last executing test programs: 2m40.389050755s ago: executing program 1 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x3, 0x0, 0x6, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @broadcast}, &(0x7f0000000340)=0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251500000008002c000400000014002b800500030002000000080001000200000008002a000100000008000300", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex=r3, 0xffffffffffffffff, 0x1d, 0x6, 0xffffffffffffffff, @void, @value, @void, @void, r2}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) 2m40.227744054s ago: executing program 1 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x4, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f378fd400000ff204c1f444bac"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x1}]}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0ac20c5d68c35803f04749977c311ed8f7c7a14c9120dfd425eb3837b12fc599c3cd6af96623e811c27202e0e5549b43e2d3fa307b85b13d4fdece18c53cc85f0b4a02bef7a160ec496a9ae9a203145a5075459c87e95202de35fe6ac79f7fefaa90d5acd8e32033e42d9fee3f44bedd7467282498b560d406ebc3cdfa70bc0c01fae518aaf6626d08a6001c9a1c2c846aa8885247123733f3759d0bbbc1966d3a3254d2ef12301f3d196a96929ffe303fd0146278d083095bf99556e426e29be0ab135015b1efaebf92faa0f18fc7d9fd2e3aa31f4160fdb2cdfbecbcf2d7cc3faf5b93d7c7f4d8"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020100000000"], 0x1c}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0xffffffffffffff4b) 2m40.06838s ago: executing program 1 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m39.995805553s ago: executing program 1 (id=1168): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x36) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000009"], 0x0, 0x4e}, 0x28) 2m39.872039998s ago: executing program 1 (id=1170): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0xc010, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000780)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x3}, 0x18) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0xc, 0x0, 0x0, 0x1, 0x5, 0x20}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd}, {0x4, 0x2}, {0x6, 0x4}, {0xe, 0x3}, {0xa, 0x2}, {0x3, 0x3}, {0x0, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x30, 0x2e, 0x30, 0x61, 0x2e, 0x2e, 0x0, 0x5f]}}, 0x0, 0x90}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r4) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=@polexpire={0x1f4, 0x1b, 0x0, 0x70bd29, 0x25dfdbfd, {{{@in6=@empty, @in6=@loopback, 0x4e22, 0x9, 0x4e21, 0x7, 0x2, 0x80, 0x0, 0x6, 0x0, r3}, {0x80000001, 0x0, 0x7, 0x200, 0xca, 0x7f, 0x9edd, 0x3}, {0x8000000000000001, 0xe20, 0x1, 0xfa}, 0x2, 0x0, 0x1, 0x1, 0x2, 0x3}, 0x9}, [@algo_crypt={0x73, 0x2, {{'ctr-cast5-avx\x00'}, 0x158, "b4aad25f3af39797c4225cd4e5a400675e4c072cea99adc15910e5dba060b0f4e8362d90127f8a1609c7cf"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @algo_crypt={0xaf, 0x2, {{'pcbc-aes-aesni\x00'}, 0x338, "211843a917bf2f5fb80a7e9059be3084844dc188ada212cd27b9b644afbc58ad6cbc8f21ac0d8c85650c186b41a7ce0e1a0980100bc58fd0d645436e549c7eb9f40d5d73a6bafbcff93872749a5a8f6dba97d8d2b3213d109e9e02b0aaea2e59b82898226d36ed"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xdac8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) 2m39.39560166s ago: executing program 1 (id=1174): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r5], 0x7c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r6, 0x0, 0x40000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m38.185801434s ago: executing program 3 (id=1196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/30, 0x1e}], 0x3, 0x3, 0x7f) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$SIOCAX25GETUID(r1, 0x89ed, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m38.168296612s ago: executing program 3 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x112, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@struct={0x1, 0x0, 0x0, 0xf, 0x0, 0x10005}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x0, 0x61, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3e, 0x0, 0x6}, 0x28) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b9", 0x9, 0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r4, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000002010481000000000000000a00000004000200"], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x3, 0x20001}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x29}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x2c}}, 0x0) 2m37.296794736s ago: executing program 3 (id=1215): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061104c000000000005000000000000009500000c000000000d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0x30, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, [@RTA_VIA={0x14, 0x12, {0x8, "24aa35bafdb6e1f755456dfb4edb"}}]}, 0x30}}, 0x0) 2m37.208568408s ago: executing program 3 (id=1216): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x430, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.20792251s ago: executing program 3 (id=1217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600)={0x9, 0xf0d6, 0x387, 0x0, 0x6}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x44}}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x44}}, 0x40) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x74, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x4000080) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0x17, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x8, 0x7, 0x400, 0x8001, 0x8, 0x6]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x8, 0x7, 0x400, 0x8001, 0x8, 0x6]}, &(0x7f0000000180)=0x10) 2m37.08949449s ago: executing program 3 (id=1220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110bf00ffffffa8b4ee250000000000"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x30, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r6], 0x54}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dffbf8, {0x0, 0x0, 0x0, r10, 0x0, 0x20}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m24.367250543s ago: executing program 32 (id=1174): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r5], 0x7c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r6, 0x0, 0x40000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m22.016356742s ago: executing program 33 (id=1220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110bf00ffffffa8b4ee250000000000"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x30, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r6], 0x54}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dffbf8, {0x0, 0x0, 0x0, r10, 0x0, 0x20}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.965981423s ago: executing program 0 (id=2606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x20044041) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48805}, 0x40) sendmmsg$alg(r1, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000800)="df864054c29641962786152b8f580962a372659bce36048ad73d499157d36b9f044c6d425e30a5c9657bf8a3be09169d8904a5923fbb4d73b10ea60f32f34682ed0da9bbe4b40d460859deae61aa2b8acd202119f95513ce7ab4fe7f79edc4aa15bf9b388343b42eafd3580d7a6a", 0x6e}, {&(0x7f0000000880)="ed85809cf44a040c9adf8320e7ebb952950c087a30bacc", 0x17}, {&(0x7f0000000b40)="1de47680018a60bec339f8f39e12639dead8db2c70b3001d2eb47e41536d3f1e14181924310f05128d74723e8f1d4f9888a29a693191d67e0607d9690d15779261996f03fbfbeaf4c8decac0873ba414", 0x50}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="cdf11c29908218c04007f004ba20af1bcc0ebfe9d88d78deef0a0f7649d4401fc5acea88cf2f3afb18404ae10de5a6f57e3d03b011a7a4dce373941ad33ed187c567d766a32e8e95298592474b7c21ed5b3753fe4083bbf2bedc8ad2f17c181693f9ecd07c8a183f1e539506bd1e7e761a76706eb310a1ba421ad357c2c63e25fc8625109ac3d0fc852a9ba6f3f0d85a28b9f723c9da7f8ed852dcc1d7f9163e166181b93908e4103c9157303b6f175d252fe3641a6099ae1d3b34f457b0564dd9b784617ee0ef6b551a643ad30d50ae73fce5bf6d8a6f8749e88f42d3", 0xdd}, {&(0x7f0000001cc0)="8581bdcf466ca79c5d3a093d0fa8d6733b22e608c22f93e4e085ed9c33e4545a96d21060daee6080a19ceec7c86c8b9d923c6dde76a1431ff09e92edb306792e604e0f7d74982232761a8f53af1a500c2c7acd94ced93cf4bbba01e372e353d8155b29a27d17d3ed31b96863510487c679178972a9eda85a0562e0683603c7e1d9cdb3a3a167e20b94ccb1c7ed6652b48101d5145c23dd083d84a37f8c69ca762b1ed96fe86d32f4d92edd76b02a461ccb80c505356d13d7c3bd5c109c16d8c27340b87ff0f21ac5fe9ed5d56372296f1b1b30044d153ff3c2f44f1ddc1e000a628bcfb9", 0xe4}], 0x6, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x40100}, @op={0x18}], 0x30, 0xc800}, {0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)="e16f2978360f87ba51de342216e05a072626a179935c42d1277347d9cb746b397eb17041ae6e2eb01414d56a3f59e831754490aec5fb8ebd158dbdde4093e98f6cff2018d253be5f26377637a07b9cb4a70321ec269489c25265171431a9198bb4b9b36c38667c98a3622761a5edbf064c3632aa2747351ae255b895401af5c2ade861f5679b88e51e94ef98b78c301a46d116a342fa9b2d8618606c89a543961ff6488866b065325f48b42fcfeb178c4a15686d48b1b581", 0xb8}, {&(0x7f0000001f00)="a3e66833c3023d5c5605a78cbe0334f9c73ef803ace4d9a28870c6517b88bd6807ebad8e65545e4758fa0c3c5a941b81d3f982c927aa5a017e4146f9ea2ead2e110d0d1dfbd770aeaeb048ba2a8fa8218e9166ee0347bac206390e099ef86840b5dc50e93e1863b8f9aacfcb5a2e4da22a3ee6d505e79ceda435051e84fdeecc5acbbe3a", 0x84}, {&(0x7f0000001fc0)="5ff5e99809df6b8889a29dae1e5817b6e7b05aa6f71744abb83406e6e84450053d2a2a363c60358e87fe1cf3d8ac70943ea1086c4ad0f2393437c280dc1f86edd32172f0b3c1b875922674b7bc39e19e87f3e31aa202147fe3ff152c25524dbceca6f6f215ec3ab2922e00587f7f8bdbb04a6bd994b80b74a3ddd24c02eb7a7cced1d199b53c482b230e158f55db1d079f3dbe3bab549fdd02ad6adf5fe5b878a553505e2da42f09be3e1b48d16b6d92e3ebd7877606d1bf3a5b43e1f0fb1c8389def5f1713f07fa2df3", 0xca}, {&(0x7f00000020c0)="30d29a2e0abe4d5f93ec03e8d90e815809c8465997db9c80320d138371ba29652832da57081686edcc6591d872e4c5d6edeb928670d7e10ece2de9eb3eb4f699255bafd4b4bf3acd884703f627b62066ffc8412e1ebfe26049f578cecf1461ee0f6bf27ed1876c0764d37d685372872d575de1d6ed0f361c5fe5", 0x7a}], 0x4, &(0x7f0000002180)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xb0, 0x117, 0x2, 0x98, "1c01adc94e7553d2ba5d47283802b65947a17ac8398ab6837ab2e1cd556ea8133a80b4685252c7c3d71ae433383e47e9b0e871371a32d649ca91524e22ac26f61907b4989201c064280a5203c47ffd06d84721c9e88f76ba3a9afaa5b7cf1be74eec8cb4bc907548e45edef061b61a499b3cbad54f85ef09465b6e3a1185f1d18faa73234b8b9d145c4a067c6d2ff133b24a0b63c8e6cb26"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x48, "8fba867a33521553e182e8e664d1f4aeec8048ec11c7b6d1cc3d7b5cfbf84bd1f171950a5d85fd7a645d306891878ea523aeba8b47672cc88058b1362eaa1ffe9f077224ec28a053"}, @iv={0xc8, 0x117, 0x2, 0xb1, "76a8a73a478d15f34a850cf32dbb194db1236f33cb824d1bc30c853126e01951d718f080d8b65fde20b211ff3eb9be74f2bebd6a62f732d29399d24a77e0eaf6d951e3b7b0c654c877e04f55fbb964714e6998caa6b1d93cf5cd99e7cdc86c0d2427351be54333a14b72e0207b4a3548cb8e8ce660ed4761a37512d963d9c6674fbe76a063de69cc120086222ff4c54af362c1564846e8b6df56c26b44e7bc4e6e99b2a4b12523840c6caf6f5d9fab40ca"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x268, 0x44880}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002400)="41a8b3e4aa0804d1ca06b92811d337a950123bc501c30cc3141bd25c0d516118419f09", 0x23}, {&(0x7f0000002440)="f414232204adfb8e6c35a7e8d48526d2e2ca2c03af8e202dc78ae88d6c103578a779bb5dee02fce80338f0d865ccf1ddfdef78cbbfffae271c48fecf11e7d87ea00d3e72f36088ae3642c2d31e597163255164203f51dbb4685f2dc36ae40723359f65ef86725a9f2d15c2fa437bf815f0d98eea9a959616e160f7e192630d7b3558a5b9829b4384c0ff4e083fc82d43b50ab7af938ecc2b192e139590849717a813fbb06f94670ef8203c2d53a9976895ddd670c91fdc79bd0fd2c1bdf6b4eaa2811345f79027873ab684ced000d6aeb6d16e0c0cb5408dd788f6999595e016b368b301469460a938312c88", 0xec}, {&(0x7f0000002540)="bb8df5a35ab02d4b5c5ed5bdac5c41426ff3fdf7c766debfd6382c3f12b137", 0x1f}, {&(0x7f0000002580)="c3de824f1cb6eb0587a4c5316340ad4c151d4156901108132c5cdc3b58917d65b941712fba3f7844fe313ba9563e86e75a757545245ddf8faecf8c753596930ae7756b3b74b939e465ede1d1be60e488117a057307888d", 0x57}, {&(0x7f0000002600)="670bf7f9fb6d", 0x6}], 0x5, 0x0, 0x0, 0x24000084}, {0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f00000026c0)="afe8edfa5178ba48c3ec9be869a5f83b59b7767ebcb96b36fa00d64fdd01267478c3056a11ca4557d95f8e886351ab28f9d95c61b806d40483d45d6276be3d928cea9ee444eea7002a5635156133c041c67052c8426b2ebd4738522be3486fe57ca7dc95ff97fc73ffac28b4eed6303a5aaa9c9bf383d04a0ad5", 0x7a}, {&(0x7f0000002740)="0f9f98e99acaf888625e8165c67b5fad6624058a00a1cc624643a91ed91814e3070e2064c99ababe5bb5e5608d17b21ff7cdb143532c55d50fc1e661954f30bffb9a408d772195106d01ab1a4a4afc7548d15376bef7d04ed97323218aa72d0979183602256e8c4dc167f89042aeb414299394345018129d72774170a1752819995a192a8fe14129eac2b7a3c60350c91ebfbea1cb30ecc9626092c763f9da5a5d0580e990fa3952db12dd9a1f513a701d530228e022322d", 0xb8}, {&(0x7f0000002800)="7a0ffff378eac306c726ef1f5cfb82cc1974adeb4d1053d4a86e4b96c6d752b57c60aedbcfe3cf04c5866fa1d181335c00fd430adb77d63c1195d5ef2b901c938ba8c024645d6a984852cad9c8462d68b29fb37154812e7c12a6a99db94558136b08478fa5a4f74b8cc4b6269b33461a58d4aa8621f0bd4ead3b52905454f195fc14f5cbb3658b2d5b7b8558ded831e0a1ef8af38a7028e69dec4ddf416caf431a0d4842c3db26912aaeeb37e3ff1198b4784e86af5896cf2208ad13517e24a7a5dd57cbf66abaa59d487d74efd9cb08bfd55ab69a48549a926f8d137cd241013e8b2078c50f431c9e317900793e98f625d24b6f4695d1bebacef5e81a239972c12230cc3fe424db9053f129993973a848e8caaa4c952b50ae1878741522c14bdff1710bab5d8b02bc96689c0e812015a118481780c71e28bc3c042b5b3db82e5cd74d200b01eb4fff17ffe7ba70e7f5f31930247610866471a5b383e09d4ab03c1002292f9214bb66b08bee8b61468269a11ea8c366e5bdbbdf8df991caf18e53aa008ece91d639f68ad1522851c8f14225c8e4a1e4a0e5d7f81778dcaf233bb63cd342022908128068e4d5429fee1509966df5a8e8e1b191cb7b4d7d27a83071cc8d328ebe79fa98bcc26b6f06648535bd8f77c3c31cfef8c99e5284b1bf2c9e0e061ab23589e112b4049e807e7e5b4c888896c09763b9db9502c8d9ed62b981cdff55e85fccd4e3295a43a9821c29b570d744f5d378592ba8658f9b117ae44abd11e444a7af56df9059a15fd7d96511e3423b296b1c2cceec8331ff6e13e7799bf3a275854808b9b67556066d1a524dae11bd3e5e04142f22492d6369bd6204f20da80e39164d8b61c5107f62696324e9fc4f3a8366bc29b14652c5dd16c3e3177ced8c926baa442b815f7bc526f28c96b5db05a4cde7cecc79fce244e55399034a2c420c7ce937a2d2dfbf0917d5db69ae28c431a51ab92a059e1b9bb25a1d51261399a0346d7648f11680c44200051c53ae224b0c2736ea4d17bf609c61992a8843dd4ef1777a7e227c2bb591611b2802908adb1b27ce6094460b30c1996994cb4b72e7298d67c6cde5c8ea851732cf53afae7f2eeedc903cacc1ce2ac2070c3ccdafb07815a1a81d5569661a39baa474ac2c984241c66da3d674a0d917f0325b084a6c88ba5e48ecfc70976539b9c40a3938474303d7ae9e907aa0e0dc757e7a51a162399567214be366d711064acf9d5a3e3a8ac56503d5da3240ad495596f5a8acc5862353914d55d3e5f3b8dc2b2ffdb4aaba27e64857dc9c34f483c9d9b7c0ddf1f4ccfecdb3336cca39d86dca27c03dc870ee8feb25b27c0ab954e6dd92debbd8ec0bcb441891ff611d1cfc3cfae97a7f5ef04d034182e1715295ab05ab223ff88403b1073c75688852de86620f29277d34c96f91f6fe2b4ef1489def6b04b992ee9b8fb335d6e6f945cb30d68a74345399ba58e3144a0d711af7e4c001e16d277ac7ab9ffcabb326535f7f9684ff91ccae71de3ffba1062892b848c0bf27e1b67a55f6ca0c2354f2fc25a078c91ca0ad2664506010c6ead251e607b91af399041c272c31f1481297ca954c4cc3702519bc653dcdb1e6f4e1bb5cc35cb3e101ee916955bfa434b20ca6bf2c98d11f13c9f1540fd6c34dc4e7cd6c53cfcda482fdb273de5c9f5e4ab7874231db96f51fe10523ef48fa169d2a2c3ecb7b7336fa5416fb4f54fba514e66ede3de22ccc61219515bc1297dd6e152500337929867be529a21bcf63bd480763df2b61e0b1c70de052cf2b031fb94ddbebe1d08f5136a4676c6b4171b6074224ccb14b1730355fada7c5955150719854631d56e9231468c10f0349fa940e50721f14376e242c7a4eb0b2f8b7bc0c4f87ed8a08d9614e824329ef00bc26579889aee14a504902fcdd49b58a111754168c66b96bc43b04c93b8e2a1d45d8b06fe984b65a69c873c7f3f8b868deb3163c59d1a2891a73209e2e5d0e5a221a4d0e1b76013808e07a443057d7f89518d58b2396f288a01c8c9c834f9dfcd233e5292187315e0905ecc60089227dec1afe2a93fcc0ac2c385759776d453a2b61eeaf31770e68d5b17084197cff252f2ee6c22fc375338bd991e845e8a70a676ac362cd012c6376de31350c10eb72abfff13c8b2db9e321bda2bbdade20835f70eaf32648b50990cc1aa692f65891f4eec0c1960aa9442ad308216a79ecdd2651b28fb4509f173f64a272580f1245ccdb0661e51d24bf5aae1cb07d00b7ee6e1f445e2d0d4f993101df824cb3bae6ffe77548e0279d4c4e0adcf0986dfcea60f71099e2bc3c44dff98f9d8493713e685349cb67cd44b83cd6f0ed8f9e98b51491d96a9cd9682688ab3fcf0f0d9d09fc2842e0c76336c05fe996f5992622e31ce90bd2b0c40fbba541cab200d4afadc2bc06361028404b52a30a08ee2dbb14c6feb1c8bfdf48841c515114beb43af6212042a90bf4d3c14ad79f02ed6e3ba45ae13a8c825c5c47529fa2833d55be6a582c5290ce21d1fa07f9dbe3a9eb6c8bd0f5b6797ebd0850d8409fa8dfc9271a9afc9b1632f1c3283f8a2031a2e24b543609d42ea0d4edd6118bf59e36278b83bb9567d890e8c9c89eba49cc1573de750214e36a40117f057021bbfc034d2bbb0e276d204a0fdedeeb67a547efb7f52b9c072a99149173b57c84698a985d024e3bd28f64fcff132668f46150ac87dc6bd376a3bbea7b05b2dc68513f9d41974f7220e1615826e14288d72e83f8ff0e593053c1cc8ea8ad870961e6743e4eb033fa700098386a2fd4f7a90a05402bf1f586732cefbac682a914c56afd01a7969ac8dc3b0b99616962f73def8072cd0f5c106e2e5e1f0c2ddba1c51bcf59c567d0bd306d5e2375e5fd64df3b26d3da51919e3d5573170080dbfff4c0dc6dcc6858a5ce1f49753f693488309a16152403527c88abcc8e405a99dab00f3aada2087a821ccc04f2150878afa2743a86dd32f3ed7ff735d9bc4b40a6cff056dd00e68a75f4516e97f9f4a0c312dc95db23d18a2cf81b936800186fab050e383e4749e91a5dc8c1a4bed69d8885a5d403843b29a0ee6144b49c17528a0b67ba60bfcca846d9d889d90f3a5f61f819cf3f5530056fb67f0f6ea8c01243675a7a36b3e50d41a59ba1f32cf5fc92e6527ee13a39112a0a09e25475af0fcd86478e99b26a5a49d03e93bdff7ebe8005b2fa9b995caa2ca247d8e40287f10e370dff8e0fd60b85534ff6c156cc8cc538bab5f57ba884bac8031e2332308a3e2e913cfa8388144ea474659b584bd27e0afcae0929e12e575796df29bec38686da4458cb4f1b2472bf32b6c16102a5707ab2fca9e946635cbda94e614e5d5b175226b18f44488a1f3f0fc657aab6533982b39a41498bb67f2b6dd02c9f49cce163babc5e033e6b86c80f4e852c2857f9cc37b11b899b80f2ee8b69959195e7297d23dcfc8e07f7be07c6f12d7e64b50dd4d77c2e3e35cfbd2a43189b5815ab801cf51c1d6a113e2ddcd7c91e4d87ab7ae9af49322cdf82146b3fb03367e17280fb70eadce38875e3ba6f06e2689c17042fd7f315761d3dd0ed8b290fc3b15a27d1444f3b32e9cfcb0d039fffc54410c83dba06fe9c69075e4620de9f6fddd6eeacacf803a6aea2f4ba603b89530727344834d267ec790e877a932f2c1e026098e907fd569fc3a90b936230409221bbc3765ab626daab2c93a11d52c3ee3da46b8c4a0bc110b90393c91cccc4464bc13a5378fa8ce0d6e6c875b327c6d885b647f95e2167aaa231849f75e30f95d4d1fc7b79d0e06255baf431949d8edfc503070806e45323041e9dbff37d7f9e0a448a9db7aaba2f81f576b63da0ae78be0b85fe2ab47c14c8aac30f98db128ff9d8be5db2d140eef43d37486f3fc937bc32b18921ed907c15f9dfdd2ce36f090469f826d0736e170c286344fe24a2f9bb27226bea37b3e21f6417a87665384a22135340a083a56b3858864a1d7148bfd8877722b8f1b9e4aaaaadfae8140a946c70bc412b8e333db7d8adfe9db5b13862d5ae7bd7cd84d146c3dec60e512eaadd82654ae3a396b34af04b536c4632c8842ff3d176e9c6fce63180e398dea8907b03dd25413f876a9474cb96e73ffff4d08af0cb8f737e14f5248a3cdb4e8012aa04c043a8684a48d9fa881b7f9fa1d31c5aac41d4451ffc87c87a26e856fe9185367dba05afcd998660db460e54ccdcf92197b04f46ee02b9a135867c944a65ccf88e38996cfe08ca48d631dfc57a5c5cdb3b791911d47e5a7b054697f46cf28eb6fee83a3c762cfd08e86b46c27504f02de61b02cd01760ecb302a362ca307afc9fcfae71875e8b1dc8e5bc111be4df5a330495dbdeeb6aa65345d143cbfcf6b5371266ceb1d9967bf16ecaa1c7beb06ed6b2c2b0772bcb29b921d057f1d4e4f6604856fed43a20f17b06aef1d14e0050454aa9a1ed5808215fe4ef36b0c77d84d6daed774862f044578a0c1374e866669af8a1e45e6350d892f2cd27092061c04d2249ef65ff7237d9e1e6b076d827343edc840ff070ef2e58eeb4cbf32c28fe0d106f7fa20cb281b6a9779ab443c35f0c2c7c5c7bf879c1a2af812d29a179d33750fabdb27c4e88216e8ad436cd01b13f2ec5a0017a1394fe84b14ee5a4e2e5956b549fa732a394eac9ae325d431f596bf04cd8e607b4a9ac8dbe8c6607f497aca9ec6bdfc836b85816dcae5a4611235c726af642d3e9275eb2736d3a1b726b301e31b9eace3f3e1aea49ddd737b011ddc9214fc673392479c43d019257f55fe133c9f9a1f7ee516e09141a879d97571d2efbd22cf620726c027d0286737f35945f52e408a0dd808601bc03b2ae4ff5070259f915930dab13f60b4cbcbbaf623aada1852839e0eba88cce284a8f5dbca80aaf223c8a6bb0243ad6f99b24a05d98ed06bd7b251ff3e39fa327f87b6f282b147efbdf706fca8fe0276213bbf3f121604074d3254fb68b1123811c76ba18dff048229f01de973bef1372d5517d4dc579b55a549f19bc26b67ebb6c277a9da9a2bfa68f6fbf2b37595f0e2b75a687351c4b49b27e6db25e1d62fb4a259a1e02b1ae5b5bfb524a10bfe02144a705aa06d6093ad6cf88668a6caecb02ffe92612c1bf4ef1c065ef928459909d00231000517ce8a29643c7bb2e305451e16ad3c1a1609a1112d4a164016bde4af29a2716bb908330b813f968281398e755dda23a3a3b31cf634720d6674577f0a95377077dc10bd2ac1eff19eea7c30b6d2a8624fd6e28a0e3539a0d78e4cffd2f85ce050ef9736c5d7bd6b6d33cb8479b84f598329ef41573567fd8d2c653ef65f045f3088bc75edfb4b7549bf39c5a8a229ef9c354aee823fde2b948383ca18e36f74b29dfbe221139a889129f8a4b0c85bc1a4989a5db33cd72aaeb8261d7951577ae092251b331f165c4bee40341fec4b2a3b168c7422c401061ef3a8cacc408c16f0d7f50c79a8383a89b9416fe565844c8dc861ab4fa5476eb4bbb947ff5e57e9177515681956550b930b6b6e3bc699f005d3a52e0673ff04569aa965c5679178dae0d305247db3cc830afb6246c25e69981b1e35719df62bbeb855db469c10dc06be415fffea1621b10352cbfb0cb214028bd978f0bd088c346e04a2b00cd1bb9fef710109f44c19321936c6d8476a2ecf0e126799cdfe7d933d5b33bb6d11954fb169794e303ec7184e678f23f6b07485d01a15a6c8ad8bd5fe8a04809fc5d4cab587cd8c91f967f777082bc0f3aef01ea5c0c488dc15de3501c3aaefb5", 0x1000}, {&(0x7f0000003800)="106f4daeb37a1024e037aed46bd408c1d04f1d2130c8145ec1107cf45eff622f4264bec91e2cb21856056f356ece8c1b7200e629631cf62cc0e69786ba42dce7e36dab9ceb68b3d69f717bbfa838f21412de0c630c0acaa083ee22c8a339eab5b96ecd15e299e0da864f4cbf6647bd92bf9593bb491ebeca861f45d3a063ccca2cc98a2df8069cf6aa6985d9d9fe3df7fbae", 0x92}, {&(0x7f00000038c0)="e33e664b0c22cd2c0db82bd11602dd2c38ba6f39b422b85d48ebd2a890822f540a8d30effee5ef7ab9d5e8d8411de8d96381ffcdccd1909690b53902ce5fadc13da43b70cd72255b662751968d44d795b94b75522e41d6280114aaac3f", 0x5d}, {&(0x7f0000003940)="32d1f54477da241dd4ffe0b6db869c4648821100853d623f0f25128151c78216b0083c891f2e0ed8cb04917d463d186da511d39887b81e1d4e9b977931e6fda749c1369b211e53a5e38029175522f9c4ebad202465975fe17ce774814021e77415166bfdbdeacd162218843a2d122c796955b9e1b80d0e13ce7501422d909117e8b7d482501b8c4c7d379487cc0f3cf384a7770cf505ab58ecf0942cd718307567bb58b0f269e330c315b20c63c8b5bb68774ad1b947e8661d128cd1001c75dd318e55199f79", 0xc6}, {&(0x7f0000003a40)="23cca6aeb5ffe2208e972b5245a84de451f0060db2bbde04213a55a8136da07297737b62cd49c4e2efa78e3bc97fd86f69b22a0f7e02df21edb979f5de4da8e3a0041cae498a4fdf64eb2b0a50218e4ca40df21d75539bc4dcc06d3340aa74d45ed77bfaa0f7c0ddc956a4194324be4d50d5ab93ed05c5f97b0f5d9c0757e3f118501f46bd78f70e41383ec7e11101950226eadbdeff0fa220aee4cf554c01cb0ef7e4ceefd4628439f7a3ab9156a11ee4e9d4574f43f48dc717c95dad6c0d75fdb76501f6afbdca010ddaf2858a5bd899aa956df5", 0xd5}, {&(0x7f0000003b40)="b0685ea37cc0ee34d4d301d7740398283d5bca2bb1111b23d8279119c6d4bf8609fb39f381ea2250d2ccfa9e16fe0ebd0b14a4655fe0d10767e3623969ff1ea1ea14b77125e60b1aaf7eba913babc27bfbcca4db81ed6bdd699222dac92b2d02493ab3b008f58c919b3ac82decab3a9991276d9bad3c9693b649959fdd9d94dc0f54ea11f9cbdb64347c4e10054eb61cc3a98c3ec4d63a2a0e61a5dba8613564193924163e9e8be59ee662f06a83be106ece3e9f732f59f89cc590b54983aac90485af19ebffe60175b8017177244892b421342132945c27dd9049ab5105846ac0c216d1b96a21a6b062", 0xea}, {&(0x7f0000003c40)="bde805605f9e827ccabba90d76e94cff9ef97f019c2ef8452a6ddc02b000b767ba5e050bd5cef5035e3cd6a8551322bee819ae933a18b5f9c83434a71255a345403d143feab3460295b8975114fa8b302de7c5918e65c0f2ab5e099befaf72755d83c518f70abc1d7dd3fcaedb56d2c1", 0x70}, {&(0x7f0000003cc0)="d3abbe0dbfb2b0819076f6ea8f8494a44c1af3fa996f129f1d6c3ae5a3c9dcc9efaac6e725f711b9605cf74b9fc0bd23743ba62fb947af2d553b8901cce353d8561951a0ac6448d29e89c473246c44250ba774ed95170df598c9f5e1f24aa5accae8c31dec1b13fafdb873d94099630eb53090ff3a794b8a0e68d576c5", 0x7d}], 0xa, &(0x7f0000003e00)=[@iv={0x70, 0x117, 0x2, 0x55, "74cba769bbfe598ae9a311e24dc065dc5af678b7727b5bf61d1736b66415befca5d95fbcd4fa2cbda6c4f6ad3ab73f64100a47c06f02ed8bdeb6775d7fb4efa4234205294bce8c2403f7206d52a637e5aa0b9ae619"}, @iv={0x80, 0x117, 0x2, 0x6a, "a4e639cd052c084761b3100bb54fb616f13beef7e8d36b81ea4a4d84f7b3305da5e5cd47342e779a867d0cb1a7cfb0b2cad65ad84fd99ed7701fdbd588a92290bdbe4e0b9d9f860e75e5bbbfe56b180b50e3b187e8de930f26c7f6fe799cc395614abd61a8372cadcc16"}, @iv={0x78, 0x117, 0x2, 0x5e, "ab0fccc5ac8e5e4ea4faf5d28d1842b265c0638d9f516f8e5fbf577de322a8a82f61f6e28c2ce436d33884715983afc94392575177d57673639f418aca16de80075d79dbc57c2eaccddf60194a06d1771ca434334bd876fc87e47b1bf882"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x198, 0x20040041}], 0x4, 0x48000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) write(r5, 0x0, 0x0) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@remote, @netrom, @default, @rose, @default, @null, @netrom, @bcast]}, &(0x7f0000000440)=0x48) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x40, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) 7.873988607s ago: executing program 0 (id=2609): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x20044000) (async) sendmmsg$alg(r7, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x20044000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') listen(0xffffffffffffffff, 0x86a) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) (async) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.719959748s ago: executing program 0 (id=2612): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB="89beb195030457000300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 6.843745172s ago: executing program 0 (id=2632): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x41f, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x3c, &(0x7f0000001280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x14, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) sendto$packet(r0, &(0x7f0000000240)="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", 0x1000, 0x0, &(0x7f00000014c0)={0x11, 0x10, r5, 0x1, 0x49, 0x6, @random="e0721b485427"}, 0x14) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd5400fedbdf255300000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 6.70274413s ago: executing program 0 (id=2639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) (async) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085ffffffffffffffff01000020646c2500000000002020207b1af8ff00000060279ba4000000000007010000f8ffffffb70200000800060d0000000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffef8, 0xfffffffffffffdc8, 0x0, 0x200000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffef8, 0xfffffffffffffdc8, 0x0, 0x200000}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r5, 0x0, &(0x7f0000000200)) (async) accept(r5, 0x0, &(0x7f0000000200)) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 6.031459604s ago: executing program 0 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x40, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x44080) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x40, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x44080) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) 1.993665698s ago: executing program 5 (id=2739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24004800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002100)="b9ff03076003008cb89e08f088a8", 0x0, 0xfeb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}]}, 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close(0x3) 1.867811928s ago: executing program 5 (id=2740): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x37, 0x711, 0x80000, 0x0, {0xf}, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008014) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x808, 0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3dc, 0x0, 0x0, 0x0, 0x822c}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpcgss_update_slack\x00', r8, 0x0, 0x100000000}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r11, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) splice(r11, &(0x7f0000000600)=0x6, r8, &(0x7f0000000640)=0x5, 0xd28, 0x6) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.695791535s ago: executing program 6 (id=2745): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000009e6c289598d53874ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000058000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4a280000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)={0x102c, 0x30, 0x200, 0x70bd2b, 0x25dfdbfb, {0x12}, [@typed={0x8, 0x126, 0x0, 0x0, @u32=0xea8}, @typed={0x8, 0xb3, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x13b, 0x0, 0x0, @uid}, @generic="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"]}, 0x102c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 1.6949518s ago: executing program 2 (id=2746): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe4, '\x00', 0x0, 0x24}, 0x94) 1.694370478s ago: executing program 6 (id=2747): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000015090100000000009500000000000000de9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2902}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2}]}}}]}, 0x74}}, 0x400c89c) 1.669486851s ago: executing program 2 (id=2749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028000000100", @ANYBLOB="33b4b1f471b94592551e0205e7bcf318f1596d1c65d15291c478e0285a90853ab4f305d0f00cb56536f85184d7d6374aaeec4265a1410735daa0358d7619023e8de70090d3805efe4e8410adc73747d3b9e058176a7a6399d3ddabb1a81eadc05dcf7d611db34ebf3a673f4b8b95264617eca1b114c5787f42e73e3f109b5edc1947810c45d7d94839e1ea54", @ANYBLOB="000002800000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRESHEX=r3, @ANYBLOB="0000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRESHEX=0x0, @ANYBLOB="00000100000001007072696f72697479000000000000000000000000000000000000000000000000000003000e000000000004005c06000000000600", @ANYRES32=0x0, @ANYBLOB="5dff0100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b000000000004000700ff080600000007003d8075080000040002f8c2070000c4097002030000000100060603000000310d100df7ffffff0000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000100000040000000600", @ANYRES32=r3, @ANYBLOB="40000100400000006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000000030003deff0000000400", @ANYRES8, @ANYRES64], 0x60}}, 0x20004084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/275], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='start_task_reaping\x00', 0xffffffffffffffff, 0x0, 0x4000000000000001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x3, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000600000000000000090000001847000007000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000b702000000000000850000008600000008a6feff17000000950200"/40], &(0x7f00000004c0)='GPL\x00', 0x3, 0x56, &(0x7f00000007c0)=""/86, 0x41100, 0x2, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xc, 0x8, 0x1}, 0x10, 0x0, r7, 0x8, &(0x7f00000008c0)=[r5], &(0x7f0000000900)=[{0x5, 0x1, 0x5, 0xc}, {0x2, 0x1, 0x9, 0x5}, {0x3, 0x5, 0xc, 0xb}, {0x3, 0x3, 0x3, 0x7}, {0x1, 0x1, 0x10, 0xa}, {0x5, 0x5, 0x6, 0x8}, {0x4, 0x2, 0x0, 0x7}, {0xfff, 0x2, 0x3, 0xc}], 0x10, 0x7fffffff}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x403, 0x5, 0x1, 0x9, 0x0, 0x0, 0x80000002, 0x8000000000000}, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) 1.539531716s ago: executing program 6 (id=2751): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) r1 = socket$inet(0x2, 0x3, 0x10000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x0, @loopback, 0x4e20, 0x0, 'ovf\x00', 0x2e, 0x5, 0xc}, {@empty, 0x4e21, 0x1, 0xe85, 0x6, 0x81}}, 0x44) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x80, 0x20, 0x6, 0xf}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0xc5, 0x20}, &(0x7f0000000200)=0xc) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x3}, 0x100, './file0\x00'}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000380)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x9de}, 0x20) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x190, 0x15, 0x800, 0x70bd2b, 0x25dfdbfb, {0xb, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "83ffb3cd4de7da8f06706a4dfeaf3b997f31bae9b48efba54bb41f392ad8d47835a46e6011584b6d736335cc3d3af72c0c78df6850daa651941fa9e83a7e4bbaa29b972818f5f432b67aa15346ee18040a409576975f68f4c57296245f93f10b59882c51a7df7f"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "a433dead9d2f2167739babb8cb9a01978e87d7bad7564e3903a56768a61fec27f5f1b5852ec135007ea9b892f3b4b1f4d379f2cf897b2ae29a5f23ca95ee2384dfd021b2aa57a19c2a27e0300ec09a3721da14d7ee1f88e6c2f8908b0f7d038cb3441110a0ff51a68240323bc6095e939e6b7672df2c52b1f38828fc21d9b5b0f805aef3b437d1b262a2ea16e81886334d40e967370eb55ec650ca7c0243c7f745763ac2af6191153cf409c36eeb0258257c93992886d47cd4ff4de7cde2da3d005245a660d7bb3cb8a9442e5f44f1f54c33fd5af1ffa7"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "ee9f02c9cf49cfd5c89129c40c0b1fba380d75755a6f18eb7e6989f61f3b444fe1a245325fa792dbd4de6b93621e"}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x844) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, 0x9}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x6}, @in6={0xa, 0x4e24, 0xfff, @local, 0x3}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x1c, @mcast2, 0xfffffff8}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x10, 0x2, @loopback, 0x8}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x200, @mcast1, 0x80}], 0xe8) ioctl$FIOCLEX(r2, 0x5451) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x0, 0x1, 0x80000001, 0x0, {{0x1d, 0x4, 0x3, 0x21, 0x74, 0x65, 0x0, 0x4, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x51, 0xffffffffffffffff, [{0x0, 0x6, "6801d629"}, {0x0, 0xc, "03c3697ab3c95a79a260"}, {0x5, 0x4, "6204"}, {0x0, 0x12, "a09edb5696d290294cca1d7e3bfebfc8"}, {0x0, 0x3, 'G'}, {0x7, 0x7, "afbe139792"}, {0x0, 0x10, "f3d3da894efe17b0f35d0f746772"}, {0x0, 0x9, "54f2c2c90b9e03"}]}, @rr={0x7, 0xb, 0x16, [@broadcast, @rand_addr=0x64010101]}, @end]}}}}}) (rerun: 64) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xfffffff7, 0x6, 0x7ff, 0x142, 0xffffffffffffffff, 0x57b7, '\x00', r8, r9, 0x2, 0x5, 0x3, 0xc}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000900)={r3, 0xff01}, 0x8) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELSET={0xe8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_DESC={0xc4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9bd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x20050014) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000b40)={0x3, 0x7, 0x5, 0x1}, 0x8) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000b80)={r4, 0x76e2, 0x0, 0xffff, 0x5}, &(0x7f0000000bc0)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000c00)=@assoc_value={r10, 0x800}, &(0x7f0000000c40)=0x8) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r11, 0x29, 0x3b, &(0x7f0000000c80)=@fragment={0x2f, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x68}, 0x8) (async, rerun: 32) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x125800, 0x0) (rerun: 32) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000d00)={'macvtap0\x00', 0x10}) (async, rerun: 32) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xfc, r13, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 1.523989369s ago: executing program 6 (id=2752): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x8903, 0x1000000000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="110000004200015b"], 0x18}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 1.279804421s ago: executing program 6 (id=2754): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) (async) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000001240)={0x47, "5549fe4c073ee9a1271289fb526abb0d44e7a9cbb341d2cc2f410678268bdace2119c692719a40af626871ee3f9ef0af48757a4a39453ef342e4558e655515f50c8ea7e78808a795c961b638d4756904a0d2c50e514858790cb048ed853bf58c1e067da0905f414d2b6dcd8ef8220147048cdd07a7787a8dbefdc191d41436af"}) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd60cb653e00303a0000000000000000000000ffffac14413c3cd69162e35700000000000000000001a10090780000000060256b5400000000ff010000000000000000000000000001fe80000000000000000000000000003b"], 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/75, 0x4b, 0x1, &(0x7f00000006c0)=""/171, 0xab}, &(0x7f0000000580)=0x40) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0xb, 0x1000, &(0x7f0000001300)="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", 0x9, 0x9, 0xff, 0x3ff, 0x5, 0x2, 0x7, 'syz1\x00'}) (async) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)="00406c8c55000ce3fc0078db4acca2cd46ed0e0d787bbada8c7a132b3b7b2d0bd39eb6f42b0d7dc817a1aa15b054650897b0c4e80300"/65, 0x41}, {&(0x7f0000000940)="4af450aa235a20600ef94d30f8ab10c0e80d35a6cc242098099f821f5121fb25b9e51cb2ac71249885a2571c14d9142962fc39144f230346545988757be345f95694f17878782e6849f422629e48d2f5dd1783ddf5cc898a2607e91f071e728d605dc52b656109489c1d6f8dd6c8bfbdcc728c94dad3ee05187f5ae6387728e5c54c2a21540e0d2fb5374f41bd6318123b7c915988eda0b77e5e93c9d3c42396ee5337e034a667dce2a23f08f648701cee", 0xb1}], 0x10000000000000e4, 0x0, 0x0, 0x20000016}, 0x844) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) (async, rerun: 64) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) (rerun: 64) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="004b627a884ead87b878bbbda183f6e600d20b"], 0x1c}}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) 1.253905984s ago: executing program 4 (id=2755): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}}}]}], {0x14, 0x10}}, 0xbc}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}}}]}], {0x14, 0x10}}, 0xbc}}, 0x0) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) (async) 1.223478431s ago: executing program 4 (id=2756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x80}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8004}]}}]}, 0x60}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r11, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r10, @ANYRES16=r12], 0x4c}}, 0x40000) (async) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.103736302s ago: executing program 4 (id=2757): r0 = socket$kcm(0x10, 0xd, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.102955204s ago: executing program 4 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xfe30, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) 1.099014896s ago: executing program 4 (id=2759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.041847593s ago: executing program 5 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x1, 0x8001, 0x7, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 939.781769ms ago: executing program 5 (id=2761): unshare(0x400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) 938.96386ms ago: executing program 4 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x2}]}, @enum64={0xd, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x4, 0x7dfeecda}, {0xe, 0x10001, 0x7}, {0xf, 0x10000, 0x8}, {0x10, 0x5, 0x4}, {0x7, 0x6, 0xeef9}, {0x9, 0x7, 0x7}, {0x10, 0x6, 0x6}]}, @typedef={0xc}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x6}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10}, {0x1, 0x1}, {0x8, 0x1}, {0x6, 0x4}, {0x8, 0x2}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/187, 0x11f, 0xbb, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, r6, 0x5, 0x5, 0x4}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, r6, 0x5, 0x5, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r12, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r12, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7f, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400200001000000100"/20, @ANYRES32=0x0, @ANYBLOB="7b15000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 933.989316ms ago: executing program 5 (id=2763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020750d0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007037ef21cd08ba66e68fea804b2ac35647ce7ebd623eb83c78be424ad31b90ff35750a8c92dbcafe4aea1e500f8a908f3c767788e4f7c412f217", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)={0x40, r5, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) recvfrom$llc(r3, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0) listen(r3, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbbab, 0x4, 0x8001, 0x10, 0x4, 0xfffffff9, 0x5}, 0x9c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="463fa56163dd", 0x6}], 0x1}}], 0x2, 0x4000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000002c0), 0x4) 755.920856ms ago: executing program 2 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x1}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20044000) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x7, 0x4}, {0xe, 0x5}, {0xc, 0x2}, {0x9}, {0xf}, {0xa, 0x3}, {0x9}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000200)=""/165, 0x69, 0xa5, 0x1, 0x4, 0x10000, @value=r3}, 0x28) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000380), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x11) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x801) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0) (rerun: 32) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbfb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb0a5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x557}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000800) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r10) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000000d00)="403dc030845891953209f2fd7f4b40bee09d7ac0fff2ec0d6e891ee8849e8a7b46b5d7aacc85571d49fc1dbb6c564e60b43030ddd2d500314545af6918f77ef01727c784479be068a994b7e5d501e7c219b3a92959b876fc4a9b39d641696f1c2fd69edbb029aefedac467ccaa0366d4638617e9376e96f59bcf2a1a14be751b4c43dc71e93cd9dd279de0df7498809750934e3f09ac96b9fb99a744ae8784470cdf54fcc57fd58c919a177dea3e5b8d1ce88487f0d95839107825fe1a1e15255fb3220b64c4ee86ab9c5eb227aaf38d6c1144bee9192ce5166c950450a71682bd", 0xe1) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f0000000e00)={r8}) (async) r17 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r18 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) sendmsg$unix(r16, &(0x7f0000002300)={&(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="3d6ee312fd", 0x5}, {&(0x7f0000001f00)="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", 0xfc}, {&(0x7f0000002000)="407d20e05054ffe73fb80df53a8157ff6efa48bb7899abed1ebd7b674b9879bbe551088df416434c2d0b313efe7529a3b21d2232e5cbfbd7d24aae83b27d8b3d46ce8037291d4aa5315a8f8b965e3daf4a8bffcd84171ac3901832d3cad64aa8697fe1357f5f7409b0a5365a176caeee6a6f5c722a179b4a01965ea1cfb0f11413827f7a07cddb41fa15bba4d0cdea1db163ddb91bd8bb3bf0a2cb19562b969566f4557b36acee8b0348bbd5502d9b7a93286331b06804632e45f2c70e74e76db88fec82078eead7578b8458a97321bd37a7", 0xd2}, {&(0x7f0000002100)="92c96194bd333343c1549c0f1977539c96e9c87b309dd3a175dd3508a05af6e6a0d22419347ef0666fa27ab2ac1bb16012b1ec43baa86d528138", 0x3a}, {&(0x7f0000002140)="baf7fb5be106cef4884e865aa8dff4741f3adef4a580b25c906bd9da547f2cf8907c2ce4b1e27e0ffe67d437ddb91b825ba0ed0b43f7e7bd41e006556676832d2eaf5a7bcf50e39f3da1893b5839aebcb3987014433ae78d77a549cc2a64464692e858613cce44f4f66a4574e24ddddfa0b36a7c0008bae588b35a511c134047500f1f48f91aa9135755a115d9ed36263a3c40ba1f3f96adc79bfc1f08d0fb9ce403", 0xa2}], 0x6, &(0x7f0000002280)=[@rights={{0x24, 0x1, 0x1, [r4, r0, r17, r10, r3]}}, @rights={{0x30, 0x1, 0x1, [r13, r15, r3, r5, r14, r3, r18, r14]}}], 0x58, 0x40000}, 0x48000) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f0000002780)={0x0, 0x4, 0x2, 0x1}) 602.726354ms ago: executing program 2 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7}, 0x5}], 0x1, 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x200, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x226}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008851}, 0x8000002) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 572.32574ms ago: executing program 2 (id=2767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf25010000000c00080000000000000000000c00050023000000000000000c00050002010000000000000c00060002000000000000008defedb945e0ff34a827a1d9dcbf10b204d58f1c75fe4e0a7dcfc5213f0bdaa33a1e9bd4a785271751f8af309e3d744e6f94e1c9f68730cacb97ef6d615a87d3a3ba99f45d18242182af35c37ca5c08dda7d498c02df31216eff60617cf846779264c69c6b334504223b829594f8227e5ec7ad2c6791936b9fda5f72e7d30d70cf60"], 0x44}, 0x1, 0x0, 0x0, 0x20044880}, 0x20000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r2, &(0x7f0000000280)="4591c28e8b83", 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4044) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00\x00\b\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x40c4854) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0xca, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r6, @ANYBLOB="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"/270], 0x114}}, 0x8800) 449.000515ms ago: executing program 6 (id=2768): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e33, 0x0, @loopback, 0x9}, 0xfffffffffffffc1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 311.526727ms ago: executing program 2 (id=2769): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0xe0c, 0x0, 0x5, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0xffffffff}, 0x94, 0x7, 0x1, 0x0, 0x17, 'syz1\x00', "47a1c7a2984ab8ff5471f978fd9627a6878028da9eef7ab3abd9c7a2479e3baf", "4394e1957f9abab9a78f99031ba11ea3488e7b4326a375ce213e09c2b698dbf4", [{0x7, 0x1, {0x2, 0x8}}, {0x3, 0x7ff, {0x0, 0x5}}, {0x0, 0x8, {0x3, 0xf}}, {0xffff, 0x2, {0x0, 0x7}}, {0x7, 0xfa, {0x0, 0x2682}}, {0x401, 0x6, {0x3, 0x9}}, {0x8, 0x6, {0x0, 0x6}}, {0x544b, 0x9, {0x3, 0x3}}, {0x1d, 0x7, {0x2, 0x5}}, {0x8, 0x0, {0x2, 0x5ce8039b}}, {0x6d11, 0x8, {0x2, 0x7fff}}, {0x3, 0x3, {0x0, 0x7}}, {0x2, 0x5, {0x3, 0x3}}, {0x1, 0xfffe, {0x2, 0x8}}, {0xffff, 0x5, {0x3, 0x7}}, {0x4, 0x3ff, {0x2, 0xfffffffe}}, {0x6, 0x1, {0x0, 0x2}}, {0xfff, 0x5, {0x3, 0x9}}, {0x7, 0x7, {0x3, 0x10}}, {0x4d93, 0x9, {0x0, 0x2}}, {0x7, 0x6, {0x2, 0x2}}, {0x3, 0x401, {0x1, 0x2}}, {0xe1ff, 0xfffb, {0x2, 0x9}}, {0x9, 0x1, {0x2, 0x3}}, {0x6ae9, 0x9, {0x1, 0x2cb}}, {0x7, 0x5, {0x2, 0x6}}, {0xff, 0x3ff, {0x2, 0x3}}, {0x0, 0x3, {0x2, 0x5d6b}}, {0x4, 0x4, {0x3, 0x8}}, {0xf, 0x8a98, {0x1, 0x2}}, {0x8, 0x3, {0x1, 0x51}}, {0x525, 0x0, {0x1, 0x2}}, {0x0, 0xa, {0x2, 0xfffffffe}}, {0x7, 0x9, {0x3, 0x400}}, {0x4, 0x84, {0x3, 0x6}}, {0x3, 0xfffd, {0x0, 0x9}}, {0x1303, 0x950, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x58d84aa7}}, {0xf, 0xb, {0x3, 0x9}}, {0xab1f, 0x9, {0x1, 0x730bab1d}}]}}}, {{0x254, 0x1, {{0x2, 0xf}, 0x6, 0x5, 0x86f, 0xd, 0x1b, 'syz1\x00', "6603876c9188b42163f47b32b13011637adc089bbab1b4bab9c2b965fe902be5", "7843b9189c99693495c608b75843913a97f1fdd82ef8c5148eef35943a48844a", [{0xe, 0xbe, {0x0, 0x5}}, {0x9fd, 0x0, {0x0, 0x3}}, {0x0, 0x1, {0x2, 0x202}}, {0x2, 0x1, {0x0, 0xfffffffb}}, {0x0, 0x8, {0x2, 0x10}}, {0x2, 0x800, {0x3}}, {0x4, 0x8000, {0x2, 0x3}}, {0xd, 0x7, {0x1, 0xc183}}, {0x9, 0x8001, {0x2, 0x90}}, {0x2, 0x40, {0x1, 0x81}}, {0x9, 0x8a, {0x2, 0x4}}, {0x77, 0x2, {0x2, 0x5}}, {0x1000, 0x1, {0x1, 0x1}}, {0xffff, 0x2, {0x1, 0x4}}, {0xea1, 0xb, {0x2, 0x2}}, {0x38c, 0x4, {0x3, 0xb}}, {0x1a2, 0x7f, {0x2}}, {0xd, 0xff, {0x3, 0x10}}, {0x0, 0x8901, {0x3, 0x8000}}, {0x8, 0x10, {0x3, 0xc}}, {0x1c7, 0x8000, {0x3, 0x40}}, {0x8143, 0x4, {0x2, 0x9}}, {0x18, 0x100, {0x3, 0x2}}, {0x1, 0x0, {0x2, 0x3}}, {0x3, 0x0, {0x1, 0x1ff}}, {0x7, 0x80, {0x0, 0x80}}, {0x6, 0x2, {0x0, 0x6}}, {0x0, 0x8, {0x0, 0x6e2de3b3}}, {0xffff, 0x0, {0x3, 0x30000000}}, {0xe226, 0x6, {0x1, 0x79}}, {0x6, 0x8, {0x2, 0x9}}, {0x0, 0x7, {0x1, 0x1}}, {0x9, 0x6, {0x2, 0x1}}, {0x2, 0x7, {0x2, 0x8}}, {0xd, 0xc, {0x0, 0x6a1e609d}}, {0x4c, 0xfffa, {0x1, 0x5}}, {0xf060, 0x10, {0x2, 0xffffffff}}, {0x6, 0x8000, {0x1, 0xffffff9e}}, {0x1, 0x4, {0x2, 0xecb6}}, {0x7ff, 0x8, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x9, 0x9, 0xf8, 0x2, 0x21, 'syz1\x00', "ba4108aef5fc8d3a63f82256df720303013fff3c709877802f7d6f87df601dc9", "5dee6cd838412f4e531144fea91a2154b84f3151308aeb2bc4f738deab1218c7", [{0x0, 0xc, {0x1, 0x4}}, {0x90, 0x6, {0x3, 0xfffffffa}}, {0x2, 0xff, {0x2, 0x401}}, {0x5, 0x0, {0x1, 0x1}}, {0x8, 0x6, {0x0, 0x559}}, {0x0, 0x8000, {0x3, 0xe}}, {0xe8e6, 0xffff, {0x1, 0x7}}, {0x84f6, 0x8, {0x0, 0x7}}, {0x7, 0x0, {0x2, 0xfffffeff}}, {0x7, 0x9, {0x3, 0xfffffbff}}, {0x6, 0xfffd}, {0x9, 0x4, {0x0, 0xdaea}}, {0x0, 0x3, {0x1, 0x4}}, {0x3, 0x0, {0x2, 0x4}}, {0x9, 0x9, {0x2, 0xa28}}, {0x8, 0x9, {0x2, 0xb9}}, {0x6, 0x6, {0x2, 0x1}}, {0x0, 0x800, {0x0, 0x3}}, {0xb5e3, 0x0, {0x2, 0xd}}, {0x7ff, 0x6, {0x0, 0x4}}, {0xff, 0x40, {0x3, 0x2}}, {0x8, 0x5, {0x3, 0x2}}, {0x2, 0x81, {0x3, 0xdac}}, {0x3, 0x3, {0x3, 0x81}}, {0xd, 0x200, {0x2, 0x2}}, {0xfffd, 0x2, {0x2, 0x513c}}, {0x800, 0x9, {0x2, 0xfffffff7}}, {0x1, 0x800, {0x3, 0xb450}}, {0x7f, 0x2, {0x1, 0x1}}, {0xdc0, 0x6, {0x1, 0x2}}, {0x3, 0xe, {0x2, 0x6}}, {0x7, 0x99, {0x2, 0x800}}, {0x4, 0x2, {0x2}}, {0x4, 0x8, {0x3, 0xfffffff2}}, {0xfff7, 0x79b, {0x0, 0x7f}}, {0x2, 0x2, {0x2, 0x10003}}, {0x636, 0x6a1, {0x2, 0x962}}, {0x0, 0x0, {0x0, 0x2}}, {0x100, 0x94, {0x0, 0x8}}, {0x8001, 0x81, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x73, 0x5e, 0x59, 0x4, 0x8, 'syz1\x00', "f20816db876c0d597a612e212987101d59f723060fa8d7760ec7a89a6662fd31", "99a334830fafe6efa8f80b0eb7095f62c1f584753e18e9b6272c475bf8715a3b", [{0xfff8, 0x5, {0x2}}, {0x8, 0xb, {0x1, 0x5}}, {0x5, 0x3, {0x0, 0x2}}, {0x2, 0x8, {0x1, 0x4}}, {0x1, 0xaa49, {0x3, 0x2f80000}}, {0x5, 0x1c0b, {0x1, 0x800}}, {0x1, 0xe, {0x0, 0x6}}, {0x8, 0x634, {0x0, 0x3}}, {0xb1f4, 0xe27, {0x2, 0x1000}}, {0x8, 0x2, {0x2, 0x7}}, {0x8, 0x0, {0x1, 0x3}}, {0x8, 0xfff, {0x2, 0x40}}, {0x6, 0x0, {0x1, 0x8001}}, {0x0, 0x2, {0x3, 0x3}}, {0x0, 0x1, {0x3, 0x2}}, {0x5, 0x5, {0x0, 0x6}}, {0x9, 0x401, {0x2, 0x8}}, {0x7, 0x6, {0x3, 0x8}}, {0x1, 0xff, {0x2, 0x7}}, {0x401, 0x2, {0x2, 0xfffffff8}}, {0x3ff, 0x8, {0x3, 0x1}}, {0x4, 0x212f, {0x0, 0xffff}}, {0x2, 0x41a, {0x1, 0x7}}, {0xb, 0x5, {0x2, 0x6}}, {0xbccd, 0x12d8, {0x3, 0xe7}}, {0xe1, 0x8, {0x2, 0x7}}, {0x4, 0x2b, {0x2, 0x7}}, {0x0, 0x41d2, {0x1, 0x6}}, {0x0, 0x4, {0x0, 0x3}}, {0x1, 0x8, {0x2}}, {0x1, 0x5, {0x2, 0x4}}, {0x78b, 0x5, {0x2, 0x7}}, {0x5, 0x2}, {0x2, 0x2, {0x0, 0xd42}}, {0x2fb, 0xf0ef, {0x2, 0x2}}, {0xffa3, 0x4, {0x1, 0xa407}}, {0x800, 0xfffa, {0x0, 0xfff}}, {0x3319, 0x9, {0x2, 0x81}}, {0x9ca9, 0x8, {0x0, 0x9654}}, {0x2, 0x1, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{0x0, 0x8000}, 0x2, 0x0, 0x1, 0x6, 0x4, 'syz1\x00', "60dae3ec4eb78ef94fc3fda61aca4802d7ff38ff89781fa86342a2ae7b759cba", "f545b7a51baa42981e70300aff1f8ff7a355d4f4ca4cdae1d86ad2f6f70042f1", [{0xc, 0x0, {0x1, 0x7}}, {0x1, 0x0, {0x0, 0x2}}, {0x10, 0x4, {0x0, 0x5}}, {0x7, 0xb98, {0x1, 0x6}}, {0x4, 0x2, {0x0, 0x7}}, {0x6, 0x3ff, {0x3, 0xfb}}, {0x2, 0x9, {0x2, 0x2}}, {0x99dd, 0x6, {0x3, 0x9c8700}}, {0x1, 0x8, {0x2, 0x3}}, {0xf, 0x0, {0x0, 0x8}}, {0x0, 0x9, {0x2}}, {0x800, 0x3, {0x2, 0x7}}, {0x8f77, 0x1, {0x1, 0x6}}, {0xe43, 0x4, {0x3, 0x3}}, {0x1, 0x7, {0x1, 0x6}}, {0xf8ef, 0x8, {0x2, 0x2}}, {0x6, 0x10, {0x0, 0x80}}, {0x8, 0x81, {0x2, 0x1}}, {0x100, 0x2, {0x1}}, {0x60, 0x0, {0x1, 0x8}}, {0xf, 0x100, {0x3, 0x7}}, {0x8000, 0x2, {0x3, 0x7ff}}, {0x7, 0x9af, {0x1, 0x89}}, {0x3, 0x101, {0x2, 0xffff0338}}, {0x7, 0xfff1, {0x2, 0x4}}, {0x0, 0x9, {0x1, 0x7}}, {0x1, 0x4, {0x1, 0x3ff}}, {0x8, 0x4, {0x0, 0x7fff}}, {0x3, 0x0, {0x1, 0x8}}, {0x2, 0x504, {0x0, 0x7}}, {0x10, 0x1000, {0x2, 0x5}}, {0x6, 0x800, {0x0, 0x7}}, {0x200, 0x280, {0x1, 0x2}}, {0x6, 0x0, {0x1, 0x100}}, {0x2, 0x0, {0x3, 0x8001}}, {0x401, 0x101, {0x1, 0xc41}}, {0x45e, 0x9, {0x2, 0x44}}, {0x7, 0x1, {0x3, 0x4}}, {0xffff, 0xffff, {0x0, 0x2}}, {0x8, 0x0, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x9f, 0x4, 0x4, 0xa, 0x27, 'syz1\x00', "12078be4cc46a909f60dc2c531768a56941bb564bdd43bbf4c64db61d2bb7d0e", "8a38dd95547a1a249eea59002fa02fe7aed8b9289873448a3df01e3783580f54", [{0x7, 0x3, {0x1, 0xffff}}, {0x1, 0x1, {0x2, 0xfffffffd}}, {0x6, 0x80, {0x3, 0x100}}, {0x800, 0x6, {0x2, 0x4}}, {0x9, 0x9, {0x3, 0x3}}, {0x6, 0x3ff, {0x1, 0x9}}, {0x5, 0x7f, {0x0, 0x5}}, {0x1ff, 0x20, {0x2, 0x2}}, {0x0, 0x0, {0x1, 0x3}}, {0x6, 0x7, {0x3, 0x80}}, {0x1ff, 0x65, {0x208f371fde1cd123, 0xfffffe01}}, {0x2, 0x5, {0x3, 0xb9}}, {0xfff7, 0x2, {0x2, 0x5}}, {0x2, 0x1000, {0x1, 0x8}}, {0x9, 0x2, {0x0, 0x7}}, {0x0, 0x1, {0x2, 0x2}}, {0x8001, 0x9}, {0x4, 0x401, {0x0, 0x5c36}}, {0x7, 0xdba, {0x2, 0x8132}}, {0x0, 0x0, {0x2, 0xa}}, {0x2, 0x8, {0x0, 0x1}}, {0x7f, 0xe72, {0x3, 0x6}}, {0x7, 0x6}, {0x200, 0x4, {0x6feb60b84ef8f70a, 0x4}}, {0x4, 0x4, {0x1, 0x2}}, {0x93e, 0x2, {0x0, 0x10000}}, {0x61e2, 0xc, {0x2, 0x8064}}, {0x46, 0x3, {0x2, 0x4}}, {0x6, 0x5, {0x3, 0x6}}, {0x3, 0x1, {0x3, 0x5}}, {0x9, 0x6, {0x0, 0x1}}, {0xd, 0x6}, {0x2, 0x2, {0x0, 0x1}}, {0x7, 0x0, {0x3}}, {0xfe5e, 0x4, {0x3, 0x9}}, {0x5b, 0x2, {0x2, 0xfe}}, {0x80, 0x0, {0x3, 0x5d4}}, {0x9, 0x6, {0x3, 0xfffffffb}}, {0x0, 0x3, {0x0, 0x1000}}, {0x7, 0x2, {0x3, 0x401}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40}, 0x48804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050026ee159e7b03b4eb05c74200000000000f"], &(0x7f00000006c0)=""/262, 0x2b, 0x106, 0x9}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000000c0)=0x3, 0x4) r10 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r10, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r10) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000580)={0x2, 0x1}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x9, 0x4) setsockopt$sock_void(r11, 0x1, 0x1b, 0x0, 0x0) 0s ago: executing program 5 (id=2770): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80602, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'ipvlan0\x00', @random="4c094b92050f"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140a, 0x82, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x100}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x34000041}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRESDEC=r4, @ANYRES32], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 689665][T10434] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.714455][T10438] syzkaller0: entered promiscuous mode [ 223.722441][T10438] syzkaller0: entered allmulticast mode [ 223.770222][T10446] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.789416][T10443] vlan2: entered promiscuous mode [ 223.794564][T10443] macvtap0: entered promiscuous mode [ 223.951227][T10457] tipc: Enabled bearer , priority 0 [ 223.962899][T10457] syzkaller0: entered promiscuous mode [ 223.969108][T10457] syzkaller0: entered allmulticast mode [ 223.979297][T10457] tipc: Resetting bearer [ 223.992728][T10457] tipc: Resetting bearer [ 224.007224][T10457] tipc: Disabling bearer [ 224.243372][T10474] netlink: 'syz.0.1195': attribute type 13 has an invalid length. [ 224.554507][T10489] tipc: Enabled bearer , priority 0 [ 224.562785][T10488] syzkaller0: entered promiscuous mode [ 224.570341][T10488] syzkaller0: entered allmulticast mode [ 224.583816][T10488] tipc: Resetting bearer [ 224.591637][T10488] tipc: Disabling bearer [ 224.686160][T10496] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 224.686288][T10495] IPVS: stopping backup sync thread 10496 ... [ 224.836904][ T7411] wlan1: Trigger new scan to find an IBSS to join [ 225.067739][T10524] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 225.221216][T10541] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 225.235773][T10541] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 225.259388][T10542] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 225.278130][T10542] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 225.513151][T10562] wireguard0: entered promiscuous mode [ 225.519768][T10562] wireguard0: entered allmulticast mode [ 225.561967][T10566] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 225.584058][T10566] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.597540][T10566] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 225.607895][T10566] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 225.702794][T10570] syzkaller1: entered promiscuous mode [ 225.719585][T10570] syzkaller1: entered allmulticast mode [ 225.815468][T10576] tap0: tun_chr_ioctl cmd 1074025677 [ 225.822508][T10576] tap0: linktype set to 0 [ 226.008774][T10587] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 226.027392][T10587] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.272837][T10604] tipc: Enabled bearer , priority 0 [ 226.283027][T10604] syzkaller0: entered promiscuous mode [ 226.289473][T10604] syzkaller0: entered allmulticast mode [ 226.296016][T10600] bridge_slave_0: default FDB implementation only supports local addresses [ 226.315942][T10604] tipc: Resetting bearer [ 226.322953][T10603] tipc: Resetting bearer [ 226.331500][T10603] tipc: Disabling bearer [ 226.489360][T10615] smc: net device bond0 applied user defined pnetid SYZ2 [ 226.541653][T10624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.625707][T10628] netlink: 'syz.2.1239': attribute type 83 has an invalid length. [ 226.633164][T10620] __nla_validate_parse: 28 callbacks suppressed [ 226.633181][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1240'. [ 226.650954][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1240'. [ 226.697709][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1240'. [ 226.721400][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1240'. [ 226.762332][T10637] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 226.789379][T10639] macsec2: entered promiscuous mode [ 226.794689][T10639] erspan0: entered promiscuous mode [ 226.801670][T10639] erspan0: left promiscuous mode [ 226.835141][T10642] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 226.863789][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1247'. [ 226.876166][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1247'. [ 226.914469][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 226.925239][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 226.943354][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 226.952544][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 227.153286][T10672] openvswitch: netlink: Flow key attr not present in new flow. [ 227.414476][T10687] sock: sock_timestamping_bind_phc: sock not bind to device [ 227.624977][T10708] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 227.629234][T10709] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 227.634322][T10708] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 227.690722][T10709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.709069][T10712] bond3: (slave geneve3): making interface the new active one [ 227.717395][T10712] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 227.736815][ T7397] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.745049][ T7397] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.753274][ T7397] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.772248][ T7397] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.877196][ T1146] wlan1: Trigger new scan to find an IBSS to join [ 227.916303][ T30] audit: type=1800 audit(1755928908.178:2): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1271" name="memory.events" dev="tmpfs" ino=1387 res=0 errno=0 [ 227.940371][ T30] audit: type=1804 audit(1755928908.178:3): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1271" name="/newroot/267/memory.events" dev="tmpfs" ino=1387 res=1 errno=0 [ 229.564719][T10745] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 229.850931][T10776] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.891424][T10779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.904649][T10779] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 229.916118][T10779] bond5: (slave macvlan0): Enslaving as a backup interface with an up link [ 229.934221][T10776] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.980534][T10794] tipc: New replicast peer: 255.255.255.255 [ 229.987256][T10794] tipc: Enabled bearer , priority 10 [ 229.998565][ T7389] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.009607][T10776] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.088673][T10776] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.100193][T10813] veth1: entered promiscuous mode [ 230.105295][T10813] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 230.114194][T10813] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 230.130209][ T7407] bond5: (slave macvlan0): link status up again after 0 ms [ 230.130244][ T7407] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.150826][ T7407] bond5: (slave macvlan0): link status up again after 0 ms [ 230.158579][ T7407] bond5: (slave macvlan0): failed to get link speed/duplex [ 230.174537][ T7407] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.196958][ T7407] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.212276][ T7407] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.230713][ T7407] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.276005][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 230.357322][T10827] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.443764][T10837] dummy0: left allmulticast mode [ 230.724473][T10839] netlink: 'syz.4.1303': attribute type 6 has an invalid length. [ 230.837019][ T7407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.115709][ T9198] tipc: Node number set to 3323737902 [ 231.717268][ T7397] net_ratelimit: 9 callbacks suppressed [ 231.717287][ T7397] bond5: (slave macvlan0): failed to get link speed/duplex [ 231.760249][T10859] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.768235][T10860] __nla_validate_parse: 23 callbacks suppressed [ 231.768250][T10860] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1310'. [ 231.772505][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 231.774543][T10860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.783983][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 231.836480][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 231.972027][T10878] netlink: 'syz.4.1316': attribute type 2 has an invalid length. [ 232.001592][T10878] k›*·]‘: entered promiscuous mode [ 232.013021][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 232.038350][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.038461][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 232.073459][T10880] bond6: entered promiscuous mode [ 232.078767][T10880] bond6: entered allmulticast mode [ 232.084078][T10880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.118099][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.127122][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.143056][T10878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.144364][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 232.186178][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.306398][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.364306][T10904] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1321'. [ 232.416037][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.513016][T10914] Bluetooth: MGMT ver 1.23 [ 232.536637][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.618511][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 232.628215][T10923] netlink: 'syz.2.1328': attribute type 20 has an invalid length. [ 232.640700][ T7389] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.646160][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 232.649496][ T7389] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.657980][T10923] netlink: 'syz.2.1328': attribute type 20 has an invalid length. [ 232.667802][ T7389] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.683023][ T7389] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.696193][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 232.726847][T10926] netlink: 'syz.4.1329': attribute type 9 has an invalid length. [ 232.773191][T10934] FAULT_INJECTION: forcing a failure. [ 232.773191][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.786792][T10934] CPU: 1 UID: 0 PID: 10934 Comm: syz.4.1332 Not tainted syzkaller #0 PREEMPT(full) [ 232.786817][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.786840][T10934] Call Trace: [ 232.786847][T10934] [ 232.786854][T10934] dump_stack_lvl+0x189/0x250 [ 232.786879][T10934] ? __pfx____ratelimit+0x10/0x10 [ 232.786903][T10934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.786922][T10934] ? __pfx__printk+0x10/0x10 [ 232.786947][T10934] ? rcu_is_watching+0x15/0xb0 [ 232.786965][T10934] should_fail_ex+0x414/0x560 [ 232.786988][T10934] _copy_to_user+0x31/0xb0 [ 232.787007][T10934] sk_getsockopt+0x19dd/0x2530 [ 232.787027][T10934] ? __pfx_sk_getsockopt+0x10/0x10 [ 232.787042][T10934] ? rcu_needs_cpu+0xa0/0xb0 [ 232.787059][T10934] ? __pfx___might_resched+0x10/0x10 [ 232.787076][T10934] ? rcu_is_watching+0x15/0xb0 [ 232.787093][T10934] ? lock_release+0x4b/0x3e0 [ 232.787113][T10934] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.787132][T10934] ? security_file_permission+0x75/0x290 [ 232.787156][T10934] ? __might_fault+0xb0/0x130 [ 232.787176][T10934] ? rcu_is_watching+0x15/0xb0 [ 232.787192][T10934] ? lock_acquire+0x5f/0x360 [ 232.787216][T10934] ? rcu_is_watching+0x15/0xb0 [ 232.787231][T10934] ? lock_release+0x4b/0x3e0 [ 232.787253][T10934] ? __might_fault+0xcc/0x130 [ 232.787277][T10934] do_sock_getsockopt+0x237/0x450 [ 232.787293][T10934] ? rcu_needs_cpu+0xa0/0xb0 [ 232.787310][T10934] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 232.787327][T10934] ? rcu_needs_cpu+0xa0/0xb0 [ 232.787341][T10934] ? __fget_files+0x3a0/0x420 [ 232.787354][T10934] ? __fget_files+0x2a/0x420 [ 232.787372][T10934] __x64_sys_getsockopt+0x1a5/0x250 [ 232.787388][T10934] ? rcu_needs_cpu+0xa0/0xb0 [ 232.787404][T10934] ? rcu_needs_cpu+0xa0/0xb0 [ 232.787421][T10934] do_syscall_64+0xfa/0x3b0 [ 232.787437][T10934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.787454][T10934] ? clear_bhb_loop+0x60/0xb0 [ 232.787472][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.787489][T10934] RIP: 0033:0x7fedd878ebe9 [ 232.787505][T10934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.787519][T10934] RSP: 002b:00007fedd96a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 232.787543][T10934] RAX: ffffffffffffffda RBX: 00007fedd89b5fa0 RCX: 00007fedd878ebe9 [ 232.787556][T10934] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000004 [ 232.787566][T10934] RBP: 00007fedd96a0090 R08: 00002000000004c0 R09: 0000000000000000 [ 232.787577][T10934] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 232.787588][T10934] R13: 00007fedd89b6038 R14: 00007fedd89b5fa0 R15: 00007ffc138512f8 [ 232.787608][T10934] [ 233.188444][T10945] syzkaller0: entered promiscuous mode [ 233.193932][T10945] syzkaller0: entered allmulticast mode [ 233.300718][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 233.318847][T10947] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.327452][ T9777] block nbd64: NBD_DISCONNECT [ 233.381926][T10954] netlink: 'syz.0.1337': attribute type 11 has an invalid length. [ 233.429233][ T9777] udevd[9777]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 233.764418][T10975] FAULT_INJECTION: forcing a failure. [ 233.764418][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.777941][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.2.1343 Not tainted syzkaller #0 PREEMPT(full) [ 233.777957][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.777963][T10975] Call Trace: [ 233.777966][T10975] [ 233.777970][T10975] dump_stack_lvl+0x189/0x250 [ 233.777986][T10975] ? __pfx____ratelimit+0x10/0x10 [ 233.778000][T10975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.778011][T10975] ? __pfx__printk+0x10/0x10 [ 233.778035][T10975] ? rcu_is_watching+0x15/0xb0 [ 233.778046][T10975] should_fail_ex+0x414/0x560 [ 233.778062][T10975] _copy_to_user+0x31/0xb0 [ 233.778073][T10975] sk_getsockopt+0x1a75/0x2530 [ 233.778084][T10975] ? __pfx_sk_getsockopt+0x10/0x10 [ 233.778092][T10975] ? rcu_needs_cpu+0xa0/0xb0 [ 233.778100][T10975] ? __pfx___might_resched+0x10/0x10 [ 233.778110][T10975] ? rcu_is_watching+0x15/0xb0 [ 233.778118][T10975] ? lock_release+0x4b/0x3e0 [ 233.778130][T10975] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.778141][T10975] ? security_file_permission+0x75/0x290 [ 233.778154][T10975] ? __might_fault+0xb0/0x130 [ 233.778166][T10975] ? rcu_is_watching+0x15/0xb0 [ 233.778174][T10975] ? lock_acquire+0x5f/0x360 [ 233.778187][T10975] ? rcu_is_watching+0x15/0xb0 [ 233.778196][T10975] ? lock_release+0x4b/0x3e0 [ 233.778208][T10975] ? __might_fault+0xcc/0x130 [ 233.778220][T10975] do_sock_getsockopt+0x237/0x450 [ 233.778229][T10975] ? rcu_needs_cpu+0xa0/0xb0 [ 233.778238][T10975] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 233.778247][T10975] ? rcu_needs_cpu+0xa0/0xb0 [ 233.778255][T10975] ? __fget_files+0x3a0/0x420 [ 233.778262][T10975] ? __fget_files+0x2a/0x420 [ 233.778272][T10975] __x64_sys_getsockopt+0x1a5/0x250 [ 233.778280][T10975] ? rcu_needs_cpu+0xa0/0xb0 [ 233.778289][T10975] ? rcu_needs_cpu+0xa0/0xb0 [ 233.778298][T10975] do_syscall_64+0xfa/0x3b0 [ 233.778307][T10975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.778316][T10975] ? clear_bhb_loop+0x60/0xb0 [ 233.778326][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.778334][T10975] RIP: 0033:0x7fa3e4d8ebe9 [ 233.778344][T10975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.778352][T10975] RSP: 002b:00007fa3e5cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.778362][T10975] RAX: ffffffffffffffda RBX: 00007fa3e4fb5fa0 RCX: 00007fa3e4d8ebe9 [ 233.778369][T10975] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000004 [ 233.778375][T10975] RBP: 00007fa3e5cd6090 R08: 00002000000004c0 R09: 0000000000000000 [ 233.778381][T10975] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 233.778387][T10975] R13: 00007fa3e4fb6038 R14: 00007fa3e4fb5fa0 R15: 00007fff24205078 [ 233.778397][T10975] [ 234.083640][T10979] sctp: [Deprecated]: syz.4.1345 (pid 10979) Use of int in max_burst socket option. [ 234.083640][T10979] Use struct sctp_assoc_value instead [ 234.111205][T10979] 8021q: VLANs not supported on ip6_vti0 [ 234.303035][T11005] syz_tun: entered promiscuous mode [ 234.309546][T11005] batadv_slave_0: entered promiscuous mode [ 234.317008][T11005] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 234.327560][T11005] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.338772][T11005] hsr1: entered allmulticast mode [ 234.343810][T11005] syz_tun: entered allmulticast mode [ 234.349154][T11005] batadv_slave_0: entered allmulticast mode [ 234.392108][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 234.513628][T11016] IPVS: Error connecting to the multicast addr [ 234.535467][T11026] netlink: 'syz.2.1359': attribute type 5 has an invalid length. [ 234.595901][ T5180] Bluetooth: hci2: command 0x0406 tx timeout [ 234.596247][ T5862] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 234.752147][T11035] sit0: entered promiscuous mode [ 234.757507][T11035] sit0: entered allmulticast mode [ 235.902397][T11101] IPVS: set_ctl: invalid protocol: 103 172.20.20.38:20004 [ 236.130097][T11109] syzkaller1: entered promiscuous mode [ 236.136113][T11109] syzkaller1: entered allmulticast mode [ 236.736037][ T7389] net_ratelimit: 31 callbacks suppressed [ 236.736057][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 236.855994][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 236.966022][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.076697][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.186064][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.295993][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.406067][ T7407] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.516017][ T7407] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.626057][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.736785][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 237.844346][T11121] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 237.951800][T11141] __nla_validate_parse: 13 callbacks suppressed [ 237.951816][T11141] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1386'. [ 238.171515][T11154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1390'. [ 238.278253][T11162] tipc: Enabled bearer , priority 0 [ 238.288226][T11162] syzkaller0: entered promiscuous mode [ 238.294019][T11162] syzkaller0: entered allmulticast mode [ 238.309018][T11162] tipc: Resetting bearer [ 238.316629][ T5180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.324604][ T5180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.325213][T11160] tipc: Resetting bearer [ 238.338958][ T5180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.348500][ T5180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.357601][T11160] tipc: Disabling bearer [ 238.360074][ T5180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.605316][T11164] chnl_net:caif_netlink_parms(): no params data found [ 238.638154][T11173] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1394'. [ 238.659740][T11170] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1394'. [ 238.682883][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 238.913705][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.933783][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.956431][T11164] bridge_slave_0: entered allmulticast mode [ 238.964061][T11164] bridge_slave_0: entered promiscuous mode [ 238.985749][T11179] tipc: Enabled bearer , priority 0 [ 238.994207][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.003852][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.017792][T11164] bridge_slave_1: entered allmulticast mode [ 239.025427][T11164] bridge_slave_1: entered promiscuous mode [ 239.064060][T11179] sch_tbf: burst 127 is lower than device veth1_to_batadv mtu (1514) ! [ 239.079886][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.098543][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.112979][T11179] tipc: Resetting bearer [ 239.149312][T11178] tipc: Disabling bearer [ 239.183059][T11190] netlink: 'syz.4.1400': attribute type 1 has an invalid length. [ 239.198939][T11164] team0: Port device team_slave_0 added [ 239.208439][T11164] team0: Port device team_slave_1 added [ 239.247884][T11194] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 239.261227][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.272030][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.308952][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.337334][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.354484][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.382528][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.395855][T11194] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 239.473321][T11164] hsr_slave_0: entered promiscuous mode [ 239.488448][T11164] hsr_slave_1: entered promiscuous mode [ 239.495381][T11164] debugfs: 'hsr0' already exists in 'hsr' [ 239.502165][T11164] Cannot create hsr debugfs directory [ 239.684132][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'. [ 239.794812][T11164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.810135][T11164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.822997][T11164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.856095][T11164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.951533][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.974497][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.990069][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.997220][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.021677][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.028823][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.062212][T11164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.246295][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.342986][T11273] bridge_slave_0: default FDB implementation only supports local addresses [ 240.436453][ T5862] Bluetooth: hci5: command tx timeout [ 240.706217][T11164] veth0_vlan: entered promiscuous mode [ 240.743708][T11164] veth1_vlan: entered promiscuous mode [ 240.775199][T11164] veth0_macvtap: entered promiscuous mode [ 240.794572][T11164] veth1_macvtap: entered promiscuous mode [ 240.798030][ T5180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.808542][ T5180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.820864][ T5180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.829439][ T5180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.829970][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.846059][ T5180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.889658][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.908565][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.946358][ T1146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.997354][T11302] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.014598][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.027778][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.061424][T11302] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.167329][T11302] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.344929][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.353256][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.379456][T11302] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.448216][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.456580][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.534119][T11296] chnl_net:caif_netlink_parms(): no params data found [ 241.676662][ T7411] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.688988][ T7411] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.697700][ T7411] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.708232][ T7411] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.849712][ T7421] net_ratelimit: 21 callbacks suppressed [ 241.849730][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 241.942041][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.961985][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.970355][T11296] bridge_slave_0: entered allmulticast mode [ 241.977520][T11296] bridge_slave_0: entered promiscuous mode [ 241.985354][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.993960][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.001384][T11296] bridge_slave_1: entered allmulticast mode [ 242.008468][T11296] bridge_slave_1: entered promiscuous mode [ 242.015065][T11335] tipc: Enabled bearer , priority 0 [ 242.026451][T11336] syzkaller0: entered promiscuous mode [ 242.036828][T11336] syzkaller0: entered allmulticast mode [ 242.095021][T11329] tipc: Resetting bearer [ 242.107407][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 242.120309][T11342] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1429'. [ 242.141163][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.171284][T11324] tipc: Resetting bearer [ 242.181887][T11324] tipc: Disabling bearer [ 242.202673][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.246946][T11342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1429'. [ 242.280971][T11296] team0: Port device team_slave_0 added [ 242.302714][T11348] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.362792][T11296] team0: Port device team_slave_1 added [ 242.422183][T11348] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.473494][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.490504][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.517900][ T5180] Bluetooth: hci5: command tx timeout [ 242.543352][T11362] openvswitch: netlink: IPv6 tunnel dst address is zero [ 242.550398][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.551931][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.570382][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.603946][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.619300][T11348] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.637734][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 242.702654][T11348] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.730725][T11296] hsr_slave_0: entered promiscuous mode [ 242.739317][T11296] hsr_slave_1: entered promiscuous mode [ 242.748795][T11296] debugfs: 'hsr0' already exists in 'hsr' [ 242.754885][T11296] Cannot create hsr debugfs directory [ 242.916485][ T5180] Bluetooth: hci6: command tx timeout [ 243.042695][T11296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.081153][T11296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.125265][T11296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.150077][T11296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.188018][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 243.306036][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 243.349207][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.372835][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.393607][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.400792][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.424432][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.431606][ T7421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.523875][ T7411] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.547488][ T7413] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.577994][ T7413] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.610249][ T7411] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.916195][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 244.026010][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 244.148156][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 244.191958][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.266104][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 244.313615][T11441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1451'. [ 244.330263][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 244.568026][T11296] veth0_vlan: entered promiscuous mode [ 244.596218][T11296] veth1_vlan: entered promiscuous mode [ 244.596222][ T5180] Bluetooth: hci5: command tx timeout [ 244.626168][T11455] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1455'. [ 244.649783][T11457] bond1: entered promiscuous mode [ 244.655311][T11457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.669361][T11462] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 244.671904][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 244.693840][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 244.708075][T11296] veth0_macvtap: entered promiscuous mode [ 244.730399][T11468] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1458'. [ 244.734686][T11296] veth1_macvtap: entered promiscuous mode [ 244.762376][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.781768][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.790059][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'. [ 244.811237][ T7413] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.820564][ T7413] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.834732][ T7413] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.850989][ T7413] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.920611][T11479] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.949828][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'. [ 244.979073][T11478] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 244.987712][T11478] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 244.997887][T11478] team0: Failed to send options change via netlink (err -105) [ 245.005352][T11478] team0: Port device batadv1 added [ 245.007118][ T5180] Bluetooth: hci6: command tx timeout [ 245.019688][T11479] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.033008][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.044373][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.069618][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.081371][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.092937][T11479] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.183815][T11479] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.248107][ T5973] IPVS: starting estimator thread 0... [ 245.267153][T11492] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.288824][ T7405] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.344162][ T7389] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.366792][T11493] IPVS: using max 43 ests per chain, 103200 per kthread [ 245.379655][ T7411] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.394246][ T7389] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.537791][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1466'. [ 245.547172][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1466'. [ 245.897392][T11543] syz_tun: entered allmulticast mode [ 245.918449][T11543] dvmrp8: entered allmulticast mode [ 246.023869][T11548] netlink: 'syz.6.1478': attribute type 23 has an invalid length. [ 246.033722][T11546] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 246.134534][T11542] syz_tun: left allmulticast mode [ 246.148042][T11542] dvmrp8: left allmulticast mode [ 246.311902][T11564] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 246.326198][T11564] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 246.457048][T11581] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 246.675986][ T5180] Bluetooth: hci5: command tx timeout [ 246.926633][ T7413] net_ratelimit: 15 callbacks suppressed [ 246.926650][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 247.058250][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 247.077797][ T5180] Bluetooth: hci6: command tx timeout [ 247.117956][T11620] bond0: entered promiscuous mode [ 247.123090][T11620] bond_slave_0: entered promiscuous mode [ 247.130028][T11620] bond_slave_1: entered promiscuous mode [ 247.136480][T11620] batadv0: entered promiscuous mode [ 247.142027][T11620] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 247.150276][T11620] bond0: left promiscuous mode [ 247.159002][T11620] bond_slave_0: left promiscuous mode [ 247.166123][T11620] bond_slave_1: left promiscuous mode [ 247.173130][T11620] batadv0: left promiscuous mode [ 247.178798][T11620] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 247.206833][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 247.320210][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 247.361112][T11633] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 247.392283][T11633] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.407264][T11633] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 247.464823][T11638] gretap1: entered promiscuous mode [ 247.487197][T11638] bond5: (slave gretap1): making interface the new active one [ 247.509765][T11638] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 247.536190][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 247.678152][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 248.000040][T11646] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 248.034820][T11646] vlan2: left promiscuous mode [ 248.042372][T11646] vlan2: left allmulticast mode [ 248.048516][T11646] hsr_slave_1: left allmulticast mode [ 248.058822][T11652] Bluetooth: MGMT ver 1.23 [ 248.075394][T11646] ip6tnl1: left promiscuous mode [ 248.089516][T11646] ip6tnl1: left allmulticast mode [ 248.130040][T11646] geneve4: left promiscuous mode [ 248.135047][T11646] geneve4: left allmulticast mode [ 248.222569][T11646] gretap1: left promiscuous mode [ 248.276570][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 248.301457][ T7413] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.310611][ T7413] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 248.319405][ T7413] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.346979][T11658] syzkaller1: entered promiscuous mode [ 248.352589][T11658] syzkaller1: entered allmulticast mode [ 248.357347][T11661] netlink: 'syz.6.1514': attribute type 4 has an invalid length. [ 248.374589][ T7413] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.388225][ T7413] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 248.413140][ T7413] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.474176][ T7413] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.500237][ T7413] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 248.521510][ T7413] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.542732][ T7413] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.554186][ T7413] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 248.568474][ T7413] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.579681][T11671] dvmrp0: left allmulticast mode [ 248.606558][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 248.726553][ T7411] bond5: (slave macvlan0): failed to get link speed/duplex [ 248.836847][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 248.982548][T11696] team0: Port device 0! removed [ 248.998232][T11696] Ã: (slave bond_slave_0): Releasing backup interface [ 249.017929][T11696] Ã: (slave bond_slave_1): Releasing backup interface [ 249.034423][T11696] team0: Port device team_slave_0 removed [ 249.054188][T11696] team0: Port device team_slave_1 removed [ 249.079067][T11696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.100196][T11696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.113276][T11696] bond5: (slave gretap1): Releasing active interface [ 249.156317][ T5180] Bluetooth: hci6: command tx timeout [ 249.183586][T11709] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 249.552548][T11731] dummy0: entered promiscuous mode [ 249.564678][T11731] macsec1: entered allmulticast mode [ 249.576629][T11731] dummy0: entered allmulticast mode [ 249.602330][T11731] dummy0: left allmulticast mode [ 249.616207][T11731] dummy0: left promiscuous mode [ 249.796791][T11749] netlink: 'syz.4.1541': attribute type 4 has an invalid length. [ 249.804557][T11749] __nla_validate_parse: 19 callbacks suppressed [ 249.804573][T11749] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1541'. [ 249.839779][T11751] netlink: 'syz.5.1542': attribute type 5 has an invalid length. [ 249.877093][T11742] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.950131][T11742] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.005268][T11742] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.082431][T11742] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.163829][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 250.174753][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 250.182495][ T7405] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.210333][ T7413] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.227543][ T7413] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.238843][T11781] Ã: entered promiscuous mode [ 250.251712][ T7421] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.410976][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 250.421785][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 250.580936][T11797] tipc: Started in network mode [ 250.588181][T11797] tipc: Node identity 9e503911ae65, cluster identity 4711 [ 250.599588][T11797] tipc: Enabled bearer , priority 0 [ 250.613851][T11797] syzkaller0: entered promiscuous mode [ 250.620103][T11797] syzkaller0: entered allmulticast mode [ 250.632327][T11799] bond4: (slave geneve4): making interface the new active one [ 250.640417][T11799] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 250.649851][ T7405] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.658740][ T7405] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.667492][ T7405] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.676445][ T7405] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.689586][T11797] tipc: Resetting bearer [ 250.692773][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1557'. [ 250.704396][T11797] netlink: 4112 bytes leftover after parsing attributes in process `syz.6.1556'. [ 250.706322][T11799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.722030][T11797] veth0: entered promiscuous mode [ 250.744409][T11797] veth0: left promiscuous mode [ 250.752441][T11797] tipc: Resetting bearer [ 250.760697][T11797] tipc: Disabling bearer [ 250.771080][T11805] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1559'. [ 250.834315][T11809] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 251.067058][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 251.076581][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 251.163142][ T30] audit: type=1800 audit(1755928931.428:4): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1569" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1660 res=0 errno=0 [ 251.393434][T11849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.655366][T11861] syzkaller1: entered promiscuous mode [ 251.664222][T11861] syzkaller1: entered allmulticast mode [ 251.762031][T11879] validate_nla: 6 callbacks suppressed [ 251.762047][T11879] netlink: 'syz.5.1583': attribute type 1 has an invalid length. [ 251.806700][T11884] bridge1: entered allmulticast mode [ 251.827239][T11884] bridge_slave_1: left allmulticast mode [ 251.833927][T11884] bridge_slave_1: left promiscuous mode [ 251.845532][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.857337][T11884] bridge_slave_0: left allmulticast mode [ 251.863139][T11884] bridge_slave_0: left promiscuous mode [ 251.875183][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.965239][T11891] Ã: left promiscuous mode [ 251.971342][T11891] 8021q: adding VLAN 0 to HW filter on device à [ 251.980477][T11891] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.992483][T11891] net_ratelimit: 24 callbacks suppressed [ 251.992494][T11891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.016914][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.129223][ T5921] hid-generic 0005:046D:8002.0001: collection stack underflow [ 252.146886][ T5921] hid-generic 0005:046D:8002.0001: item 0 0 0 12 parsing failed [ 252.154668][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.164267][ T5921] hid-generic 0005:046D:8002.0001: probe with driver hid-generic failed with error -22 [ 252.190109][T11905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.197395][T11905] IPv6: NLM_F_CREATE should be set when creating new route [ 252.221238][T11908] 8021q: VLANs not supported on ipvlan1 [ 252.249414][T11911] netlink: 'syz.5.1593': attribute type 4 has an invalid length. [ 252.265041][T11911] netlink: 'syz.5.1593': attribute type 4 has an invalid length. [ 252.277328][ T5862] Bluetooth: hci6: command 0x0405 tx timeout [ 252.299506][T11912] vlan2: entered promiscuous mode [ 252.304675][T11912] macvtap0: entered promiscuous mode [ 252.337862][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.466339][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.596178][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.610222][T11923] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 252.644677][T11923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.693420][T11923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.713151][T11923] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 252.757697][T11923] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 252.788019][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.906598][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 252.966588][T11951] tipc: Enabled bearer , priority 0 [ 252.974663][T11953] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4. [ 252.983532][T11951] syzkaller0: entered promiscuous mode [ 253.017847][T11951] syzkaller0: entered allmulticast mode [ 253.026222][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 253.079248][T11951] tipc: Resetting bearer [ 253.109070][T11948] tipc: Resetting bearer [ 253.120760][T11948] tipc: Disabling bearer [ 253.577543][T11993] netlink: 'syz.6.1619': attribute type 13 has an invalid length. [ 254.801387][T12070] netlink: 'syz.2.1640': attribute type 11 has an invalid length. [ 254.823120][T12069] __nla_validate_parse: 28 callbacks suppressed [ 254.823137][T12069] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1641'. [ 254.940888][T12076] blkio.reset_stats is deprecated [ 254.984257][T12076] bridge_slave_0: left allmulticast mode [ 254.995877][T12076] bridge_slave_0: left promiscuous mode [ 255.006456][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.018959][T12076] bridge_slave_1: left allmulticast mode [ 255.024789][T12076] bridge_slave_1: left promiscuous mode [ 255.031930][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.044904][T12076] bond0: (slave bond_slave_0): Releasing backup interface [ 255.094155][T12076] bond0: (slave bond_slave_1): Releasing backup interface [ 255.122767][T12076] team0: Port device team_slave_0 removed [ 255.156834][T12076] team0: Port device team_slave_1 removed [ 255.163516][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.171421][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.184894][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.201868][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.232348][T12076] team0: Port device batadv1 removed [ 255.240827][T12079] vlan0: entered promiscuous mode [ 255.259974][T12079] team0: Port device vlan0 added [ 255.371472][T12092] netlink: 'syz.4.1648': attribute type 4 has an invalid length. [ 255.571557][T12103] vlan0: entered promiscuous mode [ 255.598294][T12103] vlan0: entered allmulticast mode [ 255.603447][T12103] veth0_vlan: entered allmulticast mode [ 255.719548][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.449131][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'. [ 256.470420][T12149] veth1_macvtap: left promiscuous mode [ 256.503386][T12155] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1667'. [ 256.545466][T12155] tipc: Started in network mode [ 256.551534][T12155] tipc: Node identity 2aca7a87984, cluster identity 4711 [ 256.559738][T12155] tipc: Enabled bearer , priority 0 [ 256.568725][T12155] syzkaller0: entered promiscuous mode [ 256.574315][T12155] syzkaller0: entered allmulticast mode [ 256.582949][T12155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.601687][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1667'. [ 256.639615][T12155] tipc: Resetting bearer [ 256.652725][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1670'. [ 256.701637][T12154] tipc: Resetting bearer [ 256.730763][T12154] tipc: Disabling bearer [ 256.755436][T12172] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 257.004902][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 257.017825][T12195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.030014][T12195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.041305][T12195] bond0: (slave batadv0): Releasing backup interface [ 257.053577][T12193] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1679'. [ 257.086736][ T7405] net_ratelimit: 27 callbacks suppressed [ 257.086754][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.206085][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.305014][T12152] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 257.326216][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.436642][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.530270][T12222] syzkaller0: entered promiscuous mode [ 257.536328][T12222] syzkaller0: entered allmulticast mode [ 257.599065][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.702240][ T5907] hid-generic 0005:046D:8002.0002: collection stack underflow [ 257.714067][ T5907] hid-generic 0005:046D:8002.0002: item 0 0 0 12 parsing failed [ 257.723227][ T5907] hid-generic 0005:046D:8002.0002: probe with driver hid-generic failed with error -22 [ 257.728854][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.856998][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 257.976271][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 258.069022][T12261] netlink: 716 bytes leftover after parsing attributes in process `syz.4.1696'. [ 258.087577][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 258.144714][T12263] tipc: Enabling of bearer rejected, failed to enable media [ 258.281165][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 258.741896][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 258.884360][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 258.990296][T12324] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 259.014533][T12324] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.049571][T12324] bond6: entered promiscuous mode [ 259.974638][T12396] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 259.988204][T12396] __nla_validate_parse: 2 callbacks suppressed [ 259.988222][T12396] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1730'. [ 260.074140][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'. [ 260.084570][T12401] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1732'. [ 260.282287][T12414] netlink: 'syz.5.1735': attribute type 1 has an invalid length. [ 260.302601][T12414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.324392][T12414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.335429][T12414] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 260.348631][T12414] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 260.382400][T12417] veth5: entered promiscuous mode [ 260.390815][T12417] bond4: (slave veth5): Enslaving as an active interface with a down link [ 260.444137][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 260.488145][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1735'. [ 260.504491][T12414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.585753][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 260.619465][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'. [ 260.671820][T12426] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1739'. [ 260.926803][T12438] tipc: Enabling of bearer rejected, failed to enable media [ 261.213622][T12445] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1745'. [ 261.394037][T12456] syzkaller1: entered promiscuous mode [ 261.399641][T12456] syzkaller1: entered allmulticast mode [ 261.521661][T12456] team0: entered promiscuous mode [ 261.546752][T12470] Unsupported ieee802154 address type: 0 [ 261.570969][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1748'. [ 261.888156][T12503] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 261.937293][T12505] pim6reg1: entered promiscuous mode [ 261.943292][T12505] pim6reg1: entered allmulticast mode [ 262.111306][T12526] tipc: Enabling of bearer rejected, failed to enable media [ 262.156240][ T7389] net_ratelimit: 28 callbacks suppressed [ 262.156261][ T7389] bond5: (slave macvlan0): failed to get link speed/duplex [ 262.336196][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 262.756515][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 262.998319][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.106825][T12574] netlink: 'syz.6.1777': attribute type 4 has an invalid length. [ 263.106825][T12573] netlink: 'syz.6.1777': attribute type 4 has an invalid length. [ 263.145785][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.270177][ T7413] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.436213][ T1146] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.551160][T12598] pim6reg9: entered allmulticast mode [ 263.567884][ T7397] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.661242][T12609] netlink: 'syz.0.1788': attribute type 83 has an invalid length. [ 263.696502][ T7405] bond5: (slave macvlan0): failed to get link speed/duplex [ 263.733153][T12614] unsupported nla_type 52263 [ 263.816424][ T7421] bond5: (slave macvlan0): failed to get link speed/duplex [ 264.001165][T12628] netlink: 'syz.6.1795': attribute type 6 has an invalid length. [ 264.026660][T12628] netlink: 'syz.6.1795': attribute type 6 has an invalid length. [ 264.039547][T12632] netlink: 'syz.6.1795': attribute type 6 has an invalid length. [ 264.047794][T12628] netlink: 'syz.6.1795': attribute type 6 has an invalid length. [ 264.211389][T12642] netlink: 'syz.4.1801': attribute type 2 has an invalid length. [ 264.235197][T12647] dvmrp8: entered allmulticast mode [ 264.243893][T12649] netlink: 'syz.5.1799': attribute type 1 has an invalid length. [ 264.251867][T12649] NCSI netlink: No device for ifindex 0 [ 264.321820][T12646] dvmrp8: left allmulticast mode [ 264.332717][T12657] lo speed is unknown, defaulting to 1000 [ 264.375496][T12657] lo speed is unknown, defaulting to 1000 [ 264.422727][T12657] lo speed is unknown, defaulting to 1000 [ 264.542710][T12663] gretap0: entered promiscuous mode [ 264.655236][T12657] infiniband syz0: set active [ 264.671224][ T5907] lo speed is unknown, defaulting to 1000 [ 264.698580][T12657] infiniband syz0: added lo [ 264.709141][T12667] netlink: 'syz.6.1807': attribute type 5 has an invalid length. [ 264.749311][T12667] netlink: 'syz.6.1807': attribute type 13 has an invalid length. [ 264.761880][T12670] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 264.771392][T12657] RDS/IB: syz0: added [ 264.775426][T12657] smc: adding ib device syz0 with port count 1 [ 264.785063][T12670] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 264.795980][T12657] smc: ib device syz0 port 1 has pnetid [ 264.823841][T12657] lo speed is unknown, defaulting to 1000 [ 264.857391][ T9198] lo speed is unknown, defaulting to 1000 [ 265.015183][T12687] __nla_validate_parse: 23 callbacks suppressed [ 265.015202][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 265.049599][T12657] lo speed is unknown, defaulting to 1000 [ 265.289669][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'. [ 265.359476][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'. [ 265.372047][T12657] lo speed is unknown, defaulting to 1000 [ 265.654331][T12714] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1819'. [ 265.663366][T12657] lo speed is unknown, defaulting to 1000 [ 265.680215][T12714] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1819'. [ 265.887779][T12657] lo speed is unknown, defaulting to 1000 [ 266.008319][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 266.019634][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 266.073697][T12657] lo speed is unknown, defaulting to 1000 [ 266.220743][T12724] lo speed is unknown, defaulting to 1000 [ 266.281095][T12755] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1830'. [ 266.374597][T12657] lo speed is unknown, defaulting to 1000 [ 266.383831][T12760] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1832'. [ 266.579144][T12657] lo speed is unknown, defaulting to 1000 [ 266.594342][T12776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1836'. [ 266.744472][T12779] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 267.063876][ T7421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.075403][ T7421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.291761][T12808] team1: entered promiscuous mode [ 267.299955][T12808] team1: entered allmulticast mode [ 267.305480][T12808] 8021q: adding VLAN 0 to HW filter on device team1 [ 267.855185][T12847] tipc: Enabled bearer , priority 0 [ 267.863212][T12847] syzkaller0: entered promiscuous mode [ 267.869117][T12847] syzkaller0: entered allmulticast mode [ 267.908199][T12847] tipc: Resetting bearer [ 267.918875][T12845] tipc: Resetting bearer [ 267.930747][T12845] tipc: Disabling bearer [ 268.019379][ T7413] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.044415][ T7413] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.060658][ T7413] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.093351][ T7413] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.298594][T12881] lo speed is unknown, defaulting to 1000 [ 268.598842][T12891] net_ratelimit: 19 callbacks suppressed [ 268.598867][T12891] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.672381][T12896] tipc: Enabled bearer , priority 0 [ 268.748022][T12900] lo speed is unknown, defaulting to 1000 [ 269.323454][T12888] tipc: Disabling bearer [ 269.479371][T12924] validate_nla: 11 callbacks suppressed [ 269.479389][T12924] netlink: 'syz.4.1879': attribute type 10 has an invalid length. [ 269.493814][T12926] netlink: 'syz.4.1879': attribute type 10 has an invalid length. [ 269.512618][T12926] dummy0: entered promiscuous mode [ 269.557534][T12926] team0: Failed to send options change via netlink (err -105) [ 269.594814][T12926] team0: Port device dummy0 added [ 269.619788][T12924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 270.069927][T12950] __nla_validate_parse: 17 callbacks suppressed [ 270.069945][T12950] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1885'. [ 270.738431][T12986] lo speed is unknown, defaulting to 1000 [ 270.891043][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 270.940082][T12994] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1899'. [ 270.994263][T12992] netlink: 'syz.0.1898': attribute type 13 has an invalid length. [ 271.117028][T12995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1898'. [ 271.128396][T12995] 8021q: VLANs not supported on ipvlan1 [ 271.452107][T13009] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1902'. [ 271.600204][T13022] netlink: 'syz.5.1905': attribute type 16 has an invalid length. [ 271.608081][T13022] netlink: 'syz.5.1905': attribute type 17 has an invalid length. [ 271.648881][T13024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1907'. [ 271.723391][T13028] IPv6: NLM_F_REPLACE set, but no existing node found! [ 271.734341][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 271.767137][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 271.834720][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1905'. [ 271.854240][ T7421] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.863558][ T7421] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.872345][ T7421] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.881779][ T7421] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.900524][ T7421] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.925390][ T7421] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.942479][ T7421] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.954019][ T7421] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.970617][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 272.146707][T13047] syzkaller0: entered promiscuous mode [ 272.152693][T13047] syzkaller0: entered allmulticast mode [ 272.342339][T13056] tipc: New replicast peer: 0.0.0.0 [ 272.348159][T13056] tipc: Enabled bearer , priority 10 [ 272.359510][T13056] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 272.538453][T13073] ip6gretap1: entered promiscuous mode [ 272.699172][T13090] team0: Device vlan0 failed to change mtu [ 273.020801][T13115] ip6tnl1: entered promiscuous mode [ 273.032790][T13115] ip6tnl1: entered allmulticast mode [ 273.412358][T13143] lo speed is unknown, defaulting to 1000 [ 273.466114][ T5907] tipc: Node number set to 3967777864 [ 273.656738][T13175] rdma_rxe: rxe_newlink: failed to add lo [ 273.927988][T13203] FAULT_INJECTION: forcing a failure. [ 273.927988][T13203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.941940][T13203] CPU: 0 UID: 0 PID: 13203 Comm: syz.6.1958 Not tainted syzkaller #0 PREEMPT(full) [ 273.941964][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.941975][T13203] Call Trace: [ 273.941983][T13203] [ 273.941990][T13203] dump_stack_lvl+0x189/0x250 [ 273.942015][T13203] ? __pfx____ratelimit+0x10/0x10 [ 273.942040][T13203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.942059][T13203] ? __pfx__printk+0x10/0x10 [ 273.942079][T13203] ? __might_fault+0xb0/0x130 [ 273.942106][T13203] ? rcu_is_watching+0x15/0xb0 [ 273.942124][T13203] should_fail_ex+0x414/0x560 [ 273.942148][T13203] _copy_from_user+0x2d/0xb0 [ 273.942166][T13203] ___sys_sendmsg+0x158/0x2a0 [ 273.942184][T13203] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.942216][T13203] ? __fget_files+0x2a/0x420 [ 273.942230][T13203] ? __fget_files+0x3a0/0x420 [ 273.942250][T13203] __x64_sys_sendmsg+0x19b/0x260 [ 273.942269][T13203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.942292][T13203] ? __pfx_ksys_write+0x10/0x10 [ 273.942312][T13203] ? rcu_is_watching+0x15/0xb0 [ 273.942330][T13203] ? rcu_is_watching+0x15/0xb0 [ 273.942348][T13203] do_syscall_64+0xfa/0x3b0 [ 273.942365][T13203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.942382][T13203] ? clear_bhb_loop+0x60/0xb0 [ 273.942401][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.942418][T13203] RIP: 0033:0x7f279238ebe9 [ 273.942433][T13203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.942446][T13203] RSP: 002b:00007f27931d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.942465][T13203] RAX: ffffffffffffffda RBX: 00007f27925b5fa0 RCX: 00007f279238ebe9 [ 273.942478][T13203] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 273.942489][T13203] RBP: 00007f27931d1090 R08: 0000000000000000 R09: 0000000000000000 [ 273.942501][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.942511][T13203] R13: 00007f27925b6038 R14: 00007f27925b5fa0 R15: 00007ffcc6ab5f68 [ 273.942531][T13203] [ 274.176389][T13205] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20000 [ 274.644021][T13237] lo speed is unknown, defaulting to 1000 [ 274.917225][ T7421] wlan1: Trigger new scan to find an IBSS to join [ 275.193451][T13283] __nla_validate_parse: 18 callbacks suppressed [ 275.193470][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1982'. [ 275.262314][T13277] lo speed is unknown, defaulting to 1000 [ 275.443518][T13290] vlan2: entered allmulticast mode [ 275.472348][T13290] bond0: entered allmulticast mode [ 275.497288][T13290] bond_slave_0: entered allmulticast mode [ 275.518251][T13290] bond_slave_1: entered allmulticast mode [ 275.799344][T13310] syzkaller1: entered promiscuous mode [ 275.805269][T13310] syzkaller1: entered allmulticast mode [ 275.822659][ T7397] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 275.887158][T13321] lo speed is unknown, defaulting to 1000 [ 275.963026][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 276.003959][T13336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'. [ 276.018117][T13336] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1996'. [ 276.044606][T13336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1996'. [ 276.320902][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 276.463331][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 276.613991][T13361] netlink: 'syz.4.2002': attribute type 4 has an invalid length. [ 276.888321][T13343] lo speed is unknown, defaulting to 1000 [ 276.915029][T13370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2003'. [ 276.956467][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2003'. [ 277.011263][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 277.051620][T13370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.404388][T13390] lo speed is unknown, defaulting to 1000 [ 277.725024][T13422] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.740191][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.758376][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.767079][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.799371][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.807949][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.823879][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.906445][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 277.914548][T13421] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 278.212724][T13439] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.303223][T13447] geneve5: entered promiscuous mode [ 278.312713][T13447] geneve5: entered allmulticast mode [ 278.324946][ T7397] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 278.344403][ T7397] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 278.379643][ T7397] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 278.411114][ T7397] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 279.081340][T13509] team0: entered promiscuous mode [ 279.088712][T13509] team_slave_0: entered promiscuous mode [ 279.094557][T13509] team_slave_1: entered promiscuous mode [ 279.123182][T13509] team0 (unregistering): left promiscuous mode [ 279.131744][T13509] team_slave_0: left promiscuous mode [ 279.138485][T13509] team_slave_1: left promiscuous mode [ 279.157028][T13509] team0 (unregistering): Port device team_slave_0 removed [ 279.170032][T13509] team0 (unregistering): Port device team_slave_1 removed [ 279.628844][T13543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.639920][T13543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.680852][T13543] vlan0: left promiscuous mode [ 279.686466][T13543] vlan0: left allmulticast mode [ 279.691535][T13543] veth0_vlan: left allmulticast mode [ 279.732065][T13543] bridge1: left allmulticast mode [ 279.830216][ T7397] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.860277][ T7397] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.870241][ T7397] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.888165][ T7397] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.930496][T13556] lo speed is unknown, defaulting to 1000 [ 280.236110][T13594] syzkaller0: entered promiscuous mode [ 280.243478][T13594] syzkaller0: entered allmulticast mode [ 280.433920][T13605] __nla_validate_parse: 20 callbacks suppressed [ 280.433933][T13605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2072'. [ 280.451325][T13605] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2072'. [ 280.560203][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 280.569960][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 280.597708][T13616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2075'. [ 280.613264][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 280.714072][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 280.893381][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 280.903891][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 281.053668][T13645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.074675][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 281.570677][T13665] lo speed is unknown, defaulting to 1000 [ 282.105115][T13699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 282.105520][T13705] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 282.132911][T13712] validate_nla: 25 callbacks suppressed [ 282.132931][T13712] netlink: 'syz.4.2100': attribute type 10 has an invalid length. [ 282.300991][T13723] tipc: Enabled bearer , priority 0 [ 282.308719][T13723] syzkaller0: entered promiscuous mode [ 282.314203][T13723] syzkaller0: entered allmulticast mode [ 282.340277][T13723] tipc: Resetting bearer [ 282.352433][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.371147][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.379236][T13722] tipc: Resetting bearer [ 282.389560][T13722] tipc: Disabling bearer [ 282.415436][T13727] netlink: 'syz.0.2108': attribute type 1 has an invalid length. [ 282.483412][T13727] bond8: (slave veth5): Enslaving as an active interface with a down link [ 282.574403][T13738] netlink: 'syz.5.2112': attribute type 1 has an invalid length. [ 282.619597][T13738] bond6: (slave geneve2): making interface the new active one [ 282.627768][T13738] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 282.637447][ T7389] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.648059][ T7389] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.657009][ T7389] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.665421][ T7389] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.720962][T13749] lo speed is unknown, defaulting to 1000 [ 282.831359][T13761] lo: Caught tx_queue_len zero misconfig [ 283.029046][T13717] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 283.112865][T13776] netlink: 'syz.4.2125': attribute type 10 has an invalid length. [ 283.139511][T13776] lo speed is unknown, defaulting to 1000 [ 283.197086][T13779] netlink: 'syz.0.2126': attribute type 13 has an invalid length. [ 283.212140][T13779] netlink: 'syz.0.2126': attribute type 17 has an invalid length. [ 283.256312][T13779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.339508][T13777] lo speed is unknown, defaulting to 1000 [ 283.488183][T13789] lo speed is unknown, defaulting to 1000 [ 283.692960][T13790] lo speed is unknown, defaulting to 1000 [ 283.728986][T13802] tipc: Enabled bearer , priority 0 [ 283.737430][T13802] syzkaller0: entered promiscuous mode [ 283.743008][T13802] syzkaller0: entered allmulticast mode [ 283.753237][T13802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.771055][T13802] tipc: Resetting bearer [ 283.838617][T13801] tipc: Resetting bearer [ 283.849636][T13801] tipc: Disabling bearer [ 283.868515][T13805] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 284.165308][T13828] Unsupported ieee802154 address type: 0 [ 284.276059][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 284.440389][T13840] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 284.451285][T13840] NCSI netlink: No device for ifindex 0 [ 284.617530][T13849] lo speed is unknown, defaulting to 1000 [ 284.726432][T13854] bridge4: port 1(veth7) entered blocking state [ 284.740699][T13854] bridge4: port 1(veth7) entered disabled state [ 284.751245][T13854] veth7: entered allmulticast mode [ 284.768425][T13856] netlink: 'syz.6.2147': attribute type 1 has an invalid length. [ 284.769318][T13854] veth7: entered promiscuous mode [ 284.800075][T13857] bridge4: port 2(veth0_to_bond) entered blocking state [ 284.812662][T13857] bridge4: port 2(veth0_to_bond) entered disabled state [ 284.820196][T13857] veth0_to_bond: entered allmulticast mode [ 284.830629][T13857] veth0_to_bond: entered promiscuous mode [ 284.923640][T13857] vlan0: entered allmulticast mode [ 284.929877][T13857] veth1: entered allmulticast mode [ 284.935297][T13857] bridge4: port 3(vlan0) entered blocking state [ 284.947290][T13857] bridge4: port 3(vlan0) entered disabled state [ 284.954917][T13857] vlan0: entered promiscuous mode [ 284.960542][T13857] veth1: entered promiscuous mode [ 285.050735][T13864] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 285.118254][T13867] lo speed is unknown, defaulting to 1000 [ 285.152749][T13870] IPv6: sit3: Disabled Multicast RS [ 285.166463][T13870] netlink: 'syz.4.2148': attribute type 10 has an invalid length. [ 285.562459][T13876] __nla_validate_parse: 9 callbacks suppressed [ 285.562475][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 285.579364][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 285.680693][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 285.699645][T13887] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 285.799337][T13895] wlan1: mtu less than device minimum [ 285.824577][T13895] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 285.853071][T13895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2157'. [ 285.945515][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2160'. [ 285.970117][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 285.988611][T13908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2160'. [ 285.995762][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 285.998358][T13908] netem: change failed [ 286.009189][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 286.080848][T13918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2161'. [ 286.258698][T13936] vlan0: entered allmulticast mode [ 286.264810][T13936] veth1: entered allmulticast mode [ 288.759616][T13965] geneve1: Caught tx_queue_len zero misconfig [ 288.860569][T13972] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 288.879015][T13972] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 289.234474][T13995] tipc: Enabling of bearer rejected, already enabled [ 289.264891][T13991] validate_nla: 2 callbacks suppressed [ 289.264907][T13991] netlink: 'syz.4.2183': attribute type 13 has an invalid length. [ 289.781402][T13995] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 289.796946][ T5973] lo speed is unknown, defaulting to 1000 [ 289.803122][ T5973] syz0: Port: 1 Link DOWN [ 289.814803][ T7421] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.842452][ T7421] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.881304][ T7421] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.898727][ T7421] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.926075][ T7421] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.934638][ T7421] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.949553][ T9199] lo speed is unknown, defaulting to 1000 [ 289.955446][ T7407] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.983592][ T7407] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.026311][T14002] lo speed is unknown, defaulting to 1000 [ 290.241380][T14006] lo speed is unknown, defaulting to 1000 [ 290.264545][T14027] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 290.392692][T14034] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 290.410180][T14034] netlink: 'syz.4.2192': attribute type 2 has an invalid length. [ 290.629981][T14054] netlink: 'syz.6.2195': attribute type 4 has an invalid length. [ 290.642859][T14056] netlink: 'syz.6.2195': attribute type 4 has an invalid length. [ 290.654052][T14056] netlink: 'syz.6.2195': attribute type 4 has an invalid length. [ 290.779376][T14060] lo speed is unknown, defaulting to 1000 [ 291.038861][T14076] __nla_validate_parse: 9 callbacks suppressed [ 291.038878][T14076] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2202'. [ 291.058567][T14076] team0: No ports can be present during mode change [ 291.078745][T14076] tipc: Enabled bearer , priority 10 [ 291.086217][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2202'. [ 291.112198][T14082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2203'. [ 291.160943][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'. [ 291.215293][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 291.217272][T14094] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2206'. [ 291.343883][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 291.498756][T14117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 291.545304][T14105] lo speed is unknown, defaulting to 1000 [ 291.568092][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 291.597205][T14117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 291.631626][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2213'. [ 291.648619][T14121] bridge_slave_0: entered promiscuous mode [ 291.662976][T14117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 291.727687][T14112] lo speed is unknown, defaulting to 1000 [ 291.761178][T14117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 291.910121][T14134] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2217'. [ 291.967936][T14142] netlink: 'syz.2.2219': attribute type 5 has an invalid length. [ 292.010495][T14145] veth0_to_bridge: entered promiscuous mode [ 292.086052][ T7407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 292.159635][ T7411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 292.179428][ T7411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 292.198082][ T5935] tipc: Node number set to 2995419783 [ 292.202004][ T7411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 292.297538][T14157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.307941][T14157] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 292.511592][T14168] smc: removing ib device syz0 [ 292.631809][T14182] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 292.651803][T14184] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 292.892040][T14154] veth0_to_bridge: left promiscuous mode [ 293.130264][T14205] tipc: MTU too low for tipc bearer [ 293.249462][T14209] netlink: 'syz.2.2238': attribute type 9 has an invalid length. [ 293.332952][T14213] netlink: zone id is out of range [ 293.367371][T14213] netlink: zone id is out of range [ 293.375397][T14213] netlink: zone id is out of range [ 293.381076][T14213] netlink: zone id is out of range [ 293.387964][T14213] netlink: zone id is out of range [ 293.400401][T14213] netlink: zone id is out of range [ 293.406348][T14213] netlink: zone id is out of range [ 293.411888][T14213] netlink: zone id is out of range [ 293.420056][T14213] netlink: zone id is out of range [ 293.470093][T14219] sit0: left promiscuous mode [ 293.475335][T14219] sit0: left allmulticast mode [ 293.562806][T14219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.572828][T14219] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.713015][T14225] syzkaller0: entered promiscuous mode [ 293.729082][T14225] syzkaller0: entered allmulticast mode [ 294.157997][T14255] syzkaller1: entered promiscuous mode [ 294.181081][T14255] syzkaller1: entered allmulticast mode [ 294.614397][T14235] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 294.680085][T14274] syzkaller1: entered promiscuous mode [ 294.686241][T14274] syzkaller1: entered allmulticast mode [ 294.742549][T14278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.795138][T14284] team_slave_1: Caught tx_queue_len zero misconfig [ 294.926221][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.938805][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.949762][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.957611][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.965483][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.973817][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.975266][T14301] geneve5: entered promiscuous mode [ 294.981887][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.992144][ T7397] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.994475][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.010412][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.017798][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.025224][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.032855][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.040283][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.047944][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.049990][T14263] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 295.055704][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.062076][ T7397] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.068788][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068806][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068819][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068832][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068844][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068857][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068871][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068884][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068897][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068911][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068924][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068937][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068950][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068963][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068977][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.068990][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069002][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069015][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069027][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069040][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069053][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069066][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069101][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069115][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069128][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069141][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069154][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069166][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069179][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069192][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069205][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069218][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069231][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069244][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069258][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069271][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069283][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069296][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.069309][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.204016][T14310] validate_nla: 6 callbacks suppressed [ 295.204032][T14310] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 295.214951][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.235281][T14312] netlink: 'syz.5.2268': attribute type 1 has an invalid length. [ 295.241333][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241352][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241366][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241379][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241392][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241405][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241418][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241432][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241445][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.241468][T14297] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.298887][ T7397] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.375211][T14322] netlink: 'syz.6.2270': attribute type 11 has an invalid length. [ 295.415310][T14311] geneve6: entered promiscuous mode [ 295.502559][ T7411] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.528583][ T7411] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.555240][ T7411] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.587388][T14329] syz.2.2274 (14329) used obsolete PPPIOCDETACH ioctl [ 295.595211][ T7411] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.624341][T14337] netlink: 'syz.0.2276': attribute type 7 has an invalid length. [ 295.634324][T14337] netlink: 'syz.0.2276': attribute type 8 has an invalid length. [ 295.639312][T14339] netlink: 'syz.5.2277': attribute type 15 has an invalid length. [ 295.796171][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 296.243714][T14391] netlink: 'syz.5.2293': attribute type 10 has an invalid length. [ 296.273411][T14391] __nla_validate_parse: 25 callbacks suppressed [ 296.273430][T14391] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2293'. [ 296.350950][T14399] ip6tnl3: entered promiscuous mode [ 296.356678][T14399] ip6tnl3: entered allmulticast mode [ 296.362937][T14399] team0: Device ip6tnl3 is of different type [ 296.418113][T14394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.603783][T14412] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2297'. [ 296.857404][T14425] netlink: 'syz.6.2302': attribute type 23 has an invalid length. [ 296.933512][T14428] sctp: [Deprecated]: syz.0.2303 (pid 14428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.933512][T14428] Use struct sctp_sack_info instead [ 296.972250][T14301] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.994804][T14431] netlink: 'syz.5.2304': attribute type 39 has an invalid length. [ 297.022633][T14301] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.028155][T14426] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2301'. [ 297.099565][T14301] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.187954][ T7397] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.209677][ T7397] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.234227][T14451] netlink: 844 bytes leftover after parsing attributes in process `syz.0.2309'. [ 297.244613][ T7397] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.253495][ T7397] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.289047][T14451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 297.302570][T14459] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 297.312156][T14459] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2311'. [ 297.321727][T14459] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2311'. [ 297.388142][T14465] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2311'. [ 297.444325][T14465] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2311'. [ 297.480878][T14462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.780043][T14493] syzkaller1: entered promiscuous mode [ 297.792288][T14493] syzkaller1: entered allmulticast mode [ 297.832758][T14495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2321'. [ 297.972203][T14505] macvlan1: entered promiscuous mode [ 297.980180][T14505] ipvlan0: entered promiscuous mode [ 297.986225][T14505] ipvlan0: left promiscuous mode [ 297.991376][T14505] macvlan1: left promiscuous mode [ 298.087266][T14514] syzkaller0: entered promiscuous mode [ 298.092970][T14514] syzkaller0: entered allmulticast mode [ 298.100516][T14513] tipc: Enabled bearer , priority 0 [ 298.115140][T14514] tipc: Resetting bearer [ 298.133042][T14514] tipc: Disabling bearer [ 298.189478][T14518] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 298.220670][T14520] bridge0: entered allmulticast mode [ 298.481569][T14533] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 298.855476][ T5973] IPVS: starting estimator thread 0... [ 298.932594][T14579] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.954358][T14579] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.956890][T14574] IPVS: using max 41 ests per chain, 98400 per kthread [ 298.968513][T14579] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 298.979972][T14579] bond9: (slave vcan1): Error -95 calling set_mac_address [ 299.012867][T14588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 299.032857][T14576] tipc: Enabled bearer , priority 0 [ 299.042374][T14576] tipc: Resetting bearer [ 299.077046][T14575] tipc: Disabling bearer [ 299.113106][T14601] net_ratelimit: 14 callbacks suppressed [ 299.113122][T14601] dummy0: mtu less than device minimum [ 299.528979][T14634] tipc: Enabled bearer , priority 0 [ 299.570862][T14634] syzkaller0: entered promiscuous mode [ 299.580410][T14634] syzkaller0: entered allmulticast mode [ 299.596584][T14634] tipc: Resetting bearer [ 299.603307][T14633] tipc: Resetting bearer [ 299.612596][T14633] tipc: Disabling bearer [ 317.158772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.512151][T14649] __nla_validate_parse: 16 callbacks suppressed [ 360.512170][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 360.535064][T14652] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 360.550392][T14644] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2367'. [ 360.567286][T14649] validate_nla: 7 callbacks suppressed [ 360.567303][T14649] netlink: 'syz.6.2368': attribute type 39 has an invalid length. [ 360.574996][T14655] tipc: Enabled bearer , priority 0 [ 360.610829][T14655] syzkaller0: entered promiscuous mode [ 360.611227][ T7421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.616929][T14655] syzkaller0: entered allmulticast mode [ 360.631978][ T7421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.692464][T14655] tipc: Resetting bearer [ 360.704613][T14654] tipc: Resetting bearer [ 360.733040][T14654] tipc: Disabling bearer [ 360.927688][T14672] IPv6: Can't replace route, no match found [ 361.149633][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 361.218703][T14677] netlink: 'syz.4.2376': attribute type 10 has an invalid length. [ 361.230751][T14677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2376'. [ 361.609416][T14684] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.656157][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'. [ 361.675120][T14684] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.762784][T14684] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.812700][T14684] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.921571][ T1146] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.951643][ T1146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.987587][ T1146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.004544][ T1146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.091598][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 362.211072][T14737] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 362.260846][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 362.278171][T14737] bond8: entered promiscuous mode [ 362.284675][T14737] 8021q: adding VLAN 0 to HW filter on device bond8 [ 362.522613][ T5180] Bluetooth: hci2: command 0x0406 tx timeout [ 362.575000][T14779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.578938][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 362.596948][T14777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.604185][T14777] IPv6: NLM_F_CREATE should be set when creating new route [ 362.611439][T14777] IPv6: NLM_F_CREATE should be set when creating new route [ 362.618687][T14777] IPv6: NLM_F_CREATE should be set when creating new route [ 362.634967][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 362.648932][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 362.659647][T14784] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.724542][T14784] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.842539][T14784] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.912002][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.932970][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.933038][T14784] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.169184][ T7389] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.193698][T14822] tipc: Enabled bearer , priority 10 [ 363.207813][ T7389] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.239711][ T7389] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.249065][ T7389] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.594661][ T7421] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.604620][T14857] siw: device registration error -23 [ 363.611535][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.632851][ T7421] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.651457][ T7421] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.678592][ T7421] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.796653][ T5973] IPVS: starting estimator thread 0... [ 363.812558][T14867] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.886055][T14868] IPVS: using max 40 ests per chain, 96000 per kthread [ 363.969649][ T5869] Bluetooth: hci6: command 0x0405 tx timeout [ 364.043675][T14885] syzkaller0: entered promiscuous mode [ 364.049453][T14885] syzkaller0: entered allmulticast mode [ 364.067671][T14830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.742616][T14943] team0: No ports can be present during mode change [ 364.768980][T14943] netlink: 'syz.2.2449': attribute type 2 has an invalid length. [ 364.819977][T14943] þ: entered promiscuous mode [ 365.124650][T14976] !: renamed from dummy0 [ 365.213740][T14988] tipc: Failed to remove unknown binding: 66,1,1/0:1359198472/1359198474 [ 365.239482][T14988] tipc: Failed to remove unknown binding: 66,1,1/0:1359198472/1359198474 [ 365.253854][T14988] tipc: Failed to remove unknown binding: 66,1,1/0:1359198472/1359198474 [ 365.316060][ T5862] Bluetooth: hci5: command 0x0406 tx timeout [ 365.391224][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.551351][T15009] __nla_validate_parse: 13 callbacks suppressed [ 365.551364][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 365.623407][T15013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.847222][T15024] bond0: Caught tx_queue_len zero misconfig [ 365.853284][T15024] netlink: 'syz.0.2472': attribute type 4 has an invalid length. [ 366.054487][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2475'. [ 366.065917][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 366.079109][T15033] netlink: 'syz.6.2475': attribute type 1 has an invalid length. [ 366.080558][T15026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2473'. [ 366.091687][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2475'. [ 366.122737][T15026] gretap1: entered promiscuous mode [ 366.148286][T15035] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 366.193994][T15038] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2477'. [ 366.446393][T15056] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 366.681144][T15074] FAULT_INJECTION: forcing a failure. [ 366.681144][T15074] name failslab, interval 1, probability 0, space 0, times 0 [ 366.738031][T15074] CPU: 0 UID: 0 PID: 15074 Comm: syz.0.2486 Not tainted syzkaller #0 PREEMPT(full) [ 366.738062][T15074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.738079][T15074] Call Trace: [ 366.738086][T15074] [ 366.738093][T15074] dump_stack_lvl+0x189/0x250 [ 366.738120][T15074] ? __pfx____ratelimit+0x10/0x10 [ 366.738143][T15074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.738162][T15074] ? __pfx__printk+0x10/0x10 [ 366.738185][T15074] ? __pfx___might_resched+0x10/0x10 [ 366.738202][T15074] ? lock_acquire+0x5f/0x360 [ 366.738225][T15074] should_fail_ex+0x414/0x560 [ 366.738249][T15074] should_failslab+0xa8/0x100 [ 366.738273][T15074] __kmalloc_noprof+0xcb/0x4f0 [ 366.738293][T15074] ? tomoyo_encode+0x28b/0x550 [ 366.738312][T15074] tomoyo_encode+0x28b/0x550 [ 366.738331][T15074] tomoyo_realpath_from_path+0x58d/0x5d0 [ 366.738349][T15074] ? tomoyo_domain+0xd9/0x130 [ 366.738369][T15074] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 366.738390][T15074] tomoyo_path_number_perm+0x1e8/0x5a0 [ 366.738411][T15074] ? lock_release+0x4b/0x3e0 [ 366.738433][T15074] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.738457][T15074] ? rcu_is_watching+0x15/0xb0 [ 366.738474][T15074] ? lock_release+0x4b/0x3e0 [ 366.738494][T15074] ? vfs_write+0x956/0xb30 [ 366.738516][T15074] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 366.738549][T15074] ? lock_release+0x4b/0x3e0 [ 366.738574][T15074] ? __fget_files+0x2a/0x420 [ 366.738588][T15074] ? __fget_files+0x3a0/0x420 [ 366.738602][T15074] ? __fget_files+0x2a/0x420 [ 366.738619][T15074] security_file_ioctl+0xcb/0x2d0 [ 366.738641][T15074] __se_sys_ioctl+0x47/0x170 [ 366.738660][T15074] do_syscall_64+0xfa/0x3b0 [ 366.738675][T15074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.738692][T15074] ? clear_bhb_loop+0x60/0xb0 [ 366.738711][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.738732][T15074] RIP: 0033:0x7f9d24f8ebe9 [ 366.738748][T15074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.738763][T15074] RSP: 002b:00007f9d25d18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.738782][T15074] RAX: ffffffffffffffda RBX: 00007f9d251b5fa0 RCX: 00007f9d24f8ebe9 [ 366.738796][T15074] RDX: 0000000000000000 RSI: 0000000082307202 RDI: 0000000000000004 [ 366.738807][T15074] RBP: 00007f9d25d18090 R08: 0000000000000000 R09: 0000000000000000 [ 366.738818][T15074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.738829][T15074] R13: 00007f9d251b6038 R14: 00007f9d251b5fa0 R15: 00007ffedcc0b468 [ 366.738849][T15074] [ 366.738865][T15074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 367.009425][T15080] block nbd5: NBD_DISCONNECT [ 367.100930][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2489'. [ 367.479572][T15100] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 367.593084][T15108] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2493'. [ 367.763091][T15120] FAULT_INJECTION: forcing a failure. [ 367.763091][T15120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.786698][T15120] CPU: 1 UID: 0 PID: 15120 Comm: syz.0.2498 Not tainted syzkaller #0 PREEMPT(full) [ 367.786722][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.786732][T15120] Call Trace: [ 367.786739][T15120] [ 367.786746][T15120] dump_stack_lvl+0x189/0x250 [ 367.786770][T15120] ? __pfx____ratelimit+0x10/0x10 [ 367.786793][T15120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.786812][T15120] ? __pfx__printk+0x10/0x10 [ 367.786837][T15120] ? rcu_is_watching+0x15/0xb0 [ 367.786870][T15120] should_fail_ex+0x414/0x560 [ 367.786894][T15120] _copy_to_user+0x31/0xb0 [ 367.786914][T15120] simple_read_from_buffer+0xe1/0x170 [ 367.786939][T15120] proc_fail_nth_read+0x1b3/0x220 [ 367.786959][T15120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.786978][T15120] ? rw_verify_area+0x2a6/0x4d0 [ 367.786999][T15120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.787018][T15120] vfs_read+0x1fd/0xa30 [ 367.787037][T15120] ? fdget_pos+0x247/0x320 [ 367.787054][T15120] ? __pfx___mutex_lock+0x10/0x10 [ 367.787069][T15120] ? __pfx_vfs_read+0x10/0x10 [ 367.787093][T15120] ? __fget_files+0x3a0/0x420 [ 367.787106][T15120] ? __fget_files+0x2a/0x420 [ 367.787124][T15120] ksys_read+0x145/0x250 [ 367.787143][T15120] ? __fget_files+0x3a0/0x420 [ 367.787158][T15120] ? __pfx_ksys_read+0x10/0x10 [ 367.787178][T15120] ? __pfx_sock_ioctl+0x10/0x10 [ 367.787200][T15120] ? rcu_is_watching+0x15/0xb0 [ 367.787218][T15120] do_syscall_64+0xfa/0x3b0 [ 367.787234][T15120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.787250][T15120] ? clear_bhb_loop+0x60/0xb0 [ 367.787269][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.787284][T15120] RIP: 0033:0x7f9d24f8d5fc [ 367.787300][T15120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 367.787315][T15120] RSP: 002b:00007f9d25d18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.787334][T15120] RAX: ffffffffffffffda RBX: 00007f9d251b5fa0 RCX: 00007f9d24f8d5fc [ 367.787347][T15120] RDX: 000000000000000f RSI: 00007f9d25d180a0 RDI: 0000000000000003 [ 367.787358][T15120] RBP: 00007f9d25d18090 R08: 0000000000000000 R09: 0000000000000000 [ 367.787368][T15120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.787379][T15120] R13: 00007f9d251b6038 R14: 00007f9d251b5fa0 R15: 00007ffedcc0b468 [ 367.787399][T15120] [ 368.137719][T15130] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 368.145053][T15130] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 368.176239][T15130] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2503'. [ 368.233188][T15130] veth1_to_bond: entered allmulticast mode [ 368.242693][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 368.297229][T15130] veth1_to_bond (unregistering): left allmulticast mode [ 368.310196][T15143] sch_tbf: peakrate 32768 is lower than or equals to rate 11646209023883417384 ! [ 368.333089][T15147] bridge0: entered promiscuous mode [ 368.339672][T15147] macvtap1: entered allmulticast mode [ 368.347474][T15147] bridge0: entered allmulticast mode [ 368.355104][T15147] bridge0: port 1(macvtap1) entered blocking state [ 368.364944][T15147] bridge0: port 1(macvtap1) entered disabled state [ 368.488787][T15158] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 368.582618][T15147] bridge0: left allmulticast mode [ 368.630781][T15147] bridge0: left promiscuous mode [ 369.148190][T15202] IPv6: Can't replace route, no match found [ 369.282656][T15216] veth14: entered promiscuous mode [ 369.292913][T15216] veth14: entered allmulticast mode [ 369.380614][T15228] dvmrp0: entered allmulticast mode [ 369.576521][T15236] netlink: 'syz.6.2530': attribute type 4 has an invalid length. [ 369.672069][T15239] netlink: 'syz.6.2531': attribute type 15 has an invalid length. [ 369.964947][T15251] bridge_slave_0: left promiscuous mode [ 370.063385][T15253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.093154][T15255] ªªªªªª: renamed from wg2 [ 370.250115][T15265] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 370.267733][T15265] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 370.286834][T15266] netlink: 'syz.5.2537': attribute type 13 has an invalid length. [ 370.294861][T15266] netlink: 'syz.5.2537': attribute type 17 has an invalid length. [ 370.309184][T15266] gretap0: refused to change device tx_queue_len [ 370.327924][T15266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 370.383203][T15265] team0: Port device dummy0 removed [ 370.392196][T15265] dummy0: left promiscuous mode [ 370.406341][T15265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.430031][T15271] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 370.736317][T15277] veth0_to_bond: left allmulticast mode [ 370.742034][T15277] veth0_to_bond: left promiscuous mode [ 370.748381][T15277] bridge4: port 2(veth0_to_bond) entered disabled state [ 370.780400][T15277] bond8: (slave veth5): Releasing active interface [ 370.811774][T15277] veth7: left allmulticast mode [ 370.823941][T15277] veth7: left promiscuous mode [ 370.841649][T15277] bridge4: port 1(veth7) entered disabled state [ 370.861999][T15277] vlan0: left promiscuous mode [ 370.899154][T15277] veth1: left promiscuous mode [ 370.919939][T15277] bridge4: port 3(vlan0) entered disabled state [ 371.149349][T15293] __nla_validate_parse: 7 callbacks suppressed [ 371.149367][T15293] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2544'. [ 371.172159][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 371.194067][T15295] netlink: 'syz.4.2542': attribute type 5 has an invalid length. [ 371.218350][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2542'. [ 371.250307][T15295] geneve6: entered promiscuous mode [ 371.255785][T15295] geneve6: entered allmulticast mode [ 371.270567][ T7413] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 371.281929][ T7413] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 371.290802][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 371.290878][ T7413] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 371.335331][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 371.352085][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 371.361796][ T7413] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 371.375492][T15305] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2547'. [ 371.481888][T15310] netlink: 'syz.6.2550': attribute type 21 has an invalid length. [ 371.523651][T15310] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2550'. [ 371.601276][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 371.672367][T15327] vlan3: entered promiscuous mode [ 371.681615][T15327] macvtap0: entered promiscuous mode [ 371.718586][T15330] bond0: (slave bond_slave_0): Releasing backup interface [ 371.746181][T15331] netlink: 'syz.0.2553': attribute type 44 has an invalid length. [ 371.772645][T15330] bond_slave_0: left allmulticast mode [ 371.780794][T15330] bond0: (slave bond_slave_1): Releasing backup interface [ 371.791004][T15330] bond_slave_1: left allmulticast mode [ 371.800283][T15330] team0: Port device team_slave_0 removed [ 371.807944][T15330] team0: Port device team_slave_1 removed [ 371.809948][T15331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2553'. [ 371.814461][T15330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.832819][T15330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.841632][T15330] bond5: (slave macvlan0): Removing an active aggregator [ 371.852260][T15330] bond5: (slave macvlan0): Releasing backup interface [ 371.885342][T15336] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 371.909191][ T5907] syz1: Port: 1 Link DOWN [ 371.953594][T15350] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 372.671037][T15364] netlink: 'syz.5.2565': attribute type 1 has an invalid length. [ 372.762394][T15372] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 372.799646][T15372] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.812111][T15368] syzkaller0: entered promiscuous mode [ 372.820929][T15368] syzkaller0: entered allmulticast mode [ 372.852897][T15380] netlink: 'syz.5.2570': attribute type 1 has an invalid length. [ 372.904901][T15388] tipc: Enabled bearer , priority 0 [ 372.912931][T15388] syzkaller0: entered promiscuous mode [ 372.920953][T15388] syzkaller0: entered allmulticast mode [ 372.940074][T15388] tipc: Resetting bearer [ 373.011879][T15387] tipc: Resetting bearer [ 373.037955][T15387] tipc: Disabling bearer [ 373.168411][T15413] netlink: 'syz.5.2580': attribute type 1 has an invalid length. [ 373.310063][T15426] Unsupported ieee802154 address type: 0 [ 373.791380][T15459] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 373.837967][T15461] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 374.026808][T15467] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 374.057831][T15472] vlan0: entered promiscuous mode [ 374.067304][T15472] vlan0: entered allmulticast mode [ 374.079774][T15472] hsr_slave_1: entered allmulticast mode [ 374.136514][T15477] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20003 [ 374.266900][T15492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.386328][T15500] netlink: 'syz.0.2603': attribute type 32 has an invalid length. [ 374.521912][T15515] dvmrp0: left allmulticast mode [ 374.530996][T15517] bridge0: port 1(erspan0) entered blocking state [ 374.538351][T15517] bridge0: port 1(erspan0) entered disabled state [ 374.544962][T15517] erspan0: entered allmulticast mode [ 374.552532][T15517] erspan0: entered promiscuous mode [ 374.616701][T15517] erspan0: left allmulticast mode [ 374.621908][T15517] erspan0: left promiscuous mode [ 374.630396][T15517] bridge0: port 1(erspan0) entered disabled state [ 374.804414][T15532] bond8: entered promiscuous mode [ 374.811326][T15532] bond8: entered allmulticast mode [ 374.817043][T15532] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.123319][T15553] tipc: Enabled bearer , priority 0 [ 375.156861][T15553] syzkaller0: entered promiscuous mode [ 375.163088][T15553] syzkaller0: entered allmulticast mode [ 375.179619][T15553] tipc: Resetting bearer [ 375.376354][T15573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.591583][T15598] nftables ruleset with unbound chain [ 376.173138][T15663] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 376.185597][ T9199] tipc: Node number set to 808794385 [ 376.201928][T15666] validate_nla: 5 callbacks suppressed [ 376.201943][T15666] netlink: 'syz.2.2653': attribute type 1 has an invalid length. [ 376.243094][T15666] __nla_validate_parse: 32 callbacks suppressed [ 376.243111][T15666] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2653'. [ 376.396820][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 376.903926][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2669'. [ 377.139829][T15755] €Â0: renamed from bond_slave_1 [ 377.183266][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 377.270287][T15770] tipc: Enabling of bearer rejected, already enabled [ 377.287351][T15771] tipc: Enabling of bearer rejected, failed to enable media [ 377.298796][T15770] tipc: Enabling of bearer rejected, failed to enable media [ 377.305005][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 377.539232][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2685'. [ 377.633139][T15804] netlink: 'syz.6.2685': attribute type 1 has an invalid length. [ 377.652015][T15804] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2685'. [ 377.848062][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 377.880401][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 378.157886][T15854] netlink: 'syz.5.2703': attribute type 4 has an invalid length. [ 378.330574][T15866] netlink: 308 bytes leftover after parsing attributes in process `syz.6.2707'. [ 378.343527][T15866] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 378.584543][ T7402] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.594263][T15878] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 378.594383][T15879] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 378.604880][ T7402] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.623355][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.627228][ T7402] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.652433][ T7402] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.897540][T15895] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 379.529821][T15888] netlink: 'syz.5.2713': attribute type 1 has an invalid length. [ 379.631417][T15905] netlink: 'syz.4.2719': attribute type 39 has an invalid length. [ 379.738769][T15918] netlink: 'syz.6.2721': attribute type 4 has an invalid length. [ 379.772494][T15920] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 379.781021][T15921] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 380.150972][T15956] sctp: [Deprecated]: syz.4.2735 (pid 15956) Use of int in max_burst socket option. [ 380.150972][T15956] Use struct sctp_assoc_value instead [ 380.334318][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.344605][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.358597][T15962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.418715][T15967] team0 (unregistering): left promiscuous mode [ 380.425031][T15967] team_slave_1: left promiscuous mode [ 380.443075][T15967] team0 (unregistering): Port device team_slave_1 removed [ 380.768242][T16001] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 380.789831][T16001] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 380.802159][T16001] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 380.886797][T16012] geneve2: entered promiscuous mode [ 380.892158][T16012] geneve2: entered allmulticast mode [ 380.934760][T16013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.952663][T16013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.959789][T16013] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 380.970529][T16013] bond7: (slave gre2): Error -95 calling set_mac_address [ 381.213711][T16035] tipc: Enabled bearer , priority 0 [ 381.229288][T16035] tipc: Disabling bearer [ 381.305388][T16040] vlan0: left allmulticast mode [ 381.311049][T16040] hsr_slave_1: left allmulticast mode [ 381.403978][T16045] team0: Port device vlan0 removed [ 381.411051][T16045] bond4: (slave veth5): Releasing active interface [ 381.419303][T16045] bond6: (slave geneve2): Releasing active interface [ 381.784267][T16067] validate_nla: 7 callbacks suppressed [ 381.784284][T16067] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 381.805383][T16067] __nla_validate_parse: 21 callbacks suppressed [ 381.805400][T16067] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2766'. [ 381.827197][T16067] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 381.899026][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.907058][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.915434][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.915970][T16069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 381.923582][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.940662][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.026506][ T5861] syz_tun (unregistering): left allmulticast mode [ 382.181708][T16070] chnl_net:caif_netlink_parms(): no params data found [ 382.440576][ T31] INFO: task syz.3.1220:10553 blocked for more than 143 seconds. [ 382.462830][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 382.484116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.534194][ T31] task:syz.3.1220 state:D stack:26024 pid:10553 tgid:10552 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 382.564573][ T31] Call Trace: [ 382.576198][ T31] [ 382.579154][ T31] __schedule+0x1798/0x4cc0 [ 382.591569][ T31] ? stack_depot_save_flags+0x41b/0x860 [ 382.614856][ T31] ? __pfx___schedule+0x10/0x10 [ 382.623927][ T31] ? schedule+0x91/0x360 [ 382.631822][ T31] ? rcu_is_watching+0x15/0xb0 [ 382.651505][ T31] ? lock_release+0x4b/0x3e0 [ 382.659492][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 382.665414][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.692704][ T31] schedule+0x165/0x360 [ 382.700826][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.708265][ T31] __mutex_lock+0x7e6/0x1350 [ 382.712893][ T31] ? __mutex_lock+0x5bb/0x1350 [ 382.721026][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 382.727343][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.732378][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 382.742436][ T31] ? __nlmsg_put+0xef/0x1b0 [ 382.747469][ T31] ? genlmsg_put+0x137/0x2e0 [ 382.752075][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 382.761166][ T31] ? lock_release+0x4b/0x3e0 [ 382.766370][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 382.772715][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 382.778747][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.784826][ T31] ? stack_trace_save+0x9c/0xe0 [ 382.790099][ T31] genl_rcv_msg+0x60e/0x790 [ 382.794685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.800384][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 382.805411][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 382.812113][ T31] ? __netlink_lookup+0xbd/0x810 [ 382.817464][ T31] ? rcu_is_watching+0x15/0xb0 [ 382.822273][ T31] netlink_rcv_skb+0x205/0x470 [ 382.827627][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.832665][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.838645][ T31] ? lock_release+0x4b/0x3e0 [ 382.843257][ T31] ? down_read+0x1ad/0x2e0 [ 382.848027][ T31] genl_rcv+0x28/0x40 [ 382.852003][ T31] netlink_unicast+0x82c/0x9e0 [ 382.857258][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 382.862545][ T31] ? netlink_sendmsg+0x642/0xb30 [ 382.867801][ T31] ? skb_put+0x11b/0x210 [ 382.872043][ T31] netlink_sendmsg+0x805/0xb30 [ 382.876950][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.882234][ T31] ? futex_unqueue+0x22/0x240 [ 382.886953][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 382.891888][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.897198][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.902479][ T31] __sock_sendmsg+0x21c/0x270 [ 382.907562][ T31] ____sys_sendmsg+0x505/0x830 [ 382.912412][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.918086][ T31] ? import_iovec+0x74/0xa0 [ 382.922583][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 382.927739][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.932943][ T31] ? futex_wait+0x285/0x360 [ 382.937873][ T31] ? __fget_files+0x2a/0x420 [ 382.942642][ T31] ? __fget_files+0x3a0/0x420 [ 382.947816][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 382.952753][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.959128][ T31] ? rcu_is_watching+0x15/0xb0 [ 382.963909][ T31] ? rcu_is_watching+0x15/0xb0 [ 382.969139][ T31] do_syscall_64+0xfa/0x3b0 [ 382.973656][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.980124][ T31] ? clear_bhb_loop+0x60/0xb0 [ 382.984824][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.991074][ T31] RIP: 0033:0x7f309d98ebe9 [ 382.995479][ T31] RSP: 002b:00007f309e833038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.004303][ T31] RAX: ffffffffffffffda RBX: 00007f309dbb5fa0 RCX: 00007f309d98ebe9 [ 383.012756][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 0000000000000007 [ 383.021236][ T31] RBP: 00007f309da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.029529][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.037884][ T31] R13: 00007f309dbb6038 R14: 00007f309dbb5fa0 R15: 00007ffcca10def8 [ 383.046317][ T31] [ 383.049532][ T31] INFO: lockdep is turned off. [ 383.054368][ T31] NMI backtrace for cpu 1 [ 383.054393][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 383.054413][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.054423][ T31] Call Trace: [ 383.054430][ T31] [ 383.054437][ T31] dump_stack_lvl+0x189/0x250 [ 383.054463][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.054483][ T31] ? __pfx__printk+0x10/0x10 [ 383.054510][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 383.054532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 383.054553][ T31] ? __pfx__printk+0x10/0x10 [ 383.054575][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 383.054601][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 383.054622][ T31] watchdog+0xf93/0xfe0 [ 383.054646][ T31] ? watchdog+0x1de/0xfe0 [ 383.054670][ T31] kthread+0x70e/0x8a0 [ 383.054691][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.054711][ T31] ? __pfx_kthread+0x10/0x10 [ 383.054731][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.054752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.054774][ T31] ? __pfx_kthread+0x10/0x10 [ 383.054793][ T31] ret_from_fork+0x3f9/0x770 [ 383.054812][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 383.054831][ T31] ? __switch_to_asm+0x39/0x70 [ 383.054851][ T31] ? __switch_to_asm+0x33/0x70 [ 383.054870][ T31] ? __pfx_kthread+0x10/0x10 [ 383.054889][ T31] ret_from_fork_asm+0x1a/0x30 [ 383.054917][ T31] [ 383.054923][ T31] Sending NMI from CPU 1 to CPUs 0: [ 383.206496][ C0] NMI backtrace for cpu 0 [ 383.206514][ C0] CPU: 0 UID: 0 PID: 16083 Comm: syz.6.2768 Not tainted syzkaller #0 PREEMPT(full) [ 383.206532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.206542][ C0] RIP: 0010:deref_stack_reg+0xbd/0x230 [ 383.206570][ C0] Code: 44 35 00 84 c0 0f 85 3c 01 00 00 41 83 3f 00 0f 95 c0 4c 39 c3 0f 96 c1 20 c1 4d 39 c6 0f 97 c0 20 c8 3c 01 75 18 49 8d 40 08 <48> 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 84 c1 0f 85 c3 00 00 00 49 8d [ 383.206585][ C0] RSP: 0018:ffffc90004cd74e0 EFLAGS: 00000246 [ 383.206599][ C0] RAX: ffffc90004cd7c88 RBX: ffffc90004cd0000 RCX: 0000000000000001 [ 383.206611][ C0] RDX: ffffc90004cd7648 RSI: dffffc0000000000 RDI: ffffc90004cd7608 [ 383.206623][ C0] RBP: 1ffff9200099aec1 R08: ffffc90004cd7c80 R09: 0000000000000000 [ 383.206634][ C0] R10: ffffc90004cd7658 R11: fffff5200099aecd R12: 1ffff9200099aec2 [ 383.206646][ C0] R13: 1ffff9200099aec3 R14: ffffc90004cd8000 R15: ffffc90004cd7608 [ 383.206658][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 383.206671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.206682][ C0] CR2: 00007f96a7740d58 CR3: 000000000df36000 CR4: 00000000003526f0 [ 383.206696][ C0] Call Trace: [ 383.206702][ C0] [ 383.206712][ C0] unwind_next_frame+0x17c4/0x2390 [ 383.206732][ C0] ? unwind_next_frame+0xa5/0x2390 [ 383.206749][ C0] ? do_group_exit+0x21c/0x2d0 [ 383.206769][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.206788][ C0] arch_stack_walk+0x11c/0x150 [ 383.206808][ C0] ? get_signal+0x1286/0x1340 [ 383.206824][ C0] stack_trace_save+0x9c/0xe0 [ 383.206840][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 383.206862][ C0] save_stack+0xf5/0x1f0 [ 383.206881][ C0] ? __pfx_save_stack+0x10/0x10 [ 383.206898][ C0] ? page_ext_get+0x22/0x2f0 [ 383.206914][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 383.206935][ C0] ? vfree+0x25a/0x400 [ 383.206952][ C0] ? kcov_close+0x28/0x50 [ 383.206970][ C0] ? __fput+0x44c/0xa70 [ 383.206984][ C0] ? task_work_run+0x1d4/0x260 [ 383.207002][ C0] ? do_exit+0x6b5/0x2300 [ 383.207018][ C0] ? do_group_exit+0x21c/0x2d0 [ 383.207039][ C0] ? lock_release+0x4b/0x3e0 [ 383.207058][ C0] ? page_ext_get+0x22/0x2f0 [ 383.207079][ C0] __reset_page_owner+0x71/0x1f0 [ 383.207098][ C0] __free_frozen_pages+0xbc4/0xd30 [ 383.207122][ C0] vfree+0x25a/0x400 [ 383.207141][ C0] ? __pfx_kcov_close+0x10/0x10 [ 383.207159][ C0] kcov_close+0x28/0x50 [ 383.207177][ C0] __fput+0x44c/0xa70 [ 383.207197][ C0] task_work_run+0x1d4/0x260 [ 383.207217][ C0] ? __pfx_task_work_run+0x10/0x10 [ 383.207237][ C0] ? kmem_cache_free+0x18f/0x400 [ 383.207259][ C0] do_exit+0x6b5/0x2300 [ 383.207279][ C0] ? do_raw_spin_lock+0x121/0x290 [ 383.207297][ C0] ? __pfx_do_exit+0x10/0x10 [ 383.207314][ C0] ? cgroup_freezing+0x20/0x350 [ 383.207336][ C0] ? rcu_is_watching+0x15/0xb0 [ 383.207354][ C0] do_group_exit+0x21c/0x2d0 [ 383.207374][ C0] get_signal+0x1286/0x1340 [ 383.207398][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 383.207423][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 383.207448][ C0] ? rcu_is_watching+0x15/0xb0 [ 383.207464][ C0] ? rcu_is_watching+0x15/0xb0 [ 383.207480][ C0] exit_to_user_mode_loop+0x75/0x110 [ 383.207500][ C0] do_syscall_64+0x2bd/0x3b0 [ 383.207515][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.207531][ C0] ? clear_bhb_loop+0x60/0xb0 [ 383.207553][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.207568][ C0] RIP: 0033:0x7f279238ebe9 [ 383.207581][ C0] Code: Unable to access opcode bytes at 0x7f279238ebbf. [ 383.207589][ C0] RSP: 002b:00007f279318f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 383.207604][ C0] RAX: fffffffffffffe00 RBX: 00007f27925b6188 RCX: 00007f279238ebe9 [ 383.207616][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27925b6188 [ 383.207626][ C0] RBP: 00007f27925b6180 R08: 0000000000000000 R09: 0000000000000000 [ 383.207636][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.207646][ C0] R13: 00007f27925b6218 R14: 00007ffcc6ab5e80 R15: 00007ffcc6ab5f68 [ 383.207665][ C0] [ 383.208754][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 383.617661][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 383.626753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.636792][ T31] Call Trace: [ 383.640059][ T31] [ 383.642978][ T31] dump_stack_lvl+0x99/0x250 [ 383.647560][ T31] ? __asan_memcpy+0x40/0x70 [ 383.652135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.657318][ T31] ? __pfx__printk+0x10/0x10 [ 383.661902][ T31] vpanic+0x281/0x750 [ 383.665878][ T31] ? __pfx_vpanic+0x10/0x10 [ 383.670374][ T31] ? rcu_is_watching+0x15/0xb0 [ 383.675120][ T31] ? preempt_schedule+0xae/0xc0 [ 383.679957][ T31] ? preempt_schedule_common+0x83/0xd0 [ 383.685402][ T31] panic+0xb9/0xc0 [ 383.689106][ T31] ? __pfx_panic+0x10/0x10 [ 383.693507][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 383.698869][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 383.705057][ T31] watchdog+0xfd2/0xfe0 [ 383.709204][ T31] ? watchdog+0x1de/0xfe0 [ 383.713538][ T31] kthread+0x70e/0x8a0 [ 383.717592][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.722269][ T31] ? __pfx_kthread+0x10/0x10 [ 383.726846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.732030][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.737217][ T31] ? __pfx_kthread+0x10/0x10 [ 383.741796][ T31] ret_from_fork+0x3f9/0x770 [ 383.746370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 383.751465][ T31] ? __switch_to_asm+0x39/0x70 [ 383.756214][ T31] ? __switch_to_asm+0x33/0x70 [ 383.760965][ T31] ? __pfx_kthread+0x10/0x10 [ 383.765540][ T31] ret_from_fork_asm+0x1a/0x30 [ 383.770302][ T31] [ 383.773594][ T31] Kernel Offset: disabled [ 383.777901][ T31] Rebooting in 86400 seconds..