753500][ C1] insert_work+0x3d/0x330 [ 839.753527][ C1] __queue_work+0xcd8/0x10a0 [ 839.753556][ C1] ? __queue_work+0x1ea/0x10a0 [ 839.753589][ C1] call_timer_fn+0x192/0x5e0 [ 839.753610][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 839.753638][ C1] ? call_timer_fn+0xd4/0x5e0 [ 839.753659][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 839.753693][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 839.753719][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 839.753749][ C1] __run_timer_base+0x67e/0x8b0 [ 839.753767][ C1] ? ktime_get+0x45/0x220 [ 839.753804][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 839.753825][ C1] ? ktime_get+0x1f5/0x220 [ 839.753855][ C1] ? lapic_next_event+0x11/0x20 [ 839.753882][ C1] run_timer_softirq+0xb7/0x170 [ 839.753902][ C1] handle_softirqs+0x225/0x840 [ 839.753930][ C1] ? __irq_exit_rcu+0xca/0x220 [ 839.753962][ C1] __irq_exit_rcu+0xca/0x220 [ 839.753988][ C1] irq_exit_rcu+0x9/0x30 [ 839.754013][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 839.754041][ C1] [ 839.754047][ C1] [ 839.754055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.754075][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 839.754110][ C1] Code: e8 fb 74 08 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 27 2a 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 1c b6 88 00 48 c7 c3 d8 d8 40 93 49 03 1e 48 89 [ 839.754125][ C1] RSP: 0018:ffffc900071678c0 EFLAGS: 00000246 [ 839.754140][ C1] RAX: 1ffffffff1c544fb RBX: 0000000000000001 RCX: 0000000080000001 [ 839.754171][ C1] RDX: ffff888029bbbe00 RSI: ffffffff8c2a9f60 RDI: ffffffff8c2a9f20 [ 839.754186][ C1] RBP: ffffc90007167a40 R08: ffffffff8b7a6014 R09: 0000000000000000 [ 839.754200][ C1] R10: 0000000000000000 R11: ffffffff8e959c20 R12: ffff88807cfc1240 [ 839.754213][ C1] R13: dffffc0000000000 R14: ffffffff8e2a27d8 R15: dffffc0000000000 [ 839.754233][ C1] ? batadv_iv_ogm_schedule+0x464/0xff0 [ 839.754267][ C1] batadv_iv_ogm_schedule+0x4a4/0xff0 [ 839.754301][ C1] ? batadv_iv_ogm_schedule+0x464/0xff0 [ 839.754331][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 839.754360][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 839.754388][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 839.754418][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 839.754448][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 839.754478][ C1] ? rcu_is_watching+0x15/0xb0 [ 839.754502][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 839.754528][ C1] process_scheduled_works+0xa8e/0x14e0 [ 839.754572][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 839.754603][ C1] ? assign_work+0x3cf/0x5d0 [ 839.754632][ C1] worker_thread+0xa47/0xfb0 [ 839.754683][ C1] kthread+0x388/0x470 [ 839.754703][ C1] ? __pfx_worker_thread+0x10/0x10 [ 839.754729][ C1] ? __pfx_kthread+0x10/0x10 [ 839.754749][ C1] ret_from_fork+0x514/0xb70 [ 839.754772][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 839.754793][ C1] ? __switch_to+0xc89/0x1420 [ 839.754824][ C1] ? __pfx_kthread+0x10/0x10 [ 839.754844][ C1] ret_from_fork_asm+0x1a/0x30 [ 839.754878][ C1] [ 840.363861][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 840.370769][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 840.379918][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.390020][ T30] Call Trace: [ 840.393334][ T30] [ 840.396305][ T30] vpanic+0x56c/0xa60 [ 840.400342][ T30] ? __pfx___schedule+0x10/0x10 [ 840.405236][ T30] ? __pfx_vpanic+0x10/0x10 [ 840.409753][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 840.415932][ T30] panic+0xc5/0xd0 [ 840.419673][ T30] ? __pfx_panic+0x10/0x10 [ 840.424130][ T30] ? preempt_schedule_common+0x82/0xd0 [ 840.429666][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 840.435069][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 840.441251][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 840.447448][ T30] watchdog+0x1030/0x1030 [ 840.451808][ T30] ? watchdog+0x1c7/0x1030 [ 840.456318][ T30] kthread+0x388/0x470 [ 840.460411][ T30] ? __pfx_watchdog+0x10/0x10 [ 840.465143][ T30] ? __pfx_kthread+0x10/0x10 [ 840.469780][ T30] ret_from_fork+0x514/0xb70 [ 840.474422][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 840.479594][ T30] ? __switch_to+0xc89/0x1420 [ 840.484331][ T30] ? __pfx_kthread+0x10/0x10 [ 840.488966][ T30] ret_from_fork_asm+0x1a/0x30 [ 840.493773][ T30] [ 840.497414][ T30] Kernel Offset: disabled [ 840.501749][ T30] Rebooting in 86400 seconds..