last executing test programs: 3m5.745712227s ago: executing program 1 (id=2840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0x3b, @empty, 0x4e21, 0x2, 'rr\x00', 0x1e, 0xa23, 0x28}, 0x2c) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}, @TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3m4.812263675s ago: executing program 1 (id=2848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb16000000000000002900000043"], 0x40}, 0x0) read(r1, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x9}, {0xffe0}, {0x9, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m3.496751229s ago: executing program 1 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x604, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x5d4, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x130, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="bd5577acf3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x478, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x98, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xe0, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xb8, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7e"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m3.241392667s ago: executing program 1 (id=2863): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2063c2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8815}, 0x40000d0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8815}, 0x40000d0) 3m3.140351536s ago: executing program 1 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000018000100dd67c622e30000000a00000002000000000000001400050000000000000002"], 0x30}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x20, 0x8, 0x7, {{0x20, 0x4, 0x2, 0x0, 0x80, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x2}, {0x7, 0x3, '\n'}, {0x7, 0x2}, {0x1, 0x4, "3497"}, {0x0, 0x12, "358e2fe0f04252660e94c4c3759e4288"}, {0x0, 0x6, "02b7a4f8"}]}, @lsrr={0x83, 0xb, 0x5, [@multicast2, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x53, 0x0, 0x5, [0x2, 0x8, 0x40000000, 0x800, 0x1]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x8, [{@loopback, 0x2}, {@loopback, 0x7}, {@empty, 0x4}]}]}}}}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) socket$qrtr(0x2a, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xaf}]}}]}, 0x50}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 3m2.142989755s ago: executing program 1 (id=2877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) (async, rerun: 64) unshare(0x62040200) (rerun: 64) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) (rerun: 64) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async, rerun: 64) close(r4) (async, rerun: 64) close(r3) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async, rerun: 64) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (rerun: 64) preadv(r10, &(0x7f00000003c0), 0x364, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$int_in(r2, 0x5452, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2m45.589928911s ago: executing program 32 (id=2877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) (async, rerun: 64) unshare(0x62040200) (rerun: 64) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) (rerun: 64) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async, rerun: 64) close(r4) (async, rerun: 64) close(r3) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async, rerun: 64) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (rerun: 64) preadv(r10, &(0x7f00000003c0), 0x364, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$int_in(r2, 0x5452, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) 37.584977381s ago: executing program 5 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "fa1bbce9e64d9f41f684831c64ab42c5"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x917, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 36.643172501s ago: executing program 5 (id=3864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESOCT, @ANYRES8, @ANYRESOCT], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x50, 0x14, 0xf0b, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf4f}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3e20}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}]}}]}, 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='cq_modify\x00', r0, 0x0, 0x1ffffe}, 0x18) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x737) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0xa, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x2d4d}, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000000), 0x8}) 31.717310279s ago: executing program 5 (id=3898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 31.424558454s ago: executing program 5 (id=3903): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x83}}]}, 0xc4}}, 0x2c000011) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b400000015000100000000e00000020000000000000000000000ec00000000000000000097474e5b7ca8ed74000000000080000a001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x18, 0x2000}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00b6055d1617f1377414a57ef4eec5f512c8bc703f0662a060fa0397664f8eba1cddfa83389159e4caa81d2347f144ff213ebd5668", @ANYRES16=0x0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d5063300800400000000000000ff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 26.937078108s ago: executing program 5 (id=3926): unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x3, 0x1f}, &(0x7f0000000500)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="36c9a509036b9433617d7585deef5030d898ad864c5197c15635408a6693d631f893f0acce0a06349bf86bb4afdaad3339b55ecc0bdcdc3cd30be2b1432d601a13e644b225bb00094c2b9c1a9418abfb77cf86d4f48c1ec7631ef8b9c756beae5f157fd577de1aa61d00833d0ba185ccb460987859fc053306edba290fd87cfe33d20119569bf55f5d16f1d35d7a6d992cbd6bfe0dccff9fe30922d390", 0x9d}, {&(0x7f0000000280)="5ffabca8d4c0019594cf8241407f69e9fe9e3ad471e596aff808635719ccabf637cd1249c086f07cb0f995b3c2f7731c5bde6b82c1e2fdb473c3ce4a6de23a0a8e0e31d34b6205c5d35fb1adad", 0x4d}], 0x2, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x4d1}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x18a, 0x20a, 0x3ff, 0x1, 0x2, 0x7ff, 0x0, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0xc8, 0x20044091}, 0xa4b0175ac8c08eeb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00018006020600"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e1f, @private=0xa010102}, 0x10) 24.021467631s ago: executing program 5 (id=3944): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4008804) 7.688088651s ago: executing program 3 (id=4006): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, 0x53) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 6.989058365s ago: executing program 3 (id=4007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1d, 0x2, 0x6) unshare(0x22020600) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a3000ab34783244d19a1e000001080008400000000114000000110001", @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) unshare(0x22020600) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8660ad854abeb8f6e734d62eb3d046afe48cfa1eadf068a1da2c909624a51b2676e182fca7f7", 0x26}, {&(0x7f0000000340)="4c69adb414c3bfdae6654b8734deb0b1f7b68d206286cd712a0008588fc0cb880eae4568dab5a08f46fcbaad4fb50b1967ba3c8acc527c11d45e972884f2a34f32253abc0d31909e77216a9995da68cdf622b01d3c2a23383865c959c2cd0ad30994b153fe7f8a7dac6ccbcd0f23ee5b34a65fcbc1b05db64436d7b765c1761daea9e5cb8e736a392091b362d4020202666ef9049306290ced83f24b39ff0a3809e1ed754cf0ee22b607e61d", 0xac}], 0x2, &(0x7f0000001a40)=[{0x108, 0xff, 0x0, "462d129da6767181024f9430bfb555afd83f3b5f41c254fdb34a292101aabdb2b80064ba6daa30b11c6872794a51ee034be8e9960385cf9c7fe4652b0508efbff7bceafafbf6c6b2717f18b01f49fc997aa05bbe9013e70c3fe744ef17aa2249c0107d8f0a9231ce9a81e30f2addcb95d0792465b523c85ff7c2b1396e9edc1df9d722ed716dcc1f6b1ff02a576b27ec29999e1ee61bebc99a8e7c0f0670362cadafdeb65e0778839c57dc1b50c5b3cc58a3826fe0b3a020fa5c315d7a18d93c77ac184051af82d87573eae5478a3cd132574158296cc09ae8174917907aa797d1efa0309ff2a16b2e97b4df9a22c16462e5a425b17a76"}, {0x108, 0x116, 0x5, "2618259fd8c207172909cb09d01c583addae9a7c1c4b8fabf9ccd8d4a21c18606819a937afcfbb95a71d0261322d06b3d6c229855ed177ff40b87f885cf6df0bd998ffaa1f9d334b97e637a6c100a5a054db26f30d1d2f40f0237c200e97c5ba87bff8a063055204b2e538ef2f7f43cb2c8e15118c6140d76d14b635b13e791a1b38dd5c9c579e8eaa93f8e8522bd63ca6c88a8f4b9a5db590c40b50cd4daae9d19044e7936754764fa240cfe1579c7735e4bc670fff2f11bdb962e8c2efb3d4b033423a68c14e666236e6fd0a5ed5f625fbcd4b6b163d1400403c61585e9b695adb34fb799fe6d5a4257ba72ef1c8016b847b996de8c31b"}, {0x1010, 0x3a, 0x5, "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"}, {0x48, 0x113, 0xd76f, "98be70f18fa182d8219313912309acdd303a652fc114e773a1f4e525ea61e39cf400a44cf6cd13ccff3a02e6f33d2241c9d8fb75"}, {0xd8, 0x10d, 0xd, "39e71e360ede3bd17fac4865a01708bf9cceaff1169a95bf1d391564753888ca8c1c24c2812dda30280cc526d7288ec0b16871499107d964560875022131549e2906ca99b7f668a5e2909c4e2a82dda084a36ff82bfc81cb0b7f9c0e680b1f369fd58e3cb16b3e275dd61492e056751ac780eec79d1b775abf1521c2ff8b492a65b57414b48516746750c50fb5e7d9b1a098312dfc0d260b8b43c70f627577b32fa45557c4a80922350ba90c71dc230da4b9ad563dbe5f1b86328bc0adb6f9aa16"}], 0x1340}}, {{&(0x7f0000000440)=@isdn={0x22, 0x2, 0x80, 0x5, 0x5}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)="02be115f25d505326bd8f3b3803efd6ad6dd835edf420a832d867c76fabf0bd62a14f1b032997672984ae7f0cad37c5b1fbd7fd6036b36c008dad529bc27768d0bc9709e84920748cfcf3a5f1ecb73a1f1a9ba1006369f97cbf39875d91b1d82c9d5f68b74992416c37c014069d41f85758932fa1f9884b4957de238475ce91907d78e17d3873fdf634812e9cf", 0x8d}, {&(0x7f0000000580)="91dd101a3b126da1643d30eeaf2a9b2bcd53d51a35b7ef39f94c47a0741f7930475d7669a0b9f6234f70373585d5c5aca6b280903ca27d9d0fa748ef0d8b3d21739f8638f5de93e15a233743a175a8d47870", 0x52}, {&(0x7f0000000600)="15b55fcb9eb506b3ff3634d334f1ca3b2e7510a68735af1130136eeb70b2c648cb08e5f0d791bdfab339596a228e395d124259f34a83677f08466386e635273cb235c9a20ead5942101ae4049ad5fbea033897b719456dbdaa75385553553d47f4fbd842e1fb683c4e4b7f39e9faaa03b4541b3043702e4444b5d4848d9ebab5522d6cab97f3d378c00e5aa50b9ecf86eae7ea88fd70b9e23e109b4d37c21a1855a762ef67fc8f81acfd0021c6745cc6c59dda7522664cff33c32fdb5b6a2c3ffd949b7c94663cb3", 0xc8}, {&(0x7f0000000700)="b98e053e8b7f48f6125ea24f157641ab84e6867d333971ed8bf553c7d2d3ff4889463623ff34cd7a1fdbb2c88b1bf34840aa3f5cc7318ffe2081810e573455fe499238f39c8fb2d1d6265ecb2775ffc27efe99a73e50e3fa271bee867521e5fb489c104af875c7160bfc63d5850a15afd11e52338fb4d6ea62157f8e108b792387938aefd593eff428bd95dfe402bdd0ddaeb0a38e303b5956777b4a899f5289709b41d50c663c68775ce6cca5f8db4d3e4a481f8009e6bff423f6f16d42af8bb208eb7d", 0xc4}], 0x4}}], 0x2, 0x24000010) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@setlink={0x30, 0x13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000000001000000000000000c4100000014001462726f61c4c1d0f3c72a2b519c31646361"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) close(0x4) 5.440297078s ago: executing program 3 (id=4009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff7f, &(0x7f0000000140)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000f000000028000001294f98d431f0a995774194bf30dd3b69aae80a237d869762e126425824237765b04605d0583e92a6229", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 5.166361409s ago: executing program 3 (id=4014): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000006"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 4.874475512s ago: executing program 3 (id=4016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4.828964332s ago: executing program 4 (id=4017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0]}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x17}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "bbc109d60947859bc709d0f9223a2e0746"}]}]}, 0x30}}, 0x4000040) socket$inet_udp(0x2, 0x2, 0x0) 4.437349292s ago: executing program 4 (id=4019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f1080006"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f1080006"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) 4.29692367s ago: executing program 0 (id=4021): r0 = socket(0x40000000015, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket(0x40000000015, 0x5, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x10, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x3, 0x8}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x10000, 0x72cfdb12}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x2, 'macsec0\x00', {}, 0x2}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}}, 0xc000) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 4.258952422s ago: executing program 4 (id=4022): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) sendmsg$AUDIT_USER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3ed, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r11, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r14 = socket$unix(0x1, 0x2, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r16, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.898335551s ago: executing program 0 (id=4024): r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="000008000000040008000a00", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xaf50710421957d85}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYBLOB="06c292255dd5136ae936893bdc677700591e4f85467c6b3dcfc37d8994d6f50809b34f2ab94ffb1b5735c158b435c33882ffb96938a7f9dc48d57fb245a2f1c363613dd61e948abbf8ff22a0acbfd18253eb7ded0d380216613e0e45180f7ceb4f41696fea1250723811d73bdf7beb97a0a8f06af6723c0814605e1d8248cf25c42c5144a364ca1baaf3b903c07d17299ebd5f0a2f11adc5ca2b6c69ab102254cb76acb00e70be9e54007509f180edac8c90d6788e6e69c375e43a6a01e116344e5992fcb385e9487f0bff0222280521e67f64b1572c", @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f5fdffffff000000f0ffffff001811dd08", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x40, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xfffffffffffffe00, 0xb}) socket(0x1, 0x803, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r11, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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"/480, 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000540)="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", 0x13f}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) 3.2933006s ago: executing program 0 (id=4025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb70c4294fb9be03e73d06a9", 0x3a}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563d3851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8cfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200"/200, 0xc8}, {&(0x7f0000004480)="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", 0xd7a}, {&(0x7f00000003c0)="aba1501aab68c98b25f2a20fd588ccbb9eb6a11a63c2af70c8d13d17203fcea6070b6cef7d3590e1fdb152e02a", 0x2d}, {&(0x7f0000000040)="d1dfb5345305b36fde54ea2bb90c85a794861eeb44c171af870a8a645eedcdfba52cfff17f47d99091b946", 0x2b}, {&(0x7f00000006c0)="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", 0xff}, {&(0x7f0000000180)="eb54e9679f86cd6d74c0fd07a668b84c493ecfcc419f9fde4554471d602feb4e", 0x20}, {&(0x7f0000000400)="4c86d86a3c9f0574b80ec90e59e45f2376a13116a51966034bfb12cfbd232532c918c5057e2dee5bb88bca4d54ab5cce23534ad342cba6f659dbe1173cb4e70b4a8ec1a95db16b3949b256c59befd34c3f3b8a3b19170256dc7a2ea552ad88fe43766ce9d8a4abe94113184c6758548990bf51c4bd338a84c2728776d045e6ff15b9044cd6a53e", 0x87}, {&(0x7f0000001040)="3457f9887558df5cd80788f5c1bce78ebab07128105b2a85176af737e454d5d086d94806a38a16e8c2bff9551b64a93c17f658c51c1363a6cb5e95c4cafa203026e20823eb0e3fe4319f4030707c6ccba70e51f29c68d24bf58ef22f95d4e2c36f2e4bd69166b776a46f3653e30abad6d4904293fca91def8d9a2a5e182a37f6e9d9d70623587277da2b547e3bb54afce2fadd2a08580d7f0d8596def69419f9e0a346e59c0683d3eacb859e043a565d825f6a3bb0b49aa9c974f5455ea884d235c3acafee60a9f9837f7b06a9d1686ed3255abd2e50f58a523a47489089302ec59471a3df034b67668a158b5686762ee59d21d7f618b684c6acdf500e02e0fdfeda6a4677f40de02f239213340f3ee9602ff6cbcd4e18348c303cda4205f9b9a0d91a42f81a756f2c66e37874123b492e219ef50d910487ef8abef89e10f1bfbf9969fd7040a379bfd9e616b7a818bbb773487a3938537dbd678e49db8555e81d8e117333870fb14c92f5cf206102d808356d08ed672ae032c404ae28de18f79da8653743fe0c3ed24b769b9c904c9a9f2e3f4974aa54c5ba4cd21971d1f69e9298aba0da7d088ec861a9a69579737d26db31d8cde54bc111441d036225869f589bb1ea3ce16abdd23b083b45d97ea276836554e21a41fa8b5ed109d89af8835339946a2af6e2b1612b6803f7b41ac574f765be8906a52133a163f11aaa9251e236be0c2cdf7f550b931954100c098666b626b48546c04e7fcf02d7677b2c9e184b7d918c049b9f0cf76cdbdfb6be0883ae32ffa11bbf8fd630b2df8a44090b6f60ebb7bb120fd7d6aedf7a46d50e9c1b8ebdbd4744836e1fb532c1a43e084d12b1fbbed218942c85455d5006c2140f988fb721ce5e0d271c44cada24f53189b1513b10930450ec9f2c1a2013d21b30eef56d814aa6a4d79d67104196bcc1727ca7522b58b48f8665fa7d4396de9d9eade48b4809adc9fe1cbb903e7b783ce2ac71b2c23e855cef314797010e1cfc5a309b2ead945ad1f758fd9a21667dcf677c4d8a89ad55921b26dfdc0dbe2396db7d31649dc33776f037f70a5f9811aefb69bbdc02c40cda8fedb93f672c710714b04d726fc1c78948ca01d978fc95df3f4a136515142e4043cdfbd5aca8d0e9ffc37309abe1818eedd95340fc6510e5839cf5511203ec83251aebbc08650172efa99038e2cf7196d583b5feee7c27d30c7686d534b15425b292b1c867d0e328687c097dc90ceb4c215cc11f9f55ff7cb4e9b3d1af3b44ce398d00bc3fec603f5faa504649a1978b3f775d24b9300491daca58f2dec2ed1f63b1837ec7e9ae7878e6c5218b63ac324ceef34458c9ebc7ba2dbf57bfd0185f1591128ab1a07e504418197a9f2a69658eb436f6c0df2714990296d271aca099a343ce9936b1b2176e96bc97ff33011b4c68f9f94edeb5c2297329d23e1acbc63e52e09ea0d80c8fd4d79b93aae710cdebd30abda28db21160af6238af502b845b84d23c1e517a3755c3b067482f5629cba19f04ae46a1533d3858de33a2c433f018425738b180d5597a02b3da19a80eb7c77dddd6b3f7525525679d65c14fc7a2699d090ffa86ae39c29d3a5a7b71a2a582948830e2fd8141b4f99b0acda88b5918c99dff55130800621bb372cbfbd4a46a3fdf4683f66bafc09508015bb06e62ee56d76b8e3ea0ac6987153922455c3f19e4452206f1fb8a2ae183f4a3f8d8b7914b434a1bddfb604ae4e1261ddd3f7b5a5bedafa7d1070295542a0da37b5505bbcf560992fb57028f70171c185078360a530f2ff372259315e8e7f0b3c3888046e63c8f2d7c546f0dfe71dbece4c9e2f9e21f191814ee3b46895ed22f4400ff336b0bcbbe8a0c42fbde10cc0a2123dc591ef4a29b20e1b4a34d39149dc1724fab7eadc3d1dc7cd16e9df5a16b18b56ae723a1f0495f7c3f15560478e6f338fb7007e50947ba0c03a397d65f2c4b9891a3421506a4d9c5f84d28b24f88bbb470a057403100ccfc45b4bda57c8c5c9565ad59c603103a97a5f5b42eb65f4e21ee9026484547f6e5143ff977d873f286f218ec445492624b17323ebbc68d47f8eef0e24b15062e5a7894a7aa90e0f0193478b1ea994a9791e4131b941d6aec17cd7b169ad90fe631b152dc9dcba42fbbcd63df88860e23d5215a814eda0a37b429ba881af9de6beb0b5837734b9de50f76748b3f067bf436812f64bd42f44bfa5af58494bf9768580755c028883b95d3b435292cebf2d3230fd8ce50bc6da3c566abf254a655b38e77703a4c6d16b80eda49a4cd8c789306f0fb40db106c3157074b86c379fcd83353daa900ec88b4df0b062ea973bb591bbc65db47278ab1a71c64e0616680dc2e88a8b570e2a5b2875610a40586d35409359d92f14741bf4caea705917783e69411a7a98f475e6e06e86c6dfdfb3d9a4b0b7cdd5e39273b94ef8f22fb3fda409c0eb46d99363730ec7a8379122e12876f0f712fb278386b4a32fe16b140ac5297f400c68e60183e90820d5b5d1ed07a95f2475bdef87c1391a9233b4b17c5aed03fa96fbb71206676cd0effab21ebdaf616eddc2c1743759ca1c2b7d55ae377548066108adb1f33c654b6e2333b919f6aee5b7fcdcc03919a8e848b33bee64ad6b380f0ea690de5dacfbaba2148197b46a45f582b00309f3955c18634fa08cc0313ee6d1bc7f4361450ea6a9fdb8eeb147adc387b303088b3127712f968fdc89b179b75a85149ae8d003b5883fd866190d1d5e2c90ea4170233d5bd67d763502677d292345c5ff62a34d149f5dbd60025a968ab21763b966a76ef527645b6499deea3533c8b85c0cd3832a4289f189f39e93666bc22f2eca08cd2c4ab13fa0fcc24cd16ac3ed5ced0f78bc419c27a43f78da92e7cedae392d21a855a0a514b58fd5ebbf3352ea0205aa95688fdd7911c5027e653649b8185467b05915b14f45528abe986c0c085daa1553ad5020f1755b689cfb2df5c73701426a51bb4322c250bdcbf84b72fbbf5efe6e0c1141e2bc6c3134cfcaf5a0c10f9558d5b300b304879fdcd2a3c8e54016ade0008cb0ee3f4e3277acaf0f13ee9109d57e2a3744e6f2693a05c1b7c5043de83ca3fdec3b21d873e5ec3215f40e1438f290ffd9b015d9010c214fe0c6b2f24bd8a24ae06a694021b7aea2a18db7fe76bb94c2f1b30a5300526998a92a1aa270a598c5319ed10603c9ea7ac73c2cdc3218930aa87b4727e19ea74962d47a42b031d84a7e6703456ab7be5eeefe217c77fc1d3b9da80f559e363876db5cb4219a8ea551dd3f60c10cb34af95a8e7ff194cc90a7691e151f7a6f179c6d79a593d8e1c2872839be55c4ba7010a477528fa82c05edfd72896a5c2e2a5b453458b90e9dc76f8cbeb8b59818aaf1c7868d688239b924d6f0b2fb15a1f040ea5b178f1d9504f69edaa91b747b08e9e63e82e1d865b65a702742c0b4420287cf43d94247eb09babbd6aed54de908d2c5496092c1746f62e43611d45863d0553ffbcfdecef314d81854f7ba385938217f7f0007b3d10d9c52ac6d7d2f8ed37697d7a208e8e15a7050dcc8843039ce99c931de2c1a839e00c2f939e8a178723bc475c92c188b9b91910a0c19fdc368b5ed79d6ae176e99afaecf8d7b18fdeb1abee528564ec1f2f8129dcdb8be4a58aeb172c62b11ec04ea0727dd4e6460efd57e1a5bb72339f530c00957fe56e12c398e5a1a32669c8cd5813805e322db67aee57248491b6c45c768416a17148aab18097f617962633e6c84424d8da0574bfcdbc98b38fdebc9979de7b6b5797ad739f903b07f4077aab645e42d33d90de715f144e8983585b5d64ce583ab5cb070f74f06441cac98a74cdc7d276ca146347ace84a85e01ce85b145a1a24208282ec5f6010b6437a3a6158b1ddb96960bfc0107bf95aee7b45dbd8a92fba0f4db3ee3898568abdd670b92b437ce31bf36fa865fcd6fc769be818b3ce3d1adce8eaa8730d28a021fa88a7441a6e30d261f13487c9f6c2186bab879191810af32c69f8ca875e39e11e383e3ac1cf1ce0b27e301d9cb1537d0aab13689d92de0184edbb711aaf78ecfb7439dab0731399dfd2a8e0d099dcb643ee70b3d857d6f9ae03955ac07efc04638a8e36f7796094d4c008775bea1fc0707b41bace4035a40ea50a68a5bbb20048d9233b6b2073025911745b29f96886002fed3ef0439f1ee491d8c8c44d391c43a73b349d650dfda870bb62ca7c053ba7408330a9432bf844b37fc005bec2a97baf25ca1f89cb8e3f86818210d9129f93b9945f0343850129ff5e33f8aa16e139d0ecde5cd52b0e2f7630d2763c7b096e721c669630d1c1bc808c0cfbf5f313bd82165c24eb72a119ee3ea83ffb059f53481a2c939611b675e4192c87ca620f293560b2687953f3d063d37644a7dcc806c53d4bf74a12107d9c1ac33b8f82fba6fab7430c3c2cf588a8a9f2ddbd610196b48d4a7b8202ffd05b21708e3b7b539fded96daca00956c86fbf73bd55e3d813831ba803d305554a5fbb2fa3beab2e80cf2bc43893367ba30c0cec1e612df59f9bd523c0eb15d1151caa69fcdd1fc24ecd8800bf5e75bcc55f803fed58eeffe0a01dbf4b3ed646a869f15358e2122b6f8e18c755822d317d04713c58c94ea156052904457ad1633bb32621bd18cd1a0a4f2df2a1d68115dfab4e7272822d6f4c9745bb36878ae6053efb2146c8074483e33fe4390cfae635043d745771d60ffc18966066490c0523f63d9eb8e63e7fd9c490cbfa4d0f826635f48525e2a8ed45051e09d21278a1b7be9c6bccdf65b348bff080c8ea6615801602079a37f61ed3bfbe7580270905e0312ba71b7ddf6b9a3df8a7b8bc6464e104e2eb775053e6ff17606aeea79335c0c13a46d1e747020051cddd7710b3b7c37a7d57d0f73bb5c9a427c9571694cb695e8d178b974e2969d97695a6e474f5a3ce0d8af3c98353b0cf815058865823c06aba40bee95d427a6ed70528bbd3bb16b0d14d4d68a292a6b148d7179b362be6777d16e81ad9877a89308434c87d2a84a00e501b25aecd49e77e2e3630f565b7b86412bfbb9e710677cbd31034852366b091b5ad5bf3ae951713e92765053f99a4c443331a2b51bf21e2b5ea31d74b9bb5785e77cb75d2397e23941f7f5e2971c479fd3f3cc3d2ce31e36aeefd10a827e89102a847d8c425651686b19abc12960c22fdfd9d4bb3a0ea1bd350f2c822e41ee96b92210d32a3a46a8c3dca62da58fa317aa5d95f8d1c5fd9d8e442ab739994477efeaebf4dd73d9db52799312153ee4db8d763e2e2b080e733f5741c2d7413515ac4fc98d4ddf723f227b9d45550d53e9bb67f2d13328a2d2e0061ed20937fde6796a2b160d59606dad83e011e0ad1d0750be8872351d275717a4e16e937e3639b78060079235fbd016f4a9992472f0a0b2d3af7fd9ac1f83d8cbbfdcac537f8517b9eab7f1114270711f68b2d9d6813fa97bf77532cadee797b44a672440ae11d0c71cb8166e8263820cba502fec1e7357734e580116760c57aa0953dc4c036fc7f6cac006a03ed29e279e325d71319e7caaf8c6cb755495f93ac70e116d3707a7fd3ad37cc475a822c6d07fc1921bd9241d0a0e707347064d93d4cd9105d8f575d5eb694822a69abeb5cf453322600044e545207fdc7be56af8dbeb13755e5e7e0cd72c6a26ef6675afe79fc6e9fba6cd894583312c69eecae8c2eb55a33b0b5ec1a561c3a92f50bd5a397adf1cdb6b05eddb4b1c293738dfb8bf5d4988829b16c47ae50c7899bcc880f09804", 0x1000}], 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "170000e5ffe4ac00"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 3.219498387s ago: executing program 4 (id=4026): r0 = socket(0x1e, 0x4, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) (async) connect$pptp(r4, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0xd0}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) unshare(0x2c020400) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0x2) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt(r8, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x7, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 3.199578702s ago: executing program 0 (id=4027): r0 = socket$inet6(0xa, 0x2, 0x7123) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x200000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x200000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) 3.093148308s ago: executing program 0 (id=4028): r0 = socket(0x21, 0x3, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) r2 = socket$inet6(0xa, 0x4, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, &(0x7f0000000240)=0x8) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2.883521405s ago: executing program 2 (id=4030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300010000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00005100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 2.665237763s ago: executing program 2 (id=4031): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}], 0x1}}], 0x48}, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0xbc, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x769}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x7f]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7ff7}, @device_b, @device_b, @random="8a718e480b6b", {0x9, 0x2}}, @sp_mp_confirm={0xf, 0x2, {0x800, @random=0x9, {0x1, 0x8, [{0x6}, {0x32}, {0x28, 0x1}, {0x3}, {0x9}, {0x3, 0x1}, {0x6, 0x1}, {0x63}]}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000004) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) 977.479823ms ago: executing program 4 (id=4032): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x4, 0xfffffff7}}]}]}]}, 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000d80)=[{{&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000180)=""/56, 0x38}], 0x4, &(0x7f0000000640)=""/225, 0xe1}, 0x6}, {{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f0000000480)}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/63, 0x3f}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000bc0)=""/50, 0x32}], 0x7, &(0x7f0000000c80)=""/200, 0xc8}, 0x401}], 0x2, 0x0, &(0x7f0000000e00)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 902.621982ms ago: executing program 2 (id=4033): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x4c, 0x2f, 0x0, @private2, @local, {[@srh={0x88, 0x0, 0x4, 0x0, 0xdc, 0x30, 0xfff}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0xa, &(0x7f00000000c0)=[0x7, 0x50, 0x7, 0x4, 0xffffffffffffffff, 0x4f2, 0x10001, 0xa, 0x4, 0x80000000], 0x5, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e000100000000000000000000001000"], 0x1c}}, 0x0) 584.475265ms ago: executing program 2 (id=4034): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018eeffffffffffff0bc5e8aab576e19802e24a479c115f0000000c00f1ff0300000002"], 0x0, 0x27}, 0x28) r1 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000240600fe8000000000000000000000000000bbfe800000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c2000090"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000000000006000e"], 0x48}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x5, 0x81, 0x1ff, 0x803, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x4, 0x8}, 0x10, 0x3ad7, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x4, 0x2, 0x6}, {0xfffffffd, 0x1, 0x1, 0xb}, {0x1, 0x5, 0x7, 0xb}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x55, 0x0, &(0x7f0000000200)="6eb53cfbcc3386d16a01a57b9a43401effe16f8aeacedd392b7e6c5d6437682f88d3a7d35e7f9a32d577f9c61004a4a27eb5b1cd794af78bda2286c1e509793b972206074b8408a810bf05c1a4003ce8c2f633eda6", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x1}, 0x50) 297.061433ms ago: executing program 2 (id=4035): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003000000020010290780000001ce0000300030690787cfa000945f4fff600650005011d00030a010102ac1414aa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x2400000001, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x4, 0xbe, &(0x7f0000000340)=""/190, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3ff, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x4, 0x3, 0x5}, {0x5, 0x1, 0x7}, {0x1, 0x5, 0xf, 0x6}, {0x4, 0x3, 0x9, 0x6}], 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a0000140019"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d04fdb0bed362742f95f00003d6466f80000030000004c000162dcf720d811a2ac28816b35ba26803800040014000100e3004e247f0000010000000000000000200002000a00000000800000fe8000"/90], 0x60}}, 0x0) 233.352464ms ago: executing program 0 (id=4036): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x43) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x69, 0x7f2, 0x48, 0x1, 0xf, @rand_addr=0x64010102, @multicast2}, "2b3e2a0daee29c99"}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'netdevsim0\x00', {}, 0x7}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) 72.102419ms ago: executing program 4 (id=4037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "170000e5ffe4ac00"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 41.226927ms ago: executing program 3 (id=4038): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='.\x00\x00\x00', 0xfffffffffffffdb5}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$llc(r4, &(0x7f00000000c0)={0x1a, 0x201, 0x8, 0x7, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, 0x0, 0x40000c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) 0s ago: executing program 2 (id=4039): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000021600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) kernel console output (not intermixed with test programs): Port device team_slave_1 added [ 461.770099][T16653] wg1 speed is unknown, defaulting to 1000 [ 461.884615][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 461.930020][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.944958][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.989895][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.053729][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.063405][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.099179][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.169962][T16667] syzkaller1: entered promiscuous mode [ 462.176459][T16667] syzkaller1: entered allmulticast mode [ 462.395405][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 462.399672][T16619] hsr_slave_0: entered promiscuous mode [ 462.422875][T16619] hsr_slave_1: entered promiscuous mode [ 462.432709][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 462.454048][T16619] Cannot create hsr debugfs directory [ 462.479042][T16677] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 462.492716][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 462.549314][T16677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.570686][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2911'. [ 462.617692][T16681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.624760][T16681] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 462.638539][T16681] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 462.659433][T16678] bridge0: port 1(veth0_to_bond) entered blocking state [ 462.670209][T16678] bridge0: port 1(veth0_to_bond) entered disabled state [ 462.677606][T16678] veth0_to_bond: entered allmulticast mode [ 462.685759][T16678] veth0_to_bond: entered promiscuous mode [ 462.736015][T16677] veth9: entered promiscuous mode [ 462.744317][T16677] bond1: (slave veth9): Enslaving as an active interface with a down link [ 462.761367][T16682] vlan5: entered allmulticast mode [ 462.767574][T16682] veth1: entered allmulticast mode [ 462.772981][T16682] bridge0: port 2(vlan5) entered blocking state [ 462.780424][T16682] bridge0: port 2(vlan5) entered disabled state [ 462.791174][T16682] vlan5: entered promiscuous mode [ 462.796420][T16682] veth1: entered promiscuous mode [ 463.231654][T16690] lo speed is unknown, defaulting to 1000 [ 463.363978][T16690] wg1 speed is unknown, defaulting to 1000 [ 463.588512][T16619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.660707][T16619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.713443][T16619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.737724][T16619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.745325][T16705] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 463.815249][ T5868] Bluetooth: hci4: command tx timeout [ 464.129370][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2920'. [ 464.282168][T16736] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 464.301733][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.326875][T16695] syzkaller1: entered promiscuous mode [ 464.332481][T16695] syzkaller1: entered allmulticast mode [ 464.391378][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.445949][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.453151][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.582648][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.589941][ T7838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.330874][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.642623][T16787] netlink: 'syz.3.2935': attribute type 11 has an invalid length. [ 465.899528][ T5868] Bluetooth: hci4: command tx timeout [ 465.996279][T16800] __nla_validate_parse: 3 callbacks suppressed [ 465.996300][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2938'. [ 466.252232][T16619] veth0_vlan: entered promiscuous mode [ 466.303542][T16619] veth1_vlan: entered promiscuous mode [ 466.505492][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 466.519217][T16619] veth0_macvtap: entered promiscuous mode [ 466.573839][T16619] veth1_macvtap: entered promiscuous mode [ 466.640441][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.651124][T16829] netlink: 'syz.0.2946': attribute type 5 has an invalid length. [ 466.664058][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.907335][ T7838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.930781][ T7838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.950740][ T7838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.075705][ T7838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.204289][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2948'. [ 467.209460][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.233002][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.332899][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.356445][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.957300][T16865] tun0: tun_chr_ioctl cmd 2147767520 [ 467.976349][ T5868] Bluetooth: hci4: command tx timeout [ 468.260605][T16876] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2958'. [ 468.337636][T16876] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2958'. [ 468.615835][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.628261][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.641483][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.656611][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.666954][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.828592][T16879] lo speed is unknown, defaulting to 1000 [ 468.839298][T16879] wg1 speed is unknown, defaulting to 1000 [ 469.154537][T16902] lo speed is unknown, defaulting to 1000 [ 469.180902][T16901] lo speed is unknown, defaulting to 1000 [ 469.240975][T16902] wg1 speed is unknown, defaulting to 1000 [ 469.387955][T16907] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2968'. [ 469.423925][T16901] wg1 speed is unknown, defaulting to 1000 [ 469.480880][T16907] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.516075][T16904] syzkaller1: entered promiscuous mode [ 469.521603][T16904] syzkaller1: entered allmulticast mode [ 469.760849][T16879] chnl_net:caif_netlink_parms(): no params data found [ 470.370683][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2972'. [ 470.390551][T16938] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2974'. [ 470.405307][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.416661][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.424070][T16879] bridge_slave_0: entered allmulticast mode [ 470.470340][T16879] bridge_slave_0: entered promiscuous mode [ 470.490907][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.507592][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.524463][T16879] bridge_slave_1: entered allmulticast mode [ 470.547713][T16942] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2976'. [ 470.550502][T16879] bridge_slave_1: entered promiscuous mode [ 470.698657][ T51] Bluetooth: hci2: command tx timeout [ 470.783218][T16936] lo speed is unknown, defaulting to 1000 [ 470.789276][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.798438][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.812067][T16952] FAULT_INJECTION: forcing a failure. [ 470.812067][T16952] name failslab, interval 1, probability 0, space 0, times 0 [ 470.835886][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.5.2979 Not tainted syzkaller #0 PREEMPT(full) [ 470.835915][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.835928][T16952] Call Trace: [ 470.835937][T16952] [ 470.835945][T16952] dump_stack_lvl+0x189/0x250 [ 470.835976][T16952] ? __pfx____ratelimit+0x10/0x10 [ 470.836006][T16952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.836032][T16952] ? __pfx__printk+0x10/0x10 [ 470.836057][T16952] ? xfrm_netlink_rcv+0x79/0x90 [ 470.836082][T16952] ? ____sys_sendmsg+0x505/0x830 [ 470.836102][T16952] ? __x64_sys_sendmsg+0x19b/0x260 [ 470.836136][T16952] should_fail_ex+0x414/0x560 [ 470.836169][T16952] should_failslab+0xa8/0x100 [ 470.836203][T16952] kmem_cache_alloc_noprof+0x73/0x3c0 [ 470.836230][T16952] ? skb_clone+0x212/0x3a0 [ 470.836259][T16952] skb_clone+0x212/0x3a0 [ 470.836286][T16952] __netlink_deliver_tap+0x404/0x850 [ 470.836331][T16952] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.836364][T16952] netlink_deliver_tap+0x19c/0x1b0 [ 470.836395][T16952] netlink_sendskb+0x68/0x140 [ 470.836425][T16952] netlink_unicast+0x397/0x9e0 [ 470.836449][T16952] ? __asan_memcpy+0x40/0x70 [ 470.836483][T16952] ? __pfx_netlink_unicast+0x10/0x10 [ 470.836523][T16952] netlink_rcv_skb+0x28c/0x470 [ 470.836554][T16952] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 470.836582][T16952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.836630][T16952] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.836659][T16952] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.836693][T16952] xfrm_netlink_rcv+0x79/0x90 [ 470.836726][T16952] netlink_unicast+0x82f/0x9e0 [ 470.836766][T16952] ? __pfx_netlink_unicast+0x10/0x10 [ 470.836797][T16952] ? netlink_sendmsg+0x642/0xb30 [ 470.836826][T16952] ? skb_put+0x11b/0x210 [ 470.836850][T16952] netlink_sendmsg+0x805/0xb30 [ 470.836902][T16952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.836935][T16952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 470.836968][T16952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.836989][T16952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.837020][T16952] __sock_sendmsg+0x219/0x270 [ 470.837049][T16952] ____sys_sendmsg+0x505/0x830 [ 470.837086][T16952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.837115][T16952] ? import_iovec+0x74/0xa0 [ 470.837140][T16952] ___sys_sendmsg+0x21f/0x2a0 [ 470.837162][T16952] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.837221][T16952] ? __fget_files+0x2a/0x420 [ 470.837248][T16952] ? __fget_files+0x3a0/0x420 [ 470.837287][T16952] __x64_sys_sendmsg+0x19b/0x260 [ 470.837309][T16952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.837339][T16952] ? __pfx_ksys_write+0x10/0x10 [ 470.837361][T16952] ? rcu_is_watching+0x15/0xb0 [ 470.837386][T16952] ? do_syscall_64+0xbe/0x3b0 [ 470.837417][T16952] do_syscall_64+0xfa/0x3b0 [ 470.837442][T16952] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.837467][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.837485][T16952] ? clear_bhb_loop+0x60/0xb0 [ 470.837508][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.837526][T16952] RIP: 0033:0x7f878ab8ebe9 [ 470.837543][T16952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.837560][T16952] RSP: 002b:00007f878b97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.837579][T16952] RAX: ffffffffffffffda RBX: 00007f878adb5fa0 RCX: 00007f878ab8ebe9 [ 470.837593][T16952] RDX: 0000000000042000 RSI: 0000200000000380 RDI: 0000000000000004 [ 470.837605][T16952] RBP: 00007f878b97e090 R08: 0000000000000000 R09: 0000000000000000 [ 470.837616][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.837627][T16952] R13: 00007f878adb6038 R14: 00007f878adb5fa0 R15: 00007ffeaef43778 [ 470.837657][T16952] [ 471.350280][T16879] team0: Port device team_slave_0 added [ 471.383862][T16936] wg1 speed is unknown, defaulting to 1000 [ 471.386340][T16879] team0: Port device team_slave_1 added [ 471.414998][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2981'. [ 471.430412][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2981'. [ 471.440034][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2981'. [ 471.479866][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.488288][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.539759][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.571537][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.580625][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.608742][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.733759][T16966] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2983'. [ 471.954362][T16879] hsr_slave_0: entered promiscuous mode [ 471.971943][T16879] hsr_slave_1: entered promiscuous mode [ 471.980153][T16879] debugfs: 'hsr0' already exists in 'hsr' [ 471.986197][T16879] Cannot create hsr debugfs directory [ 472.664722][T16879] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.775996][ T51] Bluetooth: hci2: command tx timeout [ 472.787354][T16879] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.857547][T17010] FAULT_INJECTION: forcing a failure. [ 472.857547][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.878022][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.2.2990 Not tainted syzkaller #0 PREEMPT(full) [ 472.878055][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.878069][T17010] Call Trace: [ 472.878078][T17010] [ 472.878087][T17010] dump_stack_lvl+0x189/0x250 [ 472.878119][T17010] ? __pfx____ratelimit+0x10/0x10 [ 472.878149][T17010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.878175][T17010] ? __pfx__printk+0x10/0x10 [ 472.878221][T17010] should_fail_ex+0x414/0x560 [ 472.878255][T17010] _copy_to_user+0x31/0xb0 [ 472.878282][T17010] simple_read_from_buffer+0xe1/0x170 [ 472.878321][T17010] proc_fail_nth_read+0x1b3/0x220 [ 472.878349][T17010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.878379][T17010] ? rw_verify_area+0x2a6/0x4d0 [ 472.878404][T17010] ? __lock_acquire+0xab9/0xd20 [ 472.878433][T17010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.878459][T17010] vfs_read+0x200/0xa30 [ 472.878486][T17010] ? fdget_pos+0x247/0x320 [ 472.878509][T17010] ? __pfx___mutex_lock+0x10/0x10 [ 472.878541][T17010] ? __pfx_vfs_read+0x10/0x10 [ 472.878571][T17010] ? __fget_files+0x2a/0x420 [ 472.878608][T17010] ? __fget_files+0x3a0/0x420 [ 472.878639][T17010] ? __fget_files+0x2a/0x420 [ 472.878682][T17010] ksys_read+0x145/0x250 [ 472.878713][T17010] ? __pfx_ksys_read+0x10/0x10 [ 472.878738][T17010] ? rcu_is_watching+0x15/0xb0 [ 472.878766][T17010] ? do_syscall_64+0xbe/0x3b0 [ 472.878815][T17010] do_syscall_64+0xfa/0x3b0 [ 472.878844][T17010] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.878878][T17010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.878898][T17010] ? clear_bhb_loop+0x60/0xb0 [ 472.878924][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.878944][T17010] RIP: 0033:0x7fadc358d5fc [ 472.878962][T17010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.878979][T17010] RSP: 002b:00007fadc17f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.879000][T17010] RAX: ffffffffffffffda RBX: 00007fadc37b5fa0 RCX: 00007fadc358d5fc [ 472.879020][T17010] RDX: 000000000000000f RSI: 00007fadc17f60a0 RDI: 0000000000000005 [ 472.879033][T17010] RBP: 00007fadc17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.879046][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.879059][T17010] R13: 00007fadc37b6038 R14: 00007fadc37b5fa0 R15: 00007ffcd710e398 [ 472.879094][T17010] [ 472.882556][T16879] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.314195][T16879] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.440728][T17022] lo speed is unknown, defaulting to 1000 [ 473.496568][T17022] wg1 speed is unknown, defaulting to 1000 [ 473.945967][T16879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.977707][T16879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.010142][T16879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.043719][T16879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.055408][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.322536][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.404955][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.459489][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.466781][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.590683][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.597914][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.650719][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3005'. [ 474.680915][T17071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.691658][T17074] netlink: 'syz.2.3006': attribute type 4 has an invalid length. [ 474.740747][T17069] netlink: 'syz.2.3006': attribute type 4 has an invalid length. [ 474.856324][ T51] Bluetooth: hci2: command tx timeout [ 475.005874][T17083] lo speed is unknown, defaulting to 1000 [ 475.052054][T17083] wg1 speed is unknown, defaulting to 1000 [ 475.052065][T17087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3011'. [ 475.069960][T17090] lo speed is unknown, defaulting to 1000 [ 475.107133][T17090] wg1 speed is unknown, defaulting to 1000 [ 475.358147][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.989540][T17123] netlink: 'syz.2.3017': attribute type 62 has an invalid length. [ 476.530691][T16879] veth0_vlan: entered promiscuous mode [ 476.583051][T16879] veth1_vlan: entered promiscuous mode [ 476.741639][T17148] netlink: 304 bytes leftover after parsing attributes in process `syz.3.3022'. [ 476.893294][T17148] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 476.935913][ T51] Bluetooth: hci2: command tx timeout [ 477.755478][T17159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3025'. [ 477.781774][T17159] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3025'. [ 477.829014][T17159] netlink: 'syz.2.3025': attribute type 6 has an invalid length. [ 477.845461][T17159] netlink: 'syz.2.3025': attribute type 5 has an invalid length. [ 477.853241][T17159] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3025'. [ 479.694578][T17162] bond0: Unable to set up delay as MII monitoring is disabled [ 479.730200][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 479.756140][T17170] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3027'. [ 479.884241][T17178] netlink: 'syz.2.3029': attribute type 1 has an invalid length. [ 479.918153][T17180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.927371][T17178] netlink: 'syz.2.3029': attribute type 2 has an invalid length. [ 480.031235][T16879] veth0_macvtap: entered promiscuous mode [ 480.058118][T16879] veth1_macvtap: entered promiscuous mode [ 480.154707][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.217857][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.333168][ T7824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.381843][ T7824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.410296][ T7824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.465898][ T7824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.493980][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 480.566563][T17195] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 480.590991][T17195] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 480.760755][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.785796][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.889189][T17206] netlink: 'syz.3.3038': attribute type 39 has an invalid length. [ 480.915954][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.955407][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.607365][T17233] veth9: left promiscuous mode [ 481.768834][T17228] "syz.3.3042" (17228) uses obsolete ecb(arc4) skcipher [ 481.900511][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3048'. [ 481.931122][T17249] smc: net device bond0 applied user defined pnetid SYZ [ 482.053277][T17254] netlink: 'syz.5.3050': attribute type 1 has an invalid length. [ 482.083047][T17254] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3050'. [ 482.111034][T17254] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3050'. [ 482.142735][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'. [ 482.160176][T17257] lo speed is unknown, defaulting to 1000 [ 482.247546][T17257] wg1 speed is unknown, defaulting to 1000 [ 482.614371][T17277] lo speed is unknown, defaulting to 1000 [ 482.626844][T17277] wg1 speed is unknown, defaulting to 1000 [ 482.742581][T17282] lo speed is unknown, defaulting to 1000 [ 482.772468][T17282] wg1 speed is unknown, defaulting to 1000 [ 483.072972][T17300] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 483.483982][T17305] tipc: Enabled bearer , priority 0 [ 483.553129][T17305] syzkaller0: entered promiscuous mode [ 483.566477][T17305] syzkaller0: entered allmulticast mode [ 483.655862][T17305] tipc: Resetting bearer [ 483.738890][T17306] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3064'. [ 483.863512][T17304] tipc: Resetting bearer [ 483.940674][T17304] tipc: Disabling bearer [ 483.954961][T17322] netlink: 'syz.4.3069': attribute type 2 has an invalid length. [ 483.973618][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 484.004095][T17322] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.3069'. [ 484.026030][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3069'. [ 484.065420][T17324] netlink: 'syz.4.3069': attribute type 14 has an invalid length. [ 484.093392][T17324] netlink: 'syz.4.3069': attribute type 11 has an invalid length. [ 484.148820][T17325] lo speed is unknown, defaulting to 1000 [ 484.204067][T17325] wg1 speed is unknown, defaulting to 1000 [ 484.402658][T17346] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3073'. [ 484.435919][T17345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3073'. [ 484.474948][T17345] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 484.512808][T17346] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 484.522328][T17346] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 484.532406][T17345] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 484.781879][T17366] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 485.571223][T17402] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 485.618318][T17406] FAULT_INJECTION: forcing a failure. [ 485.618318][T17406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.671359][T17406] CPU: 1 UID: 0 PID: 17406 Comm: syz.4.3093 Not tainted syzkaller #0 PREEMPT(full) [ 485.671391][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.671406][T17406] Call Trace: [ 485.671414][T17406] [ 485.671424][T17406] dump_stack_lvl+0x189/0x250 [ 485.671455][T17406] ? __pfx____ratelimit+0x10/0x10 [ 485.671497][T17406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.671551][T17406] ? __pfx__printk+0x10/0x10 [ 485.671587][T17406] ? __might_fault+0xb0/0x130 [ 485.671636][T17406] should_fail_ex+0x414/0x560 [ 485.671671][T17406] _copy_from_user+0x2d/0xb0 [ 485.671698][T17406] __sys_sendto+0x25c/0x520 [ 485.671735][T17406] ? __pfx___sys_sendto+0x10/0x10 [ 485.671782][T17406] ? count_memcg_event_mm+0x21/0x260 [ 485.671824][T17406] ? exc_page_fault+0x76/0xf0 [ 485.671859][T17406] ? do_user_addr_fault+0xc8a/0x1390 [ 485.671898][T17406] __x64_sys_sendto+0xde/0x100 [ 485.671948][T17406] do_syscall_64+0xfa/0x3b0 [ 485.671978][T17406] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.672007][T17406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.672027][T17406] ? clear_bhb_loop+0x60/0xb0 [ 485.672054][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.672075][T17406] RIP: 0033:0x7f52d3d90a7c [ 485.672094][T17406] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 485.672113][T17406] RSP: 002b:00007f52d4c60ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 485.672136][T17406] RAX: ffffffffffffffda RBX: 00007f52d4c60fc0 RCX: 00007f52d3d90a7c [ 485.672151][T17406] RDX: 0000000000000020 RSI: 00007f52d4c61010 RDI: 0000000000000004 [ 485.672165][T17406] RBP: 0000000000000000 R08: 00007f52d4c60f14 R09: 000000000000000c [ 485.672178][T17406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 485.672190][T17406] R13: 00007f52d4c60f68 R14: 00007f52d4c61010 R15: 0000000000000000 [ 485.672225][T17406] [ 487.211171][T17449] lo speed is unknown, defaulting to 1000 [ 487.333749][T17449] wg1 speed is unknown, defaulting to 1000 [ 487.470871][T17434] syzkaller1: entered promiscuous mode [ 487.494398][T17434] syzkaller1: entered allmulticast mode [ 487.601654][T17458] lo speed is unknown, defaulting to 1000 [ 487.678394][T17458] wg1 speed is unknown, defaulting to 1000 [ 487.876232][T17464] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 488.077342][T17472] __nla_validate_parse: 3 callbacks suppressed [ 488.077364][T17472] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3109'. [ 488.141105][T17472] nbd: illegal input index 65508 [ 488.323283][T17473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3109'. [ 488.334066][T17473] nbd: illegal input index 65508 [ 488.656735][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 488.816450][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 489.018018][T17514] tipc: Enabled bearer , priority 0 [ 489.050017][T17504] syzkaller0: entered promiscuous mode [ 489.078131][T17504] syzkaller0: entered allmulticast mode [ 489.187921][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3126'. [ 489.208178][T17504] tipc: Resetting bearer [ 489.262409][T17502] tipc: Resetting bearer [ 489.324770][T17502] tipc: Disabling bearer [ 489.661899][T17551] lo speed is unknown, defaulting to 1000 [ 489.687438][T17551] wg1 speed is unknown, defaulting to 1000 [ 489.907389][T17560] bridge5: entered promiscuous mode [ 489.913276][T17560] bridge5: entered allmulticast mode [ 489.948482][T17568] openvswitch: netlink: IPv6 tunnel dst address is zero [ 490.700044][T17586] tipc: Started in network mode [ 490.706658][T17586] tipc: Node identity 861203b53402, cluster identity 4711 [ 490.751371][T17586] tipc: Enabled bearer , priority 0 [ 490.780849][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.786624][T17589] syzkaller0: entered promiscuous mode [ 490.796658][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.806332][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.827829][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.840977][T17589] syzkaller0: entered allmulticast mode [ 490.848371][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.892603][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 490.912644][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 490.931095][T17541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3131'. [ 490.986545][T17551] syzkaller1: entered promiscuous mode [ 490.992067][T17551] syzkaller1: entered allmulticast mode [ 491.133490][T17583] tipc: Resetting bearer [ 491.173768][T17583] tipc: Disabling bearer [ 491.191936][T17587] lo speed is unknown, defaulting to 1000 [ 491.228518][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3147'. [ 491.239851][T17587] wg1 speed is unknown, defaulting to 1000 [ 491.312608][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 491.626340][T17609] tap0: tun_chr_ioctl cmd 1074025677 [ 491.641070][T17609] tap0: linktype set to 776 [ 491.648824][T17616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3152'. [ 492.375718][T17631] syzkaller0: entered promiscuous mode [ 492.396189][T17631] syzkaller0: entered allmulticast mode [ 492.434173][T17587] chnl_net:caif_netlink_parms(): no params data found [ 492.814808][T17656] netlink: 'syz.0.3160': attribute type 7 has an invalid length. [ 492.882718][T17587] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.902983][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.914361][T17587] bridge_slave_0: entered allmulticast mode [ 492.922998][T17587] bridge_slave_0: entered promiscuous mode [ 492.933040][T17587] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.935724][ T51] Bluetooth: hci3: command tx timeout [ 492.941631][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.953240][T17587] bridge_slave_1: entered allmulticast mode [ 493.010090][T17587] bridge_slave_1: entered promiscuous mode [ 493.093673][T17587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.128955][T17587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.146165][T17671] syz.0.3165 uses old SIOCAX25GETINFO [ 493.173587][T17673] __nla_validate_parse: 2 callbacks suppressed [ 493.173608][T17673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3166'. [ 493.300565][T17587] team0: Port device team_slave_0 added [ 493.330015][T17587] team0: Port device team_slave_1 added [ 493.352884][T17677] 8021q: VLANs not supported on vxcan1 [ 493.492814][T17587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.510236][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.564547][T17587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.657152][T17587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.675248][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.730399][T17699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3172'. [ 493.749548][T17587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.764184][T17698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3173'. [ 493.795591][T17698] 8021q: VLANs not supported on sit0 [ 494.078146][T17587] hsr_slave_0: entered promiscuous mode [ 494.106183][T17587] hsr_slave_1: entered promiscuous mode [ 494.134602][T17587] debugfs: 'hsr0' already exists in 'hsr' [ 494.164951][T17587] Cannot create hsr debugfs directory [ 494.299468][T17718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3178'. [ 494.550121][T17727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3181'. [ 494.634265][T17736] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3183'. [ 494.655831][T17736] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3183'. [ 494.901047][T17750] syzkaller1: entered promiscuous mode [ 494.912843][T17750] syzkaller1: entered allmulticast mode [ 494.947865][T17753] netlink: 'syz.4.3188': attribute type 83 has an invalid length. [ 494.994110][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 495.018672][ T51] Bluetooth: hci3: command tx timeout [ 495.212794][ T30] audit: type=1804 audit(1755679432.131:6): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3190" name="/newroot/613/cgroup.controllers" dev="tmpfs" ino=3149 res=1 errno=0 [ 495.271590][ T30] audit: type=1800 audit(1755679432.171:7): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3190" name="cgroup.controllers" dev="tmpfs" ino=3149 res=0 errno=0 [ 495.345637][T17759] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3189'. [ 495.765351][T17587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.801683][T17587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.859083][T17587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.942571][T17587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.299022][T17587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.402220][T17587] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.450314][T17815] netlink: 'syz.4.3202': attribute type 2 has an invalid length. [ 496.484077][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.491337][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.496128][T17815] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 496.536323][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 496.593630][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.600883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.891702][T17825] netlink: 'syz.4.3204': attribute type 1 has an invalid length. [ 497.105699][ T51] Bluetooth: hci3: command tx timeout [ 497.297128][T17842] netlink: 'syz.5.3207': attribute type 13 has an invalid length. [ 497.305927][T17842] netlink: 'syz.5.3207': attribute type 17 has an invalid length. [ 497.766227][T17842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.824297][T17837] lo speed is unknown, defaulting to 1000 [ 497.844492][T17837] wg1 speed is unknown, defaulting to 1000 [ 497.863315][T17835] lo speed is unknown, defaulting to 1000 [ 497.912327][T17835] wg1 speed is unknown, defaulting to 1000 [ 498.170674][T17587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.371450][T17587] veth0_vlan: entered promiscuous mode [ 498.389779][T17587] veth1_vlan: entered promiscuous mode [ 498.428094][T17587] veth0_macvtap: entered promiscuous mode [ 498.595847][T17587] veth1_macvtap: entered promiscuous mode [ 498.689790][T17587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.737919][T17587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.758933][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.803153][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.833756][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.867228][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.983141][T17893] syz.2.3220: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.005952][T17893] CPU: 1 UID: 0 PID: 17893 Comm: syz.2.3220 Not tainted syzkaller #0 PREEMPT(full) [ 499.005979][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.005990][T17893] Call Trace: [ 499.005998][T17893] [ 499.006018][T17893] dump_stack_lvl+0x189/0x250 [ 499.006048][T17893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.006070][T17893] ? __pfx__printk+0x10/0x10 [ 499.006097][T17893] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.006120][T17893] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.006145][T17893] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 499.006171][T17893] warn_alloc+0x214/0x310 [ 499.006208][T17893] ? __pfx_warn_alloc+0x10/0x10 [ 499.006247][T17893] ? __get_vm_area_node+0x28f/0x300 [ 499.006272][T17893] ? xskq_create+0xbf/0x170 [ 499.006301][T17893] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 499.006358][T17893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.006397][T17893] ? __kasan_kmalloc+0x93/0xb0 [ 499.006426][T17893] vmalloc_user_noprof+0xad/0xf0 [ 499.006454][T17893] ? xskq_create+0xbf/0x170 [ 499.006482][T17893] xskq_create+0xbf/0x170 [ 499.006526][T17893] xsk_init_queue+0xb0/0x110 [ 499.006558][T17893] xsk_setsockopt+0x57b/0x8d0 [ 499.006588][T17893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.006615][T17893] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.006651][T17893] ? __fget_files+0x2a/0x420 [ 499.006681][T17893] ? aa_sock_opt_perm+0xff/0x1b0 [ 499.006705][T17893] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 499.006729][T17893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.006757][T17893] do_sock_setsockopt+0x179/0x1b0 [ 499.006785][T17893] __x64_sys_setsockopt+0x13f/0x1b0 [ 499.006814][T17893] do_syscall_64+0xfa/0x3b0 [ 499.006844][T17893] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.006873][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.006895][T17893] ? clear_bhb_loop+0x60/0xb0 [ 499.006922][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.006943][T17893] RIP: 0033:0x7fadc358ebe9 [ 499.006967][T17893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.006985][T17893] RSP: 002b:00007fadc17b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.007015][T17893] RAX: ffffffffffffffda RBX: 00007fadc37b6180 RCX: 00007fadc358ebe9 [ 499.007031][T17893] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 499.007044][T17893] RBP: 00007fadc3611e19 R08: 0000000000000004 R09: 0000000000000000 [ 499.007057][T17893] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 499.007070][T17893] R13: 00007fadc37b6218 R14: 00007fadc37b6180 R15: 00007ffcd710e398 [ 499.007107][T17893] [ 499.007151][T17893] Mem-Info: [ 499.186389][ T51] Bluetooth: hci3: command tx timeout [ 499.214385][T17900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 499.323919][T17893] active_anon:7358 inactive_anon:0 isolated_anon:0 [ 499.323919][T17893] active_file:3686 inactive_file:39995 isolated_file:0 [ 499.323919][T17893] unevictable:768 dirty:71 writeback:0 [ 499.323919][T17893] slab_reclaimable:12645 slab_unreclaimable:173066 [ 499.323919][T17893] mapped:29739 shmem:1356 pagetables:1349 [ 499.323919][T17893] sec_pagetables:0 bounce:0 [ 499.323919][T17893] kernel_misc_reclaimable:0 [ 499.323919][T17893] free:1243022 free_pcp:15184 free_cma:0 [ 499.417925][T17893] Node 0 active_anon:29432kB inactive_anon:0kB active_file:14744kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119056kB dirty:280kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14332kB pagetables:5372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 499.514679][ T7824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.527522][T17893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 499.536798][ T7824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.625559][T17912] syz_tun: entered promiscuous mode [ 499.631291][T17912] macsec0: entered allmulticast mode [ 499.639585][T17893] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.657377][T17912] syz_tun: entered allmulticast mode [ 499.683217][T17893] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 499.689174][T17893] Node 0 DMA32 free:1061192kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29384kB inactive_anon:0kB active_file:14744kB inactive_file:158208kB unevictable:1536kB writepending:280kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:42764kB local_pcp:20364kB free_cma:0kB [ 499.693969][T17912] syz_tun: left allmulticast mode [ 499.725613][T17893] lowmem_reserve[]: 0 0 1 1 1 [ 499.738271][T17893] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 499.745976][T17912] syz_tun: left promiscuous mode [ 499.769544][T17893] lowmem_reserve[]: 0 0 0 0 0 [ 499.777471][T17893] Node 1 Normal free:3894628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17312kB local_pcp:7328kB free_cma:0kB [ 499.811299][T17893] lowmem_reserve[]: 0 0 0 0 0 [ 499.816988][T17893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 499.829887][T17893] Node 0 DMA32: 127*4kB (UME) 111*8kB (ME) 168*16kB (UM) 119*32kB (M) 57*64kB (UM) 584*128kB (UM) 600*256kB (UME) 288*512kB (UM) 126*1024kB (UME) 10*2048kB (UME) 128*4096kB (UM) = 1061140kB [ 499.852945][T17893] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 499.865471][T17893] Node 1 Normal: 231*4kB (UME) 75*8kB (UME) 53*16kB (UME) 183*32kB (UME) 55*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3894628kB [ 499.884828][T17893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.896738][T17893] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.913437][T17893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.924130][T17893] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.934280][T17893] 45033 total pagecache pages [ 499.940263][T17893] 0 pages in swap cache [ 499.945227][T17893] Free swap = 124996kB [ 499.949496][T17893] Total swap = 124996kB [ 499.953752][T17893] 2097051 pages RAM [ 499.977599][ T7824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.994828][T17893] 0 pages HighMem/MovableOnly [ 500.020079][T17921] __nla_validate_parse: 5 callbacks suppressed [ 500.020099][T17921] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3226'. [ 500.023963][ T7824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.048285][T17893] 425656 pages reserved [ 500.052487][T17893] 0 pages cma reserved [ 500.227740][T17922] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3226'. [ 500.272763][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'. [ 500.333334][T17928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3139'. [ 500.426065][T17926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3228'. [ 500.511420][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 500.526510][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 500.630137][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 500.660167][T17937] lo speed is unknown, defaulting to 1000 [ 500.682420][T17937] wg1 speed is unknown, defaulting to 1000 [ 500.762559][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'. [ 500.812910][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'. [ 501.076794][T17954] tipc: Enabled bearer , priority 0 [ 501.084686][T17954] syzkaller0: entered promiscuous mode [ 501.090840][T17954] syzkaller0: entered allmulticast mode [ 501.162324][T17954] tipc: Resetting bearer [ 501.187772][T17951] tipc: Resetting bearer [ 501.257160][T17951] tipc: Disabling bearer [ 501.391596][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.439653][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.456108][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.475454][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.487513][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.632175][ T5862] bond0: (slave syz_tun): Releasing backup interface [ 501.872180][T17964] lo speed is unknown, defaulting to 1000 [ 501.897863][T17964] wg1 speed is unknown, defaulting to 1000 [ 501.948741][T17979] ..@ÿ: renamed from bond_slave_0 [ 502.027479][T17981] veth1_to_bond: entered allmulticast mode [ 502.112969][T17989] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 502.197476][T17988] bond_slave_1: entered promiscuous mode [ 502.289794][T17989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.400237][T17993] bond2: (slave ip6gretap1): making interface the new active one [ 502.417115][T17993] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 502.427014][T17980] bond_slave_1: left promiscuous mode [ 502.434245][T17980] veth1_to_bond: left allmulticast mode [ 502.527801][T17995] veth3: entered promiscuous mode [ 502.550512][T17995] bond2: (slave veth3): Enslaving as an active interface with a down link [ 502.678143][T17989] erspan0: entered allmulticast mode [ 502.731451][T17989] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 502.824143][T18017] vti0: entered promiscuous mode [ 502.848997][T18021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.895811][T18017] vti0: entered allmulticast mode [ 503.434528][T17964] chnl_net:caif_netlink_parms(): no params data found [ 503.575823][ T51] Bluetooth: hci1: command tx timeout [ 503.592882][T18045] netlink: 'syz.3.3259': attribute type 2 has an invalid length. [ 503.754561][T18045] : entered promiscuous mode [ 503.765465][ T30] audit: type=1800 audit(1755679440.661:8): pid=18037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3255" name="memory.events" dev="tmpfs" ino=407 res=0 errno=0 [ 504.251438][T17964] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.287723][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.310289][T17964] bridge_slave_0: entered allmulticast mode [ 504.359516][T17964] bridge_slave_0: entered promiscuous mode [ 504.382358][T17964] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.405967][T17964] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.433723][T17964] bridge_slave_1: entered allmulticast mode [ 504.461236][T17964] bridge_slave_1: entered promiscuous mode [ 504.665953][T18090] !: renamed from dummy0 (while UP) [ 504.693544][T18092] netlink: 'syz.2.3270': attribute type 12 has an invalid length. [ 504.734210][T17964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.794019][T18090] lo speed is unknown, defaulting to 1000 [ 504.804198][T17964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.996160][T18090] wg1 speed is unknown, defaulting to 1000 [ 505.029088][T17964] team0: Port device team_slave_0 added [ 505.059606][T17964] team0: Port device team_slave_1 added [ 505.102535][T18104] __nla_validate_parse: 4 callbacks suppressed [ 505.102580][T18104] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3272'. [ 505.424871][T17964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.471863][T17964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.607716][T17964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.655672][ T51] Bluetooth: hci1: command tx timeout [ 505.680306][T17964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.695108][T17964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.723272][T17964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.878942][T18108] lo speed is unknown, defaulting to 1000 [ 505.886750][T18108] wg1 speed is unknown, defaulting to 1000 [ 506.202422][T17964] hsr_slave_0: entered promiscuous mode [ 506.232025][T17964] hsr_slave_1: entered promiscuous mode [ 506.268630][T17964] debugfs: 'hsr0' already exists in 'hsr' [ 506.274602][T17964] Cannot create hsr debugfs directory [ 506.983004][T18146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3279'. [ 507.216611][T17964] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.311635][T18168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3283'. [ 507.328602][T18162] tap0: tun_chr_ioctl cmd 1074025677 [ 507.355412][T18162] tap0: linktype set to 270 [ 507.379665][T17964] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.561092][T17964] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.688429][T17964] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.735426][ T51] Bluetooth: hci1: command tx timeout [ 507.851972][T18184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3288'. [ 507.905750][T18184] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3288'. [ 507.977374][T18184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3288'. [ 508.228405][T18197] tipc: Started in network mode [ 508.253742][T18197] tipc: Node identity 7a3d5624cde4, cluster identity 4711 [ 508.298974][T18197] tipc: Enabled bearer , priority 0 [ 508.347638][T18201] sctp: [Deprecated]: syz.2.3291 (pid 18201) Use of int in max_burst socket option. [ 508.347638][T18201] Use struct sctp_assoc_value instead [ 508.378274][T18200] syzkaller0: entered promiscuous mode [ 508.394214][T18200] syzkaller0: entered allmulticast mode [ 508.484688][T18206] netlink: 'syz.5.3293': attribute type 83 has an invalid length. [ 508.509853][T17964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 508.566484][T18197] tipc: Resetting bearer [ 508.597052][T18196] tipc: Resetting bearer [ 508.639682][T18196] tipc: Disabling bearer [ 508.664691][T17964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 508.705491][T17964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.750173][T17964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.862349][T18208] lo speed is unknown, defaulting to 1000 [ 508.909925][T18208] wg1 speed is unknown, defaulting to 1000 [ 508.920258][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 508.946669][T18228] FAULT_INJECTION: forcing a failure. [ 508.946669][T18228] name failslab, interval 1, probability 0, space 0, times 0 [ 508.974926][T18228] CPU: 0 UID: 0 PID: 18228 Comm: syz.2.3296 Not tainted syzkaller #0 PREEMPT(full) [ 508.974955][T18228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.974967][T18228] Call Trace: [ 508.974974][T18228] [ 508.974984][T18228] dump_stack_lvl+0x189/0x250 [ 508.975023][T18228] ? __pfx____ratelimit+0x10/0x10 [ 508.975049][T18228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.975073][T18228] ? __pfx__printk+0x10/0x10 [ 508.975106][T18228] ? __pfx___might_resched+0x10/0x10 [ 508.975124][T18228] ? fs_reclaim_acquire+0x7d/0x100 [ 508.975159][T18228] should_fail_ex+0x414/0x560 [ 508.975191][T18228] should_failslab+0xa8/0x100 [ 508.975221][T18228] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 508.975248][T18228] ? __alloc_skb+0x112/0x2d0 [ 508.975282][T18228] __alloc_skb+0x112/0x2d0 [ 508.975316][T18228] netlink_ack+0x146/0xa50 [ 508.975342][T18228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.975368][T18228] ? ref_tracker_free+0x63a/0x7d0 [ 508.975397][T18228] ? __asan_memcpy+0x40/0x70 [ 508.975419][T18228] ? __pfx_ref_tracker_free+0x10/0x10 [ 508.975456][T18228] netlink_rcv_skb+0x28c/0x470 [ 508.975486][T18228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.975517][T18228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.975558][T18228] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.975595][T18228] netlink_unicast+0x82f/0x9e0 [ 508.975630][T18228] ? __pfx_netlink_unicast+0x10/0x10 [ 508.975657][T18228] ? netlink_sendmsg+0x642/0xb30 [ 508.975683][T18228] ? skb_put+0x11b/0x210 [ 508.975705][T18228] netlink_sendmsg+0x805/0xb30 [ 508.975744][T18228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.975777][T18228] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.975810][T18228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.975831][T18228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.975862][T18228] __sock_sendmsg+0x219/0x270 [ 508.975890][T18228] ____sys_sendmsg+0x505/0x830 [ 508.975919][T18228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.975949][T18228] ? import_iovec+0x74/0xa0 [ 508.975976][T18228] ___sys_sendmsg+0x21f/0x2a0 [ 508.975999][T18228] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.976065][T18228] ? __fget_files+0x2a/0x420 [ 508.976093][T18228] ? __fget_files+0x3a0/0x420 [ 508.976134][T18228] __x64_sys_sendmsg+0x19b/0x260 [ 508.976157][T18228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.976210][T18228] ? rcu_is_watching+0x15/0xb0 [ 508.976232][T18228] ? trace_sys_enter+0x25/0x100 [ 508.976269][T18228] do_syscall_64+0xfa/0x3b0 [ 508.976297][T18228] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.976326][T18228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.976346][T18228] ? clear_bhb_loop+0x60/0xb0 [ 508.976371][T18228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.976391][T18228] RIP: 0033:0x7fadc358ebe9 [ 508.976410][T18228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.976428][T18228] RSP: 002b:00007fadc17f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.976467][T18228] RAX: ffffffffffffffda RBX: 00007fadc37b5fa0 RCX: 00007fadc358ebe9 [ 508.976482][T18228] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 508.976496][T18228] RBP: 00007fadc17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.976509][T18228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.976522][T18228] R13: 00007fadc37b6038 R14: 00007fadc37b5fa0 R15: 00007ffcd710e398 [ 508.976558][T18228] [ 509.460742][T17964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.616806][T17964] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.632312][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.639560][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.654795][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.662032][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.813334][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 509.827314][ T51] Bluetooth: hci1: command tx timeout [ 509.860011][T18245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.869903][T18250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.204041][T18263] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 510.676486][T18273] lo speed is unknown, defaulting to 1000 [ 510.685264][T18273] wg1 speed is unknown, defaulting to 1000 [ 510.879636][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 511.378105][T17964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.611663][T17964] veth0_vlan: entered promiscuous mode [ 511.680282][T17964] veth1_vlan: entered promiscuous mode [ 511.977791][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3314'. [ 512.089808][T18318] nbd: socks must be embedded in a SOCK_ITEM attr [ 512.096905][T18318] block nbd3: shutting down sockets [ 512.339577][T17964] veth0_macvtap: entered promiscuous mode [ 512.430897][T17964] veth1_macvtap: entered promiscuous mode [ 512.479847][T18330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.627700][T18330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.838148][T17964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.882293][T17964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.950373][ T7826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.001583][ T7826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.060211][ T7826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.091673][T18350] netlink: 'syz.3.3320': attribute type 3 has an invalid length. [ 513.112056][ T7826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.360982][ T7824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.383488][ T7824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.490851][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.536272][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.628793][T18372] netlink: 'syz.5.3327': attribute type 1 has an invalid length. [ 513.763182][T18372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.941536][T18398] ip6gretap0: entered promiscuous mode [ 513.962783][T18398] macsec1: entered promiscuous mode [ 513.999527][T18398] macsec1: entered allmulticast mode [ 514.023360][T18398] ip6gretap0: entered allmulticast mode [ 514.099037][T18401] dvmrp0: entered allmulticast mode [ 514.348682][ T5985] IPVS: starting estimator thread 0... [ 514.382342][T18413] tipc: Started in network mode [ 514.414010][T18413] tipc: Node identity 82081d5c50b9, cluster identity 4711 [ 514.435355][T18413] tipc: Enabled bearer , priority 0 [ 514.442776][T18416] syzkaller0: entered promiscuous mode [ 514.449109][T18419] IPVS: using max 36 ests per chain, 86400 per kthread [ 514.461049][T18416] syzkaller0: entered allmulticast mode [ 514.564676][T18410] tipc: Resetting bearer [ 514.586628][T18409] tipc: Resetting bearer [ 514.657231][T18409] tipc: Disabling bearer [ 514.698222][ T5868] Bluetooth: hci1: command 0x0405 tx timeout [ 514.921996][T18421] : entered promiscuous mode [ 515.243586][T18452] syzkaller1: entered promiscuous mode [ 515.273327][T18452] syzkaller1: entered allmulticast mode [ 515.383772][T18463] netlink: 'syz.3.3352': attribute type 11 has an invalid length. [ 515.401333][T18463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3352'. [ 515.812861][T18471] lo speed is unknown, defaulting to 1000 [ 515.837441][T18471] wg1 speed is unknown, defaulting to 1000 [ 515.901142][T18481] lo speed is unknown, defaulting to 1000 [ 515.944676][T18481] wg1 speed is unknown, defaulting to 1000 [ 516.348771][T18500] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 516.429859][T18507] bridge_slave_0: left allmulticast mode [ 516.436560][T18507] bridge_slave_0: left promiscuous mode [ 516.443995][T18507] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.463693][T18507] bridge_slave_1: left allmulticast mode [ 516.470303][T18507] bridge_slave_1: left promiscuous mode [ 516.476316][T18507] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.493884][T18507] bond0: (slave bond_slave_0): Releasing backup interface [ 516.508231][T18507] bond0: (slave bond_slave_1): Releasing backup interface [ 516.532493][T18507] team0: Port device team_slave_0 removed [ 516.550714][T18507] team0: Port device team_slave_1 removed [ 516.560148][T18507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.570151][T18507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.580488][T18507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.589147][T18507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.710171][T18517] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.989729][T18527] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3368'. [ 517.079267][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3368'. [ 517.120416][T18527] Bluetooth: MGMT ver 1.23 [ 517.216617][T18533] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3371'. [ 517.294192][T18537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3372'. [ 517.919652][T18555] Bluetooth: MGMT ver 1.23 [ 517.927481][T18553] lo speed is unknown, defaulting to 1000 [ 517.974614][T18548] syzkaller0: entered promiscuous mode [ 517.982132][T18548] syzkaller0: entered allmulticast mode [ 517.990849][T18553] wg1 speed is unknown, defaulting to 1000 [ 518.323639][T18579] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 520.222771][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 520.246755][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 520.343973][T18592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3386'. [ 520.355742][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 520.524537][T18592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.617622][T18611] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 520.774486][T18609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.850447][T18609] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 520.882750][T18609] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 520.936794][T18599] lo speed is unknown, defaulting to 1000 [ 520.953550][T18599] wg1 speed is unknown, defaulting to 1000 [ 521.392056][T18624] IPVS: persistence engine module ip_vs_pe_ not found [ 521.443965][T13643] IPVS: starting estimator thread 0... [ 521.546325][T18630] IPVS: using max 25 ests per chain, 60000 per kthread [ 521.620478][T18616] infiniband syz2: set down [ 521.625696][T18616] infiniband syz2: added bond0 [ 521.633342][T18616] syz2: rxe_create_cq: returned err = -12 [ 521.640387][T18616] infiniband syz2: Couldn't create ib_mad CQ [ 521.658820][T18616] infiniband syz2: Couldn't open port 1 [ 521.732663][T18641] netlink: 'syz.2.3395': attribute type 3 has an invalid length. [ 521.753585][T18644] bond0: Unable to set up delay as MII monitoring is disabled [ 521.780450][T18616] RDS/IB: syz2: added [ 521.791188][T18616] smc: adding ib device syz2 with port count 1 [ 521.798794][T18616] smc: ib device syz2 port 1 has pnetid [ 522.100672][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'. [ 522.232147][T18654] lo speed is unknown, defaulting to 1000 [ 522.277532][T18654] wg1 speed is unknown, defaulting to 1000 [ 522.318007][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 522.395832][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 522.652374][T18668] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 522.747192][T18673] smc: net device bond0 erased user defined pnetid SYZ [ 523.398972][T18674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.411826][T18674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.427246][T18674] bond0 (unregistering): Released all slaves [ 523.462978][T18659] syzkaller1: entered promiscuous mode [ 523.473515][T18659] syzkaller1: entered allmulticast mode [ 523.603861][T18700] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3412'. [ 523.665969][T18702] tipc: Enabled bearer , priority 0 [ 523.673592][T18702] syzkaller0: entered promiscuous mode [ 523.708657][T18702] syzkaller0: entered allmulticast mode [ 523.785979][T18702] tipc: Resetting bearer [ 523.846914][T18702] tipc: Disabling bearer [ 525.124552][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3422'. [ 525.210280][T18741] nbd: socks must be embedded in a SOCK_ITEM attr [ 525.316127][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 525.707830][T18755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3425'. [ 525.861043][T18758] netlink: 'syz.4.3425': attribute type 9 has an invalid length. [ 525.869690][T18758] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3425'. [ 526.163915][T18764] netlink: 'syz.4.3426': attribute type 3 has an invalid length. [ 526.761714][T18783] bridge_slave_0: left allmulticast mode [ 526.768126][T18783] bridge_slave_0: left promiscuous mode [ 526.773986][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.788248][T18783] bridge_slave_1: left allmulticast mode [ 526.793950][T18783] bridge_slave_1: left promiscuous mode [ 526.810973][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.836168][T18783] bond0: (slave bond_slave_0): Releasing backup interface [ 526.851791][T18783] bond0: (slave bond_slave_1): Releasing backup interface [ 526.901664][T18783] team0: Port device team_slave_0 removed [ 526.934127][T18783] team0: Port device team_slave_1 removed [ 526.953159][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.973497][T18783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.994063][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.013314][T18783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.175708][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.664155][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3435'. [ 527.700151][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 527.727607][T18794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3434'. [ 527.749517][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 527.792988][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 528.842691][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3440'. [ 529.122021][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'. [ 529.136915][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3443'. [ 530.065607][T18858] netlink: 'syz.0.3456': attribute type 5 has an invalid length. [ 530.627612][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.637524][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.676979][ T7826] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.766643][ T7826] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.778357][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 530.920518][T18886] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.087525][T18886] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.088324][T18894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.105208][T18894] IPv6: NLM_F_CREATE should be set when creating new route [ 531.112449][T18894] IPv6: NLM_F_CREATE should be set when creating new route [ 531.136849][T18894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.201573][T18906] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3469'. [ 531.257262][T18886] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.390168][T18886] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.633831][T18925] netlink: 'syz.3.3473': attribute type 2 has an invalid length. [ 531.667234][ T7826] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.700384][T18925] k›*·]‘: entered promiscuous mode [ 531.730290][ T7834] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.763274][ T7834] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.820305][ T7834] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.049445][T18946] ªªªªª»: renamed from bond0 (while UP) [ 532.060447][T18946] netlink: 'syz.5.3482': attribute type 21 has an invalid length. [ 532.069771][T18946] netlink: 'syz.5.3482': attribute type 4 has an invalid length. [ 532.084273][T18946] netlink: 'syz.5.3482': attribute type 5 has an invalid length. [ 532.134974][ T59] nci: nci_rx_work: unknown MT 0x1 [ 532.464225][T18965] netlink: 'syz.5.3486': attribute type 9 has an invalid length. [ 532.495146][T18965] hsr0: entered promiscuous mode [ 532.501908][T18965] macvlan2: entered promiscuous mode [ 532.508268][T18965] macvlan2: entered allmulticast mode [ 532.513844][T18965] hsr0: entered allmulticast mode [ 532.520043][T18965] hsr_slave_0: entered allmulticast mode [ 532.527490][T18965] hsr_slave_1: entered allmulticast mode [ 533.219530][T18989] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 533.607976][T19004] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 533.829004][T19012] vlan3: entered allmulticast mode [ 533.865765][T19012] bridge0: entered allmulticast mode [ 533.921194][T19015] vlan3: entered allmulticast mode [ 533.929580][T19024] __nla_validate_parse: 5 callbacks suppressed [ 533.929599][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3508'. [ 533.956539][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3508'. [ 534.332817][T19035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 534.401718][T19035] nbd: socks must be embedded in a SOCK_ITEM attr [ 534.550745][T19050] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3518'. [ 535.188682][T19078] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 535.198647][T19078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.290827][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3529'. [ 535.302915][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 535.359581][T19080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3529'. [ 535.485396][T19088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3533'. [ 535.588664][T19093] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 535.637087][T19096] FAULT_INJECTION: forcing a failure. [ 535.637087][T19096] name failslab, interval 1, probability 0, space 0, times 0 [ 535.677913][T19096] CPU: 1 UID: 0 PID: 19096 Comm: syz.0.3535 Not tainted syzkaller #0 PREEMPT(full) [ 535.677961][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.677982][T19096] Call Trace: [ 535.677991][T19096] [ 535.678002][T19096] dump_stack_lvl+0x189/0x250 [ 535.678034][T19096] ? __pfx____ratelimit+0x10/0x10 [ 535.678072][T19096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.678098][T19096] ? __pfx__printk+0x10/0x10 [ 535.678131][T19096] ? __pfx___might_resched+0x10/0x10 [ 535.678152][T19096] ? fs_reclaim_acquire+0x7d/0x100 [ 535.678192][T19096] should_fail_ex+0x414/0x560 [ 535.678227][T19096] should_failslab+0xa8/0x100 [ 535.678261][T19096] __kmalloc_cache_noprof+0x70/0x3d0 [ 535.678291][T19096] ? resv_map_alloc+0x51/0x2c0 [ 535.678320][T19096] resv_map_alloc+0x51/0x2c0 [ 535.678348][T19096] hugetlbfs_get_inode+0x68/0x660 [ 535.678379][T19096] ? fput+0xa0/0xd0 [ 535.678408][T19096] hugetlb_file_setup+0x21d/0x630 [ 535.678441][T19096] ksys_mmap_pgoff+0x22f/0x760 [ 535.678479][T19096] do_syscall_64+0xfa/0x3b0 [ 535.678509][T19096] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.678538][T19096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.678559][T19096] ? clear_bhb_loop+0x60/0xb0 [ 535.678586][T19096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.678607][T19096] RIP: 0033:0x7f466a58ebe9 [ 535.678626][T19096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.678645][T19096] RSP: 002b:00007f466b479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.678667][T19096] RAX: ffffffffffffffda RBX: 00007f466a7b5fa0 RCX: 00007f466a58ebe9 [ 535.678683][T19096] RDX: 0000000002000007 RSI: 0000000000800000 RDI: 0000200000800000 [ 535.678697][T19096] RBP: 00007f466b479090 R08: ffffffffffffffff R09: 0000000100000000 [ 535.678713][T19096] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 535.678726][T19096] R13: 00007f466a7b6038 R14: 00007f466a7b5fa0 R15: 00007ffd60675548 [ 535.678760][T19096] [ 536.404461][T19119] tipc: Enabled bearer , priority 0 [ 536.427143][T19119] syzkaller0: entered promiscuous mode [ 536.432936][T19119] syzkaller0: entered allmulticast mode [ 536.581402][T19121] syzkaller1: entered promiscuous mode [ 536.587781][T19121] syzkaller1: entered allmulticast mode [ 536.613831][T19119] tipc: Resetting bearer [ 536.767199][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 536.796529][T19118] tipc: Resetting bearer [ 536.866662][T19118] tipc: Disabling bearer [ 536.951309][T19130] lo speed is unknown, defaulting to 1000 [ 536.970886][T19137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3548'. [ 537.010074][T19136] tipc: Started in network mode [ 537.025839][T19136] tipc: Node identity e2042bad3eef, cluster identity 4711 [ 537.048971][T19136] tipc: Enabled bearer , priority 0 [ 537.073204][T19130] wg1 speed is unknown, defaulting to 1000 [ 537.074026][T19136] syzkaller0: entered promiscuous mode [ 537.094846][T19136] syzkaller0: entered allmulticast mode [ 537.138498][T19140] FAULT_INJECTION: forcing a failure. [ 537.138498][T19140] name failslab, interval 1, probability 0, space 0, times 0 [ 537.182827][T19140] CPU: 1 UID: 0 PID: 19140 Comm: syz.2.3549 Not tainted syzkaller #0 PREEMPT(full) [ 537.182858][T19140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.182871][T19140] Call Trace: [ 537.182879][T19140] [ 537.182888][T19140] dump_stack_lvl+0x189/0x250 [ 537.182920][T19140] ? __pfx____ratelimit+0x10/0x10 [ 537.182950][T19140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.182976][T19140] ? __pfx__printk+0x10/0x10 [ 537.183009][T19140] ? __pfx___might_resched+0x10/0x10 [ 537.183031][T19140] ? fs_reclaim_acquire+0x7d/0x100 [ 537.183069][T19140] should_fail_ex+0x414/0x560 [ 537.183104][T19140] should_failslab+0xa8/0x100 [ 537.183137][T19140] __kmalloc_cache_noprof+0x70/0x3d0 [ 537.183167][T19140] ? resv_map_alloc+0x88/0x2c0 [ 537.183204][T19140] resv_map_alloc+0x88/0x2c0 [ 537.183230][T19140] hugetlbfs_get_inode+0x68/0x660 [ 537.183260][T19140] ? fput+0xa0/0xd0 [ 537.183287][T19140] hugetlb_file_setup+0x21d/0x630 [ 537.183320][T19140] ksys_mmap_pgoff+0x22f/0x760 [ 537.183356][T19140] do_syscall_64+0xfa/0x3b0 [ 537.183386][T19140] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.183414][T19140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.183435][T19140] ? clear_bhb_loop+0x60/0xb0 [ 537.183460][T19140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.183480][T19140] RIP: 0033:0x7fadc358ebe9 [ 537.183500][T19140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.183518][T19140] RSP: 002b:00007fadc17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 537.183540][T19140] RAX: ffffffffffffffda RBX: 00007fadc37b5fa0 RCX: 00007fadc358ebe9 [ 537.183556][T19140] RDX: 0000000002000007 RSI: 0000000000800000 RDI: 0000200000800000 [ 537.183570][T19140] RBP: 00007fadc17f6090 R08: ffffffffffffffff R09: 0000000100000000 [ 537.183585][T19140] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 537.183598][T19140] R13: 00007fadc37b6038 R14: 00007fadc37b5fa0 R15: 00007ffcd710e398 [ 537.183631][T19140] [ 537.428143][T19137] tipc: Resetting bearer [ 537.524268][T19137] tipc: Disabling bearer [ 537.741414][T19125] syzkaller1: entered promiscuous mode [ 537.755089][T19125] syzkaller1: entered allmulticast mode [ 537.958647][T19168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.970589][T19164] netlink: 'syz.4.3552': attribute type 1 has an invalid length. [ 538.976531][T19199] __nla_validate_parse: 8 callbacks suppressed [ 538.976568][T19199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3568'. [ 539.032521][T19199] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 539.115862][T19199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.159828][T19205] bond1: (slave gretap2): making interface the new active one [ 539.174737][T19205] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 539.515107][ T5868] Bluetooth: hci5: command 0x0405 tx timeout [ 539.793659][T19238] macsec0: entered allmulticast mode [ 539.800145][T19238] geneve0: entered promiscuous mode [ 539.813299][T19238] geneve0: entered allmulticast mode [ 539.840566][T19238] macsec0: left allmulticast mode [ 539.859128][T19238] geneve0: left allmulticast mode [ 540.159218][T19259] netlink: 'syz.0.3586': attribute type 13 has an invalid length. [ 540.169586][T19259] netlink: 'syz.0.3586': attribute type 17 has an invalid length. [ 540.324213][T19259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.351887][T19267] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 540.377478][T19267] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 540.444432][T19262] lo speed is unknown, defaulting to 1000 [ 540.453265][T19262] wg1 speed is unknown, defaulting to 1000 [ 540.639977][T19273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3590'. [ 540.656164][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 540.666362][T19273] netlink: 'syz.4.3590': attribute type 5 has an invalid length. [ 540.677103][T19273] netlink: 'syz.4.3590': attribute type 32 has an invalid length. [ 540.685514][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 540.735376][T19273] (unnamed net_device) (uninitialized): option coupled_control: invalid value (110) [ 540.892383][T19279] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3592'. [ 541.431675][T19279] team0: Port device team_slave_0 removed [ 541.761219][T19301] netlink: 'syz.3.3597': attribute type 12 has an invalid length. [ 541.825662][T19301] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3597'. [ 541.887344][T19296] netlink: 'syz.3.3597': attribute type 10 has an invalid length. [ 541.935109][T19296] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3597'. [ 542.011759][T19308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3597'. [ 542.115910][T19296] gretap0: entered promiscuous mode [ 542.298932][T19318] tipc: Enabled bearer , priority 0 [ 542.310191][T19318] syzkaller0: entered promiscuous mode [ 542.316281][T19318] syzkaller0: entered allmulticast mode [ 542.428485][T19318] tipc: Resetting bearer [ 542.455892][T19316] tipc: Resetting bearer [ 542.492498][T19316] tipc: Disabling bearer [ 542.542586][T19327] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 542.546588][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.617584][T19330] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 542.662351][T19327] team0: Port device 0! added [ 542.743467][T19330] team0: Port device 0! removed [ 542.781369][T19338] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3611'. [ 542.792869][T19330] bond0: (slave 0!): Enslaving as an active interface with an up link [ 542.810955][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3610'. [ 543.590677][T19368] netlink: 'syz.5.3620': attribute type 5 has an invalid length. [ 543.616133][T19368] netlink: 'syz.5.3620': attribute type 17 has an invalid length. [ 543.624008][T19368] netlink: 'syz.5.3620': attribute type 27 has an invalid length. [ 543.695947][T19368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 543.716534][T19379] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 543.866191][T19387] lo speed is unknown, defaulting to 1000 [ 543.874022][T19387] wg1 speed is unknown, defaulting to 1000 [ 544.008621][T19383] netlink: 'syz.3.3626': attribute type 6 has an invalid length. [ 544.552944][T19415] __nla_validate_parse: 38 callbacks suppressed [ 544.552972][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3636'. [ 545.059131][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 545.131694][T19435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3642'. [ 545.142169][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3643'. [ 545.392099][T19447] FAULT_INJECTION: forcing a failure. [ 545.392099][T19447] name failslab, interval 1, probability 0, space 0, times 0 [ 545.445167][T19447] CPU: 0 UID: 0 PID: 19447 Comm: syz.3.3645 Not tainted syzkaller #0 PREEMPT(full) [ 545.445198][T19447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.445211][T19447] Call Trace: [ 545.445220][T19447] [ 545.445229][T19447] dump_stack_lvl+0x189/0x250 [ 545.445260][T19447] ? __pfx____ratelimit+0x10/0x10 [ 545.445290][T19447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.445329][T19447] ? __pfx__printk+0x10/0x10 [ 545.445378][T19447] ? __pfx___might_resched+0x10/0x10 [ 545.445399][T19447] ? fs_reclaim_acquire+0x7d/0x100 [ 545.445440][T19447] should_fail_ex+0x414/0x560 [ 545.445474][T19447] should_failslab+0xa8/0x100 [ 545.445508][T19447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 545.445537][T19447] ? security_file_alloc+0x34/0x330 [ 545.445571][T19447] security_file_alloc+0x34/0x330 [ 545.445609][T19447] init_file+0x93/0x2f0 [ 545.445635][T19447] alloc_empty_file+0x6e/0x1d0 [ 545.445659][T19447] alloc_file_pseudo+0x13d/0x210 [ 545.445687][T19447] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 545.445710][T19447] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 545.445746][T19447] ? rcu_is_watching+0x15/0xb0 [ 545.445770][T19447] ? hugetlbfs_get_inode+0x448/0x660 [ 545.445810][T19447] hugetlb_file_setup+0x3ee/0x630 [ 545.445844][T19447] ksys_mmap_pgoff+0x22f/0x760 [ 545.445883][T19447] do_syscall_64+0xfa/0x3b0 [ 545.445913][T19447] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.445942][T19447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.445964][T19447] ? clear_bhb_loop+0x60/0xb0 [ 545.445990][T19447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.446011][T19447] RIP: 0033:0x7ff9a758ebe9 [ 545.446030][T19447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.446048][T19447] RSP: 002b:00007ff9a846b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 545.446070][T19447] RAX: ffffffffffffffda RBX: 00007ff9a77b5fa0 RCX: 00007ff9a758ebe9 [ 545.446085][T19447] RDX: 0000000002000007 RSI: 0000000000800000 RDI: 0000200000800000 [ 545.446100][T19447] RBP: 00007ff9a846b090 R08: ffffffffffffffff R09: 0000000100000000 [ 545.446115][T19447] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 545.446127][T19447] R13: 00007ff9a77b6038 R14: 00007ff9a77b5fa0 R15: 00007fff730e8868 [ 545.446164][T19447] [ 545.952247][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 546.511339][T19475] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 546.771652][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'. [ 546.939766][T19487] pim6reg: entered allmulticast mode [ 547.067101][T19495] pim6reg: left allmulticast mode [ 547.455287][T19511] lo speed is unknown, defaulting to 1000 [ 547.467252][T19511] wg1 speed is unknown, defaulting to 1000 [ 547.886055][T19524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3663'. [ 548.028410][T19520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.354132][T19520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.578218][T19520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.643244][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3669'. [ 548.754072][T19555] bond0: default FDB implementation only supports local addresses [ 548.879030][T19520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.989085][T19558] netlink: 'syz.3.3672': attribute type 1 has an invalid length. [ 549.007943][T19558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3672'. [ 549.024134][T19558] netlink: 'syz.3.3672': attribute type 3 has an invalid length. [ 549.294134][ T7826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.309398][ T7826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.335834][T19571] sctp: [Deprecated]: syz.5.3674 (pid 19571) Use of int in max_burst socket option. [ 549.335834][T19571] Use struct sctp_assoc_value instead [ 549.363379][T19565] tipc: Enabling of bearer rejected, failed to enable media [ 549.506163][ T7826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.532849][ T7838] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.249864][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 550.466346][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3685'. [ 550.485554][T19605] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3685'. [ 550.773441][T19609] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3687'. [ 550.798289][T19609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3687'. [ 550.833737][T19609] rdma_rxe: rxe_newlink: failed to add lo [ 550.929321][T19609] erspan0: left allmulticast mode [ 550.950018][T19609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.030304][T19616] openvswitch: netlink: IPv4 tun info is not correct [ 551.071925][T19616] netlink: 'syz.5.3688': attribute type 10 has an invalid length. [ 551.104039][T19616] team0: Port device dummy0 added [ 551.139057][T19618] netlink: 'syz.5.3688': attribute type 10 has an invalid length. [ 551.391089][T19618] team0: Port device dummy0 removed [ 551.432574][T19618] ªªªªª»: (slave dummy0): Enslaving as an active interface with an up link [ 551.765938][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 551.815938][ T7814] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.816079][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 551.841524][ T7814] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.861830][ T7814] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.882493][ T7814] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.110772][T19642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3697'. [ 552.174625][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3697'. [ 552.185934][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3699'. [ 552.527327][T19659] netlink: 'syz.5.3702': attribute type 1 has an invalid length. [ 552.831256][T19668] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 553.558995][T19702] netlink: 'syz.2.3716': attribute type 21 has an invalid length. [ 553.661406][T19702] netlink: 'syz.2.3716': attribute type 5 has an invalid length. [ 555.660952][T19711] lo speed is unknown, defaulting to 1000 [ 555.669770][T19711] wg1 speed is unknown, defaulting to 1000 [ 555.796677][T19732] __nla_validate_parse: 8 callbacks suppressed [ 555.796698][T19732] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3726'. [ 555.839141][T19732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3726'. [ 555.854809][T19737] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 555.890292][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3726'. [ 555.904244][T19739] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3728'. [ 555.915008][T19739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3728'. [ 555.923986][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 556.049907][T19748] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3725'. [ 556.334722][T19754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3730'. [ 556.950289][T19785] block nbd0: NBD_DISCONNECT [ 556.974288][T19785] block nbd0: Send disconnect failed -32 [ 556.996073][T19785] block nbd0: shutting down sockets [ 557.242364][T19799] netlink: 'syz.5.3741': attribute type 1 has an invalid length. [ 557.252280][T19793] lo speed is unknown, defaulting to 1000 [ 557.271756][T19801] netlink: 'syz.5.3741': attribute type 1 has an invalid length. [ 557.297146][T19793] wg1 speed is unknown, defaulting to 1000 [ 557.413777][T19805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 557.899112][T19821] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3749'. [ 558.151535][ T7834] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.174888][ T7834] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.205787][ T7834] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.244021][ T7834] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.296791][T19831] lo speed is unknown, defaulting to 1000 [ 558.304455][T19831] wg1 speed is unknown, defaulting to 1000 [ 558.641147][T19841] netlink: 'syz.0.3755': attribute type 10 has an invalid length. [ 558.674609][T19841] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.777351][T19832] netlink: 'syz.4.3752': attribute type 9 has an invalid length. [ 558.816061][T19842] netlink: 'syz.4.3752': attribute type 13 has an invalid length. [ 558.834829][T19842] netlink: 'syz.4.3752': attribute type 17 has an invalid length. [ 558.903291][T19832] netlink: 'syz.4.3752': attribute type 7 has an invalid length. [ 558.926847][T19832] netlink: 'syz.4.3752': attribute type 8 has an invalid length. [ 559.156536][T19845] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.164234][T19845] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.610641][T19845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.763134][T19845] hsr0: left allmulticast mode [ 559.768620][T19845] hsr_slave_0: left allmulticast mode [ 559.778471][T19845] hsr_slave_1: left allmulticast mode [ 559.848878][T19842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.947799][ T7826] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.989560][ T7826] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.025550][ T7826] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.044677][ T7826] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.073676][ T7826] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.093119][ T7826] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.119482][ T7826] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.130444][ T7826] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.276550][ T7814] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 560.636711][T19890] netlink: 'syz.5.3765': attribute type 2 has an invalid length. [ 561.138248][T19902] __nla_validate_parse: 6 callbacks suppressed [ 561.138269][T19902] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3767'. [ 561.373647][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3770'. [ 561.578211][T19912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.585605][T19912] IPv6: NLM_F_CREATE should be set when creating new route [ 561.592848][T19912] IPv6: NLM_F_CREATE should be set when creating new route [ 561.702232][T19917] netlink: 'syz.5.3772': attribute type 5 has an invalid length. [ 561.712551][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3772'. [ 561.897551][T19930] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 561.959580][T19930] netlink: 'syz.0.3777': attribute type 17 has an invalid length. [ 561.991214][T19930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3777'. [ 562.046355][T19939] tipc: Enabled bearer , priority 0 [ 562.118951][T19939] syzkaller0: entered promiscuous mode [ 562.124783][T19939] syzkaller0: entered allmulticast mode [ 562.142467][T19939] tipc: Resetting bearer [ 562.199280][T19936] tipc: Resetting bearer [ 562.211064][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 562.425940][T19953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3783'. [ 563.047633][ T980] tipc: Node number set to 3534822748 [ 564.309871][T19936] tipc: Disabling bearer [ 564.344083][T19963] tipc: Enabled bearer , priority 0 [ 564.366282][T19964] syzkaller0: entered promiscuous mode [ 564.371985][T19964] syzkaller0: entered allmulticast mode [ 564.458912][T19952] lo speed is unknown, defaulting to 1000 [ 564.469605][T19952] wg1 speed is unknown, defaulting to 1000 [ 564.626690][T19973] tipc: Resetting bearer [ 564.752224][T19973] tipc: Disabling bearer [ 564.757904][T19986] validate_nla: 1 callbacks suppressed [ 564.757928][T19986] netlink: 'syz.2.3793': attribute type 3 has an invalid length. [ 564.771792][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 564.805856][T19979] lo speed is unknown, defaulting to 1000 [ 564.813512][T19979] wg1 speed is unknown, defaulting to 1000 [ 565.170338][T19997] netlink: 'syz.4.3798': attribute type 1 has an invalid length. [ 565.206566][T19997] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3798'. [ 565.236781][T19997] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 565.505363][T19982] syzkaller1: entered promiscuous mode [ 565.526943][T19982] syzkaller1: entered allmulticast mode [ 565.680624][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3805'. [ 565.745946][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3805'. [ 565.873740][T20019] netlink: 'syz.5.3805': attribute type 1 has an invalid length. [ 566.137362][T20032] netlink: 'syz.2.3809': attribute type 10 has an invalid length. [ 566.163261][T20032] __nla_validate_parse: 1 callbacks suppressed [ 566.163280][T20032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3809'. [ 566.302570][T20035] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 566.328816][T20035] netlink: 'syz.5.3810': attribute type 10 has an invalid length. [ 566.348026][T20032] team0: Port device geneve0 added [ 566.373677][T20042] ªªªªª»: (slave dummy0): Releasing backup interface [ 566.403352][T20042] bridge_slave_0: left allmulticast mode [ 566.412616][T20042] bridge_slave_0: left promiscuous mode [ 566.419457][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.447117][T20042] bridge_slave_1: left allmulticast mode [ 566.473164][T20042] bridge_slave_1: left promiscuous mode [ 566.486235][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.506836][T20042] ªªªªª»: (slave bond_slave_0): Releasing backup interface [ 566.517385][T20042] ªªªªª»: (slave bond_slave_1): Releasing backup interface [ 566.528566][T20042] team0: Port device team_slave_1 removed [ 566.535452][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.554691][T20035] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 566.601104][T20035] ªªªªª»: (slave wlan1): Enslaving as an active interface with an up link [ 566.677894][T20049] macsec1: entered promiscuous mode [ 566.696075][T20049] macsec1: entered allmulticast mode [ 567.064454][T20064] netlink: 'syz.0.3819': attribute type 28 has an invalid length. [ 567.310855][T20073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 567.325277][T20071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3821'. [ 567.338169][T20071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3821'. [ 567.366698][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3821'. [ 567.566623][T20079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3824'. [ 567.588783][T20090] nbd: must specify at least one socket [ 567.630901][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3826'. [ 567.654715][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3826'. [ 567.739460][T20096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3832'. [ 567.748710][T20096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3832'. [ 567.814945][T20096] gtp0: entered promiscuous mode [ 567.830002][T20096] gtp0: entered allmulticast mode [ 568.014823][T20112] 8021q: VLANs not supported on nlmon0 [ 568.533793][T20127] lo speed is unknown, defaulting to 1000 [ 568.653943][T20127] wg1 speed is unknown, defaulting to 1000 [ 571.424172][T20168] netlink: 'syz.2.3851': attribute type 1 has an invalid length. [ 571.610068][T20168] netlink: 'syz.2.3851': attribute type 3 has an invalid length. [ 571.683271][T20168] __nla_validate_parse: 4 callbacks suppressed [ 571.683292][T20168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3851'. [ 571.881298][T20168] NCSI netlink: No device for ifindex 246 [ 572.132793][T20176] netlink: 'syz.3.3854': attribute type 4 has an invalid length. [ 572.162607][T20174] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3853'. [ 572.293994][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3853'. [ 572.507082][T20168] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.520413][T20168] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.583675][T20169] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 572.621955][T20192] netlink: 'syz.0.3858': attribute type 2 has an invalid length. [ 572.626271][T20169] team0: Port device batadv1 added [ 572.667720][T20168] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.735763][T20168] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.897307][T20168] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.950511][T20168] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.083502][T20168] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.127862][T20168] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.331440][T20213] lo speed is unknown, defaulting to 1000 [ 573.420575][T20213] wg1 speed is unknown, defaulting to 1000 [ 573.473663][T20217] lo speed is unknown, defaulting to 1000 [ 573.542450][ T7838] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.563237][ T7838] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.582682][ T7838] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.604434][ T7838] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.626414][T20217] wg1 speed is unknown, defaulting to 1000 [ 573.664939][ T3553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.685568][ T3553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.755541][ T7838] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.786285][ T7838] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.866307][T20228] lo speed is unknown, defaulting to 1000 [ 573.873896][T20228] wg1 speed is unknown, defaulting to 1000 [ 573.919607][T20233] netlink: 'syz.2.3865': attribute type 13 has an invalid length. [ 574.523989][T20240] netlink: 'syz.4.3867': attribute type 22 has an invalid length. [ 574.976552][T20244] netlink: 'syz.4.3869': attribute type 4 has an invalid length. [ 575.046844][T20246] netlink: 'syz.4.3869': attribute type 4 has an invalid length. [ 575.968078][T20233] ip6gretap0: left allmulticast mode [ 576.228279][ T7826] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.271024][ T7826] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.315405][ T7826] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.343578][ T7826] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.432261][ T7826] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.441318][T13646] IPVS: starting estimator thread 0... [ 576.456865][ T7826] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.486310][ T7826] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.507460][ T7826] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.575321][T20261] IPVS: using max 23 ests per chain, 55200 per kthread [ 576.621309][T20264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3872'. [ 576.671841][T20266] tipc: Enabled bearer , priority 0 [ 576.835593][T20271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3874'. [ 576.956042][T20266] syzkaller0: entered promiscuous mode [ 576.967953][T20266] syzkaller0: entered allmulticast mode [ 576.983763][T20282] tipc: Resetting bearer [ 577.050823][T20285] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 577.084404][T20285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3877'. [ 577.097392][T20265] tipc: Resetting bearer [ 577.132239][T20265] tipc: Disabling bearer [ 577.191694][T20285] veth0_vlan: left promiscuous mode [ 577.205206][T20285] veth0_vlan: entered promiscuous mode [ 577.211824][T20285] veth0_vlan: entered allmulticast mode [ 577.247346][T20285] bridge0: port 1(veth0_vlan) entered blocking state [ 577.276747][T20285] bridge0: port 1(veth0_vlan) entered disabled state [ 577.319361][T20285] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 577.673148][T20305] IPVS: Error connecting to the multicast addr [ 577.961085][T20321] netlink: 'syz.4.3888': attribute type 2 has an invalid length. [ 577.987180][T20322] sctp: [Deprecated]: syz.3.3889 (pid 20322) Use of int in max_burst socket option deprecated. [ 577.987180][T20322] Use struct sctp_assoc_value instead [ 578.016041][T20321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'. [ 578.113688][T20329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3891'. [ 578.173764][T20330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3891'. [ 578.394642][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'. [ 578.884163][T20358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3901'. [ 579.017415][ T7826] bond2: left allmulticast mode [ 579.022660][ T7826] bond2: left promiscuous mode [ 579.066209][ T7826] bridge0: port 1(bond2) entered disabled state [ 579.129929][T20368] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 579.217893][T20373] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3903'. [ 579.252467][T20370] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3904'. [ 580.106271][ T7826] team0: Port device geneve0 removed [ 580.552080][ T7826] bond1 (unregistering): Released all slaves [ 580.668517][ T7826] bond2 (unregistering): Released all slaves [ 580.775955][ T7826] bond3 (unregistering): Released all slaves [ 580.833496][T20368] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 580.883178][T20369] lo speed is unknown, defaulting to 1000 [ 580.928970][T20369] wg1 speed is unknown, defaulting to 1000 [ 580.953284][T20380] lo speed is unknown, defaulting to 1000 [ 580.980487][T20380] wg1 speed is unknown, defaulting to 1000 [ 581.112150][T20387] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3908'. [ 581.490832][T20403] netlink: 'syz.0.3911': attribute type 9 has an invalid length. [ 581.901169][T20413] __nla_validate_parse: 1 callbacks suppressed [ 581.901195][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3914'. [ 582.020011][T20420] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3914'. [ 582.100278][T20416] tipc: Enabled bearer , priority 0 [ 582.140543][T20416] syzkaller0: entered promiscuous mode [ 582.166462][T20416] syzkaller0: entered allmulticast mode [ 582.217157][T20416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3915'. [ 582.374372][T20419] tipc: Resetting bearer [ 582.385530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.397453][T20419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.423306][T20414] tipc: Resetting bearer [ 582.472850][T20414] tipc: Disabling bearer [ 582.552181][ T7826] : left promiscuous mode [ 582.704138][T20439] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3922'. [ 582.717133][ T7826] tipc: Disabling bearer [ 582.740010][ T7826] tipc: Left network mode [ 582.867177][T20437] tipc: Enabled bearer , priority 0 [ 582.886874][T20437] syzkaller0: entered promiscuous mode [ 582.892425][T20437] syzkaller0: entered allmulticast mode [ 583.102122][T20449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.109452][T20449] IPv6: NLM_F_CREATE should be set when creating new route [ 583.136842][T20449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.322384][T20454] netlink: 'syz.0.3925': attribute type 21 has an invalid length. [ 583.384476][T20454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3925'. [ 583.458520][T16619] cgroup: fork rejected by pids controller in /syz5 [ 583.567854][T20450] tipc: Resetting bearer [ 583.678319][T20436] tipc: Resetting bearer [ 583.746620][T20436] tipc: Disabling bearer [ 583.875878][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3928'. [ 584.271316][T20476] lo speed is unknown, defaulting to 1000 [ 584.279187][T20476] wg1 speed is unknown, defaulting to 1000 [ 584.290479][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3932'. [ 584.353346][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'. [ 584.950099][T20488] lo speed is unknown, defaulting to 1000 [ 585.192053][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3939'. [ 585.202770][T20488] wg1 speed is unknown, defaulting to 1000 [ 585.226122][T20495] netlink: 'syz.3.3939': attribute type 3 has an invalid length. [ 585.255397][T20495] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3939'. [ 585.579173][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 585.964212][T20497] lo speed is unknown, defaulting to 1000 [ 586.225838][T20497] wg1 speed is unknown, defaulting to 1000 [ 586.450358][T20514] xt_time: unknown flags 0xf4 [ 586.942974][ T7826] hsr_slave_0: left promiscuous mode [ 587.012831][ T7826] hsr_slave_1: left promiscuous mode [ 587.053910][T20525] netlink: 'syz.3.3948': attribute type 6 has an invalid length. [ 587.076946][ T7826] veth0_macvtap: left allmulticast mode [ 587.182019][T20534] __nla_validate_parse: 1 callbacks suppressed [ 587.182040][T20534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3947'. [ 587.351961][T20541] Bluetooth: MGMT ver 1.23 [ 587.556198][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.566420][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.584012][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.604856][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.636345][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.833181][T20547] lo speed is unknown, defaulting to 1000 [ 588.953952][T20564] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 589.441715][ T7826] IPVS: stop unused estimator thread 0... [ 589.634176][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3955'. [ 589.735444][ T51] Bluetooth: hci0: command tx timeout [ 589.945763][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3956'. [ 589.965335][T20579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3956'. [ 590.279351][T20579] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 590.348256][T20585] tipc: Enabled bearer , priority 0 [ 590.556562][T20588] syzkaller0: entered promiscuous mode [ 590.562187][T20588] syzkaller0: entered allmulticast mode [ 590.568923][T20588] tipc: Resetting bearer [ 590.590256][T20582] tipc: Resetting bearer [ 591.048396][T20609] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3962'. [ 591.818970][ T5868] Bluetooth: hci0: command tx timeout [ 592.597166][T20582] tipc: Disabling bearer [ 592.741030][T20607] lo speed is unknown, defaulting to 1000 [ 592.837532][T20605] lo speed is unknown, defaulting to 1000 [ 593.665633][T20547] chnl_net:caif_netlink_parms(): no params data found [ 593.897686][ T5868] Bluetooth: hci0: command tx timeout [ 594.732757][ T7826] ªªªªª» (unregistering): (slave wlan1): Releasing backup interface [ 594.744741][ T7826] ªªªªª» (unregistering): Released all slaves [ 594.876141][ T7826] bond1 (unregistering): Released all slaves [ 594.893824][ T7826] bond0 (unregistering): Released all slaves [ 595.112746][ T7826] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 595.321327][ T7826] tipc: Left network mode [ 595.551392][T20547] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.569633][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.587467][T20547] bridge_slave_0: entered allmulticast mode [ 595.601483][T20547] bridge_slave_0: entered promiscuous mode [ 595.617758][T20547] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.625780][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.633241][T20547] bridge_slave_1: entered allmulticast mode [ 595.641502][T20547] bridge_slave_1: entered promiscuous mode [ 595.815722][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 595.975216][ T51] Bluetooth: hci0: command tx timeout [ 596.009908][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 596.170002][T20657] bond1: entered promiscuous mode [ 596.178067][T20657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.333887][T20657] bond1 (unregistering): Released all slaves [ 596.410710][T20547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.424792][T20651] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 596.552650][T20547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.031245][T20547] team0: Port device team_slave_0 added [ 597.087006][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 597.134861][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 597.217672][T20547] team0: Port device team_slave_1 added [ 597.263805][T20689] IPv6: NLM_F_CREATE should be specified when creating new route [ 597.273558][T20681] tipc: Enabled bearer , priority 0 [ 597.367756][T20686] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.409590][T20686] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 597.433662][T20686] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 597.462147][T20689] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3982'. [ 597.560551][T20683] syzkaller0: entered promiscuous mode [ 597.566603][T20683] syzkaller0: entered allmulticast mode [ 597.596358][T20547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.603488][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.633622][T20547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.719812][T20695] netlink: 'syz.0.3983': attribute type 1 has an invalid length. [ 598.055427][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 598.400812][T20251] tipc: Node number set to 2987393973 [ 598.753576][T20547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.760712][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.792627][T20547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.804790][T20695] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 598.972880][T20673] tipc: Resetting bearer [ 599.068575][T20673] tipc: Disabling bearer [ 599.157867][T20547] hsr_slave_0: entered promiscuous mode [ 599.187214][T20547] hsr_slave_1: entered promiscuous mode [ 599.193906][T20547] debugfs: 'hsr0' already exists in 'hsr' [ 599.223402][T20547] Cannot create hsr debugfs directory [ 599.301316][T20729] netlink: 'syz.2.3992': attribute type 1 has an invalid length. [ 599.312376][T20729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3992'. [ 599.487617][T20731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3992'. [ 599.773653][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 599.900194][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3994'. [ 599.912574][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3994'. [ 599.922013][T20752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3998'. [ 599.934645][T20753] pim6reg: entered allmulticast mode [ 599.980206][T20758] pim6reg: left allmulticast mode [ 601.513452][T20547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.649432][T20547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 601.809777][T20547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 602.021416][T20547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.264758][T20547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.640387][T20547] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.797994][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.806610][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.084371][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.092379][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.224381][T20790] __nla_validate_parse: 3 callbacks suppressed [ 604.224405][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4007'. [ 604.693859][T20792] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 604.704936][T20791] IPVS: stopping backup sync thread 20792 ... [ 604.985574][T20798] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 605.026352][T20798] bond0: (slave 0!): Releasing backup interface [ 605.070157][T20798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4009'. [ 605.080802][T20798] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 605.152266][T20803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4011'. [ 605.186462][T20806] nbd: must specify at least one socket [ 605.203200][T20806] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4012'. [ 605.228867][T20803] tipc: Enabled bearer , priority 0 [ 605.245299][T20806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4012'. [ 605.256277][T20803] syzkaller0: entered promiscuous mode [ 605.261796][T20803] syzkaller0: entered allmulticast mode [ 605.286777][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 605.351521][T20815] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4015'. [ 605.353933][T20811] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.4012'. [ 605.383632][T20815] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4015'. [ 605.399644][T20547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.436993][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 605.728957][T20823] lo speed is unknown, defaulting to 1000 [ 605.996953][T20802] tipc: Resetting bearer [ 606.163079][T20802] tipc: Disabling bearer [ 606.200511][T20844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.303330][T20843] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 606.316243][T20843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.365224][T20844] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 606.391565][T20846] netlink: 'syz.4.4022': attribute type 12 has an invalid length. [ 606.498061][T20848] bond2: (slave erspan0): Releasing active interface [ 606.513440][T20848] ip6gretap1: entered promiscuous mode [ 606.564206][T20846] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 606.580609][T20848] bridge_slave_0: left allmulticast mode [ 606.586853][T20848] bridge_slave_0: left promiscuous mode [ 606.593587][T20848] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.608971][T20848] bridge_slave_1: left allmulticast mode [ 606.620631][T20848] bridge_slave_1: left promiscuous mode [ 606.627661][T20848] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.668377][T20848] team0: Port device team_slave_0 removed [ 606.689329][T20848] team0: Port device team_slave_1 removed [ 606.700753][T20848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.718906][T20848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.732434][T20848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.744809][T20848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.789568][T20848] bond2: (slave ip6gretap1): Releasing active interface [ 606.813929][T20848] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 6a:eb:8e:08:56:b3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 606.859010][T20848] ip6gretap1: left promiscuous mode [ 606.877202][T20848] bond2: (slave veth3): Releasing active interface [ 606.960699][T20846] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 607.234805][T20871] Bluetooth: MGMT ver 1.23 [ 607.379478][T20866] syzkaller0: entered promiscuous mode [ 607.385274][T20866] syzkaller0: entered allmulticast mode [ 607.528313][T20877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.343252][T20877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.403406][T20547] veth0_vlan: entered promiscuous mode [ 609.493275][T20877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.561714][T20891] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 609.615767][T20891] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 609.636867][T20891] netlink: 'syz.4.4032': attribute type 6 has an invalid length. [ 609.654845][T20891] netlink: 'syz.4.4032': attribute type 3 has an invalid length. [ 609.684859][T20877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.711566][T20895] netlink: 'syz.4.4032': attribute type 5 has an invalid length. [ 609.724046][T20547] veth1_vlan: entered promiscuous mode [ 609.826957][T20547] veth0_macvtap: entered promiscuous mode [ 609.838857][T20547] veth1_macvtap: entered promiscuous mode [ 609.848449][T20898] __nla_validate_parse: 4 callbacks suppressed [ 609.848468][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 609.885629][ T7814] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.913421][ T7814] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.943824][ T7826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.967476][T20547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.022380][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.056046][T20547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.081018][T20900] syz_tun: entered allmulticast mode [ 610.113393][ T7814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.137108][ T7814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.170787][ T7814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.205810][ T7814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.240341][T20899] syz_tun: left allmulticast mode [ 610.299740][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4036'. [ 610.505176][T20915] [ 610.507576][T20915] ====================================================== [ 610.514603][T20915] WARNING: possible circular locking dependency detected [ 610.521644][T20915] syzkaller #0 Not tainted [ 610.526074][T20915] ------------------------------------------------------ [ 610.533103][T20915] syz.3.4038/20915 is trying to acquire lock: [ 610.539177][T20915] ffffffff8f68d2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 610.548700][T20915] [ 610.548700][T20915] but task is already holding lock: [ 610.556080][T20915] ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 610.565685][T20915] [ 610.565685][T20915] which lock already depends on the new lock. [ 610.565685][T20915] [ 610.576102][T20915] [ 610.576102][T20915] the existing dependency chain (in reverse order) is: [ 610.585126][T20915] [ 610.585126][T20915] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 610.593226][T20915] lock_acquire+0x120/0x360 [ 610.598273][T20915] _raw_spin_lock_bh+0x36/0x50 [ 610.603568][T20915] nr_rt_ioctl+0x390/0xd50 [ 610.608518][T20915] sock_do_ioctl+0xdc/0x300 [ 610.613577][T20915] sock_ioctl+0x576/0x790 [ 610.618438][T20915] __se_sys_ioctl+0xfc/0x170 [ 610.623565][T20915] do_syscall_64+0xfa/0x3b0 [ 610.628605][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.636154][T20915] [ 610.636154][T20915] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 610.644156][T20915] lock_acquire+0x120/0x360 [ 610.649209][T20915] _raw_spin_lock_bh+0x36/0x50 [ 610.654502][T20915] nr_rt_ioctl+0x193/0xd50 [ 610.659466][T20915] sock_do_ioctl+0xdc/0x300 [ 610.664500][T20915] sock_ioctl+0x576/0x790 [ 610.669360][T20915] __se_sys_ioctl+0xfc/0x170 [ 610.674486][T20915] do_syscall_64+0xfa/0x3b0 [ 610.679547][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.685968][T20915] [ 610.685968][T20915] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 610.693796][T20915] validate_chain+0xb9b/0x2140 [ 610.699086][T20915] __lock_acquire+0xab9/0xd20 [ 610.704296][T20915] lock_acquire+0x120/0x360 [ 610.709330][T20915] _raw_spin_lock_bh+0x36/0x50 [ 610.714626][T20915] nr_rt_device_down+0xa9/0x720 [ 610.720007][T20915] nr_device_event+0x137/0x150 [ 610.725318][T20915] notifier_call_chain+0x1b3/0x3e0 [ 610.730956][T20915] __dev_notify_flags+0x18d/0x2e0 [ 610.736595][T20915] netif_change_flags+0xe8/0x1a0 [ 610.742492][T20915] dev_change_flags+0x130/0x260 [ 610.747898][T20915] dev_ioctl+0x7b4/0x1150 [ 610.752764][T20915] sock_do_ioctl+0x22c/0x300 [ 610.757882][T20915] sock_ioctl+0x576/0x790 [ 610.762749][T20915] __se_sys_ioctl+0xfc/0x170 [ 610.767905][T20915] do_syscall_64+0xfa/0x3b0 [ 610.772945][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.779367][T20915] [ 610.779367][T20915] other info that might help us debug this: [ 610.779367][T20915] [ 610.789598][T20915] Chain exists of: [ 610.789598][T20915] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 610.789598][T20915] [ 610.803433][T20915] Possible unsafe locking scenario: [ 610.803433][T20915] [ 610.810888][T20915] CPU0 CPU1 [ 610.816293][T20915] ---- ---- [ 610.821659][T20915] lock(nr_neigh_list_lock); [ 610.826347][T20915] lock(&nr_node->node_lock); [ 610.833639][T20915] lock(nr_neigh_list_lock); [ 610.840846][T20915] lock(nr_node_list_lock); [ 610.845446][T20915] [ 610.845446][T20915] *** DEADLOCK *** [ 610.845446][T20915] [ 610.853589][T20915] 2 locks held by syz.3.4038/20915: [ 610.858784][T20915] #0: ffffffff8f537c48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 610.867686][T20915] #1: ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 610.877897][T20915] [ 610.877897][T20915] stack backtrace: [ 610.883791][T20915] CPU: 1 UID: 0 PID: 20915 Comm: syz.3.4038 Not tainted syzkaller #0 PREEMPT(full) [ 610.883814][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.883826][T20915] Call Trace: [ 610.883834][T20915] [ 610.883842][T20915] dump_stack_lvl+0x189/0x250 [ 610.883869][T20915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.883896][T20915] ? __pfx__printk+0x10/0x10 [ 610.883923][T20915] ? print_lock_name+0xde/0x100 [ 610.883950][T20915] print_circular_bug+0x2ee/0x310 [ 610.883972][T20915] check_noncircular+0x134/0x160 [ 610.883994][T20915] validate_chain+0xb9b/0x2140 [ 610.884016][T20915] ? rt6_disable_ip+0x6b3/0x720 [ 610.884043][T20915] ? __lock_acquire+0xab9/0xd20 [ 610.884070][T20915] __lock_acquire+0xab9/0xd20 [ 610.884099][T20915] ? nr_rt_device_down+0xa9/0x720 [ 610.884120][T20915] lock_acquire+0x120/0x360 [ 610.884145][T20915] ? nr_rt_device_down+0xa9/0x720 [ 610.884171][T20915] ? nr_rt_device_down+0xa9/0x720 [ 610.884191][T20915] _raw_spin_lock_bh+0x36/0x50 [ 610.884213][T20915] ? nr_rt_device_down+0xa9/0x720 [ 610.884233][T20915] nr_rt_device_down+0xa9/0x720 [ 610.884254][T20915] ? do_raw_spin_unlock+0x122/0x240 [ 610.884278][T20915] nr_device_event+0x137/0x150 [ 610.884297][T20915] notifier_call_chain+0x1b3/0x3e0 [ 610.884319][T20915] __dev_notify_flags+0x18d/0x2e0 [ 610.884338][T20915] ? __pfx___dev_notify_flags+0x10/0x10 [ 610.884354][T20915] ? __dev_change_flags+0x4cc/0x6d0 [ 610.884372][T20915] ? __pfx___dev_change_flags+0x10/0x10 [ 610.884389][T20915] ? full_name_hash+0x92/0xe0 [ 610.884410][T20915] netif_change_flags+0xe8/0x1a0 [ 610.884430][T20915] dev_change_flags+0x130/0x260 [ 610.884459][T20915] dev_ioctl+0x7b4/0x1150 [ 610.884485][T20915] sock_do_ioctl+0x22c/0x300 [ 610.884508][T20915] ? __pfx_sock_do_ioctl+0x10/0x10 [ 610.884529][T20915] ? __lock_acquire+0xab9/0xd20 [ 610.884561][T20915] sock_ioctl+0x576/0x790 [ 610.884582][T20915] ? __pfx_sock_ioctl+0x10/0x10 [ 610.884603][T20915] ? __fget_files+0x2a/0x420 [ 610.884629][T20915] ? __fget_files+0x3a0/0x420 [ 610.884656][T20915] ? __fget_files+0x2a/0x420 [ 610.884684][T20915] ? bpf_lsm_file_ioctl+0x9/0x20 [ 610.884706][T20915] ? __pfx_sock_ioctl+0x10/0x10 [ 610.884726][T20915] __se_sys_ioctl+0xfc/0x170 [ 610.884748][T20915] do_syscall_64+0xfa/0x3b0 [ 610.884774][T20915] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.884798][T20915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.884815][T20915] ? clear_bhb_loop+0x60/0xb0 [ 610.884836][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.884853][T20915] RIP: 0033:0x7ff9a758ebe9 [ 610.884870][T20915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.884886][T20915] RSP: 002b:00007ff9a844a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.884911][T20915] RAX: ffffffffffffffda RBX: 00007ff9a77b6090 RCX: 00007ff9a758ebe9 [ 610.884925][T20915] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000f [ 610.884937][T20915] RBP: 00007ff9a7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 610.884950][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.884963][T20915] R13: 00007ff9a77b6128 R14: 00007ff9a77b6090 R15: 00007fff730e8868 [ 610.884986][T20915] [ 611.288876][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.290521][T20547] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 611.322516][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.060774][ T7814] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.121366][ T7814] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.171357][ T7814] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.221403][ T7814] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.287920][ T7814] bridge_slave_1: left allmulticast mode [ 612.293609][ T7814] bridge_slave_1: left promiscuous mode [ 612.299639][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.309466][ T7814] bridge_slave_0: left allmulticast mode [ 612.315703][ T7814] bridge_slave_0: left promiscuous mode [ 612.321365][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.433660][ T7814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.443987][ T7814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.456489][ T7814] bond0 (unregistering): Released all slaves [ 612.658223][ T7814] hsr_slave_0: left promiscuous mode [ 612.664250][ T7814] hsr_slave_1: left promiscuous mode [ 612.679582][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.688805][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.696951][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.704337][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.716005][ T7814] veth1_macvtap: left promiscuous mode [ 612.721569][ T7814] veth0_macvtap: left promiscuous mode [ 612.727793][ T7814] veth1_vlan: left promiscuous mode [ 612.733097][ T7814] veth0_vlan: left promiscuous mode [ 612.892177][ T7814] team0 (unregistering): Port device team_slave_1 removed [ 612.918988][ T7814] team0 (unregistering): Port device team_slave_0 removed [ 614.363794][ T59] bond4 (unregistering): (slave geneve2): Releasing active interface [ 614.657788][ T59] bond0 (unregistering): (slave bridge4): Releasing active interface [ 614.811993][ T59] bond1 (unregistering): Released all slaves [ 614.903397][ T59] bond2 (unregistering): Released all slaves [ 614.994635][ T59] bond3 (unregistering): Released all slaves [ 615.090248][ T59] bond4 (unregistering): Released all slaves [ 615.101190][ T59] bond0 (unregistering): Released all slaves [ 615.163664][ T59] : left promiscuous mode [ 615.206146][ T59] tipc: Left network mode [ 615.566588][ T59] hsr_slave_0: left promiscuous mode [ 615.572486][ T59] hsr_slave_1: left promiscuous mode [ 616.491985][ T59] IPVS: stop unused estimator thread 0... [ 616.529604][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.579649][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.628402][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.668932][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.850348][ T59] dvmrp0 (unregistering): left allmulticast mode [ 617.120211][ T7814] smc: removing ib device syz2 [ 617.125781][ T59] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 617.134815][ T59] bond0 (unregistering): Released all slaves [ 617.567737][ T59] : left promiscuous mode [ 617.794754][ T59] hsr_slave_0: left promiscuous mode [ 617.800596][ T59] hsr_slave_1: left promiscuous mode [ 617.808131][ T59] veth1_macvtap: left promiscuous mode [ 617.813648][ T59] veth0_macvtap: left promiscuous mode [ 617.819269][ T59] veth1_vlan: left promiscuous mode [ 617.824532][ T59] veth0_vlan: left promiscuous mode [ 618.450933][ T59] IPVS: stop unused estimator thread 0...